On 08/02/2018 10:16 AM, Ingo Franzki wrote:
Hi, I have converted an existing LUKS1 volume to LUKS2 via 'cryptsetup convert --type luks2 <device>'. That worked well. After that I am trying to use cryptsetup-reencrypt ro reencrypt the volume using a different volume key. This fails with 'Cannot format device LUKS-5d6495ba-b6f9-43c5-883f-dff56f10c72a.new.'
Ok, I know what's wrong. The convert action works as expected and there's nothing wrong with data offset. The issue is cryptsetup-reencrypt utility currently can't handle setup where existing LUKS2 header, on a device you're about to reencrypt is different size from default LUKS2 header size which is 4MiBs currently. The converted header is as you wrote 2MiBs.
Ondrej _______________________________________________ dm-crypt mailing list dm-crypt@xxxxxxxx https://www.saout.de/mailman/listinfo/dm-crypt
