mirror of
https://gitlab.com/cryptsetup/cryptsetup.git
synced 2025-12-11 10:50:01 +01:00
5fce0c2ad1
In practice luksAddKey action does two operations. It unlocks existing device volume key and stores unlocked volume key in a new keyslot. Previously the options were limited to key files and passphrases. With this patch user may combine freely following options: To unlock keyslot with volume key user may: - provide existing passphrase via interactive prompt (default method) - use --key-file option to provide file with a valid passphrase to existing keyslot - provide volume key directly via --volume-key-file - unlock keyslot via all available LUKS2 tokens by --token-only - unlock keyslot via specific token with --token-id - unlock keyslot via specific token type by --token-type To provide the passphrase for a new keyslot user may: - provide existing passphrase via interactive prompt (default method) - use --new-keyfile parameter or positional parameter to read the passphrase from file. - use --new-token-id to select specific LUKS2 token to get passphrase for new keyslot. New keyslot is assigned to selected token id if operation is succesfull. Fixes: #725.