CLEVIS-LUKS-LIST(1)

💅 CLEVIS-LUKS-LIST(1) 💅

okay bestie, welcome to clevis-luks-list — the little tool that tells you which pins are living rent-free on your LUKS device. no cap, it's that simple. ✨

---

🌸 NAME 🌸

clevis-luks-list — the command that lists the pins bound to a LUKS device. literally its whole personality. 🎀

---

🦋 SYNOPSIS 🦋

clevis luks list -d DEV [-s SLT]

---

👑 OVERVIEW 👑

so the clevis luks list command lists the pins that are bound to a LUKS device. that's it, that's the vibe. for example:

clevis luks list -d /dev/sda1

like… she just wants to know what's in there. 💖

---

✨ OPTIONS ✨

• -d DEV — the LUKS device you wanna list the bound pins on. this one's the main character, you basically always need her. 🔥
• -s SLT — the slot to use for listing the pin from. wanna peek at just one slot instead of all of them? this is your girl. 🫶
• -p — print only a sorted space-separated list of bound pins. minimal, clean, lowkey aesthetic. 💅

---

🌈 EXAMPLES 🌈

okay picture this, we ask her nicely:

clevis luks list -d /dev/sda1
1: sss '{"t":1,"pins":{"tang":[{"url":"addr1"},{"url":"addr2"}],"tpm2":[{"hash":"sha256","key":"ecc"}],"sss":{"t":1,"pins":{"tang":[{"url":"addr3"}]}}}}'
2: tang '{"url":"addr"}'
3: tpm2 '{"hash":"sha256","key":"ecc","pcr_bank":"sha1","pcr_ids":"7"}'

and now the same thing but with -p, aka the low-effort-but-cute version:

clevis luks list -d /dev/sda1 -p
1: sss tang tpm2
2: tang
3: tpm2

as we can totally see in the example above, /dev/sda1 has three slots bound, each with a different pin. iconic behaviour honestly. ✨

• slot #1 is bound with the sss pin, and uses also tang and tpm2 pins in its policy. she's doing the most and we respect it. 💜
• slot #2 is bound using the tang pin. simple, understated. 🍓
• slot #3 is bound with the tpm2 pin. 🧚

and bestie, note that the output of clevis luks list can be used with the clevis luks bind command, like this:

clevis luks bind -d /dev/sda1 tpm2 '{"hash":"sha256","key":"ecc","pcr_bank":"sha1","pcr_ids":"7"}'

and we will bind another slot with a policy similar to the one we have in slot #3. so you can basically copy-paste your fave slot's whole vibe onto a new one. slay. 💅

also also also — if you're only interested in a particular slot, you can pass the -s SLT argument to clevis luks list:

clevis luks list -d /dev/sda1 -s 2
2: tang '{"url":"addr"}'

in the above example, we listed only the pin bound to slot #2. targeted. focused. we love a queen who knows what she wants. 👑

---

🫶 SEE ALSO 🫶

clevis-luks-bind(1), clevis-encrypt-tang(1), clevis-encrypt-tpm2(1), clevis-encrypt-sss(1),

---

and that's the whole page, bestie!! 💖 this was CLEVIS-LUKS-LIST(1), brought to you from 10/16/2026 — go forth and list those pins, you absolute legend. periodt. 🌈👑