tomb

Create a new tomb (100 MB)

$ tomb dig -s 100 secret.tomb

$ tomb forge secret.tomb.key

$ tomb lock secret.tomb -k secret.tomb.key

$ tomb open secret.tomb -k secret.tomb.key

$ tomb close secret.tomb

$ tomb slam all

$ tomb list

$ tomb resize secret.tomb -s 200

tomb [options] command [arguments]

tomb manages encrypted storage directories that can be safely transported and hidden in a filesystem. It creates LUKS-encrypted containers that can be mounted as regular directories. Tombs are useful for secure storage of sensitive data.

dig

Create a new tomb container

Create a new key file for locking a tomb

Initialize and lock an empty tomb with a key

Mount a tomb using its key file

Unmount a tomb

Forcefully close tombs, killing processes using them

List all open tombs

Change the size of a tomb

Specify size in megabytes

Specify key file to use

Force operation (e.g., forge key despite swap)

Specify mount options

Tomb refuses to forge keys if swap is enabled (to prevent key material from being written to swap). Use -f to override this check. Tombs are implemented using LUKS and require cryptsetup.

tomb was created by the Dyne.org foundation as a user-friendly wrapper for creating and managing LUKS-encrypted volumes in a portable way.

cryptsetup(8), gpg(1), dm-crypt(8)