Re: help with LUKS header backup

["tv.debian@googlemail.com" <tv.debian@googlemail.com>]

09/01/2012 05:03, yudi v wrote:
> I am trying to back up the LUKS header and LUKS FAQ recommend using
> the cryptsetup luksHeaderBackup command.
[cut]
> I only have one partition that uses LUKS, sda4. It's a GPT disk and
> the partitions are as follows
>
> sda1 = ESP
> sda2 = EF02
> sda3 = /boot
> sda4 = luks = rest of the disk.
>
> On my system, there is just /dev/mapper/sda4, I am guessing this is
> the devise I need to back up or is it the whole hard drive just like
> backing up a MBR.
>
> I am guessing the command I need to use on my system is:
>
> cryptsetup luksHeaderBackup  /dev/mapper/sda4 --header-backup-file
> /media/USB_stick
>
>
> Is this interpretation right?
>
> --
> Kind regards,
> Yudi

Yes, I am using this regularly. Backing up the headers to encrypted 
media (two preferably) is good practice, even if one can foresee a bit 
off a circle here ;-) . Header backups are easier to break than original 
LUKS container.