zuluCrypt-cli(1)

💖 NAME 💖

okay bestie so this is zuluCrypt-cli — it's the command line interface frontend to cryptsetup and tcplay. that's it, that's the whole vibe. it's from the General Commands Manual section btw, and she's serving zuluCrypt-cli(1) energy 💅

---

✨ SYNOPSIS ✨

first, the little legend of symbols, because we're ✨communicating✨ here:

<> = required option
[] = optional argument
*  = default option
|  = alternatives for the same option
{}  = not allowed option

and now the actual invocations, bestie, no cap:

zuluCrypt-cli --test
zuluCrypt-cli -o <d> <m> [e] <p|f|h>
zuluCrypt-cli -O <d> {m} [e] <p|f|h>
zuluCrypt-cli -q <d>
zuluCrypt-cli -i <d>
zuluCrypt-cli -c <d> <p|f|h> [ktzg]
zuluCrypt-cli -r <-d> <p|f|h>
zuluCrypt-cli -a <d> <<y|u> <l|n>>|<h>
zuluCrypt-cli -b <d>
zuluCrypt-cli -w <d>   d argument must be something like: UUID=
zuluCrypt-cli -P <d>   d device must be mapper path at /dev/mapper/
zuluCrypt-cli -X <d>
zuluCrypt-cli -J <d>
zuluCrypt-cli -R <d> <f> <z>
zuluCrypt-cli -B <d> <f> <z>
zuluCrypt-cli -A
zuluCrypt-cli -S
zuluCrypt-cli -N

🌸 examples (the moment you've been waiting for) 🌸

create volume: zuluCrypt-cli -c -d /dev/sdc1 -z ext4 -t luks -p xxx
open volume  : zuluCrypt-cli -o -d /dev/sdc1 -m sdc1 -e ro -p xxx
open volume through sudo/pkexec  : zuluCrypt-cli -o -d /dev/sdc1 -m sdc1
-e ro -p xxx -K $USER_ID
close volume ; zuluCrypt-cli -q -d /dev/sdc1
remove key   ; zuluCrypt-cli -r -d /dev/sdc1 -p xxx
add key      : zuluCrypt-cli -a -d /dev/sdc1 -y xxx -l yyy
get device path from mapper  : zuluCrypt-cli -P -d
/dev/mapper/zuluCrypt-sdc1
check if partition with UUID is present : zuluCrypt-cli -w -d UUID=

---

🦋 DESCRIPTION 🦋

zuluCrypt is a front end to cryptsetup. her whole goal? making cryptsetup volumes less of a headache by handing you a simple to use command line interface, plus a Qt based GUI front end sitting on top of that command line. lowkey iconic.

the command line program is called "zuluCrypt-cli", and the Qt based GUI is called "zuluCrypt-gui". and here's the tea — the cli part of the program is an suid program, which is what lets it manage volumes without you having to set up sudo with the right permissions first, or type in root's password. she's independent like that 💅

the GUI part of the program calls the cli part for its operations.

⚠️ heads up bestie: this tool will create volumes only in non system partitions.

and what's a system partition, you ask? it's a partition with an active entry in /etc/fstab and /etc/crypttab. periodt.

---

🌈 USAGE 🌈

usage: zuluCrypt-cli <operation> <options specific to the operation>

operation list 📝

• -c — create an encrypted volume
• -o — open and encrypted volume
• -O — open an encrypted volume but do not mount it (-m therefore not needed)
• -K — if zuluCrypt-cli or zuluMount-cli is invoked with sudo/pkexec to unlock a volume, use this option to tell zuluCrypt to work on behalf of what user. If this option is not set them the unlocked volume will incorrectly belong to root user instead of the user who run zuluCrypt-cli/zuluMount-cli.
• -q — close an opened encrypted volume
• -r — remove a key from luks volume
• -a — add a key to luks volume
• -i — check if a device contain a luks volume
• -s — check if a device is opened and print its properties if it is
• -b — show status of each slot of luks volume. "0"=empty, "1"=occupied, "2"=invalid slot, "3"=last occupied
• -A — print the list of all partitions on the system
• -N — print a list of non system partitions on the system( partitions with no active entries in /etc/fstab and /etc/crypttab
• -T — print a detailed list of mounted partitions. Must be used with -A or -S or -N
• -Z — print a detailed list of unmounted partitions. Must be used with -A or -S or -N
• -S — print a list of system partitions on the system( partitions with active entries in /etc/fstab and /etc/crypttab
• -w — check if UUID matches UUID of any partition
• -P — get device path from mapper( located at /dev/mapper )
• -L — print a list of all opened volumes and their mount point. The list is not formatted
• -X — open a device pointed by argument -d and write random data to it hiding data previously written to device
• -W — check if a device is a truecrypt device or not, required argument are -p or -f
• -U — print UUID of a given device, required argument: -d
• -H — compare a header on a luks device to a backup header, required arg: -d and -f
• -M — create a publicly accessible "mirror" of the mount point in "/run/media/public/" from the original created in "/run/media/private/$USER/"
• -J — create a plain mapper owned by the user who run the command on a device pointed by argument -d
• -B — create a luks or truecrypt header backup
• -R — restore a luks or truecrypt header on a device from backup

📌 NOTE: a system partition is defined as a partition with an active entry in /etc/fstab and/or /etc/crypttab. An active entry is an entry that is not commented out. don't forget it fr fr.

options that goes with above operations 🎀

• -G — module name to use to get a passphrase to open a volume
• -e — mode for opening volumes(ro*/rw) when used with -o/-O.
• -e — mode for managing a truecrypt header when used with -B/-R. Options can be "fde" for volumes that use whole disk encryption, "sys" for a windows system volume. The volume is assumed to be a normal one when the option is not set.
• -k — do not ask for confirmation when doing dangerous operations
• -d — path to a file or partition with encrypted volume
• -m — path component to be added to mount point prefix(/run/media/private/$USER or /home/$USER)
• -z — file system type installed(ext2,ext3,ext4* etc) or or luks/tcrypt header backup path
• -t — type of volume (vera,plain/luks*). "vera" is a necessary argument when opening a VeraCrypt volume
• -g — options to be used when creating a volume.
  • default for luks are: "/dev/urandom.aes.xts-plain64.256.sha1"
  • default for tcrypt are: "/dev/urandom.aes.xts-plain64.256.ripemd160"
  • possible combination for tcrypt: "/dev/urandom.serpent:twofish:aes.xts-plain64.256.whirlpool"
• -h — get passphrase interactively
• -p — passphrase
• -f — path to keyfile
• -F — path to normal truecrypt multiple keyfiles. Multiple keyfiles are added by setting the option multiple times.
• -V — path to hidden truecrypt multiple keyfiles. Multiple keyfiles are added by setting the option multiple times.
• -y — passphrase already in the volume(required by -a if -u is absent and -h is also absent)
• -u — path to keyfile with passphrase already in the volume(required by -a if -y is absent and -h is also absent)
• -l — passphrase to be added(required by -a if -n is absent and -h is also absent)
• -n — path to keyfile with a passphrase to be added (required by -a if -l is absent and -h is also absent)

---

👑 COPYRIGHT 👑

Copyright (c) 2011-2020
name : Francis Banyikwa
email: mhogomchungu@gmail.com

This program is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 2 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program. If not, see <http://www.gnu.org/licenses/>.

---

🕰️ LAST EDIT 🕰️

Last change: Tue 09 Jun 2020 01:21:51 PM EAT

---

okay that's the whole page bestie, you ate that 🫶✨ this was zuluCrypt-cli(1) from the General Commands Manual, last touched Tue 09 Jun 2020 01:21:51 PM EAT — go encrypt something responsibly, ily, bye 💖🎀🦋