Skip to main content

EncryptedVolume

A LUKS2-encrypted volume configuration.

CharacteristicValue
Typeobject

Properties​

deviceId (required)​

The ID of the disk partition or software RAID array to encrypt.

This parameter is required. It must be unique among the list of encrypted volumes.

If it refers to a disk partition, it must be of a supported type. Supported types are all but the following blocked partition types:

  • esp

  • root

  • root-verity

  • usr-verity

  • home

If it refers to a software RAID array, the first disk partition of the software RAID array must be of a supported type.

CharacteristicValue
Typestring
FormatBlock Device ID

deviceName (required)​

The name of the device to create under /dev/mapper when opening the volume.

This parameter is required. It must be a valid file name and unique among all encrypted volumes, as well as among the Device Mapper devices.

CharacteristicValue
Typestring

id (required)​

The ID of the LUKS-encrypted volume to create.

This parameter is required. It must be non-empty and unique among the IDs of all block devices in the Host Configuration. This includes the IDs of all disk partitions, encrypted volumes, software RAID arrays, and A/B volume pairs.

CharacteristicValue
Typestring
FormatBlock Device ID