NAME

       luksipc - on-the-fly conversion to LUKS-encrypted block devices

DESCRIPTION

       Tool to convert block devices to LUKS-encrypted block devices on the fly

SYNOPSIS

       luksipc

              (-d,     --device=RAWDEV)     (--readdev=DEV)    (-b,    --blocksize=BYTES)    (-c,
              --backupfile=FILE)   (-k,    --keyfile=FILE)    (-p,    --luksparam=PARAMS)    (-l,
              --loglevel=LVL)        (--resume)        (--resume-file=FILE)       (--no-seatbelt)
              (--i-know-what-im-doing) (-h, --help)

       -d, --device=RAWDEV
              Raw device that is about  to  be  converted  to  LUKS.  This  is  the  device  that
              luksFormat will be called on to create the new LUKS container. Mandatory argument.

       --readdev=DEV
              The  device  that the unencrypted data should be read from.  This is only different
              from the raw device if the volume is already LUKS (or another  container)  and  you
              want to reLUKSify it.

       -b, --blocksize=BYTES
              Specify  block  size  for  copying  in  bytes. Default (and minimum) size is 10 MiB
              (10485760  bytes).  This  value  is  rounded  up   to   closest   4096-byte   value
              automatically.  It  must be at least size of LUKS header (usually 2048 kiB, but may
              vary).

       -c, --backupfile=FILE
              Specify the file in which a header backup will be written.  Essentially the  header
              backup  is  a  dump of the first 128 MiB of the raw device. By default this will be
              written to a file named backup.bin.

       -k, --keyfile=FILE
              Filename for the initial keyfile. A 4096 bytes long file will  be  generated  under
              this  location  which  has /dev/urandom as the input. It will be added as the first
              keyslot in the luksFormat process. If you put this file on a volatile  device  such
              as /dev/shm, remember that all your data is garbage after a reboot if you forget to
              add   a   second   key   to   the   LUKS   keyring.   The   default   filename   is
              /root/initial_keyfile.bin. This file will always be created with 0o600 permissions.

       -p, --luksparam=PARAMS
              Pass  these  additional  options  to  luksFormat, for example to select a different
              cipher. Parameters have to be passed comma-separated.

       -l, --loglevel=LVL
              Integer value that specifies the level of logging verbosity from 0 to 4  (critical,
              error, warn, info, debug). Default loglevel is 3 (info).

       --resume
              Resume  a  interrupted  conversion  with  the  help  of a resume file. This file is
              generated when luksipc aborts, is by default called resume.bin (this can be changed
              by --resumefile).

       --resume-file=FILE
              Change  the  file  name  from which the resume information is read (when resuming a
              previously aborted conversion) and to which resume information is written  (in  the
              case of an abort). By default this will be resume.bin.

       --no-seatbelt
              Disable several safetly checks which are in place to keep you from losing data. You
              really need to know what you're doing if you use this.

       --i-know-what-im-doing Enable batch mode (will not ask any questions or
              confirmations interactively). Please note that you will have to perform any and all
              sanity checks by yourself if you use this option in order to avoid losing data.

       -h, --help
              Show this help screen.

                                            April 2016                                 LUKSIPC(1)