'\" t
.\"     Title: clevis-luks-list
.\"    Author: [see the "AUTHOR(S)" section]
.\" Generator: Asciidoctor 2.0.12
.\"    Manual: \ \&
.\"    Source: \ \&
.\"  Language: English
.\"
.TH "CLEVIS\-LUKS\-LIST" "1" "" "\ \&" "\ \&"
.ie \n(.g .ds Aq \(aq
.el       .ds Aq '
.ss \n[.ss] 0
.nh
.ad l
.de URL
\fI\\$2\fP <\\$1>\\$3
..
.als MTO URL
.if \n[.g] \{\
.  mso www.tmac
.  am URL
.    ad l
.  .
.  am MTO
.    ad l
.  .
.  LINKSTYLE blue R < >
.\}
.SH "NAME"
clevis\-luks\-list \- Lists pins bound to a LUKS device
.SH "SYNOPSIS"
.sp
\fBclevis luks list\fP \-d DEV [\-s SLT]
.SH "OVERVIEW"
.sp
The \fBclevis luks list\fP command list the pins bound to LUKS device.
For example:
.sp
.if n .RS 4
.nf
.fam C
clevis luks list \-d /dev/sda1
.fam
.fi
.if n .RE
.SH "OPTIONS"
.sp
.RS 4
.ie n \{\
\h'-04'\(bu\h'+03'\c
.\}
.el \{\
.  sp -1
.  IP \(bu 2.3
.\}
\fB\-d\fP \fIDEV\fP :
The LUKS device on which to list bound pins
.RE
.sp
.RS 4
.ie n \{\
\h'-04'\(bu\h'+03'\c
.\}
.el \{\
.  sp -1
.  IP \(bu 2.3
.\}
\fB\-s\fP \fISLT\fP :
The slot to use for listing the pin from
.RE
.SH "EXAMPLES"
.sp
.if n .RS 4
.nf
.fam C
clevis luks list \-d /dev/sda1
1: sss \(aq{"t":1,"pins":{"tang":[{"url":"addr1"},{"url":"addr2"}],"tpm2":[{"hash":"sha256","key":"ecc"}],"sss":{"t":1,"pins":{"tang":[{"url":"addr3"}]}}}}\(aq
2: tang \(aq{"url":"addr"}\(aq
3: tpm2 \(aq{"hash":"sha256","key":"ecc","pcr_bank":"sha1","pcr_ids":"7"}\(aq
.fam
.fi
.if n .RE
.sp
As we can see in the example above, \fB/dev/sda1\fP has three slots bound each with a different pin.
.sp
.RS 4
.ie n \{\
\h'-04'\(bu\h'+03'\c
.\}
.el \{\
.  sp -1
.  IP \(bu 2.3
.\}
Slot #1 is bound with the \fIsss\fP pin, and uses also tang and tpm2 pins in its policy.
.RE
.sp
.RS 4
.ie n \{\
\h'-04'\(bu\h'+03'\c
.\}
.el \{\
.  sp -1
.  IP \(bu 2.3
.\}
Slot #2 is bound using the \fItang\fP pin
.RE
.sp
.RS 4
.ie n \{\
\h'-04'\(bu\h'+03'\c
.\}
.el \{\
.  sp -1
.  IP \(bu 2.3
.\}
Slot #3 is bound with the \fItpm2\fP pin
.RE
.sp
Note that the output of \fBclevis luks list\fP can be used with the \fBclevis luks bind\fP command, such as:
.sp
.if n .RS 4
.nf
.fam C
clevis luks bind \-d /dev/sda1 tpm2 \(aq{"hash":"sha256","key":"ecc","pcr_bank":"sha1","pcr_ids":"7"}\(aq
.fam
.fi
.if n .RE
.sp
And we will bind another slot with a policy similar to the one we have in slot #3.
Also note that if you are interested in a particular slot, you can pass the \fI\-s SLT\fP argument to \fBclevis luks list\fP:
.sp
.if n .RS 4
.nf
.fam C
clevis luks list \-d /dev/sda1 \-s 2
2: tang \(aq{"url":"addr"}\(aq
.fam
.fi
.if n .RE
.sp
In the above example, we listed only the pin bound to slot #2.
.SH "SEE ALSO"
.sp
.URL "clevis\-luks\-bind.1.adoc" "\fBclevis\-luks\-bind\fP(1)" ","
.URL "clevis\-encrypt\-tang.1.adoc" "\fBclevis\-encrypt\-tang\fP(1)" ","
.URL "clevis\-encrypt\-tpm2.1.adoc" "\fBclevis\-encrypt\-tpm2\fP(1)" ","
.URL "clevis\-encrypt\-sss.1.adoc" "\fBclevis\-encrypt\-sss\fP(1)" ","