-------------------------------------------------------------------------------------
  / _ \
\_\(_)/_/
 _//"\\_  JOHLEM.net
  /   \	  https://johlem.net/V1/topics/cheatsheet.php
------------------------------------------------------------------------------------- 

--- CHEATSHEET DISK ENCRYPTION


# HOW TO MOUNT ENCRYPTED EXTERNAL DRIVE:


Your volume is probably encrypted with LUKS, here's how to mount it:

You need:

sudo apt-get install cryptsetup
To decrypt the volume:

sudo cryptsetup luksOpen /dev/sda1 my_encrypted_volume
Now you can mount it as usual:

sudo mkdir /media/my_device
sudo mount /dev/mapper/my_encrypted_volume /media/my_device
To lock the container again, it needs to be unmounted first:

sudo umount /media/my_device
sudo cryptsetup luksClose my_encrypted_volume
To automatically put it in the /media location, use the udisks tool

sudo udisks --mount /dev/mapper/my_encrypted_volume


example:
pi@raspberrypi:~ $ df -h
Filesystem      Size  Used Avail Use% Mounted on
/dev/root        29G  1.6G   27G   6% /
devtmpfs        430M     0  430M   0% /dev
tmpfs           463M  972K  462M   1% /dev/shm
tmpfs           463M  6.3M  456M   2% /run
tmpfs           5.0M  4.0K  5.0M   1% /run/lock
tmpfs           463M     0  463M   0% /sys/fs/cgroup
/dev/mmcblk0p1  253M   49M  204M  20% /boot
tmpfs            93M     0   93M   0% /run/user/999
tmpfs            93M     0   93M   0% /run/user/1000

pi@raspberrypi:~ $ sudo cryptsetup luksOpen /dev/sda1 mybackup
Enter passphrase for /dev/sda1: 

pi@raspberrypi:~ $ sudo mkdir /media/bk3

pi@raspberrypi:~ $ sudo mount /dev/mapper/mybackup /media/bk3

pi@raspberrypi:~ $ df -h
Filesystem            Size  Used Avail Use% Mounted on
/dev/root              29G  1.6G   27G   6% /
devtmpfs              430M     0  430M   0% /dev
tmpfs                 463M  972K  462M   1% /dev/shm
tmpfs                 463M  6.3M  456M   2% /run
tmpfs                 5.0M  4.0K  5.0M   1% /run/lock
tmpfs                 463M     0  463M   0% /sys/fs/cgroup
/dev/mmcblk0p1        253M   49M  204M  20% /boot
tmpfs                  93M     0   93M   0% /run/user/999
tmpfs                  93M     0   93M   0% /run/user/1000
/dev/mapper/mybackup  1.8T   77M  1.7T   1% /media/bk3

pi@raspberrypi:~ $ cd /media/bk3/

pi@raspberrypi:/media/bk3 $ ls
lost+found


------------------
#SECURE ERASE DISK
pi@raspberrypi:/media/bk3 $ sudo dd if=/dev/zero of=/dev/sda iflag=nocache oflag=direct bs=4096 status=progress
778694656 bytes (779 MB, 743 MiB) copied, 117 s, 6.7 MB/s


----------

src:https://www.cyberciti.biz/security/howto-linux-hard-disk-encryption-with-luks-cryptsetup-command/
src: https://linuxhint.com/encrypt_disk_partition/




---------
How to recover lost LUKS key or passphrase
scr: https://access.redhat.com/solutions/1543373