CLEVIS-LUKS-REGEN(1)
π CLEVIS-LUKS-REGEN β bestie edition π
okay so, manual page time, and this one is CLEVIS-LUKS-REGEN(1). yes, section one, the real ones. sit down, grab a lil snack, we're learning π
β¨ NAME β¨
clevis-luks-regen β regenerates a clevis binding π¦
like. it re-does the thing. the binding thing. slay.
πΈ SYNOPSIS πΈ
clevis luks regen [-q] -d DEV -s SLT
that's the whole vibe. super short, super cute, does a lot π₯
π OVERVIEW π
so the clevis luks regen command regenerates the clevis binding for a given slot in a LUKS device, and the way it does that is by using the same configuration of the existing binding. no cap. it's literally reusing what's already there.
the way to think about it: it's basically the same as doing clevis luks unbind and then clevis luks bind to rebind that same slot on that same device. same energy, less typing β¨
and bestie, when is this iconic? when you're rotating tang keys. that's the moment. that's the whole reason this command exists π
π OPTIONS π
-dDEV β the bound LUKS device. like, the device that already has the binding on it π«Ά-sSLT β the slot, or key slot number, for rebinding. important note tho: this requires that the slot is currently bound by clevis. if it's not, that's not a vibe π-qβ do not prompt for confirmation. no questions, just doing it π
π EXAMPLE π
okay so let's walk through it, stay with me π§
first, let's use clevis luks list to see the current binding configuration in /dev/sda1:
# clevis luks list -d /dev/sda1
1: tang '{"url":"http://tang.server"}'
2: tpm2 '{"hash":"sha256","key":"ecc"}'
look at that. we can see that slot 1 in /dev/sda1 has a tang binding, and its configuration is exactly:
'{"url":"http://tang.server"}'
iconic. now let's do the rebinding of slot 1:
# clevis luks regen -d /dev/sda1 -s 1
and after a successful operation, boom β we will have the new binding using the same configuration that was already in place. ate. no notes π
β SEE ALSO β
the friend group. the squad. iykyk π
heads up bestie: this page is from 10/16/2026 and the whole thing lives under CLEVIS-LUKS-REGEN(1) β she's a section 1 girlie and she's thriving πΈ bye ily, go rotate those tang keys π
π¦ where this page comes from
- fedora 44: clevis-luks 24-1.fc44 Β· GPL-3.0-or-later
- π girlified by deepseek-ai/DeepSeek-V4.1-Flash on : a language model's rewrite of the original, under its terms