cvm-reseal - Man Page
manual page for cvm-reseal 0.3.2
Description
usage: python -m cvmutils.reseal [-h] [-d] [-p PCRS] [-r {none,matching,all}]
- [-u {tpm,key-file}]
[--unlock-keyfile UNLOCK_KEYFILE] [--tpm-srk-pub TPM_SRK_PUB] [-v]
Re-seal LUKS volume keys when PCR measurements change.
options
- -h, --help
show this help message and exit
- -d, --dry-run
List volumes which require re-sealing (dry-run mode)
- -p, --pcrs PCRS
Comma separated PCRs to use for volume key sealing [4,7], or "auto" (default, means using the existing scheme)
- -r, --remove {none,matching,all}
Remove unused tokens matching specified PCR set / all
- -u, --unlock {tpm,key-file}
LUKS key unlocking method
- --unlock-keyfile UNLOCK_KEYFILE
Key file to use for 'key-file' LUKS key unlocking method
- --tpm-srk-pub TPM_SRK_PUB
TPM SRK public key
- -v, --verbose
Print additional info
Author
Vitaly Kuznetsov <vkuznets@redhat.com>
Reporting Bugs
Report bugs to https://gitlab.com/vkuznets/cvmutils
Copyright
Copyright (C) 2023-2026 Red Hat, Inc.
Info
May 2026 cvm-reseal 0.3.2