cryptsetup-open
Create a decrypted mapping of an encrypted volume. tldr-pages
On Linux
Linux
Create a decrypted mapping of an encrypted volume. Note: Enabling TRIM may leak minimal information (freed blocks, possibly revealing the filesystem in use), but is still recommended since the data stays safe and SSDs without TRIM wear out faster.
Open a LUKS volume and create a decrypted mapping at /dev/mapper/mapping_name
cryptsetup open /dev/sdXY mapping_nameIdentifyUse a keyfile instead of a passphrase
cryptsetup open --key-file path/to/file /dev/sdXY mapping_nameIdentifyAllow the use of TRIM on the device
cryptsetup open --allow-discards /dev/sdXY mapping_nameIdentifyWrite the --allow-discards option into the LUKS header (the option will then always be used when you open the device)
cryptsetup open --allow-discards --persistent /dev/sdXY mapping_nameIdentifyOpen a LUKS volume and make the decrypted mapping read-only
cryptsetup open --readonly /dev/sdXY mapping_nameIdentify