systemd-cryptsetup

Create or remove decrypted mappings of encrypted volumes. Equivalent of cryptsetup open and cryptsetup close. Arguments to this command are written exactly like a line in /etc/crypttab. It's used by systemd to unlock devices on boot. See also: cryptsetup. More information: https://www.freedesktop.org/software/systemd/man/latest/systemd-cryptsetup.html.

• Open a LUKS volume and create a decrypted mapping at /dev/mapper/mapping_name:

systemd-cryptsetup attach mapping_name /dev/sdXY

• Open a LUKS volume with additional options and create a decrypted mapping at /dev/mapper/mapping_name:

systemd-cryptsetup attach mapping_name /dev/sdXY none crypttab_options

• Open a LUKS volume with a keyfile and create a decrypted mapping at /dev/mapper/mapping_name:

systemd-cryptsetup attach mapping_name /dev/sdXY path/to/keyfile crypttab_options

• Remove an existing mapping:

systemd-cryptsetup detach mapping_name