table of contents
- bookworm 252.31-1~deb12u1
- bookworm-backports 254.16-1~bpo12+1
SYSTEMD-CRYPTSETUP@.SERVICE(8) | systemd-cryptsetup@.service | SYSTEMD-CRYPTSETUP@.SERVICE(8) |
NAME¶
systemd-cryptsetup@.service, systemd-cryptsetup - Full disk decryption logic
SYNOPSIS¶
systemd-cryptsetup@.service
system-systemd\x2dcryptsetup.slice
/lib/systemd/systemd-cryptsetup
DESCRIPTION¶
systemd-cryptsetup@.service is a service responsible for setting up encrypted block devices. It is instantiated for each device that requires decryption for access.
systemd-cryptsetup@.service instances are part of the system-systemd\x2dcryptsetup.slice slice, which is destroyed only very late in the shutdown procedure. This allows the encrypted devices to remain up until filesystems have been unmounted.
systemd-cryptsetup@.service will ask for hard disk passwords via the password agent logic[1], in order to query the user for the password using the right mechanism at boot and during runtime.
At early boot and when the system manager configuration is reloaded, /etc/crypttab is translated into systemd-cryptsetup@.service units by systemd-cryptsetup-generator(8).
In order to unlock a volume a password or binary key is required. systemd-cryptsetup@.service tries to acquire a suitable password or binary key via the following mechanisms, tried in order:
If no suitable key may be acquired via any of the mechanisms describes above, volume activation fails.
SEE ALSO¶
systemd(1), systemd-cryptsetup-generator(8), crypttab(5), systemd-cryptenroll(1), cryptsetup(8)
NOTES¶
- 1.
- password agent logic
systemd 254 |