cryptsetup open

Create a decrypted mapping of an encrypted volume. Note: with TRIM enabled, minimal data leakage in form of freed block information, perhaps sufficient to determine the filesystem in use may occur. However, you still most likely want to enable it, because the data inside is still safe and SSDs without TRIM will wear out faster. More information: https://manned.org/cryptsetup-open.

• Open a LUKS volume and create a decrypted mapping at /dev/mapper/mapping_name:

cryptsetup open {{/dev/sdXY}} {{mapping_name}}

• Use a keyfile instead of a passphrase:

cryptsetup open --key-file {{path/to/file}} {{/dev/sdXY}} {{mapping_name}}

• Allow the use of TRIM on the device:

cryptsetup open --allow-discards {{/dev/sdXY}} {{mapping_name}}

• Write the --allow-discards option into the LUKS header (the option will then always be used when you open the device):

cryptsetup open --allow-discards --persistent {{/dev/sdXY}} {{mapping_name}}

• Open a LUKS volume and make the decrypted mapping read-only:

cryptsetup open --readonly {{/dev/sdXY}} {{mapping_name}}