mirror of
https://gitlab.com/cryptsetup/cryptsetup.git
synced 2025-12-12 03:10:08 +01:00
a2afe0396f
Use pre-generated man pages in make dist. [Added fixes and updates from Ondrej Kozina and Milan Broz]
34 lines
1.1 KiB
Plaintext
34 lines
1.1 KiB
Plaintext
= cryptsetup-luksHeaderBackup(8)
|
|
:doctype: manpage
|
|
:manmanual: Maintenance Commands
|
|
:mansource: cryptsetup {release-version}
|
|
:man-linkstyle: pass:[blue R < >]
|
|
:COMMON_OPTIONS:
|
|
:ACTION_LUKSHEADERBACKUP:
|
|
|
|
== Name
|
|
|
|
cryptsetup-luksHeaderBackup - store a binary backup of the LUKS header and keyslot area
|
|
|
|
== SYNOPSIS
|
|
|
|
*cryptsetup _luksHeaderBackup_ --header-backup-file <file> [<options>] <device>*
|
|
|
|
== DESCRIPTION
|
|
|
|
Stores a binary backup of the LUKS header and keyslot area. +
|
|
Note: Using '-' as filename writes the header backup to a file named
|
|
'-'.
|
|
|
|
*WARNING:* This backup file and a passphrase valid at the time of backup
|
|
allows decryption of the LUKS data area, even if the passphrase was
|
|
later changed or removed from the LUKS device. Also note that with a
|
|
header backup you lose the ability to securely wipe the LUKS device by
|
|
just overwriting the header and key-slots. You either need to securely
|
|
erase all header backups in addition or overwrite the encrypted data
|
|
area as well. The second option is less secure, as some sectors can
|
|
survive, e.g., due to defect management.
|
|
|
|
include::man/common_options.adoc[]
|
|
include::man/common_footer.adoc[]
|