CLEVIS-LUKS-REPORT(1)

NAME

clevis-luks-report - Reports whether a pin bound to a LUKS1 or LUKS2 volume has been rotated

SYNOPSIS

clevis luks report -d DEV -s SLT

The clevis luks report command checks a given slot of a LUKS device and reports whether the pin bound to it — if any — has been rotated.

•-d DEV : The bound LUKS device

•-s SLT : The slot or key slot number for the pin to be verified

•-q : Quiet mode. If used, we will not prompt whether to regenerate the binding with clevis luks regen

•-r : Regenerates LUKS metadata with clevis luks regen -q -d DEV -s SLT

Check whether the pin bound to slot 1 in /dev/sda1 has been rotated:

# clevis luks report -d /dev/sda1 -s 1