DECRYPTCORE(8)

📦 version 15.1, in freebsd 14.5, freebsd 15.1

💅 DECRYPTCORE(8) — the system manager's manual, but make it make sense

okay so bestie, you know how the OS can dump its whole core onto disk and it's all encrypted and mysterious?? this little icon right here, decryptcore, is the one that opens it back up. it lives in section 8 of the System Manager's Manual, which is the big-girl admin section, iykyk 💖

✨ NAME ✨

decryptcore — decrypt a core dump of the operating system 🫶

🌸 SYNOPSIS 🌸

decryptcore [-fLv] -p privatekeyfile -k keyfile -e encryptedcore -c core
decryptcore [-fLv] [-d crashdir] -p privatekeyfile -n dumpnr

like, pick a lane bestie, but both of these are valid 💅

🦋 DESCRIPTION 🦋

so here's the tea ☕ — decryptcore does it in two steps, no cap. First it decrypts keyfile using privatekeyfile, and then it takes that fresh new key and decrypts encryptedcore (the one that savecore(8) stashed away). The result lands in core. slay ✨

Alternatively — and this is the lowkey fancier route — you can decrypt a core dump numbered dumpnr straight out of the crashdir directory. In that case it grabs a dump key from the key.# file and saves the result in vmcore.#, where “#” corresponds to dumpnr. cute, consistent, we love a naming convention 🎀

By default decryptcore does not overwrite an old core dump, because maybe you wanted to keep that core somewhere else for the future, and honestly? valid. But if you do wanna clobber it, that's what the -f flag is for. 🙈

The decryptcore utility can be started with the following command line arguments:

  • -f — Remove a decryped core dump if it already exists. (yes the original says "decryped", we're keeping the typo's energy, it's iconic 💀)
  • -L — Write log messages to syslogd(8).
  • -v — Print or log verbose/debugging information. You can drop this option multiple times to raise the verbosity level — stack 'em like bracelets, bestie 💜
  • -p privatekeyfile — Specify location of a private key file which will be used to decrypt a dump key file.
  • -k keyfile — Specify location of a dump key file.
  • -e encryptedcore — Specify location of an encrypted core.
  • -c core — Specify location of a resulting decrypted core dump.
  • -d crashdir — Specify an alternative crash dump directory. The default crash dump directory is /var/crash. 🗂️
  • -n dumpnr — Specify a number of a crash dump to be decrypted.

⭐ EXIT STATUS ⭐

The decryptcore utility exits 0 on success, and >0 if an error occurs. so like, zero = we ate, anything bigger = something went sideways 😭🔥

🌈 SEE ALSO 🌈

kgdb(1) (ports/devel/gdb), capsicum(4), dumpon(8), savecore(8), syslogd(8)

go read them, they're all main character energy in their own way 👑

💖 AUTHORS 💖

The decryptcore utility was implemented by Konrad Witaszczyk <def@FreeBSD.org>. give them their flowers fr fr 🌸

okay that's the whole page bestie, go decrypt something responsibly 🧚‍♀️✨

— signing off from the Debian edition, dated January 29, 2018 🎀

📦 where this page comes from