{"id":4236,"date":"2024-11-16T07:08:34","date_gmt":"2024-11-15T22:08:34","guid":{"rendered":"https:\/\/matoken.org\/blog\/?p=4236"},"modified":"2024-11-16T07:08:36","modified_gmt":"2024-11-15T22:08:36","slug":"unable-to-open-luks-encrypted-file-system-on-raspberry-pi","status":"publish","type":"post","link":"https:\/\/matoken.org\/blog\/2024\/11\/16\/unable-to-open-luks-encrypted-file-system-on-raspberry-pi\/","title":{"rendered":"Raspberry Pi\u3067LUKS\u6697\u53f7\u5316\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u304c\u958b\u3051\u306a\u3044"},"content":{"rendered":"<div id=\"preamble\">\n<div class=\"sectionbody\">\n<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"48\" height=\"48\" viewBox=\"0 0 24 24\"><path fill=\"currentColor\" d=\"m21.983 13.821l-1.851-10.18A2 2 0 0 0 18.165 2H5.835a2 2 0 0 0-1.968 1.643l-1.85 10.178l.019.003c-.012.06-.036.114-.036.176v5c0 1.103.897 2 2 2h16c1.103 0 2-.897 2-2v-5c0-.063-.024-.116-.035-.176zM5.835 4h12.331l1.637 9H4.198zM4 19v-4h16l.002 4z\"><\/path><path fill=\"currentColor\" d=\"M17 16h2v2h-2zm-3 0h2v2h-2z\"><\/path><\/svg><!-- https:\/\/icon-sets.iconify.design\/bx\/hdd\/ --><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"48\" height=\"48\" viewBox=\"0 0 32 32\"><path fill=\"currentColor\" d=\"m25 30l-2.1-1c-1.7-.8-2.9-2.6-2.9-4.5V18h10v6.5c0 1.9-1.1 3.7-2.9 4.5zm-3-10v4.5c0 1.2.7 2.2 1.7 2.7l1.3.6l1.3-.6c1-.5 1.7-1.6 1.7-2.7V20z\"><\/path><circle cx=\"22\" cy=\"10\" r=\"2\" fill=\"currentColor\"><\/circle><path fill=\"currentColor\" d=\"M21 2c-5 0-9 4-9 9c0 .9.1 1.8.4 2.6L2 24v6h6l10-10l-1.4-1.4l-2.8 2.8l-1.4-1.4l-1.4 1.4l1.4 1.4l-1.6 1.6L9.4 23L8 24.4l1.4 1.4L7.2 28H4v-3.2l9.8-9.8l.8-.8l-.3-1.2c-.2-.7-.3-1.3-.3-2c0-3.9 3.1-7 7-7s7 3.1 7 7c0 1.5-.5 2.9-1.3 4H29c.6-1.2.9-2.6.9-4C30 6 26 2 21 2\"><\/path><\/svg><!-- https:\/\/icon-sets.iconify.design\/carbon\/ibm-cloud-hyper-protect-crypto-services\/ --><\/p>\n<div class=\"paragraph\">\n<p>\u5148\u65e5PC\u3067\u6697\u53f7\u5316FS\u3092\u8a2d\u5b9a\u3057\u305fHDD\u3067\u3059\u304c\uff0c<\/p>\n<\/div>\n<div class=\"ulist\">\n<ul>\n<li>\n<p><a href=\"https:\/\/matoken.org\/blog\/2024\/11\/12\/initialize-usb-hdd-with-luks-btrfs\/\">USB HDD\u3092LUKS&amp;Btrfs\u3067\u521d\u671f\u5316 \u2013 matoken&#8217;s meme<\/a><\/p>\n<\/li>\n<\/ul>\n<\/div>\n<div class=\"paragraph\">\n<p>SBC\u306eRaspberry Pi\u306b\u63a5\u7d9a\u3057\u3066\u30de\u30a6\u30f3\u30c8\u3057\u3088\u3046\u3068\u3057\u305f\u3068\u3053\u308d\u5931\u6557\u3057\u307e\u3057\u305f\uff0e<\/p>\n<\/div>\n<div class=\"listingblock\">\n<div class=\"title\">RaspberryPi\u3067open\u3057\u3088\u3046\u3068\u3057\u305f\u3089\u5931\u6557<\/div>\n<div class=\"content\">\n<pre>$ sudo cryptsetup open -S0 \/dev\/sda crypthdd\nEnter passphrase for \/dev\/sda:\nWarning: keyslot operation could fail as it requires more than available memory.\nKilled<\/pre>\n<\/div>\n<\/div>\n<p><!--more-->\n<\/div>\n<\/div>\n<div class=\"sect1\">\n<h2 id=\"_\u30e1\u30e2\u30ea\u4e0d\u8db3\u3067raspberry_pi\u3067\u958b\u3051\u306a\u3044\">\u30e1\u30e2\u30ea\u4e0d\u8db3\u3067Raspberry Pi\u3067\u958b\u3051\u306a\u3044<\/h2>\n<div class=\"sectionbody\">\n<div class=\"paragraph\">\n<p>\u30e1\u30c3\u30bb\u30fc\u30b8\u3067\u306f\u30e1\u30e2\u30ea\u304c\u8db3\u308a\u306a\u305d\u3046\u3067\u3059\uff0e<\/p>\n<\/div>\n<div class=\"quoteblock\">\n<blockquote>\n<div class=\"paragraph\">\n<p>Warning: keyslot operation could fail as it requires more than available memory.<\/p>\n<\/div>\n<\/blockquote>\n<\/div>\n<div class=\"paragraph\">\n<p>\u8a66\u3057\u305f\u306e\u306fRaspberry Pi 3 model B\u3067RAM 1GB\u306earm\u7aef\u672b\u3067\u3059\uff0e\u3053\u306eHDD\u3092\u8a2d\u5b9a\u3057\u305f\u7aef\u672b\u306eRAM\u306f16GB\u3067\u3057\u305f\uff0e<\/p>\n<\/div>\n<div class=\"paragraph\">\n<p>1GB\u3082\u3042\u3063\u3066\u5931\u6557\u3059\u308b\u306e\u3082\u306a\u306e\u304b\u306a\u3068\u601d\u3044\u3064\u3064swap\u30d5\u30a1\u30a4\u30eb\u3092\u4f5c\u308a\uff0c\u4e00\u6642\u7684\u306bswap\u30924GB\u307b\u3069\u8ffd\u52a0\u3057\u3066\u307f\u3066\u30821\u6642\u9593\u4ee5\u4e0a\u7d4c\u3063\u3066\u3082\u623b\u3063\u3066\u304d\u307e\u305b\u3093\u3067\u3057\u305f\uff0e\u8ae6\u3081\u3066\u9014\u4e2d\u3067\u7d42\u4e86\u3057\u307e\u3057\u305f\uff0e<\/p>\n<\/div>\n<div class=\"listingblock\">\n<div class=\"title\">swap\u30d5\u30a1\u30a4\u30eb\u3092\u4f5c\u308aswap\u3092\u8ffd\u52a0<\/div>\n<div class=\"content\">\n<pre>$ sudo install -m 0600 -o 0 -g 0 \/dev\/null \/var\/tmp\/swap.img\n$ sudo dd if=\/dev\/zero of=\/var\/tmp\/swap.img bs=1M count=4096\n$ sudo mkswap \/var\/tmp\/swap.img\n$ sudo swapon \/var\/tmp\/swap.img<\/pre>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<div class=\"sect1\">\n<h2 id=\"_keyslot\u306e\u30e1\u30e2\u30ea\u3092\u5236\u9650\u3057\u305f\u308a\u53e4\u3044\u30a2\u30eb\u30b4\u30ea\u30ba\u30e0\u3092\u6307\u5b9a\">keyslot\u306e\u30e1\u30e2\u30ea\u3092\u5236\u9650\u3057\u305f\u308a\uff0c\u53e4\u3044\u30a2\u30eb\u30b4\u30ea\u30ba\u30e0\u3092\u6307\u5b9a<\/h2>\n<div class=\"sectionbody\">\n<div class=\"paragraph\">\n<p>Raspberry Pi\u5074\u3067\u518d\u5ea6cryptsetup luksFormat\u304b\u3089\u3084\u308a\u76f4\u3057\u304b\u306a\u3068\u601d\u3063\u305f\u306e\u3067\u3059\u304c\uff0c\u4e00\u65e6\u30bb\u30c3\u30c8\u30a2\u30c3\u30d7\u3057\u305fPC\u306b\u63a5\u7d9a\u3057\u76f4\u3057\u3066\uff0c\u65b0\u3057\u3044\u30ad\u30fc\u30b9\u30ed\u30c3\u30c8\u3092 <code>--pbkdf-memory<\/code> \u3067\u30e1\u30e2\u30ea\u3092\u5236\u9650\u3057\u305f\u308a, <code>--pbkdf pbkdf2<\/code> \u306e\u3088\u3046\u306b\u53e4\u3044\u30a2\u30eb\u30b4\u30ea\u30ba\u30e0\u3092\u6307\u5b9a\u3059\u308b\u3053\u3068\u3067RAM 1GB\u306eRaspberry Pi\u3067\u3082open\u3059\u308b\u3053\u3068\u304c\u51fa\u6765\u307e\u3057\u305f\uff0e<\/p>\n<\/div>\n<div class=\"listingblock\">\n<div class=\"title\">PC\u3067\u4f5c\u3063\u305fkeyslot 0\u306e\u60c5\u5831<\/div>\n<div class=\"content\">\n<pre>$ sudo cryptsetup luksDump \/dev\/sdb | grep \"0: luks2\" -A 15\n  0: luks2\n        Key:        512 bits\n        Priority:   normal\n        Cipher:     aes-xts-plain64\n        Cipher key: 512 bits\n        PBKDF:      argon2id\n        Time cost:  6\n        Memory:     1048576\n        Threads:    4\n        Salt:       60 50 4a 09 0d ed 44 1d 53 52 04 f5 71 15 58 40\n                    42 8b 7d 36 8f 7c f7 b5 2f 7f af 79 1f 68 e8 29\n        AF stripes: 4000\n        AF hash:    sha256\n        Area offset:32768 [bytes]\n        Area length:258048 [bytes]\n        Digest ID:  0<\/pre>\n<\/div>\n<\/div>\n<div class=\"listingblock\">\n<div class=\"title\">keyslot1\u306e\u30a2\u30eb\u30b4\u30ea\u30ba\u30e0\u306b <code>pbkdf2<\/code> \u3092\u5229\u7528<\/div>\n<div class=\"content\">\n<pre>$ sudo cryptsetup luksAddKey --pbkdf pbkdf2 -S 1 \/dev\/sda\nWARNING: The --key-slot parameter is used for new keyslot number.\nEnter any existing passphrase:\nEnter new passphrase for key slot:\nVerify passphrase:\n$ sudo cryptsetup luksDump \/dev\/sdb | grep \"1: luks2\" -A 14 <b class=\"conum\">(1)<\/b>\n  1: luks2\n        Key:        512 bits\n        Priority:   normal\n        Cipher:     aes-xts-plain64\n        Cipher key: 512 bits\n        PBKDF:      pbkdf2\n        Hash:       sha256\n        Iterations: 1669706\n        Salt:       4b a5 42 b1 41 ce 0b 5f 14 f6 da 05 a8 ad f7 7f\n                    23 60 d1 03 c4 18 ce ca f4 fa 63 56 04 f0 b8 a5\n        AF stripes: 4000\n        AF hash:    sha256\n        Area offset:290816 [bytes]\n        Area length:258048 [bytes]\n        Digest ID:  0<\/pre>\n<\/div>\n<\/div>\n<div class=\"listingblock\">\n<div class=\"title\">keyslot 2\u306ememory\u3092PC\u3067\u4f5c\u6210\u3057\u305fkeyslot\u306e\u534a\u5206\u3067\u8a2d\u5b9a<\/div>\n<div class=\"content\">\n<pre>$ echo $(sudo cryptsetup luksDump \/dev\/sda | grep \"0: luks2\" -A 14 | grep Memory: | cut -f6- -d\\ )\/2 | bc\n524288\n$ sudo cryptsetup luksAddKey -S 2 --pbkdf-memory=524288 \/dev\/sda\nWARNING: The --key-slot parameter is used for new keyslot number.\nEnter any existing passphrase:\nEnter new passphrase for key slot:\nVerify passphrase:\n$ sudo cryptsetup luksDump \/dev\/sda | grep \"2: luks2\" -A15\n  2: luks2\n        Key:        512 bits\n        Priority:   normal\n        Cipher:     aes-xts-plain64\n        Cipher key: 512 bits\n        PBKDF:      argon2id\n        Time cost:  10\n        Memory:     524288\n        Threads:    4\n        Salt:       9c 04 4e e9 db 79 4e db 67 41 99 96 0d b4 a5 66\n                    4f 6d 0d 7f fd 8d e5 60 5b c1 b3 12 6d f2 df ba\n        AF stripes: 4000\n        AF hash:    sha256\n        Area offset:1064960 [bytes]\n        Area length:258048 [bytes]\n        Digest ID:  0<\/pre>\n<\/div>\n<\/div>\n<div class=\"admonitionblock tip\">\n<table  class=\" table table-hover\" >\n<tr>\n<td class=\"icon\">\n<div class=\"title\">Tip<\/div>\n<\/td>\n<td class=\"content\">\n\u3053\u3053\u3067\u306eMemory\u306e\u5358\u4f4d\u306fkilobytes\u3067\u3059\uff0e\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<div class=\"listingblock\">\n<div class=\"title\">Raspberry Pi\u3067open\u51fa\u6765\u308b\u304b\u8a66\u3059<\/div>\n<div class=\"content\">\n<pre>$ sudo cryptsetup open -S1 \/dev\/sda chdd <b class=\"conum\">(1)<\/b>\nEnter passphrase for \/dev\/sda:\n$ sudo cryptsetup close chdd\n$ sudo cryptsetup open -S2 \/dev\/sda chdd <b class=\"conum\">(2)<\/b>\nEnter passphrase for \/dev\/sda:\nWarning: keyslot operation could fail as it requires more than available memory. <b class=\"conum\">(3)<\/b>\n$ ls -l \/dev\/mapper\/chdd\nlrwxrwxrwx 1 root root 7 Nov 15 05:58 \/dev\/mapper\/chdd -&gt; ..\/dm-0\n$ sudo cryptsetup close chdd<\/pre>\n<\/div>\n<\/div>\n<div class=\"colist arabic\">\n<ol>\n<li>\n<p>pdkdf2\u306ekeyslot1\u3092open<\/p>\n<\/li>\n<li>\n<p>argon2id\/Memory 523288\u306ekeyslot2\u3092open<\/p>\n<\/li>\n<li>\n<p>\u8b66\u544a\u304c\u51fa\u308b\u304copen\u51fa\u6765\u305f<\/p>\n<\/li>\n<\/ol>\n<\/div>\n<div class=\"admonitionblock tip\">\n<table  class=\" table table-hover\" >\n<tr>\n<td class=\"icon\">\n<div class=\"title\">Tip<\/div>\n<\/td>\n<td class=\"content\">\nkeyslot\u306f0\u304b\u3089\u306f\u3058\u307e\u308aLUKS1\u306f8slot\uff0cLUKS2\u3067\u306f32slot\u5229\u7528\u53ef\u80fd\u3067\u3059\uff0e\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n<\/div>\n<div class=\"sect1\">\n<h2 id=\"_raspberry_pi\u3067open\u3067\u304d\u306a\u3044keyslot\u3092\u524a\u9664\">Raspberry Pi\u3067open\u3067\u304d\u306a\u3044keyslot\u3092\u524a\u9664<\/h2>\n<div class=\"sectionbody\">\n<div class=\"paragraph\">\n<p>Raspberry Pi\u3067open\u3067\u304d\u306a\u3044keyslot\u306f\u90aa\u9b54\u306a\u306e\u3067\u6d88\u3057\u3066\u3057\u307e\u3044\u307e\u3059\uff0e<\/p>\n<\/div>\n<div class=\"listingblock\">\n<div class=\"title\">PC\u3067Raspberry Pi\u3067open\u3067\u304d\u306a\u3044keyslot 0\u3092kill<\/div>\n<div class=\"content\">\n<pre>$ sudo cryptsetup luksKillSlot \/dev\/sdb 0\nEnter any remaining passphrase:<\/pre>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<div class=\"sect1\">\n<h2 id=\"_raspberry_pi\u65e2\u5b9a\u5024\u3067keyslot\u3092\u8a2d\u5b9a\">Raspberry Pi\u65e2\u5b9a\u5024\u3067keyslot\u3092\u8a2d\u5b9a<\/h2>\n<div class=\"sectionbody\">\n<div class=\"paragraph\">\n<p>\u30aa\u30d7\u30b7\u30e7\u30f3\u3092\u6307\u5b9a\u3057\u306a\u304b\u3063\u305f\u3089\u305d\u306e\u7aef\u672b\u306b\u3042\u3063\u305f\u8a2d\u5b9a\u306b\u306a\u308b\u3068\u601d\u3046\u306e\u3067\u65e2\u5b9a\u5024\u3067\u8a2d\u5b9a\u3057\u3066\u307f\u307e\u3059\uff0e<\/p>\n<\/div>\n<div class=\"listingblock\">\n<div class=\"title\">Raspberry Pi\u3067\u65b0\u3057\u3044keyslot\u3092\u898f\u5b9a\u5024\u3067\u8a2d\u5b9a<\/div>\n<div class=\"content\">\n<pre>$ sudo cryptsetup luksAddKey -S4 \/dev\/sda\nWARNING: The --key-slot parameter is used for new keyslot number.\nEnter any existing passphrase:\nEnter new passphrase for key slot:\nVerify passphrase:\n$ sudo cryptsetup luksDump \/dev\/sda | grep \"4: luks2\" -A15\n  4: luks2\n        Key:        512 bits\n        Priority:   normal\n        Cipher:     aes-xts-plain64\n        Cipher key: 512 bits\n        PBKDF:      argon2id\n        Time cost:  4\n        Memory:     170223 <b class=\"conum\">(1)<\/b>\n        Threads:    4\n        Salt:       2d 06 67 aa 97 1f fd d5 02 72 54 ab a5 31 9b 9d\n                    83 18 12 cd c1 2f 98 56 a5 4a 75 10 ea eb 7b bc\n        AF stripes: 4000\n        AF hash:    sha256\n        Area offset:32768 [bytes]\n        Area length:258048 [bytes]\n        Digest ID:  0<\/pre>\n<\/div>\n<\/div>\n<div class=\"paragraph\">\n<p>PC\u3067\u4f5c\u6210\u3057\u305fkeyslot0\u3068\u6bd4\u3079\u308b\u3068\u4e3b\u306bTime cost\u3068Memory\u304c\u5909\u308f\u308a\u307e\u3057\u305f\uff0e\u30e1\u30e2\u30ea\u91cf\u306f\u5927\u5206\u6e1b\u308a\u307e\u3057\u305f\uff0e<\/p>\n<\/div>\n<table  class=\"tableblock frame-all grid-all stretch table table-hover\" >\n<colgroup>\n<col style=\"width: 33.3333%;\"\/>\n<col style=\"width: 33.3333%;\"\/>\n<col style=\"width: 33.3334%;\"\/>\n<\/colgroup>\n<thead>\n<tr>\n<th class=\"tableblock halign-left valign-top\"><\/th>\n<th class=\"tableblock halign-left valign-top\">PC<\/th>\n<th class=\"tableblock halign-left valign-top\">Pi<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td class=\"tableblock halign-left valign-top\">\n<p class=\"tableblock\">Time cost<\/p>\n<\/td>\n<td class=\"tableblock halign-left valign-top\">\n<p class=\"tableblock\">10<\/p>\n<\/td>\n<td class=\"tableblock halign-left valign-top\">\n<p class=\"tableblock\">4<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td class=\"tableblock halign-left valign-top\">\n<p class=\"tableblock\">Memory<\/p>\n<\/td>\n<td class=\"tableblock halign-left valign-top\">\n<p class=\"tableblock\">1048576<\/p>\n<\/td>\n<td class=\"tableblock halign-left valign-top\">\n<p class=\"tableblock\">170223<\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/div>\n<div class=\"sect1\">\n<h2 id=\"_\u30b9\u30da\u30c3\u30af\u5dee\u306e\u3042\u308b\u7aef\u672b\u9593\u3067luks\u3092\u5229\u7528\u3059\u308b\u3068\u304d\u306f\u6ce8\u610f\">\u30b9\u30da\u30c3\u30af\u5dee\u306e\u3042\u308b\u7aef\u672b\u9593\u3067LUKS\u3092\u5229\u7528\u3059\u308b\u3068\u304d\u306f\u6ce8\u610f<\/h2>\n<div class=\"sectionbody\">\n<div class=\"paragraph\">\n<p>\u4eca\u56deCPU Intel\u7b2c10\u4e16\u4ee3\uff0cRAM 16GB\u306elaptop\u306ecryptsetup\u3067\u6697\u53f7\u5316\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u3092\u4f5c\u6210\uff0cSOC Broadcom BCM2837(1.2GHz 64-bit quad-core ARMv8 Cortex-A53)\uff0cRAM 1GB\u306eSBC\u306eRaspberry Pi 3 model B\u3067\u5229\u7528\u3057\u3088\u3046\u3068open\u3057\u3088\u3046\u3068\u3057\u305f\u3068\u3053\u308d\u3067\u30e1\u30e2\u30ea\u4e0d\u8db3\u3067\u5931\u6557\u3057\u307e\u3057\u305f\uff0e<br \/>\ncryptsetup\u306fluksAddkey\u3092\u884c\u3046\u3068\u304d\u306b\u30d9\u30f3\u30c1\u30de\u30fc\u30af\u3092\u5b9f\u884c\u3057\uff0c\u74b0\u5883\u306b\u5408\u3063\u305fkeyslot\u3092\u4f5c\u308d\u3046\u3068\u3059\u308b\u3088\u3046\u3067\u3059\uff0e\u305d\u306e\u305f\u3081\u30b9\u30da\u30c3\u30af\u3055\u304c\u3042\u308b\u5834\u5408\u306f\u4e00\u756a\u4f4e\u30b9\u30da\u30c3\u30af\u306a\u7aef\u672b\u3067\u8a2d\u5b9a\u3059\u308b\u304b\uff0ccryptsetup benchmark\u3092\u5b9f\u884c\u3057\u3066\u305d\u306e\u7d50\u679c\u3092\u53c2\u8003\u306b\u8a2d\u5b9a\u3059\u308b\u3088\u3046\u306b\u3057\u305f\u307b\u3046\u304c\u826f\u3055\u305d\u3046\u3067\u3059\uff0e\u305d\u3046\u3067\u306a\u3044\u3068\u4eca\u56de\u306e\u3088\u3046\u306b\u4f4e\u30b9\u30da\u30c3\u30af\u306a\u7aef\u672b\u3067\u958b\u3051\u306a\u3044\u3068\u3044\u3063\u305f\u3053\u3068\u304c\u8d77\u304d\u307e\u3059\uff0e<\/p>\n<\/div>\n<\/div>\n<\/div>\n<div class=\"sect1\">\n<h2 id=\"_\u4f59\u93321crypttab\u3068fstab\u3067systemd\u624b\u52d5\u30de\u30a6\u30f3\u30c8\u8a2d\u5b9a\">\u4f59\u93321\uff09crypttab\u3068fstab\u3067systemd\u624b\u52d5\u30de\u30a6\u30f3\u30c8\u8a2d\u5b9a<\/h2>\n<div class=\"sectionbody\">\n<div class=\"paragraph\">\n<p>\u3053\u3053\u306f\u4f59\u9332\u3067\u3059\uff0esystemd\u3067\u624b\u52d5\u30de\u30a6\u30f3\u30c8\u3059\u308b\u3088\u3046\u3057\u3066\u307f\u307e\u3057\u305f\uff0e<br \/>\n\u624b\u52d5\u30de\u30f3\u30c8\u306e\u5834\u5408\u306f\u524d\u8a2d\u5b9a\u306e\u624b\u9593\u3092\u8003\u3048\u308b\u3068\u5168\u90e8\u624b\u52d5\u3067\u3082\u826f\u3044\u3088\u3046\u306a\u611f\u3058\u3082\u3057\u307e\u3059\uff0e<\/p>\n<\/div>\n<div class=\"listingblock\">\n<div class=\"content\">\n<pre>$ sudo cryptsetup luksDump \/dev\/sda | grep \"UUID\" <b class=\"conum\">(1)<\/b>\nUUID:           28dee849-e142-49bc-96c2-be62adfc9309\n$ sudo install -o0 -g0 -m0600 \/dev\/null \/etc\/crypttab <b class=\"conum\">(2)<\/b>\n$ echo \"crypthdd UUID=28dee849-e142-49bc-96c2-be62adfc9309 none luks,discard,keyslot=1,noauto\" | sudo tee \/etc\/crypttab <b class=\"conum\">(3)<\/b>\ncrypthdd UUID=28dee849-e142-49bc-96c2-be62adfc9309 none luks,discard,keyslot=1,noauto\n$ echo \"\/dev\/mapper\/crypthdd    \/mnt    btrfs    nodev,noexec,noauto,compress=zstd,nofail,x-systemd.automount,x-systemd.device-timeout=30        0       0\" \\\n  | sudo tee -a \/etc\/fstab <b class=\"conum\">(4)<\/b>\n\/dev\/mapper\/crypthdd    \/mnt    btrfs    nodev,noexec,noauto,compress=zstd,nofail,x-systemd.automount,x-systemd.device-timeout=30        0       0\n$ sudo systemctl daemon-reload <b class=\"conum\">(5)<\/b>\n$ sudo systemctl start systemd-cryptsetup@crypthdd.service <b class=\"conum\">(6)<\/b>\nPlease enter passphrase for disk 541050A9E680 (crypthdd) on \/mnt: (no echo)\n$ df \/mnt <b class=\"conum\">(7)<\/b>\nFilesystem           1K-blocks  Used Available Use% Mounted on\n\/dev\/mapper\/crypthdd 488370200  5920 486255616   1% \/mnt\n$ mount | grep \/mnt\nsystemd-1 on \/mnt type autofs (rw,relatime,fd=46,pgrp=1,timeout=0,minproto=5,maxproto=5,direct)\n\/dev\/mapper\/crypthdd on \/mnt type btrfs (rw,nodev,noexec,relatime,compress=zstd:3,space_cache=v2,subvolid=5,subvol=\/,x-systemd.automount)<\/pre>\n<\/div>\n<\/div>\n<div class=\"colist arabic\">\n<ol>\n<li>\n<p>LUKS\u30c7\u30d0\u30a4\u30b9\u306eUUID\u3092\u78ba\u8a8d<\/p>\n<\/li>\n<li>\n<p>crypttab\u3092\u4f5c\u6210<\/p>\n<\/li>\n<li>\n<p>crypttab\u3092\u8a2d\u5b9a<\/p>\n<\/li>\n<li>\n<p>fstab\u306b\u8ffd\u8a18<\/p>\n<\/li>\n<li>\n<p>systemd\u306b\u53cd\u6620<\/p>\n<\/li>\n<li>\n<p>LUKS\u624b\u52d5\u30a2\u30f3\u30ed\u30c3\u30af<\/p>\n<\/li>\n<li>\n<p>\u30de\u30a6\u30f3\u30c8\u30dd\u30a4\u30f3\u30c8\u306b\u30a2\u30af\u30bb\u30b9\u3059\u308b\u3068\u81ea\u52d5\u30de\u30a6\u30f3\u30c8<\/p>\n<\/li>\n<\/ol>\n<\/div>\n<\/div>\n<\/div>\n<div class=\"sect1\">\n<h2 id=\"_\u4f59\u93322luks1\u306e\u9803\u306edump\">\u4f59\u93322)LUKS1\u306e\u9803\u306eDump<\/h2>\n<div class=\"sectionbody\">\n<div class=\"paragraph\">\n<p>ThinkPad X201s(CPU:Core i7 620L\/RAM:8GB)\u3067\u8a2d\u5b9a\u3057\u305f\u3068\u601d\u3046\u53e4\u3044disk\u3082\u3042\u3063\u305f\u306e\u3067luksDump\u3092\u898b\u3066\u307f\u308b\u3068\u3053\u3093\u306a\u611f\u3058\u3067\u3057\u305f\uff0e<\/p>\n<\/div>\n<div class=\"listingblock\">\n<div class=\"content\">\n<pre>$ sudo cryptsetup luksDump \/dev\/sdb\nLUKS header information for \/dev\/sdb\n\nVersion:        1\nCipher name:    aes\nCipher mode:    cbc-essiv:sha256\nHash spec:      sha1\nPayload offset: 2056\nMK bits:        256\nMK digest:      55 fc 34 22 89 b0 e5 65 f1 cb fd 34 96 2f 2c 16 6a 62 e7 24\nMK salt:        e3 fe 28 46 06 36 00 36 c6 e0 0c 9b e9 7a 2f ea\n                6e 3b 96 ee b0 f9 33 fd 2a 60 8d 2d 87 fe de bd\nMK iterations:  12500\nUUID:           ac5b8484-4b26-4967-b336-f63c408bb17d\n\nKey Slot 0: ENABLED\n        Iterations:             50352\n        Salt:                   08 7d 85 89 39 0e 94 6e e8 2f ab 3d ab 18 e1 17\n                                37 50 a5 ce fe d4 e1 78 e1 4f a2 59 d3 4c bb 54\n        Key material offset:    8\n        AF stripes:             4000\nKey Slot 1: DISABLED\nKey Slot 2: DISABLED\nKey Slot 3: DISABLED\nKey Slot 4: DISABLED\nKey Slot 5: DISABLED\nKey Slot 6: DISABLED\nKey Slot 7: DISABLED<\/pre>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<div class=\"sect1\">\n<h2 id=\"_\u74b0\u5883\">\u74b0\u5883<\/h2>\n<div class=\"sectionbody\">\n<div class=\"listingblock\">\n<div class=\"title\">PC\u74b0\u5883<\/div>\n<div class=\"content\">\n<pre>$ dpkg-query -W cryptsetup\ncryptsetup      2:2.7.5-1\n$ lsb_release -dr\nDescription:    Debian GNU\/Linux trixie\/sid\nRelease:        n\/a\n$ arch\nx86_64\n$ lscpu | grep \"^Model name:\"\nModel name:                           Intel(R) Core(TM) i7-10510U CPU @ 1.80GHz\n$ head -1 \/proc\/meminfo\nMemTotal:       15992644 kB<\/pre>\n<\/div>\n<\/div>\n<div class=\"listingblock\">\n<div class=\"title\">Raspberry Pi<\/div>\n<div class=\"content\">\n<pre>$ dpkg-query -W cryptsetup\ncryptsetup      2:2.6.1-4~deb12u2\n$ lsb_release -dr\nNo LSB modules are available.\nDescription:    Raspbian GNU\/Linux 12 (bookworm)\nRelease:        12\n$ arch\narmv7l\n$ grep \"^Hardware\" \/proc\/cpuinfo\nHardware        : BCM2835\n$ grep \"^Model\" \/proc\/cpuinfo\nModel           : Raspberry Pi 3 Model B Rev 1.2<\/pre>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>\u5148\u65e5PC\u3067\u6697\u53f7\u5316FS\u3092\u8a2d\u5b9a\u3057\u305fHDD\u3067\u3059\u304c\uff0c USB HDD\u3092LUKS&amp;Btrfs\u3067\u521d\u671f\u5316 \u2013 matoken&#8217;s meme SBC\u306eRaspberry Pi\u306b\u63a5\u7d9a\u3057\u3066\u30de\u30a6\u30f3\u30c8\u3057\u3088\u3046\u3068\u3057\u305f\u3068\u3053\u308d\u5931\u6557\u3057 [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"webmentions_disabled_pings":false,"webmentions_disabled":false,"activitypub_content_warning":"","activitypub_content_visibility":"","activitypub_max_image_attachments":4,"activitypub_interaction_policy_quote":"anyone","activitypub_status":"federated","footnotes":""},"categories":[809,7,6,546,199],"tags":[1136,1135,124],"class_list":["post-4236","post","type-post","status-publish","format-standard","hentry","category-bookworm-raspberry-pi-os","category-debian-linux","category-linux","category-raspberry-pi-os","category-sid","tag-cryptsetup","tag-luks","tag-raspberry-pi-3-b"],"_links":{"self":[{"href":"https:\/\/matoken.org\/blog\/wp-json\/wp\/v2\/posts\/4236","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/matoken.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/matoken.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/matoken.org\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/matoken.org\/blog\/wp-json\/wp\/v2\/comments?post=4236"}],"version-history":[{"count":3,"href":"https:\/\/matoken.org\/blog\/wp-json\/wp\/v2\/posts\/4236\/revisions"}],"predecessor-version":[{"id":4239,"href":"https:\/\/matoken.org\/blog\/wp-json\/wp\/v2\/posts\/4236\/revisions\/4239"}],"wp:attachment":[{"href":"https:\/\/matoken.org\/blog\/wp-json\/wp\/v2\/media?parent=4236"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/matoken.org\/blog\/wp-json\/wp\/v2\/categories?post=4236"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/matoken.org\/blog\/wp-json\/wp\/v2\/tags?post=4236"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}