How to resume decryption on LUKS1 in-place
xndr <[email protected]> Wed, 21 Feb 2024 17:22:18 +0000
| Newsgroups | dev.linux.lists.cryptsetup |
|---|---|
| Message-ID | <[email protected]> |
Hello 1&All, Please help us complete an in-place decryption of a LUKS1 device:- We followed the steps here on the Arch Linux wiki by converting from LUKS2 to LUKS1:- https://wiki.archlinux.org/title/Removing_system_encryption#Decrypting_LUKS2_devices_in-place Unfortunately the device suffered an IO error at about 85% after issuing the final command:- cryptsetup-reencrypt --decrypt /dev/sda3 From the man pages it might seem that the process can be resumed by using the command:- cryptsetup reencrypt --resume-only --header luks2-hdr-file /dev/encrypted_device However it seems qualified by being a LUKS2 only facility. Should this command still work on LUKS1 or is the process (if there's one at all) different. Available are copies of the headers (LUKS 1 & 2) in text and binary form and what appears to be a log generated during decryption. Any counsel greatly appreciated - thank you.