'\" t
.\"     Title: clevis-luks-pass
.\"    Author: [see the "AUTHOR(S)" section]
.\" Generator: Asciidoctor 2.0.20
.\"    Manual: \ \&
.\"    Source: \ \&
.\"  Language: English
.\"
.TH "CLEVIS\-LUKS\-PASS" "1" "" "\ \&" "\ \&"
.ie \n(.g .ds Aq \(aq
.el       .ds Aq '
.ss \n[.ss] 0
.nh
.ad l
.de URL
\fI\\$2\fP <\\$1>\\$3
..
.als MTO URL
.if \n[.g] \{\
.  mso www.tmac
.  am URL
.    ad l
.  .
.  am MTO
.    ad l
.  .
.  LINKSTYLE blue R < >
.\}
.SH "NAME"
clevis-luks-pass \- Extracts the passphrase used for binding a particular slot in a LUKS device
.SH "SYNOPSIS"
.sp
\fBclevis luks pass\fP \-d DEV \-s SLT
.SH "OVERVIEW"
.sp
The \fBclevis luks pass\fP command extracts the passphrase used for binding a particular slot in a LUKS device.
For example:
.sp
.if n .RS 4
.nf
.fam C
clevis luks pass \-d /dev/sda1 \-s 1
.fam
.fi
.if n .RE
.SH "OPTIONS"
.sp
.RS 4
.ie n \{\
\h'-04'\(bu\h'+03'\c
.\}
.el \{\
.  sp -1
.  IP \(bu 2.3
.\}
\fB\-d\fP \fIDEV\fP :
The LUKS device on which to extract a passphrase from
.RE
.sp
.RS 4
.ie n \{\
\h'-04'\(bu\h'+03'\c
.\}
.el \{\
.  sp -1
.  IP \(bu 2.3
.\}
\fB\-s\fP \fISLT\fP :
The slot to use for extracting the passphrase
.RE
.SH "EXAMPLE"
.sp
.if n .RS 4
.nf
.fam C
clevis luks pass \-d /dev/sda1 \-s 1
<passphrase here>
.fam
.fi
.if n .RE
.sp
Note that the output of \fBclevis luks pass\fP might be non\-printable, in which case it would be better to redirect its output to a file and use it as a key file together with cryptsetup. For instance:
.sp
.if n .RS 4
.nf
.fam C
clevis luks pass \-d /dev/sda1 \-s 1 > slot1\-passphrase
.fam
.fi
.if n .RE
.sp
And the file slot1\-passphrase will contain the passphrase associated with slot #1 in /dev/sda1.
.SH "SEE ALSO"
.sp
.URL "clevis\-luks\-unlock.1.adoc" "\fBclevis\-luks\-unlock\fP(1)" ","