theanurin/luksoid repository overview

IMAGES_PATH=/path/to/img

alias luksoid='docker run --privileged=true --rm --interactive --tty --mount "type=bind,source=$IMAGES_PATH,target=/data" theanurin/luksoid'

luksoid mount my-sensitive-luks.img

Checking for free loop device... Done.

Attaching the file '/data/my-sensitive-luks.img' to /dev/loop0... Done.

LUKS Opening. Now, you will be ask for a passphrase.
Enter passphrase for /data/my-sensitive-luks.img: 
LUKS Opening done.

Mounting a file system '' on LUKS-encrypted partition...
File system was mounted into '/mnt'.

Welcome!

Find your LUKS-encrypted partition in /mnt directory.

Feel free to read/write files in /mnt

[!] Do not forget exit gracefully by 'exit' command to prevent corruption of your image file 'my-sensitive-luks.img'.

bash-5.1# echo "My BTC wallet private key: xxxxxxxxxxxxxxxx" >> my-btc-wallet-keys.txt
bash-5.1# exit
exit

Umointing '/mnt'... Done.
LUKS Closing... Done.
Releasing /dev/loop0... Done.

luksoid init --sizemb=256 --fstype=vfat my-sensitive-luks.img

Initializing a zero-based file '/data/my-sensitive-luks.img' for 256 MBytes... Done.

Checking for free loop device... Done.

Attaching the file '/data/my-sensitive-luks.img' to /dev/loop1... Done.

LUKS Formatting. Now, you will be ask for a passphrase. ALL DATA IN THE FILE '/data/my-sensitive-luks.img' WILL BE DISCARDED!!!
Enter passphrase for /data/my-sensitive-luks.img:
LUKS Formatting done.

LUKS Opening. Now, you will be ask for the passphrase again. We have to open your LUKS image to double-check the passphrase and make filesystem 'vfat' on it.
Enter passphrase for /data/my-sensitive-luks.img:
LUKS Opening done.

Writing zeros to the LUKS-encrypted partition. This ensures that outside world will see this as random data i.e. it protect against disclosure of usage patterns... Done.

Creating a file system 'vfat' on LUKS-encrypted partition...
Device '/dev/mapper/uncrypted-loop1':
heads:255, sectors/track:63, bytes/sector:512
media descriptor:f8
total sectors:491520, clusters:483952, sectors/cluster:1
FATs:2, sectors/FAT:3781
volumeID:61cdcedb, label:''
File system was created.

LUKS Closing... Done.
Releasing /dev/loop1... Done.

luksoid passphrase-add my-sensitive-luks.img

Checking for free loop device... Done.

Attaching the file '/data/my-sensitive-luks.img' to /dev/loop0... Done.

LUKS Adding new passphrase (that will use for generate new key)...

Enter any existing passphrase:
Enter new passphrase for key slot:
Verify passphrase:

LUKS Adding passphrase done.

Releasing /dev/loop0... Done.

luksoid passphrase-remove my-sensitive-luks.img

Checking for free loop device... Done.

Attaching the file '/data/my-sensitive-luks.img' to /dev/loop0... Done.

LUKS Removing passphrase...

Enter passphrase to be deleted:

LUKS Removing passphrase done.

Releasing /dev/loop0... Done.

docker build --tag theanurin/luksoid --file docker/Dockerfile .