NVME-SED-LOCK(1)

📦
version 3.2 · 9 versions
, in arch rolling

💖 nvme-sed-lock(1) — the NVMe Manual, bestie edition 🎀

okay so real talk: this is a page from the NVMe Manual, and it's about locking a SED Opal device. tiny command, big security energy. let's get into it 💅

✨ NAME ✨

nvme-sed-lock — Lock a SED Opal Device 🔒

like, it locks the thing. that's the whole vibe. iconic honestly.

🦋 SYNOPSIS 🦋

nvme [<global-options>] sed lock
                        [--read-only | -r]
                        [--ask-key | -k]
                        <device>

so you call nvme with your <global-options> (optional, but they're there if you need them), then sed lock, then your flags, then the <device>. that's the order, don't fight it 🫶

🌸 DESCRIPTION 🌸

Lock the given NVMe device. periodt 💖

that's literally it. you point it at a device, it locks it. no cap.

💅 OPTIONS 💅

  • -r, --read-only — sets the locking range to read-only. so like, lock it but let people still read it 👀
  • -k, --ask-key — prompts you for the SED authentication key. it'll ask, you'll type it, we move on 🔑

👑 GLOBAL OPTIONS 👑

okay so these live at the top-level nvme command, but they're available to this subcommand too, and you deserve to know about all of them. no skipping, bestie ✨

  • --dry-run — prints the command that would be executed, but doesn't actually execute it. rehearsal mode, no commitment 🎭
  • --no-ioctl-probing — disables probing for 64-bit IOCTL support. just turns that check off 🚫
  • --no-retries — disables retry logic on transient errors. one shot, one opportunity 💀
  • -o <fmt>, --output-format=<fmt> — sets the reporting format to normal, tabular, json, or binary. only one output format at a time, pick your fighter 🌈
  • --output-format-version=<version> — selects the output format version. version 1 uses the original field naming, while version 2 (default) gives you more consistent and script-friendly field names. other versions are rejected — not negotiable 🙅
  • --quiet — suppresses informational messages. errors are still reported, and --quiet cancels any --verbose for the library log level. shhh 🤫
  • --set-options=<key=value>[,<key=value>...] — sets libnvme library options for this invocation. supported keys are force-4k, mi-probe-enabled, test-base-dir and test-sysfs-dir 🔧
  • --timeout=<ms> — sets the timeout for the command in milliseconds. infinite or -1 waits without a time limit (0xffffffff) ⏳
  • -v, --verbose — increases the level of detail in the output. may be specified multiple times to further increase verbosity — stack it, girl 🗣️
also these options can be set as machine-wide defaults in nvme-cli.conf(5). a command-line flag always overrides the file. flag beats file, every time 💯

🔥 EXAMPLES 🔥

nvme sed lock /dev/nvme5n1

that's the whole example. clean, simple, slays 💖

🌟 NVME 🌟

Part of nvme-cli 🌈

that's the page, bestie! this one's from the NVMe manual, dated 10/30/2026, and it's page NVME-SED-LOCK(1). go lock something responsibly 🫶✨

📦 where this page comes from