From bb5f9a79aec86860729a866b78ff0dafaf31752b Mon Sep 17 00:00:00 2001 From: Allie Crevier Date: Thu, 7 Nov 2019 10:13:36 -0800 Subject: [PATCH] Update docs --- README.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index 1c5d518..bbfebdb 100644 --- a/README.md +++ b/README.md @@ -12,7 +12,7 @@ TBD We support luks-encrypted drives that are either MBR/DOS partitioned or GPT partitioned. If you use `Disks` in Linux to partition your drive, you can [follow these instructions](https://docs.securedrop.org/en/stable/set_up_transfer_and_export_device.html#create-usb-transfer-device) to create a new export device. You can also use [cryptsetup](https://linux.die.net/man/8/cryptsetup) to create a luks-encrypted device with full-disk encryption, for example: -1. `sudo cryptsetup luksFormat --hash=sha512 --key-size=512 DEVICE` where `DEIVCE` is the name of your removable drive, which you can find via `lsblk -p`. +1. `sudo cryptsetup luksFormat --hash=sha512 --key-size=512 DEVICE` where `DEVICE` is the name of your removable drive, which you can find via `lsblk -p`. Make sure `DEVICE` is correct because you will be overwriting its data irrevocably. @@ -20,6 +20,8 @@ We support luks-encrypted drives that are either MBR/DOS partitioned or GPT part 3. `sudo mkfs.ext4 /dev/mapper/encrypted_device` +4. `sudo cryptsetup luksClose /dev/mapper/encrypted_device` + We do not yet support drives that use full-disk encryption with VeraCrypt. ## Export Archive Format