diff options
Diffstat (limited to '')
50 files changed, 5087 insertions, 4532 deletions
diff --git a/.github/workflows/cibuild.yml b/.github/workflows/cibuild.yml index b97bae1..7c21217 100644 --- a/.github/workflows/cibuild.yml +++ b/.github/workflows/cibuild.yml @@ -4,8 +4,7 @@ on: branches: - 'main' - 'wip-luks2' - - 'v2.3.x' - - 'v2.4.x' + - 'v2.*.x' paths-ignore: - 'docs/**' diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index f1e22ce..0281a66 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -5,8 +5,7 @@ on: branches: - 'main' - 'wip-luks2' - - 'v2.3.x' - - 'v2.4.x' + - 'v2.*.x' permissions: contents: read diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml index 3153145..d8d91ab 100644 --- a/.gitlab-ci.yml +++ b/.gitlab-ci.yml @@ -1,15 +1,14 @@ stages: - test -.dump_kernel_log: +.fail_if_coredump_generated: after_script: - - sudo dmesg > /mnt/artifacts/dmesg.log - - sudo journalctl > /mnt/artifacts/journalctl.log - '[ "$(ls -A /var/coredumps)" ] && exit 1 || true' include: - local: .gitlab/ci/debian.yml - local: .gitlab/ci/fedora.yml + - local: .gitlab/ci/fedora-opal.yml - local: .gitlab/ci/rhel.yml - local: .gitlab/ci/centos.yml - local: .gitlab/ci/annocheck.yml @@ -19,5 +18,5 @@ include: - local: .gitlab/ci/compilation-gcc.gitlab-ci.yml - local: .gitlab/ci/compilation-clang.gitlab-ci.yml - local: .gitlab/ci/alpinelinux.yml - - local: .gitlab/ci/ubuntu-32bit.yml + - local: .gitlab/ci/debian-i686.yml - local: .gitlab/ci/cifuzz.yml diff --git a/.gitlab/ci/alpinelinux.yml b/.gitlab/ci/alpinelinux.yml index 81bd6cb..d867f2f 100644 --- a/.gitlab/ci/alpinelinux.yml +++ b/.gitlab/ci/alpinelinux.yml @@ -1,12 +1,12 @@ .alpinelinux-dependencies: - after_script: - - sudo dmesg > /mnt/artifacts/dmesg.log - - sudo cp /var/log/messages /mnt/artifacts/ - - '[ "$(ls -A /var/coredumps)" ] && exit 1 || true' + variables: + DISTRO: cryptsetup-alpine-edge + extends: + - .fail_if_coredump_generated before_script: - > sudo apk add - lvm2-dev openssl1.1-compat-dev popt-dev util-linux-dev json-c-dev + lvm2-dev openssl-dev popt-dev util-linux-dev json-c-dev argon2-dev device-mapper which sharutils gettext gettext-dev automake autoconf libtool build-base keyutils tar jq expect git asciidoctor - ./autogen.sh @@ -17,7 +17,7 @@ test-main-commit-job-alpinelinux: - .alpinelinux-dependencies tags: - libvirt - - alpinelinux + - cryptsetup-alpine-edge stage: test interruptible: true variables: @@ -38,7 +38,7 @@ test-mergerq-job-alpinelinux: - .alpinelinux-dependencies tags: - libvirt - - alpinelinux + - cryptsetup-alpine-edge stage: test interruptible: true variables: diff --git a/.gitlab/ci/annocheck.yml b/.gitlab/ci/annocheck.yml index 7501180..8d12dfb 100644 --- a/.gitlab/ci/annocheck.yml +++ b/.gitlab/ci/annocheck.yml @@ -1,13 +1,14 @@ test-main-commit-job-annocheck: extends: - - .dump_kernel_log + - .fail_if_coredump_generated tags: - libvirt - - rhel9-annocheck + - cryptsetup-rhel-9 stage: test interruptible: true allow_failure: true variables: + DISTRO: cryptsetup-rhel-9 RUN_SSH_PLUGIN_TEST: "1" rules: - if: $CI_PROJECT_PATH != "cryptsetup/cryptsetup" diff --git a/.gitlab/ci/centos.yml b/.gitlab/ci/centos.yml index 6f5559c..1fa13ff 100644 --- a/.gitlab/ci/centos.yml +++ b/.gitlab/ci/centos.yml @@ -1,6 +1,8 @@ .centos-openssl-backend: + variables: + DISTRO: cryptsetup-centos-stream-9 extends: - - .dump_kernel_log + - .fail_if_coredump_generated before_script: - > sudo dnf -y -q install @@ -21,7 +23,7 @@ test-main-commit-centos-stream9: - .centos-openssl-backend tags: - libvirt - - centos-stream9 + - cryptsetup-centos-stream-9 stage: test interruptible: true variables: @@ -42,7 +44,7 @@ test-mergerq-centos-stream9: - .centos-openssl-backend tags: - libvirt - - centos-stream9 + - cryptsetup-centos-stream-9 stage: test interruptible: true variables: diff --git a/.gitlab/ci/csmock.yml b/.gitlab/ci/csmock.yml index a1cd985..76c390e 100644 --- a/.gitlab/ci/csmock.yml +++ b/.gitlab/ci/csmock.yml @@ -1,14 +1,16 @@ test-commit-job-csmock: extends: - - .dump_kernel_log + - .fail_if_coredump_generated tags: - libvirt - - rhel9-csmock + - cryptsetup-rhel-9 stage: test interruptible: true allow_failure: true variables: + DISTRO: cryptsetup-rhel-9 RUN_SSH_PLUGIN_TEST: "1" + DISK_SIZE: 20 rules: - if: $CI_PROJECT_PATH != "cryptsetup/cryptsetup" when: never diff --git a/.gitlab/ci/ubuntu-32bit.yml b/.gitlab/ci/debian-i686.yml index f51c059..09db9e0 100644 --- a/.gitlab/ci/ubuntu-32bit.yml +++ b/.gitlab/ci/debian-i686.yml @@ -1,12 +1,13 @@ -test-mergerq-job-ubuntu-32bit: +test-mergerq-job-debian-i686: extends: - .debian-prep tags: - libvirt - - ubuntu-bionic-32bit + - cryptsetup-debian-12i686 stage: test interruptible: true variables: + DISTRO: cryptsetup-debian-12i686 RUN_SSH_PLUGIN_TEST: "1" rules: - if: $RUN_SYSTEMD_PLUGIN_TEST != null @@ -19,15 +20,16 @@ test-mergerq-job-ubuntu-32bit: - make -j -C tests check-programs - sudo -E make check -test-main-commit-job-ubuntu-32bit: +test-main-commit-job-debian-i686: extends: - .debian-prep tags: - libvirt - - ubuntu-bionic-32bit + - cryptsetup-debian-12i686 stage: test interruptible: true variables: + DISTRO: cryptsetup-debian-12i686 RUN_SSH_PLUGIN_TEST: "1" rules: - if: $RUN_SYSTEMD_PLUGIN_TEST != null diff --git a/.gitlab/ci/debian.yml b/.gitlab/ci/debian.yml index 6a17533..847feb8 100644 --- a/.gitlab/ci/debian.yml +++ b/.gitlab/ci/debian.yml @@ -1,6 +1,6 @@ .debian-prep: extends: - - .dump_kernel_log + - .fail_if_coredump_generated before_script: - sudo apt-get -y update - > @@ -11,7 +11,7 @@ sudo apt-get -y install -y -qq git gcc make autoconf automake autopoint pkgconf libtool libtool-bin gettext libssl-dev libdevmapper-dev libpopt-dev uuid-dev libsepol-dev libjson-c-dev libssh-dev libblkid-dev - tar libargon2-0-dev libpwquality-dev sharutils dmsetup jq xxd expect + tar libargon2-dev libpwquality-dev sharutils dmsetup jq xxd expect keyutils netcat-openbsd passwd openssh-client sshpass asciidoctor - sudo apt-get -y build-dep cryptsetup - sudo -E git clean -xdf @@ -23,10 +23,11 @@ test-mergerq-job-debian: - .debian-prep tags: - libvirt - - debian12 + - cryptsetup-debian-12 stage: test interruptible: true variables: + DISTRO: cryptsetup-debian-12 RUN_SSH_PLUGIN_TEST: "1" rules: - if: $CI_PROJECT_PATH != "cryptsetup/cryptsetup" @@ -42,10 +43,11 @@ test-main-commit-job-debian: - .debian-prep tags: - libvirt - - debian12 + - cryptsetup-debian-12 stage: test interruptible: true variables: + DISTRO: cryptsetup-debian-12 RUN_SSH_PLUGIN_TEST: "1" rules: - if: $CI_PROJECT_PATH != "cryptsetup/cryptsetup" @@ -62,10 +64,11 @@ test-mergerq-job-debian-meson: - .debian-prep tags: - libvirt - - debian12 + - cryptsetup-debian-12 stage: test interruptible: true variables: + DISTRO: cryptsetup-debian-12 RUN_SSH_PLUGIN_TEST: "1" rules: - if: $CI_PROJECT_PATH != "cryptsetup/cryptsetup" @@ -82,10 +85,11 @@ test-main-commit-job-debian-meson: - .debian-prep tags: - libvirt - - debian12 + - cryptsetup-debian-12 stage: test interruptible: true variables: + DISTRO: cryptsetup-debian-12 RUN_SSH_PLUGIN_TEST: "1" rules: - if: $CI_PROJECT_PATH != "cryptsetup/cryptsetup" diff --git a/.gitlab/ci/fedora-opal.yml b/.gitlab/ci/fedora-opal.yml new file mode 100644 index 0000000..c92ca43 --- /dev/null +++ b/.gitlab/ci/fedora-opal.yml @@ -0,0 +1,134 @@ +.dnf-openssl-backend: + variables: + DISTRO: cryptsetup-fedora-rawhide + extends: + - .fail_if_coredump_generated + before_script: + - > + [ -z "$RUN_SYSTEMD_PLUGIN_TEST" ] || + sudo dnf -y -q install + swtpm meson ninja-build python3-jinja2 gperf libcap-devel tpm2-tss-devel + libmount-devel swtpm-tools + - > + sudo dnf -y -q install + autoconf automake device-mapper-devel gcc gettext-devel json-c-devel + libargon2-devel libblkid-devel libpwquality-devel libselinux-devel + libssh-devel libtool libuuid-devel make popt-devel + libsepol-devel.x86_64 netcat openssh-clients passwd pkgconfig sharutils + sshpass tar uuid-devel vim-common device-mapper expect gettext git jq + keyutils openssl-devel openssl asciidoctor + - sudo -E git clean -xdf + - ./autogen.sh + - ./configure --enable-fips --enable-pwquality --enable-libargon2 --with-crypto_backend=openssl --enable-asciidoc + +.opal-template-fedora: + extends: + - .dnf-openssl-backend + tags: + - libvirt + - cryptsetup-fedora-rawhide + stage: test + interruptible: true + variables: + OPAL2_DEV: "/dev/nvme0n1" + OPAL2_PSID_FILE: "/home/gitlab-runner/psid.txt" + VOLATILE: 1 + script: + - sudo dnf install -y -q nvme-cli + - sudo nvme list + - make -j + - make -j -C tests check-programs + - sudo -E make check TESTS="00modules-test compat-test-opal" + +# Samsung SSD 980 500GB (on tiber machine) +test-commit-rawhide-samsung980: + rules: + - if: $CI_PROJECT_PATH != "cryptsetup/cryptsetup" + when: never + - if: $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH || $CI_COMMIT_BRANCH =~ /v2\..\.x$/ + extends: + - .opal-template-fedora + tags: + - tiber + stage: test + interruptible: true + variables: + PCI_PASSTHROUGH_VENDOR_ID: "144d" + PCI_PASSTHROUGH_DEVICE_ID: "a809" + +test-mergerq-rawhide-samsung980: + rules: + - if: $CI_PROJECT_PATH != "cryptsetup/cryptsetup" + when: never + - if: $CI_PIPELINE_SOURCE == "merge_request_event" + extends: + - .opal-template-fedora + tags: + - tiber + stage: test + interruptible: true + variables: + PCI_PASSTHROUGH_VENDOR_ID: "144d" + PCI_PASSTHROUGH_DEVICE_ID: "a809" + +# # WD PC SN740 SDDQNQD-512G-1014 (on tiber machine) +# test-commit-rawhide-sn740: +# rules: +# - if: $CI_PROJECT_PATH != "cryptsetup/cryptsetup" +# when: never +# - if: $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH || $CI_COMMIT_BRANCH =~ /v2\..\.x$/ +# extends: +# - .opal-template-fedora +# tags: +# - tiber +# stage: test +# interruptible: true +# variables: +# PCI_PASSTHROUGH_VENDOR_ID: "15b7" +# PCI_PASSTHROUGH_DEVICE_ID: "5017" +# +# test-mergerq-rawhide-sn740: +# rules: +# - if: $CI_PROJECT_PATH != "cryptsetup/cryptsetup" +# when: never +# - if: $CI_PIPELINE_SOURCE == "merge_request_event" +# extends: +# - .opal-template-fedora +# tags: +# - tiber +# stage: test +# interruptible: true +# variables: +# PCI_PASSTHROUGH_VENDOR_ID: "15b7" +# PCI_PASSTHROUGH_DEVICE_ID: "5017" +# +# # UMIS RPETJ256MGE2MDQ (on tiber machine) +# test-commit-rawhide-umis: +# rules: +# - if: $CI_PROJECT_PATH != "cryptsetup/cryptsetup" +# when: never +# - if: $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH || $CI_COMMIT_BRANCH =~ /v2\..\.x$/ +# extends: +# - .opal-template-fedora +# tags: +# - tiber +# stage: test +# interruptible: true +# variables: +# PCI_PASSTHROUGH_VENDOR_ID: "1cc4" +# PCI_PASSTHROUGH_DEVICE_ID: "6302" +# +# test-mergerq-rawhide-umis: +# rules: +# - if: $CI_PROJECT_PATH != "cryptsetup/cryptsetup" +# when: never +# - if: $CI_PIPELINE_SOURCE == "merge_request_event" +# extends: +# - .opal-template-fedora +# tags: +# - tiber +# stage: test +# interruptible: true +# variables: +# PCI_PASSTHROUGH_VENDOR_ID: "1cc4" +# PCI_PASSTHROUGH_DEVICE_ID: "6302" diff --git a/.gitlab/ci/fedora.yml b/.gitlab/ci/fedora.yml index 7fd9c7e..0d3ade4 100644 --- a/.gitlab/ci/fedora.yml +++ b/.gitlab/ci/fedora.yml @@ -1,6 +1,8 @@ .dnf-openssl-backend: + variables: + DISTRO: cryptsetup-fedora-rawhide extends: - - .dump_kernel_log + - .fail_if_coredump_generated before_script: - > [ -z "$RUN_SYSTEMD_PLUGIN_TEST" ] || @@ -24,7 +26,7 @@ test-main-commit-job-rawhide: - .dnf-openssl-backend tags: - libvirt - - fedora-rawhide + - cryptsetup-fedora-rawhide stage: test interruptible: true allow_failure: true @@ -44,7 +46,7 @@ test-mergerq-job-rawhide: - .dnf-openssl-backend tags: - libvirt - - fedora-rawhide + - cryptsetup-fedora-rawhide stage: test interruptible: true allow_failure: true diff --git a/.gitlab/ci/rhel.yml b/.gitlab/ci/rhel.yml index f71533c..fe9af04 100644 --- a/.gitlab/ci/rhel.yml +++ b/.gitlab/ci/rhel.yml @@ -1,6 +1,6 @@ .rhel-openssl-backend: extends: - - .dump_kernel_log + - .fail_if_coredump_generated before_script: - > sudo yum -y -q install @@ -21,10 +21,11 @@ test-main-commit-rhel8: - .rhel-openssl-backend tags: - libvirt - - rhel8 + - cryptsetup-rhel-8 stage: test interruptible: true variables: + DISTRO: cryptsetup-rhel-8 RUN_SSH_PLUGIN_TEST: "1" rules: - if: $RUN_SYSTEMD_PLUGIN_TEST != null @@ -42,10 +43,11 @@ test-main-commit-rhel9: - .rhel-openssl-backend tags: - libvirt - - rhel9 + - cryptsetup-rhel-9 stage: test interruptible: true variables: + DISTRO: cryptsetup-rhel-9 RUN_SSH_PLUGIN_TEST: "1" rules: - if: $RUN_SYSTEMD_PLUGIN_TEST != null @@ -65,10 +67,11 @@ test-main-commit-rhel8-fips: - .rhel-openssl-backend tags: - libvirt - - rhel8-fips + - cryptsetup-rhel-8-fips stage: test interruptible: true variables: + DISTRO: cryptsetup-rhel-8-fips RUN_SSH_PLUGIN_TEST: "1" rules: - if: $RUN_SYSTEMD_PLUGIN_TEST != null @@ -87,11 +90,12 @@ test-main-commit-rhel9-fips: - .rhel-openssl-backend tags: - libvirt - - rhel9-fips + - cryptsetup-rhel-9-fips stage: test interruptible: true allow_failure: true variables: + DISTRO: cryptsetup-rhel-9-fips RUN_SSH_PLUGIN_TEST: "1" rules: - if: $RUN_SYSTEMD_PLUGIN_TEST != null diff --git a/.gitlab/issue_templates/Bug.md b/.gitlab/issue_templates/Bug.md index f8837aa..88ad54b 100644 --- a/.gitlab/issue_templates/Bug.md +++ b/.gitlab/issue_templates/Bug.md @@ -9,7 +9,10 @@ ### Debug log <!-- Paste a debug log of the failing command (add --debug option) between the markers below (to keep raw debug format).--> +<!-- We need a lot of information from the debug log; without it, we cannot process your report. --> +<!-- Debug log does not contain any private information. Do not paste private data; we'll ask you for more information if needed. --> ``` Output with --debug option: ``` +<!-- NOTE: WITHOUT DEBUG LOG, THE BUG REPORT WILL BE CLOSED. ALSO, PLEASE DO NOT TRY TO REMOVE PARTS OF THE DEBUG LOG! --> @@ -39,11 +39,11 @@ Download Release notes and tarballs are available at [kernel.org](https://www.kernel.org/pub/linux/utils/cryptsetup/). -**The latest stable cryptsetup release version is 2.7.0** - * [cryptsetup-2.7.0.tar.xz](https://www.kernel.org/pub/linux/utils/cryptsetup/v2.7/cryptsetup-2.7.0.tar.xz) - * Signature [cryptsetup-2.7.0.tar.sign](https://www.kernel.org/pub/linux/utils/cryptsetup/v2.7/cryptsetup-2.7.0.tar.sign) +**The latest stable cryptsetup release version is 2.7.1** + * [cryptsetup-2.7.1.tar.xz](https://www.kernel.org/pub/linux/utils/cryptsetup/v2.7/cryptsetup-2.7.1.tar.xz) + * Signature [cryptsetup-2.7.1.tar.sign](https://www.kernel.org/pub/linux/utils/cryptsetup/v2.7/cryptsetup-2.7.1.tar.sign) _(You need to decompress file first to check signature.)_ - * [Cryptsetup 2.7.0 Release Notes](https://www.kernel.org/pub/linux/utils/cryptsetup/v2.7/v2.7.0-ReleaseNotes). + * [Cryptsetup 2.7.1 Release Notes](https://www.kernel.org/pub/linux/utils/cryptsetup/v2.7/v2.7.1-ReleaseNotes). Previous versions * [Version 2.6.1](https://www.kernel.org/pub/linux/utils/cryptsetup/v2.6/cryptsetup-2.6.1.tar.xz) - diff --git a/configure.ac b/configure.ac index 84cef4b..820a88b 100644 --- a/configure.ac +++ b/configure.ac @@ -1,5 +1,5 @@ AC_PREREQ([2.67]) -AC_INIT([cryptsetup],[2.7.0]) +AC_INIT([cryptsetup],[2.7.1]) dnl library version from <major>.<minor>.<release>[-<suffix>] LIBCRYPTSETUP_VERSION=$(echo $PACKAGE_VERSION | cut -f1 -d-) @@ -346,7 +346,7 @@ AC_DEFUN([CONFIGURE_OPENSSL], [ saved_LIBS=$LIBS AC_CHECK_DECLS([OSSL_get_max_threads], [], [], [#include <openssl/thread.h>]) - AC_CHECK_DECLS([OSSL_KDF_PARAM_ARGON2_VERSION], [], [], [#include <openssl/core_names.h>]) + AC_CHECK_DECLS([OSSL_KDF_PARAM_ARGON2_VERSION], [use_internal_argon2=0], [], [#include <openssl/core_names.h>]) LIBS=$saved_LIBS ]) @@ -521,9 +521,9 @@ AC_ARG_ENABLE([internal-argon2], AC_ARG_ENABLE([libargon2], AS_HELP_STRING([--enable-libargon2], [enable external libargon2 (PHC) library (disables internal bundled version)])) -if test $use_internal_argon2 = 0 -o "x$enable_internal_argon2" = "xno" ; then - if test "x$enable_internal_argon2" = "xyes" -o "x$enable_libargon" = "xyes"; then - AC_MSG_WARN([Argon2 in $with_crypto_backend lib is used; internal Argon2 options are ignored.]) +if test $use_internal_argon2 = 0 || ( test "x$enable_internal_argon2" = "xno" && test "x$enable_libargon2" != "xyes" ); then + if test "x$enable_internal_argon2" = "xyes" || test "x$enable_libargon2" = "xyes"; then + AC_MSG_NOTICE([Argon2 in $with_crypto_backend lib is used; internal Argon2 options are ignored.]) fi enable_internal_argon2=no enable_internal_sse_argon2=no @@ -535,6 +535,7 @@ elif test "x$enable_libargon2" = "xyes" ; then AC_CHECK_DECL(Argon2_id,,[AC_MSG_ERROR([You need more recent Argon2 library with support for Argon2id.])], [#include <argon2.h>]) PKG_CHECK_MODULES([LIBARGON2], [libargon2],,[LIBARGON2_LIBS="-largon2"]) enable_internal_argon2=no + use_internal_argon2=0 else AC_MSG_WARN([Argon2 bundled (slow) reference implementation will be used, please consider to use system library with --enable-libargon2.]) diff --git a/docs/on-disk-format-luks2.pdf b/docs/on-disk-format-luks2.pdf Binary files differindex e5a8f05..eb7eaa6 100644 --- a/docs/on-disk-format-luks2.pdf +++ b/docs/on-disk-format-luks2.pdf diff --git a/docs/v2.7.1-ReleaseNotes b/docs/v2.7.1-ReleaseNotes new file mode 100644 index 0000000..6ea6653 --- /dev/null +++ b/docs/v2.7.1-ReleaseNotes @@ -0,0 +1,30 @@ +Cryptsetup 2.7.1 Release Notes +============================== +Stable bug-fix release with minor extensions. + +All users of cryptsetup 2.7.0 should upgrade to this version. + +Changes since version 2.7.0 +~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +* Fix interrupted LUKS1 decryption resume. + With the replacement of the cryptsetup-reencrypt tool by the cryptsetup + reencrypt command, resuming the interrupted LUKS1 decryption operation + could fail. LUKS2 was not affected. + +* Allow --link-vk-to-keyring with --test-passphrase option. + This option allows uploading the volume key in a user-specified kernel + keyring without activating the device. + +* Fix crash when --active-name was used in decryption initialization. + +* Updates and changes to man pages, including indentation, sorting options + alphabetically, fixing mistakes in crypt_set_keyring_to_link, and fixing + some typos. + +* Fix compilation with libargon2 when --disable-internal-argon2 was used. + +* Do not require installed argon2.h header and never compile internal + libargon2 code if the crypto library directly supports Argon2. + +* Fixes to regression tests to support older Linux distributions. diff --git a/lib/crypto_backend/argon2_generic.c b/lib/crypto_backend/argon2_generic.c index eca575b..9b3c039 100644 --- a/lib/crypto_backend/argon2_generic.c +++ b/lib/crypto_backend/argon2_generic.c @@ -21,15 +21,18 @@ #include <errno.h> #include "crypto_backend_internal.h" + +/* Check for HAVE_ARGON2_H is run only if libargon2 code is used */ +#if USE_INTERNAL_ARGON2 || HAVE_ARGON2_H + +#define CONST_CAST(x) (x)(uintptr_t) + #if HAVE_ARGON2_H #include <argon2.h> #else #include "argon2/argon2.h" #endif -#define CONST_CAST(x) (x)(uintptr_t) - -#if USE_INTERNAL_ARGON2 || HAVE_ARGON2_H int argon2(const char *type, const char *password, size_t password_length, const char *salt, size_t salt_length, char *key, size_t key_length, diff --git a/lib/libcryptsetup.h b/lib/libcryptsetup.h index 82d042f..88d03ba 100644 --- a/lib/libcryptsetup.h +++ b/lib/libcryptsetup.h @@ -3135,7 +3135,7 @@ void crypt_safe_memzero(void *data, size_t size); * * @note keyring_to_link_vk may be passed in various string formats: * It can be kernel key numeric id of existing keyring written as a string, - * keyring name prefixed optionally be either "%:" or "%keyring:" substrings or keyctl + * keyring name prefixed by either "%:" or "%keyring:" substrings or keyctl * special values for keyrings "@t", "@p", "@s" and so on. See keyctl(1) man page, * section KEY IDENTIFIERS for more information. All other prefixes starting "%<type>:" * are ignored. diff --git a/man/common_options.adoc b/man/common_options.adoc index 497d7fd..5c11309 100644 --- a/man/common_options.adoc +++ b/man/common_options.adoc @@ -1,5 +1,46 @@ == OPTIONS +ifdef::ACTION_LUKSFORMAT,ACTION_REENCRYPT[] +*--align-payload <number of 512 byte sectors>*:: +Align payload at a boundary of _value_ 512-byte sectors. ++ +If not specified, cryptsetup tries to use the topology info provided by +the kernel for the underlying device to get the optimal alignment. If +not available (or the calculated value is a multiple of the default) +data is by default aligned to a 1MiB boundary (i.e. 2048 512-byte +sectors). ++ +For a detached LUKS header, this option specifies the offset on the data +device. See also the --header option. ++ +*WARNING:* This option is DEPRECATED and has often unexpected impact to +the data offset and keyslot area size (for LUKS2) due to the complex +rounding. For fixed data device offset use _--offset_ option instead. +endif::[] + +ifdef::ACTION_OPEN,ACTION_REFRESH[] +*--allow-discards*:: +Allow the use of discard (TRIM) requests for the device. This is also not +supported for LUKS2 devices with data integrity protection. ++ +*WARNING:* This command can have a negative security impact because it +can make filesystem-level operations visible on the physical device. For +example, information leaking filesystem type, used space, etc. may be +extractable from the physical device if the discarded blocks can be +located later. If in doubt, do not use it. ++ +A kernel version of 3.1 or later is needed. For earlier kernels, this +option is ignored. +endif::[] + +ifdef::COMMON_OPTIONS[] +*--batch-mode, -q*:: +Suppresses all confirmation questions. Use with care! ++ +If the --verify-passphrase option is not specified, this option also +switches off the passphrase verification. +endif::[] + ifdef::ACTION_REENCRYPT[] *--block-size* _value_ *(LUKS1 only)*:: Use re-encryption block size of _value_ in MiB. @@ -7,40 +48,178 @@ Use re-encryption block size of _value_ in MiB. Values can be between 1 and 64 MiB. endif::[] +ifdef::ACTION_CLOSE[] +*--cancel-deferred*:: +Removes a previously configured deferred device removal in _close_ +command. +endif::[] + +ifdef::ACTION_OPEN,ACTION_LUKSFORMAT,ACTION_REENCRYPT,ACTION_TCRYPTDUMP,ACTION_BENCHMARK[] +*--cipher, -c* _<cipher-spec>_:: +ifdef::ACTION_OPEN,ACTION_TCRYPTDUMP[] +Set the cipher specification string for _plain_ device type. ++ +For _tcrypt_ device type it restricts checked cipher chains when looking for header. +endif::[] +ifndef::ACTION_REENCRYPT,ACTION_OPEN,ACTION_TCRYPTDUMP[] +Set the cipher specification string. +endif::[] ifdef::ACTION_REENCRYPT[] -*--use-directio (LUKS1 only)*:: -Use direct-io (O_DIRECT) for all read/write data operations related -to block device undergoing reencryption. +*LUKS2*: +Set the cipher specification string for data segment only. + -Useful if direct-io operations perform better than normal buffered -operations (e.g. in virtual environments). +*LUKS1*: +Set the cipher specification string for data segment and keyslots. ++ +*NOTE*: In encrypt mode, if cipher specification is omitted the default cipher is applied. +In reencrypt mode, if no new cipher specification is requested, the existing cipher will remain +in use. Unless the existing cipher was "cipher_null". In that case default cipher would +be applied as in encrypt mode. +endif::[] +ifdef::ACTION_OPEN,ACTION_LUKSFORMAT,ACTION_REENCRYPT[] ++ +_cryptsetup --help_ shows the compiled-in defaults. ++ +If a hash is part of the cipher specification, then it is used as part +of the IV generation. For example, ESSIV needs a hash function, while +"plain64" does not and hence none is specified. ++ +For XTS mode you can optionally set a key size of 512 bits with the -s +option. Key size for XTS mode is twice that for other modes for the same +security level. +endif::[] +endif::[] + +ifdef::COMMON_OPTIONS[] +*--debug or --debug-json*:: +Run in debug mode with full diagnostic logs. Debug output lines are +always prefixed by *#*. ++ +If --debug-json is used, additional LUKS2 JSON data structures are printed. endif::[] ifdef::ACTION_REENCRYPT[] -*--use-fsync (LUKS1 only)*:: -Use fsync call after every written block. This applies for reencryption -log files as well. +*--decrypt*:: +Initialize (and run) device decryption mode. +endif::[] + +ifdef::ACTION_CLOSE[] +*--deferred*:: +Defers device removal in _close_ command until the last user closes +it. endif::[] +ifdef::ACTION_OPEN,ACTION_REENCRYPT,ACTION_RESIZE[] +*--device-size* _size[units]_:: +ifndef::ACTION_RESIZE[] +Instead of real device size, use specified value. +endif::[] +ifdef::ACTION_RESIZE[] +Sets new size of the device. If unset real device size is used. +endif::[] +ifdef::ACTION_OPEN[] +Usable only with _plain_ device type. +endif::[] ifdef::ACTION_REENCRYPT[] -*--write-log (LUKS1 only)*:: -Update log file after every block write. This can slow down reencryption -but will minimize data loss in the case of system crash. +It means that only specified area (from the start of the device +to the specified size) will be reencrypted. ++ +*WARNING:* This is destructive operation. Data beyond --device-size limit may +be lost after operation gets finished. +endif::[] ++ +If no unit suffix is specified, the size is in bytes. ++ +Unit suffix can be S for 512 byte sectors, K/M/G/T (or KiB,MiB,GiB,TiB) +for units with 1024 base or KB/MB/GB/TB for 1000 base (SI scale). endif::[] -ifdef::ACTION_ISLUKS[] -*--verbose, -v*:: -Print more information on command execution. +ifdef::ACTION_LUKSFORMAT,ACTION_REENCRYPT[] +*--disable-blkid*:: +Disable use of blkid library for checking and wiping on-disk signatures. endif::[] -ifdef::ACTION_OPEN,ACTION_LUKSFORMAT,ACTION_LUKSRESUME,ACTION_LUKSADDKEY,ACTION_LUKSREMOVEKEY,ACTION_LUKSCHANGEKEY,ACTION_LUKSKILLSLOT,ACTION_ISLUKS,ACTION_LUKSDUMP,ACTION_LUKSUUID,ACTION_CONVERT,ACTION_REPAIR,ACTION_REENCRYPT[] -*--type <device-type>*:: -ifndef::ACTION_REENCRYPT[] -Specifies required device type, for more info read _BASIC ACTIONS_ section in *cryptsetup*(8). +ifdef::ACTION_OPEN,ACTION_LUKSRESUME,ACTION_RESIZE,ACTION_TOKEN[] +*--disable-external-tokens*:: +Disable loading of plugins for external LUKS2 tokens. +endif::[] + +ifdef::ACTION_OPEN,ACTION_RESIZE,ACTION_REFRESH,ACTION_LUKSFORMAT,ACTION_LUKSRESUME,ACTION_TOKEN,ACTION_REENCRYPT[] +*--disable-keyring*:: +Do not load volume key in kernel keyring and store it directly in the +dm-crypt target instead. This option is supported only for the LUKS2 type. endif::[] + +ifndef::ACTION_BENCHMARK,ACTION_BITLKDUMP,ACTION_TCRYPTDUMP[] +*--disable-locks*:: +Disable lock protection for metadata on disk. This option is valid +only for LUKS2 and ignored for other formats. ++ ifdef::ACTION_REENCRYPT[] -Specifies required (encryption mode) or expected (other modes) LUKS format. Accepts only _luks1_ or _luks2_. +*NOTE:* With locking disabled LUKS2 images in files can be fully (re)encrypted +offline without need for super user privileges provided used block ciphers are +available in crypto backend. ++ +endif::[] +*WARNING:* Do not use this option unless you run cryptsetup in a +restricted environment where locking is impossible to perform (where +/run directory cannot be used). +endif::[] + +ifdef::ACTION_OPEN,ACTION_TCRYPTDUMP[] +*--disable-veracrypt*:: +This option can be used to disable VeraCrypt compatible mode (only +TrueCrypt devices are recognized). Only for TCRYPT extension. See +_TCRYPT_ section in *cryptsetup*(8) for more info. +endif::[] + +ifdef::ACTION_LUKSDUMP[] +*--dump-json-metadata*:: +For _luksDump_ (LUKS2 only) this option prints content of LUKS2 header +JSON metadata area. +endif::[] + +ifdef::ACTION_LUKSDUMP,ACTION_TCRYPTDUMP,ACTION_BITLKDUMP[] +*--dump-volume-key, --dump-master-key (OBSOLETE alias)*:: +Print the volume key in the displayed information. Use with care, +as the volume key can be used to bypass +the passphrases, see also option --volume-key-file. +endif::[] + +ifdef::ACTION_REENCRYPT[] +*--encrypt, --new, -N*:: +Initialize (and run) device in-place encryption mode. +endif::[] + +ifdef::ACTION_RESIZE,ACTION_OPEN,ACTION_LUKSADDKEY,ACTION_LUKSDUMP,ACTION_LUKSRESUME,ACTION_TOKEN[] +*--external-tokens-path* _absolute_path_:: +Override system directory path where cryptsetup searches for external token +handlers (or token plugins). It must be absolute path (starting with '/' character). +endif::[] + +ifdef::ACTION_REENCRYPT[] +*--force-offline-reencrypt (LUKS2 only)*:: +Bypass active device auto-detection and enforce offline reencryption. ++ +This option is useful especially for reencryption of LUKS2 images put in +files (auto-detection is not reliable in this scenario). ++ +It may also help in case active device auto-detection on particular +data device does not work or report errors. ++ +*WARNING:* Use with extreme caution! This may destroy data if the device +is activated and/or actively used. endif::[] + +ifdef::ACTION_LUKSFORMAT,ACTION_LUKSADDKEY,ACTION_LUKSCHANGEKEY,ACTION_LUKSCONVERTKEY,ACTION_REENCRYPT[] +*--force-password*:: +Do not use password quality checking for new LUKS passwords. ++ +This option is ignored if cryptsetup is built without password +quality checking support. ++ +For more info about password quality check, see the manual page for +*pwquality.conf(5)* and *passwdqc.conf(5)*. endif::[] ifdef::ACTION_OPEN,ACTION_LUKSFORMAT,ACTION_LUKSADDKEY,ACTION_LUKSCHANGEKEY,ACTION_LUKSCONVERTKEY,ACTION_TCRYPTDUMP,ACTION_BENCHMARK,ACTION_REENCRYPT[] @@ -74,50 +253,182 @@ Use _cryptsetup --help_ to show the defaults. endif::[] endif::[] -ifdef::ACTION_OPEN,ACTION_LUKSFORMAT,ACTION_REENCRYPT,ACTION_TCRYPTDUMP,ACTION_BENCHMARK[] -*--cipher, -c* _<cipher-spec>_:: -ifdef::ACTION_OPEN,ACTION_TCRYPTDUMP[] -Set the cipher specification string for _plain_ device type. +ifndef::ACTION_BENCHMARK,ACTION_BITLKDUMP[] +*--header <device or file storing the LUKS header>*:: +ifndef::ACTION_OPEN,ACTION_ERASE[] +Use a detached (separated) metadata device or file where the LUKS +header is stored. This option allows one to store ciphertext and LUKS +header on different devices. + -For _tcrypt_ device type it restricts checked cipher chains when looking for header. endif::[] -ifndef::ACTION_REENCRYPT,ACTION_OPEN,ACTION_TCRYPTDUMP[] -Set the cipher specification string. +ifdef::ACTION_OPEN[] +Specify detached (separated) metadata device or file where the header is stored. ++ +*WARNING:* There is no check whether the ciphertext device specified +actually belongs to the header given. In fact, you can specify an +arbitrary device as the ciphertext device with the --header option. +Use with care. +endif::[] +ifndef::ACTION_REENCRYPT[] +ifdef::ACTION_LUKSFORMAT[] +With a file name as the argument to --header, the file +will be automatically created if it does not exist. See the cryptsetup +FAQ for header size calculation. ++ +The --align-payload option is taken as absolute sector alignment on ciphertext +device and can be zero. +endif::[] +ifndef::ACTION_LUKSFORMAT,ACTION_OPEN,ACTION_ERASE[] +For commands that change the LUKS header (e.g. _luksAddKey_), +specify the device or file with the LUKS header directly as the LUKS +device. +endif::[] endif::[] ifdef::ACTION_REENCRYPT[] +If used with --encrypt/--new option, the header file will be created (or overwritten). +Use with care. ++ *LUKS2*: -Set the cipher specification string for data segment only. +For decryption mode the option may be used to export original LUKS2 header +to a detached file. The passed future file must not exist at the time +of initializing the decryption operation. This frees space in head of data +device so that data can be moved at original LUKS2 header location. Later on +decryption operation continues as if the ordinary detached header was passed. + -*LUKS1*: -Set the cipher specification string for data segment and keyslots. +*WARNING:* Never put exported header file in a filesystem on top of device +you are about to decrypt! It would cause a deadlock. +endif::[] +ifdef::ACTION_ERASE[] +Use to specify detached LUKS2 header when erasing HW OPAL enabled data device. +endif::[] +endif::[] + +ifdef::ACTION_LUKSHEADERBACKUP,ACTION_LUKSHEADERRESTORE[] +*--header-backup-file <file>*:: +Specify file with header backup file. +endif::[] + +ifdef::COMMON_OPTIONS[] +*--help, -?*:: +Show help text and default parameters. +endif::[] + +ifdef::ACTION_REENCRYPT[] +*--hotzone-size* _size_ *(LUKS2 only)*:: +This option can be used to set an upper limit on the size of +reencryption area (hotzone). The _size_ can be specified with unit +suffix (for example 50M). Note that actual hotzone size may be less +than specified <size> due to other limitations (free space in keyslots +area or available memory). + -*NOTE*: In encrypt mode, if cipher specification is omitted the default cipher is applied. -In reencrypt mode, if no new cipher specification is requested, the existing cipher will remain -in use. Unless the existing cipher was "cipher_null". In that case default cipher would -be applied as in encrypt mode. +With decryption mode for devices with LUKS2 header placed in head of data +device, the option specifies how large is the first data segment moved +from original data offset pointer. endif::[] -ifdef::ACTION_OPEN,ACTION_LUKSFORMAT,ACTION_REENCRYPT[] + +ifdef::ACTION_LUKSFORMAT[] +*--hw-opal*:: +Format LUKS2 device with dm-crypt encryption stacked on top HW based encryption configured +on SED OPAL locking range. This option enables both SW and HW based data encryption. +endif::[] + +ifdef::ACTION_LUKSFORMAT[] +*--hw-opal-only*:: +Format LUKS2 device with HW based encryption configured on SED OPAL locking range only. LUKS2 +format only manages locking range unlock key. This option enables HW based data encryption managed +by SED OPAL drive only. +endif::[] + +ifdef::ACTION_REENCRYPT[] +*--init-only (LUKS2 only)*:: +Initialize reencryption (any mode) operation in LUKS2 metadata only +and exit. If any reencrypt operation is already initialized in +metadata, the command with --init-only parameter fails. +endif::[] + +ifdef::ACTION_LUKSFORMAT[] +*--integrity <integrity algorithm>*:: +Specify integrity algorithm to be used for authenticated disk +encryption in LUKS2. + -_cryptsetup --help_ shows the compiled-in defaults. +*WARNING: This extension is EXPERIMENTAL* and requires dm-integrity +kernel target (available since kernel version 4.12). For native AEAD +modes, also enable "User-space interface for AEAD cipher algorithms" in +"Cryptographic API" section (CONFIG_CRYPTO_USER_API_AEAD .config +option). + -If a hash is part of the cipher specification, then it is used as part -of the IV generation. For example, ESSIV needs a hash function, while -"plain64" does not and hence none is specified. +For more info, see _AUTHENTICATED DISK ENCRYPTION_ section in *cryptsetup*(8). +endif::[] + +ifdef::ACTION_LUKSFORMAT[] +*--integrity-legacy-padding*:: +Use inefficient legacy padding. + -For XTS mode you can optionally set a key size of 512 bits with the -s -option. Key size for XTS mode is twice that for other modes for the same -security level. +*WARNING*: Do not use this option until you need compatibility with specific +old kernel. +endif::[] + +ifdef::ACTION_REFRESH[] +*--integrity-no-journal*:: +Activate device with integrity protection without using data journal +(direct write of data and integrity tags). Note that without journal +power fail can cause non-atomic write and data corruption. Use only if +journalling is performed on a different storage layer. +endif::[] + +ifdef::ACTION_LUKSFORMAT[] +*--integrity-no-wipe*:: +Skip wiping of device authentication (integrity) tags. If you skip +this step, sectors will report invalid integrity tag until an +application write to the sector. ++ +*NOTE:* Even some writes to the device can fail if the write is not +aligned to page size and page-cache initiates read of a sector with +invalid integrity tag. +endif::[] + +ifdef::ACTION_LUKSFORMAT,ACTION_LUKSADDKEY,ACTION_LUKSCHANGEKEY,ACTION_LUKSCONVERTKEY,ACTION_REENCRYPT,ACTION_BENCHMARK[] +*--iter-time, -i <number of milliseconds>*:: +ifndef::ACTION_REENCRYPT[] +The number of milliseconds to spend with PBKDF passphrase processing. +Specifying 0 as parameter selects the compiled-in default. +endif::[] +ifdef::ACTION_REENCRYPT[] +The number of milliseconds to spend with PBKDF passphrase processing for the +new LUKS header. endif::[] endif::[] -ifdef::ACTION_OPEN,ACTION_RESIZE,ACTION_LUKSFORMAT,ACTION_LUKSRESUME,ACTION_LUKSADDKEY,ACTION_LUKSREMOVEKEY,ACTION_LUKSCHANGEKEY,ACTION_LUKSCONVERTKEY,ACTION_LUKSKILLSLOT,ACTION_REPAIR,ACTION_TCRYPTDUMP,ACTION_REENCRYPT[] -*--verify-passphrase, -y*:: -When interactively asking for a passphrase, ask for it twice and -complain if both inputs do not match. ifdef::ACTION_OPEN[] -Advised when creating a _plain_ type mapping for the first time. +*--iv-large-sectors*:: +Count Initialization Vector (IV) in larger sector size (if set) +instead of 512 bytes sectors. This option can be used only with _plain_ +device type. ++ +*NOTE:* This option does not have any performance or security impact, +use it only for accessing incompatible existing disk images from other +systems that require this option. endif::[] -Ignored on input from file or stdin. + +ifdef::ACTION_TOKEN[] +*--json-file*:: +Read token JSON from a file or write token to it. --json-file=- reads JSON from +standard input or writes it to standard output respectively. +endif::[] + +ifdef::ACTION_REENCRYPT[] +*--keep-key*:: +*LUKS2*: +Do not change effective volume key and change other parameters provided +it is requested. ++ +*LUKS1*: +Reencrypt only the LUKS1 header and keyslots. Skips data in-place reencryption. +endif::[] + +ifdef::ACTION_TOKEN[] +*--key-description <text>*:: +Set key description in keyring for use with _token_ command. endif::[] ifdef::ACTION_OPEN,ACTION_RESIZE,ACTION_LUKSFORMAT,ACTION_LUKSRESUME,ACTION_LUKSADDKEY,ACTION_LUKSREMOVEKEY,ACTION_LUKSCHANGEKEY,ACTION_LUKSCONVERTKEY,ACTION_LUKSKILLSLOT,ACTION_LUKSDUMP,ACTION_TCRYPTDUMP,ACTION_REENCRYPT,ACTION_REPAIR,ACTION_BITLKDUMP[] @@ -186,133 +497,40 @@ This option is useful to cut trailing newlines, for example. If --keyfile-offset is also given, the size count starts after the offset. endif::[] -ifdef::ACTION_LUKSADDKEY[] -*--new-keyfile* _name_:: -Read the passphrase for a new keyslot from file. -+ -If the name given is "-", then the passphrase will be read from stdin. -In this case, reading will not stop at newline characters. +ifdef::ACTION_OPEN,ACTION_LUKSFORMAT,ACTION_REENCRYPT,ACTION_BENCHMARK,ACTION_LUKSADDKEY[] +*--key-size, -s* _bits_:: +ifndef::ACTION_LUKSADDKEY[] +Sets key size in _bits_. The argument has to be a multiple of 8. The +possible key-sizes are limited by the cipher and mode used. + -This is alternative method to positional argument when adding new -passphrase via kefile. -endif::[] - -ifdef::ACTION_LUKSADDKEY,ACTION_LUKSCHANGEKEY,ACTION_LUKSCONVERTKEY[] -*--new-keyfile-offset* _value_:: -Skip _value_ bytes at the start when adding a new passphrase from key -file. -endif::[] - -ifdef::ACTION_LUKSADDKEY,ACTION_LUKSCHANGEKEY,ACTION_LUKSCONVERTKEY[] -*--new-keyfile-size* _value_:: -Read a maximum of _value_ bytes when adding a new passphrase from key -file. The default is to read the whole file up to -the compiled-in maximum length that can be queried with --help. -Supplying more than the compiled in maximum aborts the operation. When ---new-keyfile-offset is also given, reading starts after the offset. -endif::[] - -ifdef::ACTION_OPEN,ACTION_LUKSFORMAT,ACTION_LUKSADDKEY,ACTION_LUKSDUMP,ACTION_BITLKDUMP,ACTION_REENCRYPT[] -*--volume-key-file, --master-key-file (OBSOLETE alias)*:: -ifndef::ACTION_REENCRYPT[] -Use a volume key stored in a file. -endif::[] -ifdef::ACTION_FORMAT[] +See /proc/crypto for more information. Note that key-size in +/proc/crypto is stated in bytes. + -This allows creating a LUKS header with this specific -volume key. If the volume key was taken from an existing LUKS header and -all other parameters are the same, then the new header decrypts the data -encrypted with the header the volume key was taken from. + -endif::[] -ifdef::ACTION_LUKSDUMP,ACTION_BITLKDUMP[] -The volume key is stored in a file instead of being printed out to standard output. + endif::[] ifdef::ACTION_LUKSADDKEY[] -This allows adding a new keyslot without having to know passphrase to existing one. -It may be also used when no keyslot is active. +Provide volume key size in _bits_. The argument has to be a multiple of 8. + +This option is required when parameter --volume-key-file is used to provide +current volume key. Also, it is used when new unbound keyslot is created by +specifying --unbound parameter. endif::[] ifdef::ACTION_OPEN[] -This allows one to open _luks_ and _bitlk_ device types without giving a passphrase. + -endif::[] -ifdef::ACTION_REENCRYPT[] -Use (set) new volume key stored in a file. + -endif::[] -ifdef::ACTION_LUKSFORMAT,ACTION_LUKSADDKEY,ACTION_REENCRYPT[] -*WARNING:* If you create your own volume key, you need to make sure to -do it right. Otherwise, you can end up with a low-entropy or otherwise -partially predictable volume key which will compromise security. -endif::[] -endif::[] - -ifdef::ACTION_OPEN,ACTION_LUKSRESUME,ACTION_LUKSADDKEY[] -*--volume-key-keyring* _<key description>_:: -Use a volume key stored in a keyring. -This allows one to open _luks_ and device types without giving a passphrase. -The key and associated type has to be readable from userspace so that volume -key digest may be verified in before activation. -+ -The _<key description>_ uses keyctl-compatible syntax. This can either be a -numeric key ID or a string name in the format _%<key type>:<key name>_. See -also *KEY IDENTIFIERS* section of *keyctl*(1). When no _%<key type>:_ prefix -is specified we assume the key type is _user_ (default type). -endif::[] - -ifdef::ACTION_LUKSDUMP[] -*--dump-json-metadata*:: -For _luksDump_ (LUKS2 only) this option prints content of LUKS2 header -JSON metadata area. -endif::[] - -ifdef::ACTION_LUKSDUMP,ACTION_TCRYPTDUMP,ACTION_BITLKDUMP[] -*--dump-volume-key, --dump-master-key (OBSOLETE alias)*:: -Print the volume key in the displayed information. Use with care, -as the volume key can be used to bypass -the passphrases, see also option --volume-key-file. -endif::[] - -ifdef::ACTION_TOKEN[] -*--json-file*:: -Read token JSON from a file or write token to it. --json-file=- reads JSON from -standard input or writes it to standard output respectively. +This option can be used for _plain_ device type only. endif::[] - -ifdef::ACTION_TOKEN[] -*--token-replace*:: -Replace an existing token when adding or importing a token with the ---token-id option. +ifndef::ACTION_REENCRYPT,ACTION_OPEN,ACTION_LUKSADDKEY[] +This option can be used for _open --type plain_ or _luksFormat_. All +other LUKS actions will use the key-size specified in the LUKS header. +Use _cryptsetup --help_ to show the compiled-in defaults. endif::[] - -ifdef::ACTION_LUKSFORMAT,ACTION_REENCRYPT[] -*--use-random*:: -*--use-urandom*:: ifdef::ACTION_REENCRYPT[] -Define which kernel random number generator will be used to create the volume key. -endif::[] -ifndef::ACTION_REENCRYPT[] -For _luksFormat_ these options define which kernel random number -generator will be used to create the volume key (which is a long-term -key). -+ -See *NOTES ON RANDOM NUMBER GENERATORS* in *cryptsetup*(8) for more -information. Use _cryptsetup --help_ to show the compiled-in default random -number generator. +*LUKS1*: +If you are increasing key size, there must be enough space in the LUKS header +for enlarged keyslots (data offset must be large enough) or reencryption +cannot be performed. + -*WARNING:* In a low-entropy situation (e.g. in an embedded system) and older -kernels, both selections are problematic. Using /dev/urandom can lead to weak keys. -Using /dev/random can block a long time, potentially forever, if not -enough entropy can be harvested by the kernel. -endif::[] +If there is not enough space for keyslots with new key size, +you can destructively shrink device with --reduce-device-size option. endif::[] - -ifdef::ACTION_REENCRYPT[] -*--keep-key*:: -*LUKS2*: -Do not change effective volume key and change other parameters provided -it is requested. -+ -*LUKS1*: -Reencrypt only the LUKS1 header and keyslots. Skips data in-place reencryption. endif::[] ifdef::ACTION_OPEN,ACTION_RESIZE,ACTION_LUKSFORMAT,ACTION_LUKSADDKEY,ACTION_LUKSCHANGEKEY,ACTION_LUKSCONVERTKEY,ACTION_LUKSDUMP,ACTION_LUKSRESUME,ACTION_TOKEN,ACTION_CONFIG,ACTION_TOKEN,ACTION_REPAIR,ACTION_REENCRYPT[] @@ -349,6 +567,90 @@ size and key size, but a valid key slot ID can always be between 0 and 31 for LUKS2. endif::[] +ifdef::ACTION_LUKSFORMAT,ACTION_LUKSADDKEY,ACTION_LUKSCHANGEKEY,ACTION_LUKSCONVERTKEY,ACTION_REENCRYPT[] +*--keyslot-cipher <cipher-spec>*:: +This option can be used to set specific cipher encryption for the +LUKS2 keyslot area. +endif::[] + +ifdef::ACTION_LUKSFORMAT,ACTION_LUKSADDKEY,ACTION_LUKSCHANGEKEY,ACTION_LUKSCONVERTKEY,ACTION_REENCRYPT[] +*--keyslot-key-size <bits>*:: +This option can be used to set specific key size for the LUKS2 keyslot +area. +endif::[] + +ifdef::ACTION_LUKSFORMAT,ACTION_CONFIG,ACTION_REENCRYPT[] +*--label <LABEL> --subsystem <SUBSYSTEM>*:: +Set label and subsystem description for LUKS2 device. +The label and subsystem are optional fields and can be later used +in udev scripts for triggering user actions once the device marked +by these labels is detected. +endif::[] + +ifdef::ACTION_OPEN,ACTION_LUKSRESUME[] +*--link-vk-to-keyring* _<keyring_description>::<key_description>_:: +Link volume key in a keyring with specified key name. The volume key is linked only +if requested action is successfully finished (with --test-passphrase the verified +volume key is linked in a keyring without taking further action). ++ +_<keyring_description>_ string has to contain existing kernel keyring +description. The keyring name may be optionally prefixed with "%:" or "%keyring:" type descriptions. +Or, the keyring may also be specified directly by numeric key id. Also special keyring notations +starting with "@" may be used to select existing predefined kernel keyrings. ++ +The string "::" is delimiter used to separate keyring description and key description. ++ +_<key_description>_ part describes key type and key name of volume key linked in the keyring +described in _<keyring_description>_. The type may be specified by adding "%<type_name>:" prefix in front of +key name. If type is missing default _user_ type is applied. If the key of same name and same type already exists (already linked in the keyring) +it will get replaced in the process. ++ +See also *KEY IDENTIFIERS* section of *keyctl*(1). +endif::[] + +ifdef::ACTION_LUKSFORMAT,ACTION_REENCRYPT[] +*--luks2-keyslots-size <size>*:: +This option can be used to set specific size of the LUKS2 binary +keyslot area (key material is encrypted there). The value must be +aligned to multiple of 4096 bytes with maximum size 128MB. The <size> +can be specified with unit suffix (for example 128k). +endif::[] + +ifdef::ACTION_LUKSFORMAT,ACTION_REENCRYPT[] +*--luks2-metadata-size <size>*:: +This option can be used to enlarge the LUKS2 metadata (JSON) area. The +size includes 4096 bytes for binary metadata (usable JSON area is +smaller of the binary area). According to LUKS2 specification, only +these values are valid: 16, 32, 64, 128, 256, 512, 1024, 2048 and 4096 +kB The <size> can be specified with unit suffix (for example 128k). +endif::[] + +ifdef::ACTION_LUKSADDKEY[] +*--new-keyfile* _name_:: +Read the passphrase for a new keyslot from file. ++ +If the name given is "-", then the passphrase will be read from stdin. +In this case, reading will not stop at newline characters. ++ +This is alternative method to positional argument when adding new +passphrase via kefile. +endif::[] + +ifdef::ACTION_LUKSADDKEY,ACTION_LUKSCHANGEKEY,ACTION_LUKSCONVERTKEY[] +*--new-keyfile-offset* _value_:: +Skip _value_ bytes at the start when adding a new passphrase from key +file. +endif::[] + +ifdef::ACTION_LUKSADDKEY,ACTION_LUKSCHANGEKEY,ACTION_LUKSCONVERTKEY[] +*--new-keyfile-size* _value_:: +Read a maximum of _value_ bytes when adding a new passphrase from key +file. The default is to read the whole file up to +the compiled-in maximum length that can be queried with --help. +Supplying more than the compiled in maximum aborts the operation. When +--new-keyfile-offset is also given, reading starts after the offset. +endif::[] + ifdef::ACTION_LUKSADDKEY[] *--new-key-slot <0-N>*:: This option allows you to specify which key slot is selected for @@ -362,48 +664,9 @@ size and key size, but a valid key slot ID can always be between 0 and 31 for LUKS2. endif::[] -ifdef::ACTION_OPEN,ACTION_LUKSFORMAT,ACTION_REENCRYPT,ACTION_BENCHMARK,ACTION_LUKSADDKEY[] -*--key-size, -s* _bits_:: -ifndef::ACTION_LUKSADDKEY[] -Sets key size in _bits_. The argument has to be a multiple of 8. The -possible key-sizes are limited by the cipher and mode used. -+ -See /proc/crypto for more information. Note that key-size in -/proc/crypto is stated in bytes. -+ -endif::[] ifdef::ACTION_LUKSADDKEY[] -Provide volume key size in _bits_. The argument has to be a multiple of 8. -+ -This option is required when parameter --volume-key-file is used to provide -current volume key. Also, it is used when new unbound keyslot is created by -specifying --unbound parameter. -endif::[] -ifdef::ACTION_OPEN[] -This option can be used for _plain_ device type only. -endif::[] -ifndef::ACTION_REENCRYPT,ACTION_OPEN,ACTION_LUKSADDKEY[] -This option can be used for _open --type plain_ or _luksFormat_. All -other LUKS actions will use the key-size specified in the LUKS header. -Use _cryptsetup --help_ to show the compiled-in defaults. -endif::[] -ifdef::ACTION_REENCRYPT[] -*LUKS1*: -If you are increasing key size, there must be enough space in the LUKS header -for enlarged keyslots (data offset must be large enough) or reencryption -cannot be performed. -+ -If there is not enough space for keyslots with new key size, -you can destructively shrink device with --reduce-device-size option. -endif::[] -endif::[] - -ifdef::ACTION_OPEN,ACTION_RESIZE[] -*--size, -b <number of 512 byte sectors>*:: -Set the size of the device in sectors of 512 bytes. -ifdef::ACTION_OPEN[] -Usable only with _plain_ device type. -endif::[] +*--new-token-id*:: +Specify what token to use to get the passphrase for a new keyslot. endif::[] ifdef::ACTION_OPEN,ACTION_LUKSFORMAT,ACTION_REENCRYPT[] @@ -423,55 +686,6 @@ device and must be aligned to 4096-byte sectors (must be multiple of endif::[] endif::[] -ifdef::ACTION_OPEN[] -*--skip, -p <number of 512 byte sectors>*:: -Start offset used in IV calculation in 512-byte sectors (how many -sectors of the encrypted data to skip at the beginning). This option -is only relevant with plain or loopaes device types. -+ -Hence, if --offset _n_, and --skip _s_, sector _n_ (the first sector of -the encrypted device) will get a sector number of _s_ for the IV -calculation. -endif::[] - -ifdef::ACTION_OPEN,ACTION_REENCRYPT,ACTION_RESIZE[] -*--device-size* _size[units]_:: -ifndef::ACTION_RESIZE[] -Instead of real device size, use specified value. -endif::[] -ifdef::ACTION_RESIZE[] -Sets new size of the device. If unset real device size is used. -endif::[] -ifdef::ACTION_OPEN[] -Usable only with _plain_ device type. -endif::[] -ifdef::ACTION_REENCRYPT[] -It means that only specified area (from the start of the device -to the specified size) will be reencrypted. -+ -*WARNING:* This is destructive operation. Data beyond --device-size limit may -be lost after operation gets finished. -endif::[] -+ -If no unit suffix is specified, the size is in bytes. -+ -Unit suffix can be S for 512 byte sectors, K/M/G/T (or KiB,MiB,GiB,TiB) -for units with 1024 base or KB/MB/GB/TB for 1000 base (SI scale). -endif::[] - -ifdef::ACTION_OPEN[] -*--readonly, -r*:: -set up a read-only mapping. -endif::[] - -ifdef::ACTION_OPEN[] -*--shared*:: -Creates an additional mapping for one common ciphertext device. -Arbitrary mappings are supported. This option is only relevant for the -_plain_ device type. Use --offset, --size and --skip to specify -the mapped area. -endif::[] - ifdef::ACTION_LUKSFORMAT,ACTION_LUKSADDKEY,ACTION_LUKSCHANGEKEY,ACTION_LUKSCONVERTKEY,ACTION_REENCRYPT,ACTION_BENCHMARK[] *--pbkdf <PBKDF spec>*:: Set Password-Based Key Derivation Function (PBKDF) algorithm for LUKS @@ -522,16 +736,11 @@ cost minimum is 1 and maximum 4 (if enough CPUs cores are available, otherwise it is decreased). endif::[] -ifdef::ACTION_LUKSFORMAT,ACTION_LUKSADDKEY,ACTION_LUKSCHANGEKEY,ACTION_LUKSCONVERTKEY,ACTION_REENCRYPT,ACTION_BENCHMARK[] -*--iter-time, -i <number of milliseconds>*:: -ifndef::ACTION_REENCRYPT[] -The number of milliseconds to spend with PBKDF passphrase processing. -Specifying 0 as parameter selects the compiled-in default. -endif::[] -ifdef::ACTION_REENCRYPT[] -The number of milliseconds to spend with PBKDF passphrase processing for the -new LUKS header. -endif::[] +ifdef::ACTION_LUKSFORMAT,ACTION_LUKSADDKEY,ACTION_LUKSCHANGEKEY,ACTION_LUKSCONVERTKEY,ACTION_REENCRYPT[] +*--pbkdf-force-iterations <num>*:: +Avoid PBKDF benchmark and set time cost (iterations) directly. It can +be used for LUKS/LUKS2 device only. See _--pbkdf_ option for more +info. endif::[] ifdef::ACTION_LUKSFORMAT,ACTION_LUKSADDKEY,ACTION_LUKSCHANGEKEY,ACTION_LUKSCONVERTKEY,ACTION_REENCRYPT,ACTION_BENCHMARK[] @@ -549,11 +758,63 @@ that it is maximal value, it is decreased automatically if CPU online count is lower. This option is not available for PBKDF2. endif::[] -ifdef::ACTION_LUKSFORMAT,ACTION_LUKSADDKEY,ACTION_LUKSCHANGEKEY,ACTION_LUKSCONVERTKEY,ACTION_REENCRYPT[] -*--pbkdf-force-iterations <num>*:: -Avoid PBKDF benchmark and set time cost (iterations) directly. It can -be used for LUKS/LUKS2 device only. See _--pbkdf_ option for more -info. +ifdef::ACTION_REFRESH,ACTION_OPEN[] +*--perf-no_read_workqueue, --perf-no_write_workqueue*:: +Bypass dm-crypt internal workqueue and process read or write requests +synchronously. ++ +*NOTE:* These options are available only for low-level dm-crypt +performance tuning, use only if you need a change to default dm-crypt +behaviour. Needs kernel 5.9 or later. +endif::[] + +ifdef::ACTION_REFRESH,ACTION_OPEN[] +*--perf-same_cpu_crypt*:: +Perform encryption using the same cpu that IO was submitted on. The +default is to use an unbound workqueue so that encryption work is +automatically balanced between available CPUs. ++ +*NOTE:* This option is available only for low-level dm-crypt performance +tuning, use only if you need a change to default dm-crypt behaviour. +Needs kernel 4.0 or later. +endif::[] + +ifdef::ACTION_REFRESH,ACTION_OPEN[] +*--perf-submit_from_crypt_cpus*:: +Disable offloading writes to a separate thread after encryption. There +are some situations where offloading write bios from the encryption +threads to a single thread degrades performance significantly. The +default is to offload write bios to the same thread. ++ +*NOTE:* This option is available only for low-level dm-crypt performance +tuning, use only if you need a change to default dm-crypt behaviour. +Needs kernel 4.0 or later. +endif::[] + +ifdef::ACTION_OPEN,ACTION_REFRESH[] +*--persistent*:: +If used with LUKS2 devices and activation commands like _open_ or +_refresh_, the specified activation flags are persistently written +into metadata and used next time automatically even for normal +activation. (No need to use cryptab or other system configuration +files.) ++ +If you need to remove a persistent flag, use _--persistent_ without the +flag you want to remove (e.g. to disable persistently stored discard +flag, use _--persistent_ without _--allow-discards_). ++ +Only _--allow-discards_, _--perf-same_cpu_crypt_, +_--perf-submit_from_crypt_cpus_, _--perf-no_read_workqueue_, +_--perf-no_write_workqueue_ and _--integrity-no-journal_ can be stored +persistently. +endif::[] + +ifdef::ACTION_CONFIG[] +*--priority <normal|prefer|ignore>*:: +Set a priority for LUKS2 keyslot. The _prefer_ priority marked slots +are tried before _normal_ priority. The _ignored_ priority means, that +slot is never used, if not explicitly requested by _--key-slot_ +option. endif::[] ifdef::ACTION_LUKSFORMAT,ACTION_REENCRYPT[] @@ -575,11 +836,11 @@ progress (except it's compact single line): + .... { - "device":"/dev/sda" // backing device or file + "device":"/dev/sda", // backing device or file "device_bytes":"8192", // bytes of I/O so far "device_size":"44040192", // total bytes of I/O to go "speed":"126877696", // calculated speed in bytes per second (based on progress so far) - "eta_ms":"2520012" // estimated time to finish an operation in milliseconds + "eta_ms":"2520012", // estimated time to finish an operation in milliseconds "time_ms":"5561235" // total time spent in IO operation in milliseconds } .... @@ -589,283 +850,193 @@ numbers are represented in a string format due to need of full 64bit unsigned integers. endif::[] -ifdef::ACTION_OPEN,ACTION_LUKSFORMAT,ACTION_LUKSADDKEY,ACTION_LUKSCHANGEKEY,ACTION_LUKSCONVERTKEY,ACTION_LUKSREMOVEKEY,ACTION_LUKSKILLSLOT,ACTION_LUKSDUMP,ACTION_REENCRYPT,ACTION_REPAIR,ACTION_LUKSRESUME,ACTION_RESIZE,ACTION_TCRYPTDUMP,ACTION_BITLKDUMP[] -*--timeout, -t <number of seconds>*:: -The number of seconds to wait before timeout on passphrase input via -terminal. It is relevant every time a passphrase is asked. -It has no effect if used in conjunction with --key-file. -+ -This option is useful when the system should not stall if the user -does not input a passphrase, e.g. during boot. The default is a value -of 0 seconds, which means to wait forever. -endif::[] - -ifdef::ACTION_OPEN,ACTION_LUKSRESUME,ACTION_REENCRYPT[] -*--tries, -T*:: -How often the input of the passphrase shall be retried. The default is 3 tries. +ifdef::ACTION_OPEN[] +*--readonly, -r*:: +set up a read-only mapping. endif::[] -ifdef::ACTION_LUKSFORMAT,ACTION_REENCRYPT[] -*--align-payload <number of 512 byte sectors>*:: -Align payload at a boundary of _value_ 512-byte sectors. +ifdef::ACTION_REENCRYPT[] +*--reduce-device-size* _size_:: +This means that last _size_ sectors on the original device will be lost, +data will be effectively shifted by specified number of sectors. + -If not specified, cryptsetup tries to use the topology info provided by -the kernel for the underlying device to get the optimal alignment. If -not available (or the calculated value is a multiple of the default) -data is by default aligned to a 1MiB boundary (i.e. 2048 512-byte -sectors). +It could be useful if you added some space to underlying partition or +logical volume (so last _size_ sectors contains no data). + -For a detached LUKS header, this option specifies the offset on the data -device. See also the --header option. +For units suffix see --device-size parameter description. + -*WARNING:* This option is DEPRECATED and has often unexpected impact to -the data offset and keyslot area size (for LUKS2) due to the complex -rounding. For fixed data device offset use _--offset_ option instead. -endif::[] - -ifdef::ACTION_LUKSFORMAT,ACTION_LUKSUUID,ACTION_REENCRYPT[] -*--uuid <UUID>*:: -ifndef::ACTION_REENCRYPT[] -Use the provided _UUID_ for the _luksFormat_ command instead of -generating a new one. Changes the existing _UUID_ when used with the -_luksUUID_ command. +*WARNING:* This is a destructive operation and cannot be reverted. Use +with extreme care - accidentally overwritten filesystems are usually +unrecoverable. + -endif::[] -ifdef::ACTION_REENCRYPT[] -When used in encryption mode use the provided _UUID_ for the new LUKS header -instead of generating a new one. +*LUKS2*: +Initialize LUKS2 reencryption with data device size reduction +(currently only encryption mode is supported). + -*LUKS1 (only in decryption mode)*: -To find out what _UUID_ to pass look for temporary files LUKS-_UUID_.[|log|org|new] -of the interrupted decryption process. +Recommended minimal size is twice the default LUKS2 header size +(--reduce-device-size 32M) for encryption mode. ++ +*LUKS1*: +Enlarge data offset to specified value by shrinking device size. + +You cannot shrink device more than by 64 MiB (131072 sectors). endif::[] -The _UUID_ must be provided in the standard UUID format, e.g. -12345678-1234-1234-1234-123456789abc. + +ifdef::ACTION_OPEN[] +*--refresh*:: +Refreshes an active device with new set of parameters. See +*cryptsetup-refresh*(8) for more details. endif::[] -ifdef::ACTION_OPEN,ACTION_REFRESH[] -*--allow-discards*:: -Allow the use of discard (TRIM) requests for the device. This is also not -supported for LUKS2 devices with data integrity protection. +ifdef::ACTION_REENCRYPT[] +*--resilience* _mode_ *(LUKS2 only)*:: +Reencryption resilience _mode_ can be one of _checksum_, _journal_ or +_none_. + -*WARNING:* This command can have a negative security impact because it -can make filesystem-level operations visible on the physical device. For -example, information leaking filesystem type, used space, etc. may be -extractable from the physical device if the discarded blocks can be -located later. If in doubt, do not use it. +_checksum_: default mode, where individual checksums of ciphertext +hotzone sectors are stored, so the recovery process can detect which +sectors were already reencrypted. It requires that the device sector +write is atomic. + -A kernel version of 3.1 or later is needed. For earlier kernels, this -option is ignored. -endif::[] - -ifdef::ACTION_REFRESH,ACTION_OPEN[] -*--perf-same_cpu_crypt*:: -Perform encryption using the same cpu that IO was submitted on. The -default is to use an unbound workqueue so that encryption work is -automatically balanced between available CPUs. +_journal_: the hotzone is journaled in the binary area (so the data are +written twice). + -*NOTE:* This option is available only for low-level dm-crypt performance -tuning, use only if you need a change to default dm-crypt behaviour. -Needs kernel 4.0 or later. -endif::[] - -ifdef::ACTION_REFRESH,ACTION_OPEN[] -*--perf-submit_from_crypt_cpus*:: -Disable offloading writes to a separate thread after encryption. There -are some situations where offloading write bios from the encryption -threads to a single thread degrades performance significantly. The -default is to offload write bios to the same thread. +_none_: performance mode. There is no protection and the only way it's +safe to interrupt the reencryption is similar to old offline +reencryption utility. + -*NOTE:* This option is available only for low-level dm-crypt performance -tuning, use only if you need a change to default dm-crypt behaviour. -Needs kernel 4.0 or later. +Resilience modes can be changed unless _datashift_ mode is used for +operation initialization (encryption with --reduce-device-size option) endif::[] -ifdef::ACTION_REFRESH,ACTION_OPEN[] -*--perf-no_read_workqueue, --perf-no_write_workqueue*:: -Bypass dm-crypt internal workqueue and process read or write requests -synchronously. -+ -*NOTE:* These options are available only for low-level dm-crypt -performance tuning, use only if you need a change to default dm-crypt -behaviour. Needs kernel 5.9 or later. +ifdef::ACTION_REENCRYPT[] +*--resilience-hash* _hash_ *(LUKS2 only)*:: +The _hash_ algorithm used with "--resilience checksum" only. The default +hash is sha256. With other resilience modes, the hash parameter is +ignored. endif::[] -ifdef::ACTION_OPEN[] -*--test-passphrase*:: -Do not activate the device, just verify passphrase. The device mapping name is -not mandatory if this option is used. +ifdef::ACTION_REENCRYPT[] +*--resume-only (LUKS2 only)*:: +Resume reencryption (any mode) operation already described in LUKS2 +metadata. If no reencrypt operation is initialized, the command with +--resume-only parameter fails. Useful for resuming reencrypt operation +without accidentally triggering new reencryption operation. endif::[] -ifndef::ACTION_BENCHMARK,ACTION_BITLKDUMP[] -*--header <device or file storing the LUKS header>*:: -ifndef::ACTION_OPEN,ACTION_ERASE[] -Use a detached (separated) metadata device or file where the LUKS -header is stored. This option allows one to store ciphertext and LUKS -header on different devices. -+ +ifdef::ACTION_OPEN,ACTION_LUKSFORMAT,ACTION_REENCRYPT[] +ifndef::ACTION_REENCRYPT[] +*--sector-size* _bytes_:: endif::[] +ifndef::ACTION_REENCRYPT[] ifdef::ACTION_OPEN[] -Specify detached (separated) metadata device or file where the header is stored. +Set encryption sector size for use with _plain_ device type. It must be power of two +and in range 512 - 4096 bytes. The default mode is 512 bytes. + -*WARNING:* There is no check whether the ciphertext device specified -actually belongs to the header given. In fact, you can specify an -arbitrary device as the ciphertext device with the --header option. -Use with care. +Note that if sector size is higher than underlying device hardware +sector, using this option can increase risk on incomplete sector writes during a +power fail. endif::[] -ifndef::ACTION_REENCRYPT[] ifdef::ACTION_LUKSFORMAT[] -With a file name as the argument to --header, the file -will be automatically created if it does not exist. See the cryptsetup -FAQ for header size calculation. +Set sector size for use with disk encryption. It must be power of two +and in range 512 - 4096 bytes. This option is available only with LUKS2 +format. + -The --align-payload option is taken as absolute sector alignment on ciphertext -device and can be zero. -endif::[] -ifndef::ACTION_LUKSFORMAT,ACTION_OPEN,ACTION_ERASE[] -For commands that change the LUKS header (e.g. _luksAddKey_), -specify the device or file with the LUKS header directly as the LUKS -device. -endif::[] -endif::[] -ifdef::ACTION_REENCRYPT[] -If used with --encrypt/--new option, the header file will be created (or overwritten). -Use with care. +For LUKS2 devices it's established based on parameters provided by +underlying data device. For native 4K block devices it's 4096 bytes. +For 4K/512e (4K physical sector size with 512 bytes emulation) it's +4096 bytes. For drives reporting only 512 bytes block size it remains +512 bytes. If data device is regular file put in filesystem it's 4096 +bytes. + -*LUKS2*: -For decryption mode the option may be used to export original LUKS2 header -to a detached file. The passed future file must not exist at the time -of initializing the decryption operation. This frees space in head of data -device so that data can be moved at original LUKS2 header location. Later on -decryption operation continues as if the ordinary detached header was passed. +Note that if sector size is higher than underlying device hardware +sector and there is not integrity protection that uses data journal, +using this option can increase risk on incomplete sector writes during a +power fail. + -*WARNING:* Never put exported header file in a filesystem on top of device -you are about to decrypt! It would cause a deadlock. -endif::[] -ifdef::ACTION_ERASE[] -Use to specify detached LUKS2 header when erasing HW OPAL enabled data device. -endif::[] -endif::[] - -ifdef::ACTION_LUKSHEADERBACKUP,ACTION_LUKSHEADERRESTORE[] -*--header-backup-file <file>*:: -Specify file with header backup file. -endif::[] - -ifdef::ACTION_LUKSFORMAT[] -*--hw-opal*:: -Format LUKS2 device with dm-crypt encryption stacked on top HW based encryption configured -on SED OPAL locking range. This option enables both SW and HW based data encryption. +If used together with _--integrity_ option and dm-integrity journal, the +atomicity of writes is guaranteed in all cases (but it cost write +performance - data has to be written twice). endif::[] - -ifdef::ACTION_LUKSFORMAT[] -*--hw-opal-only*:: -Format LUKS2 device with HW based encryption configured on SED OPAL locking range only. LUKS2 -format only manages locking range unlock key. This option enables HW based data encryption managed -by SED OPAL drive only. ++ +Increasing sector size from 512 bytes to 4096 bytes can provide better +performance on most of the modern storage devices and also with some hw +encryption accelerators. endif::[] - ifdef::ACTION_REENCRYPT[] -*--force-offline-reencrypt (LUKS2 only)*:: -Bypass active device auto-detection and enforce offline reencryption. -+ -This option is useful especially for reencryption of LUKS2 images put in -files (auto-detection is not reliable in this scenario). -+ -It may also help in case active device auto-detection on particular -data device does not work or report errors. +*--sector-size* _bytes_ *(LUKS2 only)*:: +Reencrypt device with new encryption sector size enforced. + -*WARNING:* Use with extreme caution! This may destroy data if the device -is activated and/or actively used. +*WARNING:* Increasing encryption sector size may break hosted filesystem. Do not +run reencryption with --force-offline-reencrypt if unsure what block size +was filesystem formatted with. +endif::[] endif::[] -ifdef::ACTION_LUKSFORMAT,ACTION_LUKSADDKEY,ACTION_LUKSCHANGEKEY,ACTION_LUKSCONVERTKEY,ACTION_REENCRYPT[] -*--force-password*:: -Do not use password quality checking for new LUKS passwords. +ifdef::ACTION_OPEN[] +*--serialize-memory-hard-pbkdf*:: +Use a global lock to serialize unlocking of keyslots using memory-hard +PBKDF. + -This option is ignored if cryptsetup is built without password -quality checking support. +*NOTE:* This is (ugly) workaround for a specific situation when multiple +devices are activated in parallel and system instead of reporting out of +memory starts unconditionally stop processes using out-of-memory killer. + -For more info about password quality check, see the manual page for -*pwquality.conf(5)* and *passwdqc.conf(5)*. +*DO NOT USE* this switch until you are implementing boot environment +with parallel devices activation! endif::[] -ifdef::ACTION_CLOSE[] -*--deferred*:: -Defers device removal in _close_ command until the last user closes -it. +ifdef::ACTION_OPEN[] +*--shared*:: +Creates an additional mapping for one common ciphertext device. +Arbitrary mappings are supported. This option is only relevant for the +_plain_ device type. Use --offset, --size and --skip to specify +the mapped area. endif::[] -ifdef::ACTION_CLOSE[] -*--cancel-deferred*:: -Removes a previously configured deferred device removal in _close_ -command. +ifdef::ACTION_OPEN,ACTION_RESIZE[] +*--size, -b <number of 512 byte sectors>*:: +Set the size of the device in sectors of 512 bytes. +ifdef::ACTION_OPEN[] +Usable only with _plain_ device type. endif::[] - -ifdef::ACTION_LUKSFORMAT,ACTION_REENCRYPT[] -*--disable-blkid*:: -Disable use of blkid library for checking and wiping on-disk signatures. endif::[] -ifdef::ACTION_OPEN,ACTION_LUKSRESUME,ACTION_RESIZE,ACTION_TOKEN[] -*--disable-external-tokens*:: -Disable loading of plugins for external LUKS2 tokens. -endif::[] - -ifndef::ACTION_BENCHMARK,ACTION_BITLKDUMP,ACTION_TCRYPTDUMP[] -*--disable-locks*:: -Disable lock protection for metadata on disk. This option is valid -only for LUKS2 and ignored for other formats. -+ -ifdef::ACTION_REENCRYPT[] -*NOTE:* With locking disabled LUKS2 images in files can be fully (re)encrypted -offline without need for super user privileges provided used block ciphers are -available in crypto backend. +ifdef::ACTION_OPEN[] +*--skip, -p <number of 512 byte sectors>*:: +Start offset used in IV calculation in 512-byte sectors (how many +sectors of the encrypted data to skip at the beginning). This option +is only relevant with plain or loopaes device types. + -endif::[] -*WARNING:* Do not use this option unless you run cryptsetup in a -restricted environment where locking is impossible to perform (where -/run directory cannot be used). +Hence, if --offset _n_, and --skip _s_, sector _n_ (the first sector of +the encrypted device) will get a sector number of _s_ for the IV +calculation. endif::[] -ifdef::ACTION_OPEN,ACTION_RESIZE,ACTION_REFRESH,ACTION_LUKSFORMAT,ACTION_LUKSRESUME,ACTION_TOKEN,ACTION_REENCRYPT[] -*--disable-keyring*:: -Do not load volume key in kernel keyring and store it directly in the -dm-crypt target instead. This option is supported only for the LUKS2 type. +ifdef::ACTION_OPEN,ACTION_TCRYPTDUMP[] +*--tcrypt-backup*:: +*--tcrypt-hidden*:: +*--tcrypt-system*:: +Specify which TrueCrypt on-disk +header will be used to open the device. See _TCRYPT_ section in +*cryptsetup*(8) for more info. endif::[] -ifdef::ACTION_TOKEN[] -*--key-description <text>*:: -Set key description in keyring for use with _token_ command. +ifdef::ACTION_OPEN[] +*--test-passphrase*:: +Do not activate the device, just verify passphrase. The device mapping name is +not mandatory if this option is used. endif::[] -ifdef::ACTION_OPEN,ACTION_LUKSRESUME[] -*--link-vk-to-keyring* _<keyring_description>::<key_description>_:: -Link volume key in a keyring with specified key name. The volume key is linked only -if requested action is successfully finished. -+ -_<keyring_description>_ string has to contain existing kernel keyring -description. The keyring name may be optionally prefixed with "%:" or "%keyring:" type descriptions. -Or, the keyring may also be specified directly by numeric key id. Also special keyring notations -starting with "@" may be used to select existing predefined kernel keyrings. -+ -The string "::" is delimiter used to separate keyring description and key description. -+ -_<key_description>_ part describes key type and key name of volume key linked in the keyring -described in _<keyring_description>_. The type may be specified by adding "%<type_name>:" prefix in front of -key name. If type is missing default _user_ type is applied. If the key of same name and same type already exists (already linked in the keyring) -it will get replaced in the process. +ifdef::ACTION_OPEN,ACTION_LUKSFORMAT,ACTION_LUKSADDKEY,ACTION_LUKSCHANGEKEY,ACTION_LUKSCONVERTKEY,ACTION_LUKSREMOVEKEY,ACTION_LUKSKILLSLOT,ACTION_LUKSDUMP,ACTION_REENCRYPT,ACTION_REPAIR,ACTION_LUKSRESUME,ACTION_RESIZE,ACTION_TCRYPTDUMP,ACTION_BITLKDUMP[] +*--timeout, -t <number of seconds>*:: +The number of seconds to wait before timeout on passphrase input via +terminal. It is relevant every time a passphrase is asked. +It has no effect if used in conjunction with --key-file. + -See also *KEY IDENTIFIERS* section of *keyctl*(1). -endif::[] - -ifdef::ACTION_CONFIG[] -*--priority <normal|prefer|ignore>*:: -Set a priority for LUKS2 keyslot. The _prefer_ priority marked slots -are tried before _normal_ priority. The _ignored_ priority means, that -slot is never used, if not explicitly requested by _--key-slot_ -option. +This option is useful when the system should not stall if the user +does not input a passphrase, e.g. during boot. The default is a value +of 0 seconds, which means to wait forever. endif::[] ifdef::ACTION_OPEN,ACTION_RESIZE,ACTION_LUKSRESUME,ACTION_TOKEN,ACTION_LUKSADDKEY[] @@ -884,11 +1055,6 @@ new token. endif::[] endif::[] -ifdef::ACTION_LUKSADDKEY[] -*--new-token-id*:: -Specify what token to use to get the passphrase for a new keyslot. -endif::[] - ifdef::ACTION_OPEN,ACTION_RESIZE,ACTION_LUKSRESUME,ACTION_LUKSADDKEY[] *--token-only*:: ifndef::ACTION_LUKSADDKEY[] @@ -905,6 +1071,12 @@ Use only LUKS2 tokens to unlock existing volume key. endif::[] endif::[] +ifdef::ACTION_TOKEN[] +*--token-replace*:: +Replace an existing token when adding or importing a token with the +--token-id option. +endif::[] + ifdef::ACTION_OPEN,ACTION_RESIZE,ACTION_LUKSRESUME,ACTION_LUKSADDKEY[] *--token-type* _type_:: ifndef::ACTION_LUKSADDKEY[] @@ -919,193 +1091,101 @@ Specify what token type (all _type_ tokens) to use when unlocking existing keysl endif::[] endif::[] -ifdef::ACTION_OPEN,ACTION_LUKSFORMAT,ACTION_REENCRYPT[] -ifndef::ACTION_REENCRYPT[] -*--sector-size* _bytes_:: + +ifdef::ACTION_OPEN,ACTION_LUKSRESUME,ACTION_REENCRYPT[] +*--tries, -T*:: +How often the input of the passphrase shall be retried. The default is 3 tries. endif::[] + +ifdef::ACTION_OPEN,ACTION_LUKSFORMAT,ACTION_LUKSRESUME,ACTION_LUKSADDKEY,ACTION_LUKSREMOVEKEY,ACTION_LUKSCHANGEKEY,ACTION_LUKSKILLSLOT,ACTION_ISLUKS,ACTION_LUKSDUMP,ACTION_LUKSUUID,ACTION_CONVERT,ACTION_REPAIR,ACTION_REENCRYPT[] +*--type <device-type>*:: ifndef::ACTION_REENCRYPT[] -ifdef::ACTION_OPEN[] -Set encryption sector size for use with _plain_ device type. It must be power of two -and in range 512 - 4096 bytes. The default mode is 512 bytes. -+ -Note that if sector size is higher than underlying device hardware -sector, using this option can increase risk on incomplete sector writes during a -power fail. -endif::[] -ifdef::ACTION_LUKSFORMAT[] -Set sector size for use with disk encryption. It must be power of two -and in range 512 - 4096 bytes. This option is available only with LUKS2 -format. -+ -For LUKS2 devices it's established based on parameters provided by -underlying data device. For native 4K block devices it's 4096 bytes. -For 4K/512e (4K physical sector size with 512 bytes emulation) it's -4096 bytes. For drives reporting only 512 bytes block size it remains -512 bytes. If data device is regular file put in filesystem it's 4096 -bytes. -+ -Note that if sector size is higher than underlying device hardware -sector and there is not integrity protection that uses data journal, -using this option can increase risk on incomplete sector writes during a -power fail. -+ -If used together with _--integrity_ option and dm-integrity journal, the -atomicity of writes is guaranteed in all cases (but it cost write -performance - data has to be written twice). -endif::[] -+ -Increasing sector size from 512 bytes to 4096 bytes can provide better -performance on most of the modern storage devices and also with some hw -encryption accelerators. +Specifies required device type, for more info read _BASIC ACTIONS_ section in *cryptsetup*(8). endif::[] ifdef::ACTION_REENCRYPT[] -*--sector-size* _bytes_ *(LUKS2 only)*:: -Reencrypt device with new encryption sector size enforced. -+ -*WARNING:* Increasing encryption sector size may break hosted filesystem. Do not -run reencryption with --force-offline-reencrypt if unsure what block size -was filesystem formatted with. +Specifies required (encryption mode) or expected (other modes) LUKS format. Accepts only _luks1_ or _luks2_. endif::[] endif::[] -ifdef::ACTION_OPEN[] -*--iv-large-sectors*:: -Count Initialization Vector (IV) in larger sector size (if set) -instead of 512 bytes sectors. This option can be used only with _plain_ -device type. -+ -*NOTE:* This option does not have any performance or security impact, -use it only for accessing incompatible existing disk images from other -systems that require this option. +ifdef::ACTION_OPEN,ACTION_LUKSADDKEY,ACTION_LUKSDUMP,ACTION_TOKEN[] +*--unbound*:: +ifdef::ACTION_LUKSADDKEY[] +Creates new LUKS2 unbound keyslot. endif::[] - -ifdef::ACTION_OPEN,ACTION_REFRESH[] -*--persistent*:: -If used with LUKS2 devices and activation commands like _open_ or -_refresh_, the specified activation flags are persistently written -into metadata and used next time automatically even for normal -activation. (No need to use cryptab or other system configuration -files.) -+ -If you need to remove a persistent flag, use _--persistent_ without the -flag you want to remove (e.g. to disable persistently stored discard -flag, use _--persistent_ without _--allow-discards_). -+ -Only _--allow-discards_, _--perf-same_cpu_crypt_, -_--perf-submit_from_crypt_cpus_, _--perf-no_read_workqueue_, -_--perf-no_write_workqueue_ and _--integrity-no-journal_ can be stored -persistently. +ifdef::ACTION_LUKSDUMP[] +Dumps existing LUKS2 unbound keyslot. endif::[] - ifdef::ACTION_OPEN[] -*--refresh*:: -Refreshes an active device with new set of parameters. See -*cryptsetup-refresh*(8) for more details. +Allowed only together with --test-passphrase parameter, it allows one to test +passphrase for unbound LUKS2 keyslot. Otherwise, unbound keyslot passphrase +can be tested only when specific keyslot is selected via --key-slot parameter. +endif::[] +ifdef::ACTION_TOKEN[] +Creates new LUKS2 keyring token assigned to no keyslot. Usable only with _add_ action. endif::[] - -ifdef::ACTION_LUKSFORMAT,ACTION_CONFIG,ACTION_REENCRYPT[] -*--label <LABEL> --subsystem <SUBSYSTEM>*:: -Set label and subsystem description for LUKS2 device. -The label and subsystem are optional fields and can be later used -in udev scripts for triggering user actions once the device marked -by these labels is detected. endif::[] -ifdef::ACTION_LUKSFORMAT[] -*--integrity <integrity algorithm>*:: -Specify integrity algorithm to be used for authenticated disk -encryption in LUKS2. -+ -*WARNING: This extension is EXPERIMENTAL* and requires dm-integrity -kernel target (available since kernel version 4.12). For native AEAD -modes, also enable "User-space interface for AEAD cipher algorithms" in -"Cryptographic API" section (CONFIG_CRYPTO_USER_API_AEAD .config -option). -+ -For more info, see _AUTHENTICATED DISK ENCRYPTION_ section in *cryptsetup*(8). +ifdef::COMMON_OPTIONS[] +*--usage*:: +Show short option help. endif::[] -ifdef::ACTION_LUKSFORMAT[] -*--integrity-legacy-padding*:: -Use inefficient legacy padding. +ifdef::ACTION_REENCRYPT[] +*--use-directio (LUKS1 only)*:: +Use direct-io (O_DIRECT) for all read/write data operations related +to block device undergoing reencryption. + -*WARNING*: Do not use this option until you need compatibility with specific -old kernel. +Useful if direct-io operations perform better than normal buffered +operations (e.g. in virtual environments). endif::[] -ifdef::ACTION_LUKSFORMAT,ACTION_REENCRYPT[] -*--luks2-metadata-size <size>*:: -This option can be used to enlarge the LUKS2 metadata (JSON) area. The -size includes 4096 bytes for binary metadata (usable JSON area is -smaller of the binary area). According to LUKS2 specification, only -these values are valid: 16, 32, 64, 128, 256, 512, 1024, 2048 and 4096 -kB The <size> can be specified with unit suffix (for example 128k). +ifdef::ACTION_REENCRYPT[] +*--use-fsync (LUKS1 only)*:: +Use fsync call after every written block. This applies for reencryption +log files as well. endif::[] ifdef::ACTION_LUKSFORMAT,ACTION_REENCRYPT[] -*--luks2-keyslots-size <size>*:: -This option can be used to set specific size of the LUKS2 binary -keyslot area (key material is encrypted there). The value must be -aligned to multiple of 4096 bytes with maximum size 128MB. The <size> -can be specified with unit suffix (for example 128k). -endif::[] - -ifdef::ACTION_LUKSFORMAT,ACTION_LUKSADDKEY,ACTION_LUKSCHANGEKEY,ACTION_LUKSCONVERTKEY,ACTION_REENCRYPT[] -*--keyslot-cipher <cipher-spec>*:: -This option can be used to set specific cipher encryption for the -LUKS2 keyslot area. +*--use-random*:: +*--use-urandom*:: +ifdef::ACTION_REENCRYPT[] +Define which kernel random number generator will be used to create the volume key. endif::[] - -ifdef::ACTION_LUKSFORMAT,ACTION_LUKSADDKEY,ACTION_LUKSCHANGEKEY,ACTION_LUKSCONVERTKEY,ACTION_REENCRYPT[] -*--keyslot-key-size <bits>*:: -This option can be used to set specific key size for the LUKS2 keyslot -area. +ifndef::ACTION_REENCRYPT[] +For _luksFormat_ these options define which kernel random number +generator will be used to create the volume key (which is a long-term +key). ++ +See *NOTES ON RANDOM NUMBER GENERATORS* in *cryptsetup*(8) for more +information. Use _cryptsetup --help_ to show the compiled-in default random +number generator. ++ +*WARNING:* In a low-entropy situation (e.g. in an embedded system) and older +kernels, both selections are problematic. Using /dev/urandom can lead to weak keys. +Using /dev/random can block a long time, potentially forever, if not +enough entropy can be harvested by the kernel. endif::[] - -ifdef::ACTION_REFRESH[] -*--integrity-no-journal*:: -Activate device with integrity protection without using data journal -(direct write of data and integrity tags). Note that without journal -power fail can cause non-atomic write and data corruption. Use only if -journalling is performed on a different storage layer. endif::[] -ifdef::ACTION_LUKSFORMAT[] -*--integrity-no-wipe*:: -Skip wiping of device authentication (integrity) tags. If you skip -this step, sectors will report invalid integrity tag until an -application write to the sector. +ifdef::ACTION_LUKSFORMAT,ACTION_LUKSUUID,ACTION_REENCRYPT[] +*--uuid <UUID>*:: +ifndef::ACTION_REENCRYPT[] +Use the provided _UUID_ for the _luksFormat_ command instead of +generating a new one. Changes the existing _UUID_ when used with the +_luksUUID_ command. + -*NOTE:* Even some writes to the device can fail if the write is not -aligned to page size and page-cache initiates read of a sector with -invalid integrity tag. -endif::[] - -ifdef::ACTION_OPEN,ACTION_LUKSADDKEY,ACTION_LUKSDUMP,ACTION_TOKEN[] -*--unbound*:: -ifdef::ACTION_LUKSADDKEY[] -Creates new LUKS2 unbound keyslot. -endif::[] -ifdef::ACTION_LUKSDUMP[] -Dumps existing LUKS2 unbound keyslot. -endif::[] -ifdef::ACTION_OPEN[] -Allowed only together with --test-passphrase parameter, it allows one to test -passphrase for unbound LUKS2 keyslot. Otherwise, unbound keyslot passphrase -can be tested only when specific keyslot is selected via --key-slot parameter. -endif::[] -ifdef::ACTION_TOKEN[] -Creates new LUKS2 keyring token assigned to no keyslot. Usable only with _add_ action. endif::[] +ifdef::ACTION_REENCRYPT[] +When used in encryption mode use the provided _UUID_ for the new LUKS header +instead of generating a new one. ++ +*LUKS1 (only in decryption mode)*: +To find out what _UUID_ to pass look for temporary files LUKS-_UUID_.[|log|org|new] +of the interrupted decryption process. ++ endif::[] - -ifdef::ACTION_OPEN,ACTION_TCRYPTDUMP[] -*--tcrypt-hidden*:: -*--tcrypt-system*:: -*--tcrypt-backup*:: -Specify which TrueCrypt on-disk -header will be used to open the device. See _TCRYPT_ section in -*cryptsetup*(8) for more info. +The _UUID_ must be provided in the standard UUID format, e.g. +12345678-1234-1234-1234-123456789abc. endif::[] ifdef::ACTION_TCRYPTDUMP,ACTION_OPEN[] @@ -1115,158 +1195,80 @@ default. endif::[] ifdef::ACTION_OPEN,ACTION_TCRYPTDUMP[] -*--disable-veracrypt*:: -This option can be used to disable VeraCrypt compatible mode (only -TrueCrypt devices are recognized). Only for TCRYPT extension. See -_TCRYPT_ section in *cryptsetup*(8) for more info. -endif::[] - -ifdef::ACTION_OPEN,ACTION_TCRYPTDUMP[] *--veracrypt-pim*:: *--veracrypt-query-pim*:: Use a custom Personal Iteration Multiplier (PIM) for VeraCrypt device. See _TCRYPT_ section in *cryptsetup*(8) for more info. endif::[] -ifdef::ACTION_OPEN[] -*--serialize-memory-hard-pbkdf*:: -Use a global lock to serialize unlocking of keyslots using memory-hard -PBKDF. -+ -*NOTE:* This is (ugly) workaround for a specific situation when multiple -devices are activated in parallel and system instead of reporting out of -memory starts unconditionally stop processes using out-of-memory killer. -+ -*DO NOT USE* this switch until you are implementing boot environment -with parallel devices activation! +ifdef::ACTION_ISLUKS[] +*--verbose, -v*:: +Print more information on command execution. endif::[] -ifdef::ACTION_REENCRYPT[] -*--encrypt, --new, -N*:: -Initialize (and run) device in-place encryption mode. +ifdef::ACTION_OPEN,ACTION_RESIZE,ACTION_LUKSFORMAT,ACTION_LUKSRESUME,ACTION_LUKSADDKEY,ACTION_LUKSREMOVEKEY,ACTION_LUKSCHANGEKEY,ACTION_LUKSCONVERTKEY,ACTION_LUKSKILLSLOT,ACTION_REPAIR,ACTION_TCRYPTDUMP,ACTION_REENCRYPT[] +*--verify-passphrase, -y*:: +When interactively asking for a passphrase, ask for it twice and +complain if both inputs do not match. +ifdef::ACTION_OPEN[] +Advised when creating a _plain_ type mapping for the first time. endif::[] - -ifdef::ACTION_REENCRYPT[] -*--decrypt*:: -Initialize (and run) device decryption mode. +Ignored on input from file or stdin. endif::[] -ifdef::ACTION_REENCRYPT[] -*--init-only (LUKS2 only)*:: -Initialize reencryption (any mode) operation in LUKS2 metadata only -and exit. If any reencrypt operation is already initialized in -metadata, the command with --init-only parameter fails. +ifdef::COMMON_OPTIONS[] +*--version, -V*:: +Show the program version. endif::[] -ifdef::ACTION_REENCRYPT[] -*--resume-only (LUKS2 only)*:: -Resume reencryption (any mode) operation already described in LUKS2 -metadata. If no reencrypt operation is initialized, the command with ---resume-only parameter fails. Useful for resuming reencrypt operation -without accidentally triggering new reencryption operation. +ifdef::ACTION_OPEN,ACTION_LUKSFORMAT,ACTION_LUKSADDKEY,ACTION_LUKSDUMP,ACTION_BITLKDUMP,ACTION_REENCRYPT[] +*--volume-key-file, --master-key-file (OBSOLETE alias)*:: +ifndef::ACTION_REENCRYPT[] +Use a volume key stored in a file. endif::[] - -ifdef::ACTION_REENCRYPT[] -*--resilience* _mode_ *(LUKS2 only)*:: -Reencryption resilience _mode_ can be one of _checksum_, _journal_ or -_none_. -+ -_checksum_: default mode, where individual checksums of ciphertext -hotzone sectors are stored, so the recovery process can detect which -sectors were already reencrypted. It requires that the device sector -write is atomic. -+ -_journal_: the hotzone is journaled in the binary area (so the data are -written twice). -+ -_none_: performance mode. There is no protection and the only way it's -safe to interrupt the reencryption is similar to old offline -reencryption utility. +ifdef::ACTION_FORMAT[] + -Resilience modes can be changed unless _datashift_ mode is used for -operation initialization (encryption with --reduce-device-size option) +This allows creating a LUKS header with this specific +volume key. If the volume key was taken from an existing LUKS header and +all other parameters are the same, then the new header decrypts the data +encrypted with the header the volume key was taken from. + endif::[] - -ifdef::ACTION_REENCRYPT[] -*--resilience-hash* _hash_ *(LUKS2 only)*:: -The _hash_ algorithm used with "--resilience checksum" only. The default -hash is sha256. With other resilience modes, the hash parameter is -ignored. +ifdef::ACTION_LUKSDUMP,ACTION_BITLKDUMP[] +The volume key is stored in a file instead of being printed out to standard output. + endif::[] - -ifdef::ACTION_REENCRYPT[] -*--hotzone-size* _size_ *(LUKS2 only)*:: -This option can be used to set an upper limit on the size of -reencryption area (hotzone). The _size_ can be specified with unit -suffix (for example 50M). Note that actual hotzone size may be less -than specified <size> due to other limitations (free space in keyslots -area or available memory). +ifdef::ACTION_LUKSADDKEY[] +This allows adding a new keyslot without having to know passphrase to existing one. +It may be also used when no keyslot is active. + -With decryption mode for devices with LUKS2 header placed in head of data -device, the option specifies how large is the first data segment moved -from original data offset pointer. endif::[] - +ifdef::ACTION_OPEN[] +This allows one to open _luks_ and _bitlk_ device types without giving a passphrase. + +endif::[] ifdef::ACTION_REENCRYPT[] -*--reduce-device-size* _size_:: -This means that last _size_ sectors on the original device will be lost, -data will be effectively shifted by specified number of sectors. -+ -It could be useful if you added some space to underlying partition or -logical volume (so last _size_ sectors contains no data). -+ -For units suffix see --device-size parameter description. -+ -*WARNING:* This is a destructive operation and cannot be reverted. Use -with extreme care - accidentally overwritten filesystems are usually -unrecoverable. -+ -*LUKS2*: -Initialize LUKS2 reencryption with data device size reduction -(currently only encryption mode is supported). -+ -Recommended minimal size is twice the default LUKS2 header size -(--reduce-device-size 32M) for encryption mode. -+ -*LUKS1*: -Enlarge data offset to specified value by shrinking device size. -+ -You cannot shrink device more than by 64 MiB (131072 sectors). +Use (set) new volume key stored in a file. + endif::[] - -ifdef::ACTION_RESIZE,ACTION_OPEN,ACTION_LUKSADDKEY,ACTION_LUKSDUMP,ACTION_LUKSRESUME,ACTION_TOKEN[] -*--external-tokens-path* _absolute_path_:: -Override system directory path where cryptsetup searches for external token -handlers (or token plugins). It must be absolute path (starting with '/' character). +ifdef::ACTION_LUKSFORMAT,ACTION_LUKSADDKEY,ACTION_REENCRYPT[] +*WARNING:* If you create your own volume key, you need to make sure to +do it right. Otherwise, you can end up with a low-entropy or otherwise +partially predictable volume key which will compromise security. endif::[] - -ifdef::COMMON_OPTIONS[] -*--batch-mode, -q*:: -Suppresses all confirmation questions. Use with care! -+ -If the --verify-passphrase option is not specified, this option also -switches off the passphrase verification. endif::[] -ifdef::COMMON_OPTIONS[] -*--debug or --debug-json*:: -Run in debug mode with full diagnostic logs. Debug output lines are -always prefixed by *#*. +ifdef::ACTION_OPEN,ACTION_LUKSRESUME,ACTION_LUKSADDKEY[] +*--volume-key-keyring* _<key description>_:: +Use a volume key stored in a keyring. +This allows one to open _luks_ and device types without giving a passphrase. +The key and associated type has to be readable from userspace so that volume +key digest may be verified in before activation. + -If --debug-json is used, additional LUKS2 JSON data structures are printed. -endif::[] - -ifdef::COMMON_OPTIONS[] -*--version, -V*:: -Show the program version. -endif::[] - -ifdef::COMMON_OPTIONS[] -*--usage*:: -Show short option help. +The _<key description>_ uses keyctl-compatible syntax. This can either be a +numeric key ID or a string name in the format _%<key type>:<key name>_. See +also *KEY IDENTIFIERS* section of *keyctl*(1). When no _%<key type>:_ prefix +is specified we assume the key type is _user_ (default type). endif::[] -ifdef::COMMON_OPTIONS[] -*--help, -?*:: -Show help text and default parameters. +ifdef::ACTION_REENCRYPT[] +*--write-log (LUKS1 only)*:: +Update log file after every block write. This can slow down reencryption +but will minimize data loss in the case of system crash. endif::[] diff --git a/man/cryptsetup-ssh.8.adoc b/man/cryptsetup-ssh.8.adoc index f71f856..d2c2c06 100644 --- a/man/cryptsetup-ssh.8.adoc +++ b/man/cryptsetup-ssh.8.adoc @@ -37,6 +37,15 @@ required for this operation. == OPTIONS +*--debug*:: +Show debug messages + +*--debug-json*:: +Show debug messages including JSON metadata + +*--help, -?*:: +Show help + **--key-slot**=_NUM_:: Keyslot to assign the token to. If not specified, the token will be assigned to the first key slot matching provided passphrase. @@ -53,18 +62,9 @@ IP address/URL of the remote server for this token. **--ssh-user**=_STRING_:: Username used for the remote server. -*--debug*:: -Show debug messages - -*--debug-json*:: -Show debug messages including JSON metadata - *--verbose, -v*:: Shows more detailed error messages -*--help, -?*:: -Show help - *--version, -V*:: Print program version diff --git a/man/integritysetup.8.adoc b/man/integritysetup.8.adoc index e89b0f7..26b957c 100644 --- a/man/integritysetup.8.adoc +++ b/man/integritysetup.8.adoc @@ -89,72 +89,33 @@ kernel version 5.7, shrinking should work on older kernels too. *<options>* can be [--size, --device-size, --wipe]. == OPTIONS -*--progress-frequency <seconds>*:: -Print separate line every <seconds> with wipe progress. - -*--progress-json*:: -Prints wipe progress data in json format suitable mostly for machine -processing. It prints separate line every half second (or based on ---progress-frequency value). The JSON output looks as follows during -wipe progress (except it's compact single line): -+ -.... -{ - "device":"/dev/sda" // backing device or file - "device_bytes":"8192", // bytes wiped so far - "device_size":"44040192", // total bytes to wipe - "speed":"126877696", // calculated speed in bytes per second (based on progress so far) - "eta_ms":"2520012" // estimated time to finish wipe in milliseconds - "time_ms":"5561235" // total time spent wiping device in milliseconds -} -.... -+ -Note on numbers in JSON output: Due to JSON parsers limitations all -numbers are represented in a string format due to need of full 64bit -unsigned integers. - -*--no-wipe*:: -Do not wipe the device after format. A device that is not initially -wiped will contain invalid checksums. - -*--wipe*:: -Wipe the newly allocated area after resize to bigger size. If this -flag is not set, checksums will be calculated for the data previously -stored in the newly allocated area. - -*--journal-size, -j BYTES*:: -Size of the journal. - -*--interleave-sectors SECTORS*:: -The number of interleaved sectors. - -*--integrity-recalculate*:: -Automatically recalculate integrity tags in kernel on activation. The -device can be used during automatic integrity recalculation but -becomes fully integrity protected only after the background operation -is finished. This option is available since the Linux kernel version -4.19. +*--allow-discards*:: +Allow the use of discard (TRIM) requests for the device. This option +is available since the Linux kernel version 5.7. -*--integrity-recalculate-reset*:: -Restart recalculation from the beginning of the device. It can be used -to change the integrity checksum function. Note it does not change the -tag length. This option is available since the Linux kernel version -5.13. +*--batch-mode, -q*:: +Do not ask for confirmation. -*--journal-watermark PERCENT*:: -Journal watermark in percents. When the size of the journal exceeds -this watermark, the journal flush will be started. +*--bitmap-flush-time MS*:: +Bitmap flush time in milliseconds. ++ +*WARNING:* +In case of a crash, it is possible that the data and integrity tag +doesn't match if the journal is disabled. -*--journal-commit-time MS*:: -Commit time in milliseconds. When this time passes (and no explicit -flush operation was issued), the journal is written. +*--bitmap-sectors-per-bit SECTORS*:: +Number of 512-byte sectors per bitmap bit, the value must be power of +two. -*--tag-size, -t BYTES*:: -Size of the integrity tag per-sector (here the integrity function will -store authentication tag). +*--buffer-sectors SECTORS*:: +The number of sectors in one buffer. + -*NOTE:* The size can be smaller that output size of the hash function, -in that case only part of the hash will be stored. +The tag area is accessed using buffers, the large buffer size means that +the I/O size will be larger, but there could be less I/Os issued. + +*--cancel-deferred*:: +Removes a previously configured deferred device removal in *close* +command. *--data-device <data_device>*:: Specify a separate data device that contains existing data. The @@ -165,14 +126,16 @@ data on <data_device>. --no-wipe option and activate with --integrity-recalculate to automatically recalculate integrity tags. -*--sector-size, -s BYTES*:: -Sector size (power of two: 512, 1024, 2048, 4096). +*--debug*:: +Run in debug mode with full diagnostic logs. Debug output lines are +always prefixed by *#*. -*--buffer-sectors SECTORS*:: -The number of sectors in one buffer. -+ -The tag area is accessed using buffers, the large buffer size means that -the I/O size will be larger, but there could be less I/Os issued. +*--deferred*:: +Defers device removal in *close* command until the last user closes +it. + +*--help, -?*:: +Show help text and default parameters. *--integrity, -I ALGORITHM*:: Use internal integrity calculation (standalone mode). The integrity @@ -182,15 +145,6 @@ algorithm can be CRC (crc32c/crc32), non-cryptographic hash function For HMAC (hmac-sha256) you have also to specify an integrity key and its size. -*--integrity-key-size BYTES*:: -The size of the data integrity key. Maximum is 4096 bytes. - -*--integrity-key-file FILE*:: -The file with the integrity key. - -*--integrity-no-journal, -D*:: -Disable journal for integrity device. - *--integrity-bitmap-mode. -B*:: Use alternate bitmap mode (available since Linux kernel 5.2) where dm-integrity uses bitmap instead of a journal. If a bit in the bitmap @@ -201,76 +155,120 @@ because we don't have to write the data twice, but it is also less reliable, because if data corruption happens when the machine crashes, it may not be detected. -*--bitmap-sectors-per-bit SECTORS*:: -Number of 512-byte sectors per bitmap bit, the value must be power of -two. +*--integrity-key-file FILE*:: +The file with the integrity key. -*--bitmap-flush-time MS*:: -Bitmap flush time in milliseconds. -+ -*WARNING:*:: -In case of a crash, it is possible that the data and integrity tag -doesn't match if the journal is disabled. +*--integrity-key-size BYTES*:: +The size of the data integrity key. Maximum is 4096 bytes. -*--integrity-recovery-mode. -R*:: -Recovery mode (no journal, no tag checking). +*--integrity-no-journal, -D*:: +Disable journal for integrity device. -*NOTE:* The following options are intended for testing purposes only.: -Using journal encryption does not make sense without encryption the -data, these options are internally used in authenticated disk -encryption with *cryptsetup(8)*. +*--integrity-recalculate*:: +Automatically recalculate integrity tags in kernel on activation. The +device can be used during automatic integrity recalculation but +becomes fully integrity protected only after the background operation +is finished. This option is available since the Linux kernel version +4.19. -*--journal-integrity ALGORITHM*:: -Integrity algorithm for journal area. See --integrity option for -detailed specification. +*--integrity-recalculate-reset*:: +Restart recalculation from the beginning of the device. It can be used +to change the integrity checksum function. Note it does not change the +tag length. This option is available since the Linux kernel version +5.13. -*--journal-integrity-key-size BYTES*:: -The size of the journal integrity key. Maximum is 4096 bytes. +*--integrity-recovery-mode. -R*:: +Recovery mode (no journal, no tag checking). -*--journal-integrity-key-file FILE*:: -The file with the integrity key. +*--interleave-sectors SECTORS*:: +The number of interleaved sectors. + +*--journal-commit-time MS*:: +Commit time in milliseconds. When this time passes (and no explicit +flush operation was issued), the journal is written. *--journal-crypt ALGORITHM*:: Encryption algorithm for journal data area. You can use a block cipher here such as cbc-aes or a stream cipher, for example, chacha20 or ctr-aes. ++ +*NOTE:* The journal encryption options are only intended for testing. +Using journal encryption does not make sense without encryption of the data. + +*--journal-crypt-key-file FILE*:: +The file with the journal encryption key. *--journal-crypt-key-size BYTES*:: The size of the journal encryption key. Maximum is 4096 bytes. -*--journal-crypt-key-file FILE*:: -The file with the journal encryption key. +*--journal-integrity ALGORITHM*:: +Integrity algorithm for journal area. See --integrity option for +detailed specification. -*--allow-discards*:: -Allow the use of discard (TRIM) requests for the device. This option -is available since the Linux kernel version 5.7. +*--journal-integrity-key-file FILE*:: +The file with the integrity key. -*--deferred*:: -Defers device removal in *close* command until the last user closes -it. +*--journal-integrity-key-size BYTES*:: +The size of the journal integrity key. Maximum is 4096 bytes. -*--cancel-deferred*:: -Removes a previously configured deferred device removal in *close* -command. +*--journal-size, -j BYTES*:: +Size of the journal. -*--verbose, -v*:: -Print more information on command execution. +*--journal-watermark PERCENT*:: +Journal watermark in percents. When the size of the journal exceeds +this watermark, the journal flush will be started. -*--debug*:: -Run in debug mode with full diagnostic logs. Debug output lines are -always prefixed by *#*. +*--no-wipe*:: +Do not wipe the device after format. A device that is not initially +wiped will contain invalid checksums. -*--version, -V*:: -Show the program version. +*--progress-frequency <seconds>*:: +Print separate line every <seconds> with wipe progress. -*--batch-mode, -q*:: -Do not ask for confirmation. +*--progress-json*:: +Prints wipe progress data in json format suitable mostly for machine +processing. It prints separate line every half second (or based on +--progress-frequency value). The JSON output looks as follows during +wipe progress (except it's compact single line): ++ +.... +{ + "device":"/dev/sda", // backing device or file + "device_bytes":"8192", // bytes wiped so far + "device_size":"44040192", // total bytes to wipe + "speed":"126877696", // calculated speed in bytes per second (based on progress so far) + "eta_ms":"2520012", // estimated time to finish wipe in milliseconds + "time_ms":"5561235" // total time spent wiping device in milliseconds +} +.... ++ +Note on numbers in JSON output: Due to JSON parsers limitations all +numbers are represented in a string format due to need of full 64bit +unsigned integers. + +*--sector-size, -s BYTES*:: +Sector size (power of two: 512, 1024, 2048, 4096). + +*--tag-size, -t BYTES*:: +Size of the integrity tag per-sector (here the integrity function will +store authentication tag). ++ +*NOTE:* The size can be smaller that output size of the hash function, +in that case only part of the hash will be stored. *--usage*:: Show short option help. -*--help, -?*:: -Show help text and default parameters. +*--verbose, -v*:: +Print more information on command execution. + +*--version, -V*:: +Show the program version. + +*--wipe*:: +Wipe the newly allocated area after resize to bigger size. If this +flag is not set, checksums will be calculated for the data previously +stored in the newly allocated area. == LEGACY COMPATIBILITY OPTIONS diff --git a/man/veritysetup.8.adoc b/man/veritysetup.8.adoc index 36d1501..d6a1aba 100644 --- a/man/veritysetup.8.adoc +++ b/man/veritysetup.8.adoc @@ -109,59 +109,12 @@ Reports parameters of verity device from on-disk stored superblock. *<options>* can be [--hash-offset]. == OPTIONS +*--batch-mode, -q*:: +Do not ask for confirmation. -*--no-superblock*:: -Create or use dm-verity without permanent on-disk superblock. - -*--format=number*:: -Specifies the hash version type. Format type 0 is original Chrome OS -version. Format type 1 is current version. - -*--data-block-size=bytes*:: -Used block size for the data device. (Note kernel supports only -page-size as maximum here.) - -*--hash-block-size=bytes*:: -Used block size for the hash device. (Note kernel supports only -page-size as maximum here.) - -*--data-blocks=blocks*:: -Size of data device used in verification. If not specified, the whole -device is used. - -*--hash-offset=bytes*:: -Offset of hash area/superblock on hash_device. Value must be aligned -to disk sector offset. - -*--salt=hex string*:: -Salt used for format or verification. Format is a hexadecimal string. - -*--uuid=UUID*:: -Use the provided UUID for format command instead of generating new -one. -+ -The UUID must be provided in standard UUID format, e.g. -12345678-1234-1234-1234-123456789abc. -*--ignore-corruption , --restart-on-corruption , ---panic-on-corruption*:: -Defines what to do if data integrity problem is detected (data -corruption). -+ -Without these options kernel fails the IO operation with I/O error. With ---ignore-corruption option the corruption is only logged. With ---restart-on-corruption or --panic-on-corruption the kernel is restarted -(panicked) immediately. (You have to provide way how to avoid restart -loops.) -+ -*WARNING:* Use these options only for very specific cases. These options -are available since Linux kernel version 4.1. - -*--ignore-zero-blocks*:: -Instruct kernel to not verify blocks that are expected to contain -zeroes and always directly return zeroes instead. -+ -*WARNING:* Use this option only in very specific cases. This option is -available since Linux kernel version 4.5. +*--cancel-deferred*:: +Removes a previously configured deferred device removal in *close* +command. *--check-at-most-once*:: Instruct kernel to verify blocks only the first time they are read @@ -171,8 +124,21 @@ from the data device, rather than every time. tampering of the data device's content will be detected, not online tampering. This option is available since Linux kernel version 4.17. -*--hash=hash*:: -Hash algorithm for dm-verity. For default see --help option. +*--data-blocks=blocks*:: +Size of data device used in verification. If not specified, the whole +device is used. + +*--data-block-size=bytes*:: +Used block size for the data device. (Note kernel supports only +page-size as maximum here.) + +*--debug*:: +Run in debug mode with full diagnostic logs. Debug output lines are +always prefixed by *#*. + +*--deferred*:: +Defers device removal in *close* command until the last user closes +it. *--fec-device=fec_device*:: Use forward error correction (FEC) to recover from corruption if hash @@ -205,6 +171,47 @@ Number of generator roots. This equals to the number of parity bytes in the encoding data. In RS(M, N) encoding, the number of roots is M-N. M is 255 and M-N is between 2 and 24 (including). +*--format=number*:: +Specifies the hash version type. Format type 0 is original Chrome OS +version. Format type 1 is current version. + +*--hash=hash*:: +Hash algorithm for dm-verity. For default see --help option. + +*--hash-block-size=bytes*:: +Used block size for the hash device. (Note kernel supports only +page-size as maximum here.) + +*--hash-offset=bytes*:: +Offset of hash area/superblock on hash_device. Value must be aligned +to disk sector offset. + +*--help, -?*:: +Show help text and default parameters. + +*--ignore-corruption, --restart-on-corruption, --panic-on-corruption*:: +Defines what to do if data integrity problem is detected (data +corruption). ++ +Without these options kernel fails the IO operation with I/O error. With +--ignore-corruption option the corruption is only logged. With +--restart-on-corruption or --panic-on-corruption the kernel is restarted +(panicked) immediately. (You have to provide way how to avoid restart +loops.) ++ +*WARNING:* Use these options only for very specific cases. These options +are available since Linux kernel version 4.1. + +*--ignore-zero-blocks*:: +Instruct kernel to not verify blocks that are expected to contain +zeroes and always directly return zeroes instead. ++ +*WARNING:* Use this option only in very specific cases. This option is +available since Linux kernel version 4.5. + +*--no-superblock*:: +Create or use dm-verity without permanent on-disk superblock. + *--root-hash-file=FILE*:: Path to file with stored root hash in hex-encoded text. @@ -213,37 +220,29 @@ Path to root hash signature file used to verify the root hash (in kernel). This feature requires Linux kernel version 5.4 or more recent. +*--salt=hex string*:: +Salt used for format or verification. Format is a hexadecimal string. + +*--usage*:: +Show short option help. + *--use-tasklets*:: Try to use kernel tasklets in dm-verity driver for performance reasons. This option is available since Linux kernel version 6.0. -*--deferred*:: -Defers device removal in *close* command until the last user closes -it. - -*--cancel-deferred*:: -Removes a previously configured deferred device removal in *close* -command. +*--uuid=UUID*:: +Use the provided UUID for format command instead of generating new +one. ++ +The UUID must be provided in standard UUID format, e.g. +12345678-1234-1234-1234-123456789abc. *--verbose, -v*:: Print more information on command execution. -*--debug*:: -Run in debug mode with full diagnostic logs. Debug output lines are -always prefixed by *#*. - *--version, -V*:: Show the program version. -*--batch-mode, -q*:: -Do not ask for confirmation. - -*--usage*:: -Show short option help. - -*--help, -?*:: -Show help text and default parameters. - == RETURN CODES Veritysetup returns *0* on success and a non-zero value on error. diff --git a/meson.build b/meson.build index b26c71c..1b8d504 100644 --- a/meson.build +++ b/meson.build @@ -2,7 +2,7 @@ project('cryptsetup', 'c', default_options: [ 'prefix=/usr' ], meson_version: '>=0.64', - version: '2.7.0') + version: '2.7.1') libcryptsetup_version = '12.10.0' @@ -512,6 +512,9 @@ elif get_option('crypto-backend') == 'openssl' conf.set10('HAVE_DECL_OSSL_KDF_PARAM_ARGON2_VERSION', cc.has_header_symbol('openssl/core_names.h', 'OSSL_KDF_PARAM_ARGON2_VERSION', dependencies: crypto_backend_library)) + if conf.get('HAVE_DECL_OSSL_KDF_PARAM_ARGON2_VERSION') == 1 + use_internal_argon2 = false + endif elif get_option('crypto-backend') == 'nss' if get_option('fips') error('nss crypto backend is not supported with FIPS enabled') @@ -560,7 +563,7 @@ threads = [] use_internal_sse_argon2 = false if not use_internal_argon2 or get_option('argon-implementation') == 'none' if get_option('argon-implementation') == 'internal' or get_option('argon-implementation') == 'libargon2' - warning('Argon2 in crypto library is used; internal Argon2 options are ignored.') + message('Argon2 in crypto library is used; internal Argon2 options are ignored.') endif conf.set10('USE_INTERNAL_ARGON2', false, description: 'Use internal Argon2.') diff --git a/misc/fedora/cryptsetup.spec b/misc/fedora/cryptsetup.spec index 44cde6e..8d1a522 100644 --- a/misc/fedora/cryptsetup.spec +++ b/misc/fedora/cryptsetup.spec @@ -2,13 +2,13 @@ Summary: Utility for setting up encrypted disks Name: cryptsetup -Version: 2.7.0 +Version: 2.7.1 Release: 1%{?dist} License: GPL-2.0-or-later WITH cryptsetup-OpenSSL-exception AND LGPL-2.1-or-later WITH cryptsetup-OpenSSL-exception URL: https://gitlab.com/cryptsetup/cryptsetup BuildRequires: autoconf, automake, libtool, gettext-devel, BuildRequires: openssl-devel, popt-devel, device-mapper-devel -BuildRequires: libuuid-devel, gcc, json-c-devel, libargon2-devel +BuildRequires: libuuid-devel, gcc, json-c-devel BuildRequires: libpwquality-devel, libblkid-devel BuildRequires: make libssh-devel BuildRequires: asciidoctor @@ -70,7 +70,7 @@ disk integrity protection using dm-integrity kernel module. rm -f man/*.8 ./autogen.sh -%configure --enable-fips --enable-pwquality --enable-libargon2 --enable-asciidoc +%configure --enable-fips --enable-pwquality --enable-asciidoc %make_build %install diff --git a/po/cryptsetup.pot b/po/cryptsetup.pot index b3804b0..aeeef70 100644 --- a/po/cryptsetup.pot +++ b/po/cryptsetup.pot @@ -5,9 +5,9 @@ #, fuzzy msgid "" msgstr "" -"Project-Id-Version: cryptsetup 2.7.0\n" +"Project-Id-Version: cryptsetup 2.7.1\n" "Report-Msgid-Bugs-To: cryptsetup@lists.linux.dev\n" -"POT-Creation-Date: 2024-01-24 09:44+0100\n" +"POT-Creation-Date: 2024-03-07 15:42+0100\n" "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n" "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n" "Language-Team: LANGUAGE <LL@li.org>\n" @@ -191,7 +191,7 @@ msgstr "" #: lib/luks2/luks2_json_metadata.c:1374 src/cryptsetup.c:1878 #: src/cryptsetup.c:2059 src/cryptsetup.c:2114 src/cryptsetup.c:2319 #: src/cryptsetup.c:2489 src/cryptsetup.c:2770 src/cryptsetup.c:3078 -#: src/cryptsetup.c:3146 src/utils_reencrypt.c:1488 +#: src/cryptsetup.c:3146 src/utils_reencrypt.c:1498 #: src/utils_reencrypt_luks1.c:1192 tokens/ssh/cryptsetup-ssh.c:85 #, c-format msgid "Device %s is not a valid LUKS device." @@ -760,7 +760,7 @@ msgid "Cannot read requested amount of data." msgstr "" #: lib/utils_device.c:213 lib/utils_storage_wrappers.c:110 -#: lib/luks1/keyencryption.c:91 src/utils_reencrypt.c:1461 +#: lib/luks1/keyencryption.c:91 src/utils_reencrypt.c:1471 #, c-format msgid "Device %s does not exist or access denied." msgstr "" @@ -2111,7 +2111,7 @@ msgid "Enter token %d PIN: " msgstr "" #: src/cryptsetup.c:196 src/cryptsetup.c:1182 src/cryptsetup.c:1523 -#: src/utils_reencrypt.c:1137 src/utils_reencrypt_luks1.c:517 +#: src/utils_reencrypt.c:1146 src/utils_reencrypt_luks1.c:517 #: src/utils_reencrypt_luks1.c:580 msgid "No known cipher specification pattern detected." msgstr "" @@ -2149,7 +2149,7 @@ msgid "" msgstr "" #: src/cryptsetup.c:266 src/cryptsetup.c:1368 src/cryptsetup.c:1566 -#: src/integritysetup.c:197 src/utils_reencrypt.c:1346 +#: src/integritysetup.c:197 src/utils_reencrypt.c:1355 #, c-format msgid "Blkid scan failed for %s." msgstr "" @@ -2165,7 +2165,7 @@ msgstr "" #: src/cryptsetup.c:1375 src/cryptsetup.c:1500 src/cryptsetup.c:1578 #: src/cryptsetup.c:2622 src/cryptsetup.c:3049 src/integritysetup.c:187 #: src/utils_reencrypt.c:138 src/utils_reencrypt.c:314 -#: src/utils_reencrypt.c:764 +#: src/utils_reencrypt.c:772 msgid "Operation aborted.\n" msgstr "" @@ -3549,37 +3549,37 @@ msgstr "" msgid "Can't do passphrase verification on non-tty inputs." msgstr "" -#: src/utils_luks.c:183 +#: src/utils_luks.c:186 #, c-format msgid "Failed to open file %s in read-only mode." msgstr "" -#: src/utils_luks.c:196 +#: src/utils_luks.c:199 msgid "Provide valid LUKS2 token JSON:\n" msgstr "" -#: src/utils_luks.c:203 +#: src/utils_luks.c:206 msgid "Failed to read JSON file." msgstr "" -#: src/utils_luks.c:208 +#: src/utils_luks.c:211 msgid "" "\n" "Read interrupted." msgstr "" -#: src/utils_luks.c:249 +#: src/utils_luks.c:252 #, c-format msgid "Failed to open file %s in write mode." msgstr "" -#: src/utils_luks.c:258 +#: src/utils_luks.c:261 msgid "" "\n" "Write interrupted." msgstr "" -#: src/utils_luks.c:262 +#: src/utils_luks.c:265 msgid "Failed to write JSON file." msgstr "" @@ -3667,7 +3667,7 @@ msgid "" "(block size: %<PRIu32> bytes) detected on device %s." msgstr "" -#: src/utils_reencrypt.c:533 src/utils_reencrypt.c:1412 +#: src/utils_reencrypt.c:533 src/utils_reencrypt.c:1421 msgid "" "Encryption without detached header (--header) is not possible without data " "device size reduction (--reduce-device-size)." @@ -3723,124 +3723,124 @@ msgstr "" msgid "Original LUKS2 header restore failed." msgstr "" -#: src/utils_reencrypt.c:759 +#: src/utils_reencrypt.c:765 #, c-format msgid "" "Header file %s does not exist. Do you want to initialize LUKS2 decryption of " "device %s and export LUKS2 header to file %s?" msgstr "" -#: src/utils_reencrypt.c:807 +#: src/utils_reencrypt.c:815 msgid "Failed to add read/write permissions to exported header file." msgstr "" -#: src/utils_reencrypt.c:860 +#: src/utils_reencrypt.c:869 #, c-format msgid "Reencryption initialization failed. Header backup is available in %s." msgstr "" -#: src/utils_reencrypt.c:888 +#: src/utils_reencrypt.c:897 msgid "" "LUKS2 decryption is supported with detached header device only (with data " "offset set to 0)." msgstr "" -#: src/utils_reencrypt.c:1023 src/utils_reencrypt.c:1032 +#: src/utils_reencrypt.c:1032 src/utils_reencrypt.c:1041 msgid "Not enough free keyslots for reencryption." msgstr "" -#: src/utils_reencrypt.c:1053 src/utils_reencrypt_luks1.c:1100 +#: src/utils_reencrypt.c:1062 src/utils_reencrypt_luks1.c:1100 msgid "" "Key file can be used only with --key-slot or with exactly one key slot " "active." msgstr "" -#: src/utils_reencrypt.c:1062 src/utils_reencrypt_luks1.c:1147 +#: src/utils_reencrypt.c:1071 src/utils_reencrypt_luks1.c:1147 #: src/utils_reencrypt_luks1.c:1158 #, c-format msgid "Enter passphrase for key slot %d: " msgstr "" -#: src/utils_reencrypt.c:1074 +#: src/utils_reencrypt.c:1083 #, c-format msgid "Enter passphrase for key slot %u: " msgstr "" -#: src/utils_reencrypt.c:1126 +#: src/utils_reencrypt.c:1135 #, c-format msgid "Switching data encryption cipher to %s.\n" msgstr "" -#: src/utils_reencrypt.c:1180 +#: src/utils_reencrypt.c:1189 msgid "No data segment parameters changed. Reencryption aborted." msgstr "" -#: src/utils_reencrypt.c:1282 +#: src/utils_reencrypt.c:1291 msgid "" "Encryption sector size increase on offline device is not supported.\n" "Activate the device first or use --force-offline-reencrypt option " "(dangerous!)." msgstr "" -#: src/utils_reencrypt.c:1322 src/utils_reencrypt_luks1.c:726 +#: src/utils_reencrypt.c:1331 src/utils_reencrypt_luks1.c:726 #: src/utils_reencrypt_luks1.c:798 msgid "" "\n" "Reencryption interrupted." msgstr "" -#: src/utils_reencrypt.c:1327 +#: src/utils_reencrypt.c:1336 msgid "Resuming LUKS reencryption in forced offline mode.\n" msgstr "" -#: src/utils_reencrypt.c:1350 +#: src/utils_reencrypt.c:1359 #, c-format msgid "Device %s contains broken LUKS metadata. Aborting operation." msgstr "" -#: src/utils_reencrypt.c:1366 src/utils_reencrypt.c:1388 +#: src/utils_reencrypt.c:1375 src/utils_reencrypt.c:1397 #, c-format msgid "Device %s is already LUKS device. Aborting operation." msgstr "" -#: src/utils_reencrypt.c:1394 +#: src/utils_reencrypt.c:1403 #, c-format msgid "Device %s is already in LUKS reencryption. Aborting operation." msgstr "" -#: src/utils_reencrypt.c:1476 +#: src/utils_reencrypt.c:1486 msgid "LUKS2 decryption requires --header option." msgstr "" -#: src/utils_reencrypt.c:1524 +#: src/utils_reencrypt.c:1534 msgid "Command requires device as argument." msgstr "" -#: src/utils_reencrypt.c:1537 +#: src/utils_reencrypt.c:1547 #, c-format msgid "Conflicting versions. Device %s is LUKS1." msgstr "" -#: src/utils_reencrypt.c:1543 +#: src/utils_reencrypt.c:1553 #, c-format msgid "Conflicting versions. Device %s is in LUKS1 reencryption." msgstr "" -#: src/utils_reencrypt.c:1549 +#: src/utils_reencrypt.c:1559 #, c-format msgid "Conflicting versions. Device %s is LUKS2." msgstr "" -#: src/utils_reencrypt.c:1555 +#: src/utils_reencrypt.c:1565 #, c-format msgid "Conflicting versions. Device %s is in LUKS2 reencryption." msgstr "" -#: src/utils_reencrypt.c:1561 +#: src/utils_reencrypt.c:1571 msgid "LUKS2 reencryption already initialized. Aborting operation." msgstr "" -#: src/utils_reencrypt.c:1568 +#: src/utils_reencrypt.c:1578 msgid "Device reencryption not in progress." msgstr "" @@ -17,6 +17,7 @@ # hash → haš # key slot → pozice klíče # keyring → klíčenka +# link (a key) → přidat (klíč) # online mode → (režim) za běhu # OPAL → Opal (správný zápis je takto) # plain/LUKS1 crypt → šifra plain/LUKS1 („plain“ nepřekládat) @@ -31,10 +32,10 @@ # msgid "" msgstr "" -"Project-Id-Version: cryptsetup 2.7.0-rc1\n" +"Project-Id-Version: cryptsetup 2.7.1-rc0\n" "Report-Msgid-Bugs-To: cryptsetup@lists.linux.dev\n" -"POT-Creation-Date: 2023-12-20 15:16+0100\n" -"PO-Revision-Date: 2024-01-06 14:50+01:00\n" +"POT-Creation-Date: 2024-02-29 20:38+0100\n" +"PO-Revision-Date: 2024-03-04 20:30+01:00\n" "Last-Translator: Petr Pisar <petr.pisar@atlas.cz>\n" "Language-Team: Czech <translation-team-cs@lists.sourceforge.net>\n" "Language: cs\n" @@ -142,636 +143,644 @@ msgstr "Požadována neznámá kvalita generátoru náhodných čísel." msgid "Error reading from RNG." msgstr "Chyba při čtení z generátoru náhodných čísel." -#: lib/setup.c:261 +#: lib/setup.c:262 msgid "OPAL support is disabled in libcryptsetup." msgstr "Podpora pro Opal je v libcryptsetup vypnuta." -#: lib/setup.c:263 +#: lib/setup.c:264 #, c-format msgid "Device %s or kernel does not support OPAL encryption." msgstr "Zařízení %s nebo jádro nepodporuje šifrování Opal." -#: lib/setup.c:279 +#: lib/setup.c:280 msgid "Cannot initialize crypto RNG backend." msgstr "Implementaci šifrovacího generátoru náhodných čísel nelze inicializovat." -#: lib/setup.c:285 +#: lib/setup.c:286 msgid "Cannot initialize crypto backend." msgstr "Implementaci šifrování nelze inicializovat." -#: lib/setup.c:317 lib/setup.c:2777 lib/verity/verity.c:122 +#: lib/setup.c:318 lib/setup.c:2778 lib/verity/verity.c:122 #, c-format msgid "Hash algorithm %s not supported." msgstr "Hašovací algoritmus %s není podporován." -#: lib/setup.c:320 lib/loopaes/loopaes.c:90 +#: lib/setup.c:321 lib/loopaes/loopaes.c:90 #, c-format msgid "Key processing error (using hash %s)." msgstr "Chyba zpracování klíče (za použití haše %s)." -#: lib/setup.c:391 lib/setup.c:428 +#: lib/setup.c:392 lib/setup.c:429 msgid "Cannot determine device type. Incompatible activation of device?" msgstr "Druh zařízení nelze určit. Nekompatibilní aktivace zařízení?" -#: lib/setup.c:397 lib/setup.c:3971 +#: lib/setup.c:398 lib/setup.c:3973 msgid "This operation is supported only for LUKS device." msgstr "Tato operace je podporována jen u zařízení LUKS." -#: lib/setup.c:434 +#: lib/setup.c:435 msgid "This operation is supported only for LUKS2 device." msgstr "Tato operace je podporována jen u zařízení LUKS2." -#: lib/setup.c:491 lib/luks2/luks2_reencrypt.c:3056 +#: lib/setup.c:492 lib/luks2/luks2_reencrypt.c:3071 msgid "All key slots full." msgstr "Všechny pozice klíčů jsou obsazeny." -#: lib/setup.c:502 +#: lib/setup.c:503 #, c-format msgid "Key slot %d is invalid, please select between 0 and %d." msgstr "Pozice klíče %d není platná, prosím, vyberte číslo mezi 0 a %d." -#: lib/setup.c:508 +#: lib/setup.c:509 #, c-format msgid "Key slot %d is full, please select another one." msgstr "Pozice klíče %d je obsazena, prosím, vyberte jinou." -#: lib/setup.c:619 lib/setup.c:3672 +#: lib/setup.c:620 lib/setup.c:3673 msgid "Device size is not aligned to device logical block size." msgstr "Velikost zařízení není zarovnaná na velikost logického sektoru zařízení." -#: lib/setup.c:717 +#: lib/setup.c:718 #, c-format msgid "Header detected but device %s is too small." msgstr "Nalezena hlavička, ale zařízení %s je příliš malé." -#: lib/setup.c:758 lib/setup.c:3563 lib/setup.c:5163 -#: lib/luks2/luks2_reencrypt.c:3848 lib/luks2/luks2_reencrypt.c:4305 +#: lib/setup.c:759 lib/setup.c:3564 lib/setup.c:5351 lib/setup.c:5371 +#: lib/luks2/luks2_reencrypt.c:3863 lib/luks2/luks2_reencrypt.c:4320 msgid "This operation is not supported for this device type." msgstr "Tato operace není na zařízení tohoto typu podporována." -#: lib/setup.c:763 +#: lib/setup.c:764 msgid "Illegal operation with reencryption in-progress." msgstr "Zakázaná operace spolu s probíhajícím přešifrování." -#: lib/setup.c:895 +#: lib/setup.c:896 msgid "Failed to rollback LUKS2 metadata in memory." msgstr "Nahrání původních metadat LUKS2 do paměti selhalo." -#: lib/setup.c:982 lib/luks1/keymanage.c:249 lib/luks1/keymanage.c:527 -#: lib/luks2/luks2_json_metadata.c:1374 src/cryptsetup.c:1799 -#: src/cryptsetup.c:1962 src/cryptsetup.c:2017 src/cryptsetup.c:2222 -#: src/cryptsetup.c:2392 src/cryptsetup.c:2673 src/cryptsetup.c:2981 -#: src/cryptsetup.c:3049 src/utils_reencrypt.c:1488 +#: lib/setup.c:983 lib/luks1/keymanage.c:249 lib/luks1/keymanage.c:527 +#: lib/luks2/luks2_json_metadata.c:1374 src/cryptsetup.c:1878 +#: src/cryptsetup.c:2059 src/cryptsetup.c:2114 src/cryptsetup.c:2319 +#: src/cryptsetup.c:2489 src/cryptsetup.c:2770 src/cryptsetup.c:3078 +#: src/cryptsetup.c:3146 src/utils_reencrypt.c:1497 #: src/utils_reencrypt_luks1.c:1192 tokens/ssh/cryptsetup-ssh.c:85 #, c-format msgid "Device %s is not a valid LUKS device." msgstr "Zařízení %s není platným zařízením LUKS." -#: lib/setup.c:985 lib/luks1/keymanage.c:530 +#: lib/setup.c:986 lib/luks1/keymanage.c:530 #, c-format msgid "Unsupported LUKS version %d." msgstr "Nepodporovaná verze LUKS %d." -#: lib/setup.c:1358 +#: lib/setup.c:1359 #, c-format msgid "No known cipher specification pattern detected for active device %s." msgstr "Na aktivním zařízení %s nebyl nalezen žádný známý vzorek určující šifrování." -#: lib/setup.c:1604 lib/setup.c:3317 lib/setup.c:3399 lib/setup.c:3411 -#: lib/setup.c:3581 lib/setup.c:5755 +#: lib/setup.c:1605 lib/setup.c:3318 lib/setup.c:3400 lib/setup.c:3412 +#: lib/setup.c:3582 lib/setup.c:5995 #, c-format msgid "Device %s is not active." msgstr "Zařízení %s není aktivní." -#: lib/setup.c:1621 +#: lib/setup.c:1622 #, c-format msgid "Underlying device for crypt device %s disappeared." msgstr "Zařízení nižší úrovně pod šifrovaným zařízením %s zmizelo." -#: lib/setup.c:1703 +#: lib/setup.c:1704 msgid "Invalid plain crypt parameters." msgstr "Neplatné parametry plain šifry." -#: lib/setup.c:1708 lib/setup.c:2680 +#: lib/setup.c:1709 lib/setup.c:2681 msgid "Invalid key size." msgstr "Neplatná velikost klíče." -#: lib/setup.c:1713 lib/setup.c:2685 lib/setup.c:2888 +#: lib/setup.c:1714 lib/setup.c:2686 lib/setup.c:2889 msgid "UUID is not supported for this crypt type." msgstr "UUID není na šifře tohoto typu podporováno." -#: lib/setup.c:1718 lib/setup.c:2690 +#: lib/setup.c:1719 lib/setup.c:2691 msgid "Detached metadata device is not supported for this crypt type." msgstr "Zařízení s oddělenými metadaty není na šifře tohoto typu podporováno." -#: lib/setup.c:1728 lib/setup.c:1963 lib/luks2/luks2_reencrypt.c:3012 -#: src/cryptsetup.c:1467 src/cryptsetup.c:3726 +#: lib/setup.c:1729 lib/setup.c:1964 lib/luks2/luks2_reencrypt.c:3027 +#: src/cryptsetup.c:1475 src/cryptsetup.c:3847 msgid "Unsupported encryption sector size." msgstr "Nepodporovaná velikost šifrovaného sektoru." -#: lib/setup.c:1736 lib/setup.c:1992 lib/setup.c:3666 +#: lib/setup.c:1737 lib/setup.c:1993 lib/setup.c:3667 msgid "Device size is not aligned to requested sector size." msgstr "Velikost zařízení není zarovnaná na požadovanou velikost sektoru." -#: lib/setup.c:1788 lib/setup.c:2025 lib/setup.c:2357 +#: lib/setup.c:1789 lib/setup.c:2026 lib/setup.c:2358 msgid "Can't format LUKS without device." msgstr "LUKS nelze bez zařízení naformátovat." -#: lib/setup.c:1794 lib/setup.c:2031 lib/setup.c:2363 +#: lib/setup.c:1795 lib/setup.c:2032 lib/setup.c:2364 msgid "Requested data alignment is not compatible with data offset." msgstr "Požadované zarovnání dat není slučitelné s polohou dat." -#: lib/setup.c:1834 lib/setup.c:2049 +#: lib/setup.c:1835 lib/setup.c:2050 msgid "WARNING: DAX device can corrupt data as it does not guarantee atomic sector updates.\n" msgstr "POZOR: Zařízené DAX může poškodit data, protože nezaručuje atomické aktualizace sektorů.\n" -#: lib/setup.c:1872 lib/setup.c:2144 lib/setup.c:2165 lib/setup.c:2541 -#: lib/setup.c:2587 lib/setup.c:2900 +#: lib/setup.c:1873 lib/setup.c:2145 lib/setup.c:2166 lib/setup.c:2542 +#: lib/setup.c:2588 lib/setup.c:2901 #, c-format msgid "Cannot wipe header on device %s." msgstr "Ze zařízení %s nelze odstranit hlavičku." -#: lib/setup.c:1885 lib/setup.c:2204 +#: lib/setup.c:1886 lib/setup.c:2205 #, c-format msgid "Device %s is too small for activation, there is no remaining space for data.\n" msgstr "Zařízení %s je na aktivaci příliš malé. Nezbývá žádné místo pro data.\n" -#: lib/setup.c:1925 +#: lib/setup.c:1926 msgid "Volume key is too small for encryption with integrity extensions." msgstr "Klíč svazku je příliš malý na šifrovaní s rozšířeními pro integritu." -#: lib/setup.c:1934 +#: lib/setup.c:1935 #, c-format msgid "Cipher %s-%s (key size %zd bits) is not available." msgstr "Šifra %s-%s (velikost klíče %zd bitů) není dostupná." -#: lib/setup.c:1973 +#: lib/setup.c:1974 msgid "WARNING: The device activation will fail, dm-crypt is missing support for requested encryption sector size.\n" msgstr "POZOR: Aktivace zařízení selže, dm-crypt nepodporuje požadovanou velikost šifrovaného sektoru.\n" -#: lib/setup.c:2147 lib/setup.c:2484 lib/setup.c:2544 lib/utils_device.c:917 -#: lib/luks1/keyencryption.c:255 lib/luks2/luks2_reencrypt.c:3080 -#: lib/luks2/luks2_reencrypt.c:4364 +#: lib/setup.c:2148 lib/setup.c:2485 lib/setup.c:2545 lib/utils_device.c:917 +#: lib/luks1/keyencryption.c:255 lib/luks2/luks2_reencrypt.c:3095 +#: lib/luks2/luks2_reencrypt.c:4380 #, c-format msgid "Device %s is too small." msgstr "Zařízení %s je příliš malé." -#: lib/setup.c:2158 lib/setup.c:2184 lib/setup.c:2580 lib/setup.c:2626 +#: lib/setup.c:2159 lib/setup.c:2185 lib/setup.c:2581 lib/setup.c:2627 #, c-format msgid "Cannot format device %s in use." msgstr "Zařízení %s, které se používá, nelze formátovat." -#: lib/setup.c:2161 lib/setup.c:2187 lib/setup.c:2583 lib/setup.c:2629 +#: lib/setup.c:2162 lib/setup.c:2188 lib/setup.c:2584 lib/setup.c:2630 #, c-format msgid "Cannot format device %s, permission denied." msgstr "Zařízení %s nelze formátovat, povolení zamítnuto." # FIXME "format integrity" is nonsense -#: lib/setup.c:2173 lib/setup.c:2600 lib/setup.c:2960 +#: lib/setup.c:2174 lib/setup.c:2601 lib/setup.c:2961 #, c-format msgid "Cannot format integrity for device %s." msgstr "Zařízení %s není možné formátovat integritu." -#: lib/setup.c:2191 lib/setup.c:2637 +#: lib/setup.c:2192 lib/setup.c:2638 #, c-format msgid "Cannot format device %s." msgstr "Zařízení %s nelze formátovat." -#: lib/setup.c:2234 +#: lib/setup.c:2235 msgid "Cannot get OPAL alignment parameters." msgstr "Parametry zarovnání Opal nelze získat." -#: lib/setup.c:2243 +#: lib/setup.c:2244 msgid "Bogus OPAL logical block size." msgstr "Chybná velikost logického bloku Opal." -#: lib/setup.c:2249 +#: lib/setup.c:2250 msgid "Requested data offset is not compatible with OPAL block size." msgstr "Požadovaná poloha dat není slučitelná s velikostí bloku Opal." -#: lib/setup.c:2256 +#: lib/setup.c:2257 msgid "Requested data alignment is not compatible with OPAL alignment." msgstr "Požadované zarovnání dat není slučitelné se zarovnáním Opal." -#: lib/setup.c:2276 +#: lib/setup.c:2277 msgid "Data offset does not satisfy OPAL alignment requirements." msgstr "Poloha dat nesplňuje požadavky Opal na zarovnání." -#: lib/setup.c:2289 +#: lib/setup.c:2290 msgid "Requested data alignment does not satisfy locking range alignment requirements." msgstr "Požadované zarovnání dat nesplňuje požadavky na zarovnání uzamykatelné oblasti." # TODO: Pluralize -#: lib/setup.c:2494 +#: lib/setup.c:2495 #, c-format msgid "Compensating device size by %<PRIu64> sectors to align it with OPAL alignment granularity." msgstr "Velikost zařízení byla dorovnána %<PRIu64> sektory, aby lícovala s granularitou zarovnání Opal." -#: lib/setup.c:2552 lib/setup.c:4068 lib/setup.c:4223 lib/utils_wipe.c:368 +#: lib/setup.c:2553 lib/setup.c:4070 lib/setup.c:4253 lib/utils_wipe.c:368 #: lib/luks2/luks2_json_metadata.c:2703 lib/luks2/luks2_json_metadata.c:2955 #, c-format msgid "Failed to acquire OPAL lock on device %s." msgstr "Získání zámku Opal na zařízení %s selhalo." -#: lib/setup.c:2561 +#: lib/setup.c:2562 msgid "Incorrect OPAL Admin key." msgstr "Nesprávný klíč správce Opal." -#: lib/setup.c:2563 +#: lib/setup.c:2564 msgid "Cannot setup OPAL segment." msgstr "Část Opal nelze nastavit." -#: lib/setup.c:2633 +#: lib/setup.c:2634 #, c-format msgid "Cannot format device %s, OPAL device seems to be fully write-protected now." msgstr "Zařízení %s nelze formátovat, zařízení Opal je asi zcela chráněno proti zápisu." -#: lib/setup.c:2635 +#: lib/setup.c:2636 msgid "This is perhaps a bug in firmware. Run OPAL PSID reset and reconnect for recovery." msgstr "Toto je snad chyba ve firmwaru. Resetujte Opal zařízení pomocí PSID a znovu jej zapojte." -#: lib/setup.c:2655 +#: lib/setup.c:2656 #, c-format msgid "Locking range %d reset on device %s failed." msgstr "Reset uzamykatelné oblasti %d na zařízení %s selhal." -#: lib/setup.c:2675 +#: lib/setup.c:2676 msgid "Can't format LOOPAES without device." msgstr "LOOPAES nelze bez zařízení naformátovat." -#: lib/setup.c:2720 +#: lib/setup.c:2721 msgid "Can't format VERITY without device." msgstr "VERITY nelze bez zařízení naformátovat." -#: lib/setup.c:2731 lib/verity/verity.c:101 +#: lib/setup.c:2732 lib/verity/verity.c:101 #, c-format msgid "Unsupported VERITY hash type %d." msgstr "Nepodporovaný druh VERITY haše %d." -#: lib/setup.c:2737 lib/verity/verity.c:109 +#: lib/setup.c:2738 lib/verity/verity.c:109 msgid "Unsupported VERITY block size." msgstr "Nepodporovaná velikost bloku VERITY." -#: lib/setup.c:2742 lib/verity/verity.c:74 +#: lib/setup.c:2743 lib/verity/verity.c:74 msgid "Unsupported VERITY hash offset." msgstr "Nepodporovaná poloha haše VERITY." -#: lib/setup.c:2747 +#: lib/setup.c:2748 msgid "Unsupported VERITY FEC offset." msgstr "Nepodporovaná poloha VERITY FEC." -#: lib/setup.c:2771 +#: lib/setup.c:2772 msgid "Data area overlaps with hash area." msgstr "Oblast dat se překrývá s oblastí haše." -#: lib/setup.c:2796 +#: lib/setup.c:2797 msgid "Hash area overlaps with FEC area." msgstr "Oblast FEC se překrývá s oblastí haše." -#: lib/setup.c:2803 +#: lib/setup.c:2804 msgid "Data area overlaps with FEC area." msgstr "Oblast dat se překrývá s oblastí FEC." -#: lib/setup.c:2939 +#: lib/setup.c:2940 #, c-format msgid "WARNING: Requested tag size %d bytes differs from %s size output (%d bytes).\n" msgstr "POZOR: Požadovaná velikost značky %d bajtů se liší od výstupu velikosti %s (%d bajtů).\n" -#: lib/setup.c:3018 +#: lib/setup.c:3019 #, c-format msgid "Unknown crypt device type %s requested." msgstr "Požadován neznámý typ šifrovaného zařízení %s." -#: lib/setup.c:3325 lib/setup.c:3404 lib/setup.c:3417 +#: lib/setup.c:3326 lib/setup.c:3405 lib/setup.c:3418 #, c-format msgid "Unsupported parameters on device %s." msgstr "Nepodporované parametry na zařízení %s." -#: lib/setup.c:3331 lib/setup.c:3424 lib/luks2/luks2_reencrypt.c:2908 -#: lib/luks2/luks2_reencrypt.c:3145 lib/luks2/luks2_reencrypt.c:3540 +#: lib/setup.c:3332 lib/setup.c:3425 lib/luks2/luks2_reencrypt.c:2923 +#: lib/luks2/luks2_reencrypt.c:3160 lib/luks2/luks2_reencrypt.c:3555 #, c-format msgid "Mismatching parameters on device %s." msgstr "Neodpovídající parametry na zařízení %s." -#: lib/setup.c:3448 +#: lib/setup.c:3449 msgid "Crypt devices mismatch." msgstr "Zařízení dmcryptu si neodpovídají." -#: lib/setup.c:3485 lib/setup.c:3490 lib/luks2/luks2_reencrypt.c:2390 -#: lib/luks2/luks2_reencrypt.c:2924 lib/luks2/luks2_reencrypt.c:4109 +#: lib/setup.c:3486 lib/setup.c:3491 lib/luks2/luks2_reencrypt.c:2405 +#: lib/luks2/luks2_reencrypt.c:2939 lib/luks2/luks2_reencrypt.c:4124 #, c-format msgid "Failed to reload device %s." msgstr "Zařízení %s nebylo možné znovu zavést." -#: lib/setup.c:3496 lib/setup.c:3502 lib/luks2/luks2_reencrypt.c:2361 -#: lib/luks2/luks2_reencrypt.c:2368 lib/luks2/luks2_reencrypt.c:2938 +#: lib/setup.c:3497 lib/setup.c:3503 lib/luks2/luks2_reencrypt.c:2376 +#: lib/luks2/luks2_reencrypt.c:2383 lib/luks2/luks2_reencrypt.c:2953 #, c-format msgid "Failed to suspend device %s." msgstr "Zařízení %s nebylo možné pozastavit." -#: lib/setup.c:3508 lib/luks2/luks2_reencrypt.c:2375 -#: lib/luks2/luks2_reencrypt.c:2959 lib/luks2/luks2_reencrypt.c:4022 -#: lib/luks2/luks2_reencrypt.c:4113 +#: lib/setup.c:3509 lib/luks2/luks2_reencrypt.c:2390 +#: lib/luks2/luks2_reencrypt.c:2974 lib/luks2/luks2_reencrypt.c:4037 +#: lib/luks2/luks2_reencrypt.c:4128 #, c-format msgid "Failed to resume device %s." msgstr "Zařízení %s nebylo možné probudit." -#: lib/setup.c:3523 +#: lib/setup.c:3524 #, c-format msgid "Fatal error while reloading device %s (on top of device %s)." msgstr "Nepřekonatelná chyba při zavádění zařízení %s (nad zařízením %s)." -#: lib/setup.c:3526 lib/setup.c:3528 +#: lib/setup.c:3527 lib/setup.c:3529 #, c-format msgid "Failed to switch device %s to dm-error." msgstr "Zařízení %s nebylo možné přepnout do dm-error." -#: lib/setup.c:3568 +#: lib/setup.c:3569 msgid "Can not resize LUKS2 device with static size." msgstr "Zařízení LUKS2 se statickou velikostí nelze změnit velikost." -#: lib/setup.c:3613 +#: lib/setup.c:3614 msgid "Cannot resize loop device." msgstr "Zařízení zpětné smyčky nelze změnit velikost." -#: lib/setup.c:3657 +#: lib/setup.c:3658 msgid "WARNING: Maximum size already set or kernel doesn't support resize.\n" msgstr "" "POZOR: Maximální velikost je již nastavena nebo změna velikosti není jádrem\n" "podporována.\n" -#: lib/setup.c:3723 +#: lib/setup.c:3724 msgid "Resize failed, the kernel doesn't support it." msgstr "Změna velikosti selhala, jádro ji nepodporuje." -#: lib/setup.c:3755 +#: lib/setup.c:3756 msgid "Do you really want to change UUID of device?" msgstr "Opravdu chcete změnit UUID zařízení?" -#: lib/setup.c:3847 +#: lib/setup.c:3848 msgid "Header backup file does not contain compatible LUKS header." msgstr "Soubor se zálohou hlavičky neobsahuje kompatibilní hlavičku LUKS." -#: lib/setup.c:3956 +#: lib/setup.c:3958 #, c-format msgid "Volume %s is not active." msgstr "Svazek %s není aktivní." -#: lib/setup.c:4022 +#: lib/setup.c:4024 #, c-format msgid "Volume %s is already suspended." msgstr "Svazek %s je již uspán." -#: lib/setup.c:4050 +#: lib/setup.c:4052 #, c-format msgid "Suspend is not supported for device %s." msgstr "Uspání není na zařízení %s podporováno." -#: lib/setup.c:4052 lib/setup.c:4060 +#: lib/setup.c:4054 lib/setup.c:4062 #, c-format msgid "Error during suspending device %s." msgstr "Chyba při uspávání zařízení %s." -#: lib/setup.c:4074 +#: lib/setup.c:4076 #, c-format msgid "Device %s was suspended but hardware OPAL device cannot be locked." msgstr "Zařízení %s bylo uspáno, ale hardwarové zařízení Opal nelze uzamknout." -#: lib/setup.c:4106 lib/setup.c:4250 +#: lib/setup.c:4108 lib/setup.c:4280 #, c-format msgid "Resume is not supported for device %s." msgstr "Probuzení není na zařízení %s podporováno." -#: lib/setup.c:4108 lib/setup.c:4241 lib/setup.c:4252 +#: lib/setup.c:4110 lib/setup.c:4271 lib/setup.c:4282 #, c-format msgid "Error during resuming device %s." msgstr "Chyba při probouzení zařízení %s." -#: lib/setup.c:4131 -msgid "Failed to link key to the specified keyring." -msgstr "Do zadané klíčenky se nepodařilo připojit klíč." - -#: lib/setup.c:4150 +#: lib/setup.c:4129 msgid "Failed to unlink volume key from user specified keyring." msgstr "Z klíčenky zadané uživatelem se nepodařilo odpojit klíč svazku." -#: lib/setup.c:4213 lib/setup.c:4934 lib/setup.c:5549 +#: lib/setup.c:4244 lib/setup.c:4966 lib/setup.c:5787 msgid "Failed to link volume key in user defined keyring." msgstr "Do uživatelem zadané klíčenky se nepodařilo přidat klíč svazku." -#: lib/setup.c:4313 src/cryptsetup.c:2755 +#: lib/setup.c:4345 src/cryptsetup.c:2852 #, c-format msgid "Volume %s is not suspended." msgstr "Svazek %s není uspán." -#: lib/setup.c:4414 lib/setup.c:5310 lib/setup.c:5317 lib/setup.c:7176 -#: lib/setup.c:7198 lib/setup.c:7247 src/cryptsetup.c:2265 +#: lib/setup.c:4446 lib/setup.c:5106 lib/setup.c:5523 lib/setup.c:5542 +#: lib/setup.c:7416 lib/setup.c:7438 lib/setup.c:7487 src/cryptsetup.c:2362 msgid "Volume key does not match the volume." msgstr "Heslo svazku neodpovídá svazku." -#: lib/setup.c:4568 +#: lib/setup.c:4600 msgid "Failed to swap new key slot." msgstr "Záměna novou pozicí klíče se nezdařila." -#: lib/setup.c:4666 +#: lib/setup.c:4698 #, c-format msgid "Key slot %d is invalid." msgstr "Pozice klíče %d je neplatná." -#: lib/setup.c:4672 src/cryptsetup.c:1975 src/cryptsetup.c:2467 -#: src/cryptsetup.c:3149 src/cryptsetup.c:3209 +#: lib/setup.c:4704 src/cryptsetup.c:2072 src/cryptsetup.c:2564 +#: src/cryptsetup.c:3246 src/cryptsetup.c:3306 #, c-format msgid "Keyslot %d is not active." msgstr "Pozice klíče %d není aktivní." -#: lib/setup.c:4691 +#: lib/setup.c:4723 msgid "Device header overlaps with data area." msgstr "Hlavička zařízení se překrývá s datovou oblastí." -#: lib/setup.c:5041 +#: lib/setup.c:5076 lib/setup.c:5176 msgid "Reencryption in-progress. Cannot activate device." msgstr "Přešifrování již probíhá. Zařízení nelze aktivovat." -#: lib/setup.c:5043 lib/luks2/luks2_json_metadata.c:2861 -#: lib/luks2/luks2_reencrypt.c:3646 +#: lib/setup.c:5078 lib/setup.c:5178 lib/luks2/luks2_json_metadata.c:2861 +#: lib/luks2/luks2_reencrypt.c:3661 msgid "Failed to get reencryption lock." msgstr "Získání zámku pro přešifrování selhalo." -#: lib/setup.c:5056 lib/luks2/luks2_reencrypt.c:3665 +#: lib/setup.c:5090 +msgid "LUKS2 reencryption recovery using volume key(s) failed." +msgstr "Obnova přešifrování LUKS2 pomocí klíčů svazku selhala." + +#: lib/setup.c:5142 lib/setup.c:5232 +msgid "Failed to link volume keys in user defined keyring." +msgstr "Do uživatelem zadané klíčenky se nepodařilo přidat klíče svazku." + +#: lib/setup.c:5191 lib/luks2/luks2_reencrypt.c:3680 msgid "LUKS2 reencryption recovery failed." -msgstr "Obnova přešifrování LUKS2 selhalo." +msgstr "Obnova přešifrování LUKS2 selhala." -#: lib/setup.c:5228 lib/setup.c:5328 lib/setup.c:5386 +#: lib/setup.c:5439 lib/setup.c:5553 lib/setup.c:5610 msgid "Device type is not properly initialized." msgstr "Typ zařízení není řádně inicializován." -#: lib/setup.c:5283 +#: lib/setup.c:5494 #, c-format msgid "Device %s already exists." msgstr "Zařízení %s již existuje." -#: lib/setup.c:5290 +#: lib/setup.c:5501 #, c-format msgid "Cannot use device %s, name is invalid or still in use." msgstr "Zařízení %s nelze použít. Název není platný nebo zařízení se stále používá." -#: lib/setup.c:5306 +#: lib/setup.c:5519 msgid "Incorrect volume key specified for plain device." msgstr "Byl zadán neplatný klíč svazku." -#: lib/setup.c:5424 +#: lib/setup.c:5533 +msgid "Reencryption volume keys do not match the volume." +msgstr "Klíče pro přešifrování svazku neodpovídají svazku." + +#: lib/setup.c:5646 msgid "Kernel keyring is not supported by the kernel." msgstr "Jaderná klíčenka není jádrem podporována." -#: lib/setup.c:5428 +#: lib/setup.c:5650 msgid "Kernel keyring missing: required for passing signature to kernel." msgstr "Jaderná klíčenka chybí: je potřeba pro předání podpisu do jádra." -#: lib/setup.c:5668 +#: lib/setup.c:5908 msgid "Incorrect root hash specified for verity device." msgstr "K zařízení VERITY byl zadán neplatný kořenový haš." -#: lib/setup.c:5711 +#: lib/setup.c:5951 msgid "OPAL does not support deferred deactivation." msgstr "Opal nepodporuje odloženou deaktivaci." -#: lib/setup.c:5727 +#: lib/setup.c:5967 #, c-format msgid "Could not cancel deferred remove from device %s." msgstr "Odložené odebrání zařízení %s nebylo možné zrušit." -#: lib/setup.c:5734 lib/setup.c:5750 lib/luks2/luks2_json_metadata.c:2915 +#: lib/setup.c:5974 lib/setup.c:5990 lib/luks2/luks2_json_metadata.c:2915 #: src/utils_reencrypt.c:116 #, c-format msgid "Device %s is still in use." msgstr "Zařízení %s se stále používá." -#: lib/setup.c:5759 +#: lib/setup.c:5999 #, c-format msgid "Invalid device %s." msgstr "Neplatné zařízení %s." -#: lib/setup.c:5899 +#: lib/setup.c:6139 msgid "Volume key buffer too small." msgstr "Vyhrazená paměť pro klíč svazku je příliš malá." -#: lib/setup.c:5916 +#: lib/setup.c:6156 msgid "Cannot retrieve volume key for LUKS2 device." msgstr "Nelze získat klíč svazku pro zařízení LUKS2." -#: lib/setup.c:5925 +#: lib/setup.c:6165 msgid "Cannot retrieve volume key for LUKS1 device." msgstr "Nelze získat klíč svazku pro zařízení LUKS1." -#: lib/setup.c:5935 +#: lib/setup.c:6175 msgid "Cannot retrieve volume key for plain device." msgstr "Nelze získat klíč svazku pro otevřené zařízení." -#: lib/setup.c:5943 +#: lib/setup.c:6183 msgid "Cannot retrieve root hash for verity device." msgstr "K zařízení VERITY nelze získat kořenový otisk." -#: lib/setup.c:5950 +#: lib/setup.c:6190 msgid "Cannot retrieve volume key for BITLK device." msgstr "Nelze získat klíč svazku pro zařízení BITLK." -#: lib/setup.c:5955 +#: lib/setup.c:6195 msgid "Cannot retrieve volume key for FVAULT2 device." msgstr "Nelze získat klíč svazku pro zařízení FVAULT2." -#: lib/setup.c:5957 +#: lib/setup.c:6197 #, c-format msgid "This operation is not supported for %s crypt device." msgstr "Na šifrovaném zařízení %s není tato operace podporována." -#: lib/setup.c:6141 lib/setup.c:6152 +#: lib/setup.c:6381 lib/setup.c:6392 msgid "Dump operation is not supported for this device type." msgstr "Operace výpisu není na zařízení tohoto typu podporována." -#: lib/setup.c:6511 +#: lib/setup.c:6751 #, c-format msgid "Data offset is not multiple of %u bytes." msgstr "Počátek dat není násobkem %u bajtů." -#: lib/setup.c:6819 +#: lib/setup.c:7059 #, c-format msgid "Cannot convert device %s which is still in use." msgstr "Zařízení %s, které se stále používá, nelze konvertovat." -#: lib/setup.c:7117 lib/setup.c:7256 +#: lib/setup.c:7357 lib/setup.c:7496 #, c-format msgid "Failed to assign keyslot %u as the new volume key." msgstr "Přiřazení pozice klíče %u jakožto nového klíče svazku se nezdařilo." -#: lib/setup.c:7141 +#: lib/setup.c:7381 msgid "Failed to initialize default LUKS2 keyslot parameters." msgstr "Inicializace parametrů výchozí pozice klíče LUKS2 selhala." -#: lib/setup.c:7147 +#: lib/setup.c:7387 #, c-format msgid "Failed to assign keyslot %d to digest." msgstr "Přiřazení pozice klíče %d k otisku se nezdařilo." -#: lib/setup.c:7372 +#: lib/setup.c:7612 msgid "Cannot add key slot, all slots disabled and no volume key provided." msgstr "Nelze přidat pozici klíče, všechny pozice jsou zakázány a klíč svazku nebyl poskytnut." -#: lib/setup.c:7441 lib/verity/verity.c:343 +#: lib/setup.c:7681 lib/verity/verity.c:343 msgid "Failed to load key in kernel keyring." msgstr "Klíč se nepodařilo přidat do jaderné klíčenky." -#: lib/setup.c:7559 +#: lib/setup.c:7799 msgid "Failed to unlink volume key from thread keyring." msgstr "Klíč se nepodařilo odstranit z klíčenky vlákna." -#: lib/setup.c:7586 +#: lib/setup.c:7843 #, c-format msgid "Could not find keyring described by \"%s\"." msgstr "Klíčenku zadanou jako „%s“ nebylo možné nalézt." -#: lib/setup.c:7645 +#: lib/setup.c:7908 msgid "Failed to acquire global memory-hard access serialization lock." msgstr "Získání zámku pro tvrdý přístup do globální paměti selhalo." -#: lib/utils.c:205 lib/tcrypt/tcrypt.c:503 +#: lib/utils.c:215 lib/tcrypt/tcrypt.c:503 msgid "Failed to open key file." msgstr "Soubor s klíčem se nepodařilo otevřít." -#: lib/utils.c:210 +#: lib/utils.c:220 msgid "Cannot read keyfile from a terminal." msgstr "Soubor s klíčem nelze z terminálu přečíst." -#: lib/utils.c:226 +#: lib/utils.c:236 msgid "Failed to stat key file." msgstr "O souboru s klíčem nebylo možné zjistit údaje." -#: lib/utils.c:234 lib/utils.c:255 +#: lib/utils.c:244 lib/utils.c:265 msgid "Cannot seek to requested keyfile offset." msgstr "Nelze se přesunout na požadované místo v souboru s klíčem." -#: lib/utils.c:249 lib/utils.c:264 src/utils_password.c:226 +#: lib/utils.c:259 lib/utils.c:274 src/utils_password.c:226 #: src/utils_password.c:238 msgid "Out of memory while reading passphrase." msgstr "Při čtení hesla došla paměť." -#: lib/utils.c:284 +#: lib/utils.c:294 msgid "Error reading passphrase." msgstr "Chyba při čtení hesla." -#: lib/utils.c:301 +#: lib/utils.c:311 msgid "Nothing to read on input." msgstr "Na vstupu není nic k přečtení." -#: lib/utils.c:308 +#: lib/utils.c:318 msgid "Maximum keyfile size exceeded." msgstr "Maximální délka souboru s klíčem překročena." -#: lib/utils.c:313 +#: lib/utils.c:323 msgid "Cannot read requested amount of data." msgstr "Požadované množství dat nelze načíst." #: lib/utils_device.c:213 lib/utils_storage_wrappers.c:110 -#: lib/luks1/keyencryption.c:91 src/utils_reencrypt.c:1461 +#: lib/luks1/keyencryption.c:91 src/utils_reencrypt.c:1470 #, c-format msgid "Device %s does not exist or access denied." msgstr "Zařízení %s neexistuje nebo přístup byl zamítnut." @@ -1101,7 +1110,7 @@ msgstr "Režim LUKS šifry %s není platný." msgid "LUKS hash %s is invalid." msgstr "LUKS haš %s není platný." -#: lib/luks1/keymanage.c:574 src/cryptsetup.c:1352 +#: lib/luks1/keymanage.c:574 src/cryptsetup.c:1360 msgid "No known problems detected for LUKS header." msgstr "V hlavičce LUKS nenalezen žádný známý problém." @@ -1195,11 +1204,11 @@ msgstr "Překročena maximální délka hesla TCRYPT (%zu)." msgid "PBKDF2 hash algorithm %s not available, skipping." msgstr "Hašovací algoritmus PBKDF2 %s není podporován, přeskakuje se." -#: lib/tcrypt/tcrypt.c:621 src/cryptsetup.c:1227 +#: lib/tcrypt/tcrypt.c:621 src/cryptsetup.c:1235 msgid "Required kernel crypto interface not available." msgstr "Požadované kryptografické rozhraní jádra není dostupné." -#: lib/tcrypt/tcrypt.c:623 src/cryptsetup.c:1229 +#: lib/tcrypt/tcrypt.c:623 src/cryptsetup.c:1237 msgid "Ensure you have algif_skcipher kernel module loaded." msgstr "Ujistěte se, že jaderný modul algif_skcipher je zaveden." @@ -1520,17 +1529,17 @@ msgstr "Jádro nepodporuje drobné zarovnání metadat dm-integrity." msgid "Kernel refuses to activate insecure recalculate option (see legacy activation options to override)." msgstr "Jádro odmítá aktivovat volbu nebezpečného přepočtu (pro přebití vizte zastaralé volby aktivace)" -#: lib/luks2/luks2_disk_metadata.c:391 lib/luks2/luks2_json_metadata.c:1197 +#: lib/luks2/luks2_disk_metadata.c:392 lib/luks2/luks2_json_metadata.c:1197 #: lib/luks2/luks2_json_metadata.c:1520 #, c-format msgid "Failed to acquire write lock on device %s." msgstr "Získání zámku pro zápis do zařízení %s selhalo." -#: lib/luks2/luks2_disk_metadata.c:400 +#: lib/luks2/luks2_disk_metadata.c:401 msgid "Detected attempt for concurrent LUKS2 metadata update. Aborting operation." msgstr "Zjištěn pokus o současnou aktualizaci metadat LUKS2. Operace se ruší." -#: lib/luks2/luks2_disk_metadata.c:699 lib/luks2/luks2_disk_metadata.c:720 +#: lib/luks2/luks2_disk_metadata.c:710 lib/luks2/luks2_disk_metadata.c:731 msgid "" "Device contains ambiguous signatures, cannot auto-recover LUKS2.\n" "Please run \"cryptsetup repair\" for recovery." @@ -1616,16 +1625,16 @@ msgstr "" msgid "Ignored unknown flag %s." msgstr "Neznámý příznak %s ignorován." -#: lib/luks2/luks2_json_metadata.c:2525 lib/luks2/luks2_reencrypt.c:2090 +#: lib/luks2/luks2_json_metadata.c:2525 lib/luks2/luks2_reencrypt.c:2105 #, c-format msgid "Missing key for dm-crypt segment %u" msgstr "Chybí klíč pro dm-crypt část %u." -#: lib/luks2/luks2_json_metadata.c:2537 lib/luks2/luks2_reencrypt.c:2104 +#: lib/luks2/luks2_json_metadata.c:2537 lib/luks2/luks2_reencrypt.c:2119 msgid "Failed to set dm-crypt segment." msgstr "Nastavení části dm-crypt selhalo." -#: lib/luks2/luks2_json_metadata.c:2543 lib/luks2/luks2_reencrypt.c:2110 +#: lib/luks2/luks2_json_metadata.c:2543 lib/luks2/luks2_reencrypt.c:2125 msgid "Failed to set dm-linear segment." msgstr "Nastavení části dm-linear selhalo." @@ -1662,7 +1671,7 @@ msgstr "Dm-integrity zařízení nižší úrovně poskytlo nečekané datové s msgid "Reencryption in-progress. Cannot deactivate device." msgstr "Probíhá přešifrování. Zařízení nelze deaktivovat." -#: lib/luks2/luks2_json_metadata.c:2870 lib/luks2/luks2_reencrypt.c:4159 +#: lib/luks2/luks2_json_metadata.c:2870 lib/luks2/luks2_reencrypt.c:4174 #, c-format msgid "Failed to replace suspended device %s with dm-error target." msgstr "Výměna pozastaveného zařízení %s za cíl dm-error selhala." @@ -1706,7 +1715,7 @@ msgid "Cannot use %s-%s cipher for keyslot encryption." msgstr "Šifru %s-%s nelze použít pro pozici s klíčem." #: lib/luks2/luks2_keyslot_luks2.c:285 lib/luks2/luks2_keyslot_luks2.c:404 -#: lib/luks2/luks2_keyslot_reenc.c:447 lib/luks2/luks2_reencrypt.c:2714 +#: lib/luks2/luks2_keyslot_reenc.c:447 lib/luks2/luks2_reencrypt.c:2729 #, c-format msgid "Hash algorithm %s is not available." msgstr "Hašovací algoritmus %s není dostupný." @@ -1741,7 +1750,7 @@ msgstr "Nelze zjistit stav zařízení s UUID: %s." msgid "Unable to convert header with LUKSMETA additional metadata." msgstr "Hlavičky s dodatečnými metadaty LUKSMETA nelze převést." -#: lib/luks2/luks2_luks1_convert.c:602 lib/luks2/luks2_reencrypt.c:3795 +#: lib/luks2/luks2_luks1_convert.c:602 lib/luks2/luks2_reencrypt.c:3810 #, c-format msgid "Unable to use cipher specification %s-%s for LUKS2." msgstr "LUKS2 neumožňuje použít šifru zadanou jako %s-%s." @@ -1800,252 +1809,252 @@ msgstr "Nelze převést do formátu LUKS1 – pozice s klíčem %u (nad maxime msgid "Cannot convert to LUKS1 format - keyslot %u is not LUKS1 compatible." msgstr "Nelze převést do formátu LUKS1 – pozice s klíče %u není slučitelná s LUKS1." -#: lib/luks2/luks2_reencrypt.c:1181 +#: lib/luks2/luks2_reencrypt.c:1196 #, c-format msgid "Hotzone size must be multiple of calculated zone alignment (%zu bytes)." msgstr "Velikost horké zóny musí být násobek vypočteného zarovnání zóny (%zu bajtů)." -#: lib/luks2/luks2_reencrypt.c:1186 +#: lib/luks2/luks2_reencrypt.c:1201 #, c-format msgid "Device size must be multiple of calculated zone alignment (%zu bytes)." msgstr "Velikost zařízení musí být násobek vypočteného zarovnání zóny (%zu bajtů)." -#: lib/luks2/luks2_reencrypt.c:1393 lib/luks2/luks2_reencrypt.c:1580 -#: lib/luks2/luks2_reencrypt.c:1663 lib/luks2/luks2_reencrypt.c:1705 -#: lib/luks2/luks2_reencrypt.c:3954 +#: lib/luks2/luks2_reencrypt.c:1408 lib/luks2/luks2_reencrypt.c:1595 +#: lib/luks2/luks2_reencrypt.c:1678 lib/luks2/luks2_reencrypt.c:1720 +#: lib/luks2/luks2_reencrypt.c:3969 msgid "Failed to initialize old segment storage wrapper." msgstr "Obálku pro starou část úložiště se nepodařilo inicializovat." -#: lib/luks2/luks2_reencrypt.c:1407 lib/luks2/luks2_reencrypt.c:1558 +#: lib/luks2/luks2_reencrypt.c:1422 lib/luks2/luks2_reencrypt.c:1573 msgid "Failed to initialize new segment storage wrapper." msgstr "Obálku pro novou část úložiště se nepodařilo inicializovat." -#: lib/luks2/luks2_reencrypt.c:1534 lib/luks2/luks2_reencrypt.c:3966 +#: lib/luks2/luks2_reencrypt.c:1549 lib/luks2/luks2_reencrypt.c:3981 msgid "Failed to initialize hotzone protection." msgstr "Ochranu horké zóny se nepodařilo inicializovat." -#: lib/luks2/luks2_reencrypt.c:1607 +#: lib/luks2/luks2_reencrypt.c:1622 msgid "Failed to read checksums for current hotzone." msgstr "Kontrolní součty pro aktuální horkou zónu se nepodařilo přečíst." -#: lib/luks2/luks2_reencrypt.c:1614 lib/luks2/luks2_reencrypt.c:3980 +#: lib/luks2/luks2_reencrypt.c:1629 lib/luks2/luks2_reencrypt.c:3995 #, c-format msgid "Failed to read hotzone area starting at %<PRIu64>." msgstr "Čtení oblasti s horkou zónou počínaje na %<PRIu64> selhalo." -#: lib/luks2/luks2_reencrypt.c:1633 +#: lib/luks2/luks2_reencrypt.c:1648 #, c-format msgid "Failed to decrypt sector %zu." msgstr "Sektor %zu nebylo možné rozšifrovat." -#: lib/luks2/luks2_reencrypt.c:1639 +#: lib/luks2/luks2_reencrypt.c:1654 #, c-format msgid "Failed to recover sector %zu." msgstr "Sektor %zu nebylo možné obnovit." -#: lib/luks2/luks2_reencrypt.c:2203 +#: lib/luks2/luks2_reencrypt.c:2218 #, c-format msgid "Source and target device sizes don't match. Source %<PRIu64>, target: %<PRIu64>." msgstr "Velikosti zdrojového a cílového zařízení se neshodují. Zdroj %<PRIu64>, cíl %<PRIu64>." -#: lib/luks2/luks2_reencrypt.c:2301 +#: lib/luks2/luks2_reencrypt.c:2316 #, c-format msgid "Failed to activate hotzone device %s." msgstr "Aktivace zařízení horké zóny %s selhala." -#: lib/luks2/luks2_reencrypt.c:2318 +#: lib/luks2/luks2_reencrypt.c:2333 #, c-format msgid "Failed to activate overlay device %s with actual origin table." msgstr "Aktivace překryvného zařízení %s se skutečnou tabulkou původu selhala." -#: lib/luks2/luks2_reencrypt.c:2325 +#: lib/luks2/luks2_reencrypt.c:2340 #, c-format msgid "Failed to load new mapping for device %s." msgstr "Zavedení nového mapování pro zařízení %s selhalo." -#: lib/luks2/luks2_reencrypt.c:2396 +#: lib/luks2/luks2_reencrypt.c:2411 msgid "Failed to refresh reencryption devices stack." msgstr "Zásobník zařízení k přešifrování se nepodařilo obnovit." -#: lib/luks2/luks2_reencrypt.c:2596 +#: lib/luks2/luks2_reencrypt.c:2611 msgid "Failed to set new keyslots area size." msgstr "Nastavení velikosti nové oblasti s pozicemi klíčů selhalo." -#: lib/luks2/luks2_reencrypt.c:2732 +#: lib/luks2/luks2_reencrypt.c:2747 #, c-format msgid "Data shift value is not aligned to encryption sector size (%<PRIu32> bytes)." msgstr "Hodnota posunu dat není zarovnána s velikostí šifrovaného sektoru (%<PRIu32> bajtů)." -#: lib/luks2/luks2_reencrypt.c:2769 src/utils_reencrypt.c:189 +#: lib/luks2/luks2_reencrypt.c:2784 src/utils_reencrypt.c:189 #, c-format msgid "Unsupported resilience mode %s" msgstr "Nepodporovaný režim odolnosti %s" -#: lib/luks2/luks2_reencrypt.c:2806 +#: lib/luks2/luks2_reencrypt.c:2821 msgid "Moved segment size can not be greater than data shift value." msgstr "Velikost přesunované oblasti nemůže být větší než hodnota posunu dat." -#: lib/luks2/luks2_reencrypt.c:2848 +#: lib/luks2/luks2_reencrypt.c:2863 msgid "Invalid reencryption resilience parameters." msgstr "Neplatné parametry režimu odolnosti při přešifrování." -#: lib/luks2/luks2_reencrypt.c:2870 +#: lib/luks2/luks2_reencrypt.c:2885 #, c-format msgid "Moved segment too large. Requested size %<PRIu64>, available space for: %<PRIu64>." msgstr "Přesunovaná oblast je příliš velká. Požadovaná velikost %<PRIu64>, dostupné místo %<PRIu64>." -#: lib/luks2/luks2_reencrypt.c:2957 +#: lib/luks2/luks2_reencrypt.c:2972 msgid "Failed to clear table." msgstr "Vyprázdnění tabulky selhalo." -#: lib/luks2/luks2_reencrypt.c:3043 +#: lib/luks2/luks2_reencrypt.c:3058 msgid "Reduced data size is larger than real device size." msgstr "Zmenšená velikost dat je větší než velikost skutečného zařízení" -#: lib/luks2/luks2_reencrypt.c:3050 +#: lib/luks2/luks2_reencrypt.c:3065 #, c-format msgid "Data device is not aligned to encryption sector size (%<PRIu32> bytes)." msgstr "Zařízení s daty není zarovnáno na velikost šifrovaného sektoru (%<PRIu32> bajtů)." -#: lib/luks2/luks2_reencrypt.c:3084 +#: lib/luks2/luks2_reencrypt.c:3099 #, c-format msgid "Data shift (%<PRIu64> sectors) is less than future data offset (%<PRIu64> sectors)." msgstr "Posun dat (%<PRIu64> sektorů) je menší než budoucí poloha dat (%<PRIu64> sektorů)." -#: lib/luks2/luks2_reencrypt.c:3091 lib/luks2/luks2_reencrypt.c:3589 -#: lib/luks2/luks2_reencrypt.c:3610 +#: lib/luks2/luks2_reencrypt.c:3106 lib/luks2/luks2_reencrypt.c:3604 +#: lib/luks2/luks2_reencrypt.c:3625 #, c-format msgid "Failed to open %s in exclusive mode (already mapped or mounted)." msgstr "Zařízení %s nebylo možné otevřít ve výlučném režimu (již namapováno nebo připojeno)." -#: lib/luks2/luks2_reencrypt.c:3280 +#: lib/luks2/luks2_reencrypt.c:3295 msgid "Device not marked for LUKS2 reencryption." msgstr "Zařízení není označeno pro přešifrování LUKS2." -#: lib/luks2/luks2_reencrypt.c:3297 lib/luks2/luks2_reencrypt.c:4271 +#: lib/luks2/luks2_reencrypt.c:3312 lib/luks2/luks2_reencrypt.c:4286 msgid "Failed to load LUKS2 reencryption context." msgstr "Načtení kontextu přešifrování LUKS2 selhalo." -#: lib/luks2/luks2_reencrypt.c:3387 +#: lib/luks2/luks2_reencrypt.c:3402 msgid "Failed to get reencryption state." msgstr "Stavu přešifrování se nepodařilo zjistit." -#: lib/luks2/luks2_reencrypt.c:3391 lib/luks2/luks2_reencrypt.c:3705 +#: lib/luks2/luks2_reencrypt.c:3406 lib/luks2/luks2_reencrypt.c:3720 msgid "Device is not in reencryption." msgstr "Zařízení se nepřešifrovává." -#: lib/luks2/luks2_reencrypt.c:3398 lib/luks2/luks2_reencrypt.c:3712 +#: lib/luks2/luks2_reencrypt.c:3413 lib/luks2/luks2_reencrypt.c:3727 msgid "Reencryption process is already running." msgstr "Proces přešifrování již běží." -#: lib/luks2/luks2_reencrypt.c:3400 lib/luks2/luks2_reencrypt.c:3714 +#: lib/luks2/luks2_reencrypt.c:3415 lib/luks2/luks2_reencrypt.c:3729 msgid "Failed to acquire reencryption lock." msgstr "Získání zámku pro přešifrování selhalo." -#: lib/luks2/luks2_reencrypt.c:3418 +#: lib/luks2/luks2_reencrypt.c:3433 msgid "Cannot proceed with reencryption. Run reencryption recovery first." msgstr "V přešifrování nelze pokračovat. Spusťte nejprve obnovu přešifrování." -#: lib/luks2/luks2_reencrypt.c:3553 +#: lib/luks2/luks2_reencrypt.c:3568 msgid "Active device size and requested reencryption size don't match." msgstr "Aktivní velikost zařízení a velikost požadovaná k přešifrování si neodpovídají." -#: lib/luks2/luks2_reencrypt.c:3567 +#: lib/luks2/luks2_reencrypt.c:3582 msgid "Illegal device size requested in reencryption parameters." msgstr "V parametrech přešifrování je požadována zakázaná velikost zařízení." -#: lib/luks2/luks2_reencrypt.c:3644 +#: lib/luks2/luks2_reencrypt.c:3659 msgid "Reencryption in-progress. Cannot perform recovery." msgstr "Probíhá přešifrování. Obnovu nelze provést." -#: lib/luks2/luks2_reencrypt.c:3812 +#: lib/luks2/luks2_reencrypt.c:3827 msgid "LUKS2 reencryption already initialized in metadata." msgstr "V metadatech je přešifrování LUKS2 již inicializováno." -#: lib/luks2/luks2_reencrypt.c:3819 +#: lib/luks2/luks2_reencrypt.c:3834 msgid "Failed to initialize LUKS2 reencryption in metadata." msgstr "Inicializace přešifrování LUKS2 v metadatech selhala." -#: lib/luks2/luks2_reencrypt.c:3872 lib/luks2/luks2_reencrypt.c:3907 +#: lib/luks2/luks2_reencrypt.c:3887 lib/luks2/luks2_reencrypt.c:3922 msgid "Reencryption is not supported for DAX (persistent memory) devices." msgstr "Na zařízeních DAX (trvalá paměť) není přešifrování podporováno." -#: lib/luks2/luks2_reencrypt.c:3879 +#: lib/luks2/luks2_reencrypt.c:3894 msgid "Failed to read passphrase from keyring." msgstr "Čtení hesla z klíčenky selhalo." -#: lib/luks2/luks2_reencrypt.c:3936 +#: lib/luks2/luks2_reencrypt.c:3951 msgid "Failed to set device segments for next reencryption hotzone." msgstr "Nastavení segmentů zařízení pro další horkou zónu přešifrování selhalo." -#: lib/luks2/luks2_reencrypt.c:3988 +#: lib/luks2/luks2_reencrypt.c:4003 msgid "Failed to write reencryption resilience metadata." msgstr "Metadata pro odolnost při přešifrování se nepodařilo zapsat." -#: lib/luks2/luks2_reencrypt.c:3995 +#: lib/luks2/luks2_reencrypt.c:4010 msgid "Decryption failed." msgstr "Rozšifrování selhalo." -#: lib/luks2/luks2_reencrypt.c:4000 +#: lib/luks2/luks2_reencrypt.c:4015 #, c-format msgid "Failed to write hotzone area starting at %<PRIu64>." msgstr "Zápis oblasti s horkou zónou počínaje na %<PRIu64> selhal." -#: lib/luks2/luks2_reencrypt.c:4005 +#: lib/luks2/luks2_reencrypt.c:4020 msgid "Failed to sync data." msgstr "Synchronizace dat selhala." -#: lib/luks2/luks2_reencrypt.c:4013 +#: lib/luks2/luks2_reencrypt.c:4028 msgid "Failed to update metadata after current reencryption hotzone completed." msgstr "Po dokončení přešifrování aktuální horké zóny se nepodařilo aktualizovat metadata." -#: lib/luks2/luks2_reencrypt.c:4102 +#: lib/luks2/luks2_reencrypt.c:4117 msgid "Failed to write LUKS2 metadata." msgstr "Zápis metadat LUKS2 selhal." -#: lib/luks2/luks2_reencrypt.c:4125 +#: lib/luks2/luks2_reencrypt.c:4140 msgid "Failed to wipe unused data device area." msgstr "Vyčištění oblasti zařízení s nepoužívanými daty selhalo." -#: lib/luks2/luks2_reencrypt.c:4131 +#: lib/luks2/luks2_reencrypt.c:4146 #, c-format msgid "Failed to remove unused (unbound) keyslot %d." msgstr "Odstranění nepoužívané (nepřiřazené) pozice s klíčem %d selhalo." -#: lib/luks2/luks2_reencrypt.c:4141 +#: lib/luks2/luks2_reencrypt.c:4156 msgid "Failed to remove reencryption keyslot." msgstr "Odstranění pozice s klíčem přešifrování selhalo." -#: lib/luks2/luks2_reencrypt.c:4151 +#: lib/luks2/luks2_reencrypt.c:4166 #, c-format msgid "Fatal error while reencrypting chunk starting at %<PRIu64>, %<PRIu64> sectors long." msgstr "Nepřekonatelná chyba při přešifrování bloku na pozici %<PRIu64> dlouhého %<PRIu64> sektorů." -#: lib/luks2/luks2_reencrypt.c:4155 +#: lib/luks2/luks2_reencrypt.c:4170 msgid "Online reencryption failed." msgstr "Přešifrování za běhu selhalo." -#: lib/luks2/luks2_reencrypt.c:4160 +#: lib/luks2/luks2_reencrypt.c:4175 msgid "Do not resume the device unless replaced with error target manually." msgstr "Zařízení neprobouzejte, dokud jej ručně nenahradíte chybovým cílem." -#: lib/luks2/luks2_reencrypt.c:4212 +#: lib/luks2/luks2_reencrypt.c:4227 msgid "Cannot proceed with reencryption. Unexpected reencryption status." msgstr "V přešifrování nelze pokračovat. Přešifrování se nachází v nečekaném stavu." -#: lib/luks2/luks2_reencrypt.c:4218 +#: lib/luks2/luks2_reencrypt.c:4233 msgid "Missing or invalid reencrypt context." msgstr "Chybějící nebo neplatný kontext přešifrování." -#: lib/luks2/luks2_reencrypt.c:4225 +#: lib/luks2/luks2_reencrypt.c:4240 msgid "Failed to initialize reencryption device stack." msgstr "Zásobník zařízení k přešifrování se nepodařilo inicializovat." -#: lib/luks2/luks2_reencrypt.c:4247 lib/luks2/luks2_reencrypt.c:4284 +#: lib/luks2/luks2_reencrypt.c:4262 lib/luks2/luks2_reencrypt.c:4299 msgid "Failed to update reencryption context." msgstr "Kontext přešifrování se nepodařilo aktualizovat." -#: lib/luks2/luks2_reencrypt_digest.c:405 +#: lib/luks2/luks2_reencrypt_digest.c:421 msgid "Reencryption metadata is invalid." msgstr "Metadata o přešifrování jsou neplatná." @@ -2069,101 +2078,101 @@ msgstr "Uzamykaní Opal oblasti %d je vypnuto." msgid "Unexpected OPAL range %d lock state." msgstr "Nečekaný status uzamykání Opal oblasti %d" -#: src/cryptsetup.c:85 +#: src/cryptsetup.c:93 msgid "Keyslot encryption parameters can be set only for LUKS2 device." msgstr "Parametry pro šifrování pozice s klíčem lze nastavit jen u zařízení LUKS2." -#: src/cryptsetup.c:128 src/cryptsetup.c:2145 +#: src/cryptsetup.c:136 src/cryptsetup.c:2242 #, c-format msgid "Enter token PIN: " msgstr "Zadejte PIN k tokenu: " -#: src/cryptsetup.c:130 src/cryptsetup.c:2147 +#: src/cryptsetup.c:138 src/cryptsetup.c:2244 #, c-format msgid "Enter token %d PIN: " msgstr "Zadejte PIN k tokenu %d: " -#: src/cryptsetup.c:188 src/cryptsetup.c:1174 src/cryptsetup.c:1515 -#: src/utils_reencrypt.c:1137 src/utils_reencrypt_luks1.c:517 +#: src/cryptsetup.c:196 src/cryptsetup.c:1182 src/cryptsetup.c:1523 +#: src/utils_reencrypt.c:1146 src/utils_reencrypt_luks1.c:517 #: src/utils_reencrypt_luks1.c:580 msgid "No known cipher specification pattern detected." msgstr "Nelze najít žádný známý vzorek se specifikaci šifry." -#: src/cryptsetup.c:198 +#: src/cryptsetup.c:206 #, c-format msgid "WARNING: Using default options for cipher (%s-%s, key size %u bits) that could be incompatible with older versions." msgstr "POZOR: Pro šifru se použijí výchozí volby (%s-%s, velikost klíče %u bitů), což může být neslučitelné se staršími verzemi." -#: src/cryptsetup.c:203 +#: src/cryptsetup.c:211 #, c-format msgid "WARNING: Using default options for hash (%s) that could be incompatible with older versions." msgstr "POZOR: Pro haš se použijí výchozí volby (%s), což by mohlo být neslučitelné se staršími verzemi." -#: src/cryptsetup.c:207 +#: src/cryptsetup.c:215 msgid "For plain mode, always use options --cipher, --key-size and if no keyfile is used, then also --hash." msgstr "Pro režim plain vždy použijte volby --cipher a --key-size a není-li zadán soubor s klíčem, rovněž --hash." -#: src/cryptsetup.c:213 +#: src/cryptsetup.c:221 msgid "WARNING: The --hash parameter is being ignored in plain mode with keyfile specified.\n" msgstr "POZOR: Jedná-li se o režim plain a je-li určen soubor s klíčem, parametr --hash se ignoruje.\n" -#: src/cryptsetup.c:221 +#: src/cryptsetup.c:229 msgid "WARNING: The --keyfile-size option is being ignored, the read size is the same as the encryption key size.\n" msgstr "POZOR: Přepínač --keyfile-size se ignoruje, velikost pro čtení je stejná jako velikosti šifrovacího klíče.\n" -#: src/cryptsetup.c:258 src/cryptsetup.c:1360 src/cryptsetup.c:1558 -#: src/integritysetup.c:197 src/utils_reencrypt.c:1346 +#: src/cryptsetup.c:266 src/cryptsetup.c:1368 src/cryptsetup.c:1566 +#: src/integritysetup.c:197 src/utils_reencrypt.c:1355 #, c-format msgid "Blkid scan failed for %s." msgstr "Prohledávání blkid selhalo u %s." -#: src/cryptsetup.c:264 +#: src/cryptsetup.c:272 #, c-format msgid "Detected device signature(s) on %s. Proceeding further may damage existing data." msgstr "Na %s byla nalezen vzorec zařízení. Pokračování může poškodit existující data." -#: src/cryptsetup.c:270 src/cryptsetup.c:1248 src/cryptsetup.c:1296 -#: src/cryptsetup.c:1367 src/cryptsetup.c:1492 src/cryptsetup.c:1570 -#: src/cryptsetup.c:2525 src/cryptsetup.c:2952 src/integritysetup.c:187 +#: src/cryptsetup.c:278 src/cryptsetup.c:1256 src/cryptsetup.c:1304 +#: src/cryptsetup.c:1375 src/cryptsetup.c:1500 src/cryptsetup.c:1578 +#: src/cryptsetup.c:2622 src/cryptsetup.c:3049 src/integritysetup.c:187 #: src/utils_reencrypt.c:138 src/utils_reencrypt.c:314 -#: src/utils_reencrypt.c:764 +#: src/utils_reencrypt.c:772 msgid "Operation aborted.\n" msgstr "Operace zrušena.\n" -#: src/cryptsetup.c:343 +#: src/cryptsetup.c:351 msgid "Option --key-file is required." msgstr "Je vyžadován přepínač --key-file." -#: src/cryptsetup.c:394 +#: src/cryptsetup.c:402 msgid "Enter VeraCrypt PIM: " msgstr "Zadejte PIM VeraCryptu: " -#: src/cryptsetup.c:403 +#: src/cryptsetup.c:411 msgid "Invalid PIM value: parse error." msgstr "Neplatná hodnota VIM: chyba rozboru" -#: src/cryptsetup.c:406 +#: src/cryptsetup.c:414 msgid "Invalid PIM value: 0." msgstr "Neplatná hodnota PIM: 0" -#: src/cryptsetup.c:409 +#: src/cryptsetup.c:417 msgid "Invalid PIM value: outside of range." msgstr "Neplatná hodnota PIM: mimo rozsah" -#: src/cryptsetup.c:432 +#: src/cryptsetup.c:440 msgid "No device header detected with this passphrase." msgstr "S tímto heslem není rozpoznatelná žádná hlavička zařízení." -#: src/cryptsetup.c:505 src/cryptsetup.c:681 +#: src/cryptsetup.c:513 src/cryptsetup.c:689 #, c-format msgid "Device %s is not a valid BITLK device." msgstr "Zařízení %s není platným zařízením BITLK." -#: src/cryptsetup.c:513 +#: src/cryptsetup.c:521 msgid "Cannot determine volume key size for BITLK, please use --key-size option." msgstr "Nelze určit velikost BITLK klíče svazku. Prosím, použijte přepínač --key-size." -#: src/cryptsetup.c:555 +#: src/cryptsetup.c:563 msgid "" "Header dump with volume key is sensitive information\n" "which allows access to encrypted partition without passphrase.\n" @@ -2173,7 +2182,7 @@ msgstr "" "který umožňuje přístup k šifrovanému oddílu bez znalosti hesla.\n" "Tento výpis by měl být vždy uložen na bezpečném místě a v zašifrované podobě." -#: src/cryptsetup.c:622 src/cryptsetup.c:703 src/cryptsetup.c:2550 +#: src/cryptsetup.c:630 src/cryptsetup.c:711 src/cryptsetup.c:2647 msgid "" "The header dump with volume key is sensitive information\n" "that allows access to encrypted partition without a passphrase.\n" @@ -2183,85 +2192,85 @@ msgstr "" "který umožňuje přístup k šifrovanému oddílu bez znalosti hesla.\n" "Tento výpis by měl být uložen na bezpečném místě a v zašifrované podobě." -#: src/cryptsetup.c:758 src/cryptsetup.c:788 +#: src/cryptsetup.c:766 src/cryptsetup.c:796 #, c-format msgid "Device %s is not a valid FVAULT2 device." msgstr "Zařízení %s není platným zařízením FVAULT2." -#: src/cryptsetup.c:796 +#: src/cryptsetup.c:804 msgid "Cannot determine volume key size for FVAULT2, please use --key-size option." msgstr "Nelze určit velikost klíče svazku pro FVAULT2. Prosím, použijte přepínač --key-size." -#: src/cryptsetup.c:850 src/veritysetup.c:323 src/integritysetup.c:409 +#: src/cryptsetup.c:858 src/veritysetup.c:323 src/integritysetup.c:409 #, c-format msgid "Device %s is still active and scheduled for deferred removal.\n" msgstr "Zařízení %s je stále aktivní a naplánováno pro odložené odstranění.\n" -#: src/cryptsetup.c:884 src/cryptsetup.c:1824 src/cryptsetup.c:2080 -#: src/cryptsetup.c:2234 src/cryptsetup.c:2681 src/cryptsetup.c:2763 -#: src/cryptsetup.c:3290 +#: src/cryptsetup.c:892 src/cryptsetup.c:1903 src/cryptsetup.c:2177 +#: src/cryptsetup.c:2331 src/cryptsetup.c:2778 src/cryptsetup.c:2860 +#: src/cryptsetup.c:3387 #, c-format msgid "Failed to set external tokens path %s." msgstr "Cestu k externím tokenům %s se nepodařilo nastavit." -#: src/cryptsetup.c:893 +#: src/cryptsetup.c:901 msgid "Resize of active device requires volume key in keyring but --disable-keyring option is set." msgstr "Změna velikosti aktivního zařízení vyžaduje klíč svazku v klíčence. Byl však použit přepínač --disable-keyring." -#: src/cryptsetup.c:1053 +#: src/cryptsetup.c:1061 msgid "Benchmark interrupted." msgstr "Hodnocení výkonu přerušeno." -#: src/cryptsetup.c:1074 +#: src/cryptsetup.c:1082 #, c-format msgid "PBKDF2-%-9s N/A\n" msgstr "PBKDF2-%-9s –\n" -#: src/cryptsetup.c:1076 +#: src/cryptsetup.c:1084 #, c-format msgid "PBKDF2-%-9s %7u iterations per second for %zu-bit key\n" msgstr "PBKDF2-%-9s %7u iterací za sekundu pro %zubitový klíč\n" -#: src/cryptsetup.c:1090 +#: src/cryptsetup.c:1098 #, c-format msgid "%-10s N/A\n" msgstr "%-10s –\n" -#: src/cryptsetup.c:1092 +#: src/cryptsetup.c:1100 #, c-format msgid "%-10s %4u iterations, %5u memory, %1u parallel threads (CPUs) for %zu-bit key (requested %u ms time)\n" msgstr "%-10s %4u iterací, %5u paměti, %1u souběžných vláken (procesorů) pro %zubitový klíč (požadován čas %u ms)\n" -#: src/cryptsetup.c:1116 +#: src/cryptsetup.c:1124 msgid "Result of benchmark is not reliable." msgstr "Výsledek hodnocení výkonu není spolehlivý." # ???: are aproximated? -#: src/cryptsetup.c:1166 +#: src/cryptsetup.c:1174 msgid "# Tests are approximate using memory only (no storage IO).\n" msgstr "# Testy jsou počítány jen z práce s pamětí (žádné I/O úložiště).\n" #. TRANSLATORS: The string is header of a table and must be exactly (right side) aligned. -#: src/cryptsetup.c:1186 +#: src/cryptsetup.c:1194 #, c-format msgid "#%*s Algorithm | Key | Encryption | Decryption\n" msgstr "#%*sAlgoritmus | Klíč | Šifrování | Dešifrování\n" -#: src/cryptsetup.c:1190 +#: src/cryptsetup.c:1198 #, c-format msgid "Cipher %s (with %i bits key) is not available." msgstr "Šifra %s (s %ibitovým klíčem) není dostupná." #. TRANSLATORS: The string is header of a table and must be exactly (right side) aligned. -#: src/cryptsetup.c:1209 +#: src/cryptsetup.c:1217 msgid "# Algorithm | Key | Encryption | Decryption\n" msgstr "# Algoritmus | Klíč | Šifrování | Dešifrování\n" -#: src/cryptsetup.c:1220 +#: src/cryptsetup.c:1228 msgid "N/A" msgstr "–" -#: src/cryptsetup.c:1245 +#: src/cryptsetup.c:1253 msgid "" "Unprotected LUKS2 reencryption metadata detected. Please verify the reencryption operation is desirable (see luksDump output)\n" "and continue (upgrade metadata) only if you acknowledge the operation as genuine." @@ -2270,27 +2279,27 @@ msgstr "" "přešifrování je žádoucí (vizte výstup luksDump) a pokračujte (zvýšení verze\n" "metadat) pouze, když poznáte, že operace je chtěná." -#: src/cryptsetup.c:1251 +#: src/cryptsetup.c:1259 msgid "Enter passphrase to protect and upgrade reencryption metadata: " msgstr "Zadejte heslo pro ochránění metadat o přešifrování a pro zvýšení jejich verze: " -#: src/cryptsetup.c:1295 +#: src/cryptsetup.c:1303 msgid "Really proceed with LUKS2 reencryption recovery?" msgstr "Opravdu pokračovat s obnovou přešifrování LUKS2?" -#: src/cryptsetup.c:1304 +#: src/cryptsetup.c:1312 msgid "Enter passphrase to verify reencryption metadata digest: " msgstr "Zadejte heslo pro ověření otisku metadat o přešifrování: " -#: src/cryptsetup.c:1306 +#: src/cryptsetup.c:1314 msgid "Enter passphrase for reencryption recovery: " msgstr "Zadejte heslo pro obnovení přešifrování: " -#: src/cryptsetup.c:1366 +#: src/cryptsetup.c:1374 msgid "Really try to repair LUKS device header?" msgstr "Opravdu se pokusit opravit hlavičku zařízení LUKS?" -#: src/cryptsetup.c:1390 src/integritysetup.c:89 src/integritysetup.c:247 +#: src/cryptsetup.c:1398 src/integritysetup.c:89 src/integritysetup.c:247 msgid "" "\n" "Wipe interrupted." @@ -2298,7 +2307,7 @@ msgstr "" "\n" "Výmaz přerušen." -#: src/cryptsetup.c:1395 src/integritysetup.c:94 src/integritysetup.c:284 +#: src/cryptsetup.c:1403 src/integritysetup.c:94 src/integritysetup.c:284 msgid "" "Wiping device to initialize integrity checksum.\n" "You can interrupt this by pressing CTRL+c (rest of not wiped device will contain invalid checksum).\n" @@ -2307,146 +2316,158 @@ msgstr "" "Lze přerušit pomocí Ctrl+C (zbytek nesmazaného zařízení bude obsahovat\n" "neplatné součty).\n" -#: src/cryptsetup.c:1417 src/integritysetup.c:116 +#: src/cryptsetup.c:1425 src/integritysetup.c:116 #, c-format msgid "Cannot deactivate temporary device %s." msgstr "Dočasné zařízení %s nelze deaktivovat." -#: src/cryptsetup.c:1472 +#: src/cryptsetup.c:1480 msgid "Integrity option can be used only for LUKS2 format." msgstr "Volby integrity lze použít jen při formátu LUKS2." -#: src/cryptsetup.c:1477 src/cryptsetup.c:1542 +#: src/cryptsetup.c:1485 src/cryptsetup.c:1550 msgid "Unsupported LUKS2 metadata size options." msgstr "Nepodporované volby velikosti metadat LUKS2." -#: src/cryptsetup.c:1482 +#: src/cryptsetup.c:1490 msgid "OPAL is supported only for LUKS2 format." msgstr "Opal je podporován jen s formátem LUKS2." -#: src/cryptsetup.c:1491 +#: src/cryptsetup.c:1499 msgid "Header file does not exist, do you want to create it?" msgstr "Soubor s hlavičkou neexistuje. Chcete jej vytvořit?" -#: src/cryptsetup.c:1499 +#: src/cryptsetup.c:1507 #, c-format msgid "Cannot create header file %s." msgstr "Soubor s hlavičkou %s nelze vytvořit." -#: src/cryptsetup.c:1522 src/integritysetup.c:144 src/integritysetup.c:152 +#: src/cryptsetup.c:1530 src/integritysetup.c:144 src/integritysetup.c:152 #: src/integritysetup.c:161 src/integritysetup.c:324 src/integritysetup.c:332 #: src/integritysetup.c:342 msgid "No known integrity specification pattern detected." msgstr "Nelze najít žádný známý vzorek se specifikací integrity." -#: src/cryptsetup.c:1535 +#: src/cryptsetup.c:1543 #, c-format msgid "Cannot use %s as on-disk header." msgstr "%s nelze použít pro hlavičku uvnitř disku." -#: src/cryptsetup.c:1564 src/integritysetup.c:181 +#: src/cryptsetup.c:1572 src/integritysetup.c:181 #, c-format msgid "This will overwrite data on %s irrevocably." msgstr "Toto nevratně přepíše data na %s." -#: src/cryptsetup.c:1601 +#: src/cryptsetup.c:1609 msgid "OPAL Admin password cannot be empty." msgstr "Heslo správce Opal nemůže být prázdné." -#: src/cryptsetup.c:1615 src/cryptsetup.c:2097 src/cryptsetup.c:2247 -#: src/cryptsetup.c:2407 src/cryptsetup.c:2473 src/utils_reencrypt_luks1.c:443 +#: src/cryptsetup.c:1623 src/cryptsetup.c:2194 src/cryptsetup.c:2344 +#: src/cryptsetup.c:2504 src/cryptsetup.c:2570 src/utils_reencrypt_luks1.c:443 msgid "Failed to set pbkdf parameters." msgstr "Nastavení parametrů PBKDF selhalo." -#: src/cryptsetup.c:1745 +#: src/cryptsetup.c:1755 msgid "Type specification in --link-vk-to-keyring keyring specification is ignored." msgstr "Určení typu v přepínači --link-vk-to-keyring pro zadání klíčenky se ignoruje." -#: src/cryptsetup.c:1765 +#: src/cryptsetup.c:1820 +msgid "Key types have to be the same for both volume keys." +msgstr "Typy klíčů musí být stejné pro oba klíče svazku." + +#: src/cryptsetup.c:1825 +msgid "Both volume keys have to be linked to the same keyring." +msgstr "Oba klíče svazku musí být přidány do stejné klíčenky." + +#: src/cryptsetup.c:1835 +msgid "You need to supply more key names." +msgstr "Musíte zadat více názvů klíčů." + +#: src/cryptsetup.c:1839 msgid "Invalid --link-vk-to-keyring value." msgstr "Neplatná hodnota --link-vk-to-keyring." -#: src/cryptsetup.c:1805 +#: src/cryptsetup.c:1884 msgid "Reduced data offset is allowed only for detached LUKS header." msgstr "Zmenšená poloha dat je dovolena jen u oddělené hlavičky LUKS." -#: src/cryptsetup.c:1812 +#: src/cryptsetup.c:1891 #, c-format msgid "LUKS file container %s is too small for activation, there is no remaining space for data." msgstr "Souborový kontejner LUKS %s je na aktivaci příliš malý. Nezbývá žádné místo pro data." -#: src/cryptsetup.c:1839 src/cryptsetup.c:2253 +#: src/cryptsetup.c:1918 src/cryptsetup.c:2350 msgid "Cannot determine volume key size for LUKS without keyslots, please use --key-size option." msgstr "Bez pozic pro klíče nelze určit velikost LUKS klíče svazku. Prosím, použijte přepínač --key-size." -#: src/cryptsetup.c:1890 +#: src/cryptsetup.c:1985 msgid "Device activated but cannot make flags persistent." msgstr "Zařízení aktivováno, ale příznaky nelze učinit trvalými." -#: src/cryptsetup.c:1972 src/cryptsetup.c:2040 +#: src/cryptsetup.c:2069 src/cryptsetup.c:2137 #, c-format msgid "Keyslot %d is selected for deletion." msgstr "Ke smazání vybrán klíč na pozici %d." -#: src/cryptsetup.c:1984 src/cryptsetup.c:2044 +#: src/cryptsetup.c:2081 src/cryptsetup.c:2141 msgid "This is the last keyslot. Device will become unusable after purging this key." msgstr "" "Toto je poslední pozice klíče. Smazáním tohoto klíče přijdete o možnost\n" "zařízení použít." -#: src/cryptsetup.c:1985 +#: src/cryptsetup.c:2082 msgid "Enter any remaining passphrase: " msgstr "Zadejte jakékoliv jiné heslo: " -#: src/cryptsetup.c:1986 src/cryptsetup.c:2046 +#: src/cryptsetup.c:2083 src/cryptsetup.c:2143 msgid "Operation aborted, the keyslot was NOT wiped.\n" msgstr "Operace zrušena, pozice klíče NEBYLA vymazána.\n" -#: src/cryptsetup.c:2022 +#: src/cryptsetup.c:2119 msgid "Enter passphrase to be deleted: " msgstr "Zadejte heslo, které se má smazat: " -#: src/cryptsetup.c:2072 src/cryptsetup.c:2456 src/cryptsetup.c:3114 -#: src/cryptsetup.c:3281 +#: src/cryptsetup.c:2169 src/cryptsetup.c:2553 src/cryptsetup.c:3211 +#: src/cryptsetup.c:3378 #, c-format msgid "Device %s is not a valid LUKS2 device." msgstr "Zařízení %s není platným zařízením LUKS2." -#: src/cryptsetup.c:2111 src/cryptsetup.c:2330 +#: src/cryptsetup.c:2208 src/cryptsetup.c:2427 msgid "Enter new passphrase for key slot: " msgstr "Zadejte nové heslo pro pozici klíče: " -#: src/cryptsetup.c:2213 +#: src/cryptsetup.c:2310 msgid "WARNING: The --key-slot parameter is used for new keyslot number.\n" msgstr "POZOR: Parametr --key-slot se použije pro číslo nové pozice klíče.\n" -#: src/cryptsetup.c:2286 src/utils_reencrypt_luks1.c:1149 +#: src/cryptsetup.c:2383 src/utils_reencrypt_luks1.c:1149 #, c-format msgid "Enter any existing passphrase: " msgstr "Zadejte jakékoliv existující heslo: " -#: src/cryptsetup.c:2411 +#: src/cryptsetup.c:2508 msgid "Enter passphrase to be changed: " msgstr "Zadejte heslo, které má být změněno: " -#: src/cryptsetup.c:2427 src/utils_reencrypt_luks1.c:1135 +#: src/cryptsetup.c:2524 src/utils_reencrypt_luks1.c:1135 msgid "Enter new passphrase: " msgstr "Zadejte nové heslo: " -#: src/cryptsetup.c:2477 +#: src/cryptsetup.c:2574 msgid "Enter passphrase for keyslot to be converted: " msgstr "Zadejte heslo pro pozici klíče, který má být převeden: " -#: src/cryptsetup.c:2501 +#: src/cryptsetup.c:2598 msgid "Only one device argument for isLuks operation is supported." msgstr "U operace isLuks je podporován pouze jeden argument se zařízením." -#: src/cryptsetup.c:2609 +#: src/cryptsetup.c:2706 #, c-format msgid "Keyslot %d does not contain unbound key." msgstr "Pozice klíče %d neobsahuje nepřiřazený klíč." -#: src/cryptsetup.c:2614 +#: src/cryptsetup.c:2711 msgid "" "The header dump with unbound key is sensitive information.\n" "This dump should be stored encrypted in a safe place." @@ -2454,52 +2475,52 @@ msgstr "" "Výpis hlavičky s nepřiřazeným klíčem je citlivý údaj.\n" "Tento výpis by měl být uložen na bezpečném místě a v zašifrované podobě." -#: src/cryptsetup.c:2709 src/cryptsetup.c:2746 +#: src/cryptsetup.c:2806 src/cryptsetup.c:2843 #, c-format msgid "%s is not active %s device name." msgstr "%s není název aktivního zařízení %s." -#: src/cryptsetup.c:2741 +#: src/cryptsetup.c:2838 #, c-format msgid "%s is not active LUKS device name or header is missing." msgstr "%s není název aktivního zařízení LUKS nebo mu chybí hlavička." -#: src/cryptsetup.c:2819 src/cryptsetup.c:2838 +#: src/cryptsetup.c:2916 src/cryptsetup.c:2935 msgid "Option --header-backup-file is required." msgstr "Je vyžadován přepínač --header-backup-file." -#: src/cryptsetup.c:2869 +#: src/cryptsetup.c:2966 #, c-format msgid "%s is not cryptsetup managed device." msgstr "%s není zařízení spravované nástrojem cryptsetup." -#: src/cryptsetup.c:2880 +#: src/cryptsetup.c:2977 #, c-format msgid "Refresh is not supported for device type %s" msgstr "Reaktivace není na zařízení typu %s podporována" -#: src/cryptsetup.c:2930 +#: src/cryptsetup.c:3027 #, c-format msgid "Unrecognized metadata device type %s." msgstr "Nerozpoznaná metadata druhu zařízení %s." -#: src/cryptsetup.c:2932 +#: src/cryptsetup.c:3029 msgid "Command requires device and mapped name as arguments." msgstr "Příkaz vyžaduje jako argumenty zařízení a mapovaný název." -#: src/cryptsetup.c:2942 +#: src/cryptsetup.c:3039 msgid "Enter OPAL PSID: " msgstr "Zadejte Opal PSID: " -#: src/cryptsetup.c:2942 +#: src/cryptsetup.c:3039 msgid "Enter OPAL Admin password: " msgstr "Zadejte heslo správce Opal: " -#: src/cryptsetup.c:2951 +#: src/cryptsetup.c:3048 msgid "WARNING: WHOLE disk will be factory reset and all data will be lost! Continue?" msgstr "POZOR: CELÝ disk bude uveden do továrního nastavení a všechna data budou ztracena! Pokračovat?" -#: src/cryptsetup.c:2994 +#: src/cryptsetup.c:3091 #, c-format msgid "" "This operation will erase all keyslots on device %s.\n" @@ -2508,356 +2529,356 @@ msgstr "" "Tento úkon smaže všechny pozice s klíči na zařízení %s.\n" "Po jeho dokončení zařízení bude nepoužitelné." -#: src/cryptsetup.c:3001 +#: src/cryptsetup.c:3098 msgid "Operation aborted, keyslots were NOT wiped.\n" msgstr "Operace zrušena, pozice s klíči NEBYLY smazány.\n" -#: src/cryptsetup.c:3040 +#: src/cryptsetup.c:3137 msgid "Invalid LUKS type, only luks1 and luks2 are supported." msgstr "Neplatný druh formátu LUKS. Podporován je pouze LUKS1 a LUKS2." -#: src/cryptsetup.c:3056 +#: src/cryptsetup.c:3153 #, c-format msgid "Device is already %s type." msgstr "Zařízení je již druhu %s." -#: src/cryptsetup.c:3063 +#: src/cryptsetup.c:3160 #, c-format msgid "This operation will convert %s to %s format.\n" msgstr "Tato operace převede formát %s na %s.\n" -#: src/cryptsetup.c:3066 +#: src/cryptsetup.c:3163 msgid "Operation aborted, device was NOT converted.\n" msgstr "Operace zrušena, zařízení NEBYLO převedeno.\n" -#: src/cryptsetup.c:3106 +#: src/cryptsetup.c:3203 msgid "Option --priority, --label or --subsystem is missing." msgstr "Chybí přepínač --priority, --label nebo --subsystem." -#: src/cryptsetup.c:3140 src/cryptsetup.c:3180 src/cryptsetup.c:3200 +#: src/cryptsetup.c:3237 src/cryptsetup.c:3277 src/cryptsetup.c:3297 #, c-format msgid "Token %d is invalid." msgstr "Token %d je neplatný." -#: src/cryptsetup.c:3143 src/cryptsetup.c:3203 +#: src/cryptsetup.c:3240 src/cryptsetup.c:3300 #, c-format msgid "Token %d in use." msgstr "Token %d se používá." -#: src/cryptsetup.c:3155 +#: src/cryptsetup.c:3252 #, c-format msgid "Failed to add luks2-keyring token %d." msgstr "Přidání tokenu %d klíčenky LUKS2 selhalo." -#: src/cryptsetup.c:3166 src/cryptsetup.c:3229 +#: src/cryptsetup.c:3263 src/cryptsetup.c:3326 #, c-format msgid "Failed to assign token %d to keyslot %d." msgstr "Přiřazení tokenu %d do pozice s klíčem %d selhalo." -#: src/cryptsetup.c:3183 +#: src/cryptsetup.c:3280 #, c-format msgid "Token %d is not in use." msgstr "Token %d se nepoužívá." -#: src/cryptsetup.c:3220 +#: src/cryptsetup.c:3317 msgid "Failed to import token from file." msgstr "Import tokenu ze souboru selhal." -#: src/cryptsetup.c:3245 +#: src/cryptsetup.c:3342 #, c-format msgid "Failed to get token %d for export." msgstr "Získání tokenu %d za účelem exportu selhalo." -#: src/cryptsetup.c:3258 +#: src/cryptsetup.c:3355 #, c-format msgid "Token %d is not assigned to keyslot %d." msgstr "Token %d není přiřazen pozici s klíčem %d." -#: src/cryptsetup.c:3260 src/cryptsetup.c:3267 +#: src/cryptsetup.c:3357 src/cryptsetup.c:3364 #, c-format msgid "Failed to unassign token %d from keyslot %d." msgstr "Zrušení přiřazení tokenu %d k pozici s klíčem %d selhalo." -#: src/cryptsetup.c:3326 +#: src/cryptsetup.c:3423 msgid "Option --tcrypt-hidden, --tcrypt-system or --tcrypt-backup is supported only for TCRYPT device." msgstr "Přepínač --tcrypt-hidden, --tcrypt-system nebo --tcrypt-backup je podporován jen u zařízení TCRYPT." -#: src/cryptsetup.c:3329 +#: src/cryptsetup.c:3426 msgid "Option --veracrypt or --disable-veracrypt is supported only for TCRYPT device type." msgstr "Přepínače --veracrypt a --disable-veracrypt jsou podporovány jen u typu zařízení TCRYPT." -#: src/cryptsetup.c:3332 +#: src/cryptsetup.c:3429 msgid "Option --veracrypt-pim is supported only for VeraCrypt compatible devices." msgstr "Přepínač --veracrypt-pim je podporován jen u zařízení kompatibilním s VeraCrypt." -#: src/cryptsetup.c:3336 +#: src/cryptsetup.c:3433 msgid "Option --veracrypt-query-pim is supported only for VeraCrypt compatible devices." msgstr "Přepínač --veracrypt-query-pim je podporován jen u zařízení kompatibilním s VeraCrypt." -#: src/cryptsetup.c:3338 +#: src/cryptsetup.c:3435 msgid "The options --veracrypt-pim and --veracrypt-query-pim are mutually exclusive." msgstr "Přepínače --veracrypt-pim a --veracrypt-query-pim se vzájemně vylučují." -#: src/cryptsetup.c:3347 +#: src/cryptsetup.c:3444 msgid "Option --persistent is not allowed with --test-passphrase." msgstr "Přepínač --persistent není dovolen současně s --test-passphrase." -#: src/cryptsetup.c:3350 +#: src/cryptsetup.c:3447 msgid "Options --refresh and --test-passphrase are mutually exclusive." msgstr "Přepínače --refresh a --test-passphrase se vzájemně vylučují." -#: src/cryptsetup.c:3353 +#: src/cryptsetup.c:3450 msgid "Option --shared is allowed only for open of plain device." msgstr "Přepínač --shared je dovolen jen při úkonu otevírání zařízení plain." -#: src/cryptsetup.c:3356 +#: src/cryptsetup.c:3453 msgid "Option --skip is supported only for open of plain and loopaes devices." msgstr "Přepínač --skip je podporován jen při otevírání zařízení plain a loopaes." -#: src/cryptsetup.c:3359 +#: src/cryptsetup.c:3456 msgid "Option --offset with open action is only supported for plain and loopaes devices." msgstr "Při otevírání je přepínač --offset podporován jen u zařízení plain a loopaes." -#: src/cryptsetup.c:3362 +#: src/cryptsetup.c:3459 msgid "Option --tcrypt-hidden cannot be combined with --allow-discards." msgstr "Přepínač --tcrypt-hidden nelze použít s přepínačem --allow-discards." -#: src/cryptsetup.c:3366 +#: src/cryptsetup.c:3463 msgid "Sector size option with open action is supported only for plain devices." msgstr "Otevírání s přepínačem velikosti sektoru je podporován jen u zařízení plain." # FIXME: "Large IV sectors" should read "IV large sectors". -#: src/cryptsetup.c:3370 +#: src/cryptsetup.c:3467 msgid "Large IV sectors option is supported only for opening plain type device with sector size larger than 512 bytes." msgstr "Volba inicializačního vektoru s velkými sektory je podporována jen při otevírání zařízení typu plain s velikostí sektoru větší než 512 bajtů." -#: src/cryptsetup.c:3375 +#: src/cryptsetup.c:3472 msgid "Option --test-passphrase is allowed only for open of LUKS, TCRYPT, BITLK and FVAULT2 devices." msgstr "Přepínač --test-passphrase je dovolen pouze při otevírání zařízení LUKS, TCRYPT, BITLK a FVAULT2." -#: src/cryptsetup.c:3378 src/cryptsetup.c:3401 +#: src/cryptsetup.c:3475 src/cryptsetup.c:3498 msgid "Options --device-size and --size cannot be combined." msgstr "Přepínače --device-size a --size nelze kombinovat." -#: src/cryptsetup.c:3381 +#: src/cryptsetup.c:3478 msgid "Option --unbound is allowed only for open of luks device." msgstr "Přepínač --unbound je dovolen jen při otevírání zařízení LUKS." -#: src/cryptsetup.c:3384 +#: src/cryptsetup.c:3481 msgid "Option --unbound cannot be used without --test-passphrase." msgstr "Přepínač --unbound není dovolen současně s --test-passphrase." -#: src/cryptsetup.c:3393 src/veritysetup.c:671 src/integritysetup.c:767 +#: src/cryptsetup.c:3490 src/veritysetup.c:671 src/integritysetup.c:767 msgid "Options --cancel-deferred and --deferred cannot be used at the same time." msgstr "Přepínače --cancel-deferred a --deferred se vzájemně vylučují." -#: src/cryptsetup.c:3409 +#: src/cryptsetup.c:3506 msgid "Options --reduce-device-size and --device-size cannot be combined." msgstr "Přepínače --reduce-device-size a --device-size nelze kombinovat." -#: src/cryptsetup.c:3412 +#: src/cryptsetup.c:3509 msgid "Option --active-name can be set only for LUKS2 device." msgstr "Přepínač --active-name lze použít jen u zařízení LUKS2." -#: src/cryptsetup.c:3415 +#: src/cryptsetup.c:3512 msgid "Options --active-name and --force-offline-reencrypt cannot be combined." msgstr "Přepínače --active-name a --force-offline-reencrypt nelze kombinovat." -#: src/cryptsetup.c:3423 src/cryptsetup.c:3453 +#: src/cryptsetup.c:3520 src/cryptsetup.c:3550 msgid "Keyslot specification is required." msgstr "Je nutné určit pozici s klíčem." -#: src/cryptsetup.c:3431 +#: src/cryptsetup.c:3528 msgid "Options --align-payload and --offset cannot be combined." msgstr "Přepínače --align-payload a --offset nelze kombinovat." -#: src/cryptsetup.c:3434 +#: src/cryptsetup.c:3531 msgid "Option --integrity-no-wipe can be used only for format action with integrity extension." msgstr "Přepínač --integrity-no-wipe smí být použit jen při formátování s rozšířením integrity." -#: src/cryptsetup.c:3437 +#: src/cryptsetup.c:3534 msgid "Only one of --use-[u]random options is allowed." msgstr "Je dovolen pouze jeden z přepínačů --use-[u]random." -#: src/cryptsetup.c:3445 +#: src/cryptsetup.c:3542 msgid "Key size is required with --unbound option." msgstr "Přepínač --unbound vyžaduje velikost klíče." -#: src/cryptsetup.c:3465 +#: src/cryptsetup.c:3562 msgid "Invalid token action." msgstr "Neplatná operace tokenu." -#: src/cryptsetup.c:3468 +#: src/cryptsetup.c:3565 msgid "--key-description parameter is mandatory for token add action." msgstr "Parametr --key-description je při přidávání tokenu povinný." -#: src/cryptsetup.c:3472 src/cryptsetup.c:3485 +#: src/cryptsetup.c:3569 src/cryptsetup.c:3582 msgid "Action requires specific token. Use --token-id parameter." msgstr "Akce vyžaduje určitý token. Použijte parametr --token-id." -#: src/cryptsetup.c:3476 +#: src/cryptsetup.c:3573 msgid "Option --unbound is valid only with token add action." msgstr "Přepínač --unbound lze použít pouze s akcí přidání." -#: src/cryptsetup.c:3478 +#: src/cryptsetup.c:3575 msgid "Options --key-slot and --unbound cannot be combined." msgstr "Přepínače --key-slot a --unbound nelze kombinovat." -#: src/cryptsetup.c:3483 +#: src/cryptsetup.c:3580 msgid "Action requires specific keyslot. Use --key-slot parameter." msgstr "Akce vyžaduje určitou pozici klíče. Použijte parametr --key-slot." -#: src/cryptsetup.c:3499 +#: src/cryptsetup.c:3596 msgid "<device> [--type <type>] [<name>]" msgstr "<zařízení> [--type <druh>] [<název>]" -#: src/cryptsetup.c:3499 src/veritysetup.c:491 src/integritysetup.c:544 +#: src/cryptsetup.c:3596 src/veritysetup.c:491 src/integritysetup.c:544 msgid "open device as <name>" msgstr "otevře zařízení jako <název>" -#: src/cryptsetup.c:3500 src/cryptsetup.c:3501 src/cryptsetup.c:3502 +#: src/cryptsetup.c:3597 src/cryptsetup.c:3598 src/cryptsetup.c:3599 #: src/veritysetup.c:492 src/veritysetup.c:493 src/integritysetup.c:545 #: src/integritysetup.c:546 src/integritysetup.c:548 msgid "<name>" msgstr "<název>" -#: src/cryptsetup.c:3500 src/veritysetup.c:492 src/integritysetup.c:545 +#: src/cryptsetup.c:3597 src/veritysetup.c:492 src/integritysetup.c:545 msgid "close device (remove mapping)" msgstr "zavře zařízení (odstraní mapování)" -#: src/cryptsetup.c:3501 src/integritysetup.c:548 +#: src/cryptsetup.c:3598 src/integritysetup.c:548 msgid "resize active device" msgstr "změní velikost aktivního zařízení" -#: src/cryptsetup.c:3502 +#: src/cryptsetup.c:3599 msgid "show device status" msgstr "zobrazí stav zařízení" -#: src/cryptsetup.c:3503 +#: src/cryptsetup.c:3600 msgid "[--cipher <cipher>]" msgstr "[--cipher <šifra>]" -#: src/cryptsetup.c:3503 +#: src/cryptsetup.c:3600 msgid "benchmark cipher" msgstr "zhodnotí výkon šifry" -#: src/cryptsetup.c:3504 src/cryptsetup.c:3505 src/cryptsetup.c:3506 -#: src/cryptsetup.c:3507 src/cryptsetup.c:3508 src/cryptsetup.c:3515 -#: src/cryptsetup.c:3516 src/cryptsetup.c:3517 src/cryptsetup.c:3518 -#: src/cryptsetup.c:3519 src/cryptsetup.c:3520 src/cryptsetup.c:3521 -#: src/cryptsetup.c:3522 src/cryptsetup.c:3523 src/cryptsetup.c:3524 +#: src/cryptsetup.c:3601 src/cryptsetup.c:3602 src/cryptsetup.c:3603 +#: src/cryptsetup.c:3604 src/cryptsetup.c:3605 src/cryptsetup.c:3612 +#: src/cryptsetup.c:3613 src/cryptsetup.c:3614 src/cryptsetup.c:3615 +#: src/cryptsetup.c:3616 src/cryptsetup.c:3617 src/cryptsetup.c:3618 +#: src/cryptsetup.c:3619 src/cryptsetup.c:3620 src/cryptsetup.c:3621 msgid "<device>" msgstr "<zařízení>" -#: src/cryptsetup.c:3504 +#: src/cryptsetup.c:3601 msgid "try to repair on-disk metadata" msgstr "pokusí se opravit metadata uložená na disku" -#: src/cryptsetup.c:3505 +#: src/cryptsetup.c:3602 msgid "reencrypt LUKS2 device" msgstr "přešifruje zařízení LUKS2" -#: src/cryptsetup.c:3506 +#: src/cryptsetup.c:3603 msgid "erase all keyslots (remove encryption key)" msgstr "smaže všechny pozice s klíči (odstraní šifrovací klíč)" -#: src/cryptsetup.c:3507 +#: src/cryptsetup.c:3604 msgid "convert LUKS from/to LUKS2 format" msgstr "převede formát LUKS do/z formátu LUKS2" -#: src/cryptsetup.c:3508 +#: src/cryptsetup.c:3605 msgid "set permanent configuration options for LUKS2" msgstr "nastaví trvalé volby konfigurace pro LUKS2" -#: src/cryptsetup.c:3509 src/cryptsetup.c:3510 +#: src/cryptsetup.c:3606 src/cryptsetup.c:3607 msgid "<device> [<new key file>]" msgstr "<zařízení> [<soubor_s_novým_klíčem>]" -#: src/cryptsetup.c:3509 +#: src/cryptsetup.c:3606 msgid "formats a LUKS device" msgstr "naformátuje zařízení LUKS" -#: src/cryptsetup.c:3510 +#: src/cryptsetup.c:3607 msgid "add key to LUKS device" msgstr "do zařízení LUKS přidá klíč" -#: src/cryptsetup.c:3511 src/cryptsetup.c:3512 src/cryptsetup.c:3513 +#: src/cryptsetup.c:3608 src/cryptsetup.c:3609 src/cryptsetup.c:3610 msgid "<device> [<key file>]" msgstr "<zařízení> [<soubor_s_klíčem>]" -#: src/cryptsetup.c:3511 +#: src/cryptsetup.c:3608 msgid "removes supplied key or key file from LUKS device" msgstr "odstraní zadaný klíč nebo soubor s klíčem ze zařízení LUKS" -#: src/cryptsetup.c:3512 +#: src/cryptsetup.c:3609 msgid "changes supplied key or key file of LUKS device" msgstr "změní zadaný klíč nebo soubor s klíčem u zařízení LUKS" -#: src/cryptsetup.c:3513 +#: src/cryptsetup.c:3610 msgid "converts a key to new pbkdf parameters" msgstr "převede klíč do nových parametrů PBKDF" -#: src/cryptsetup.c:3514 +#: src/cryptsetup.c:3611 msgid "<device> <key slot>" msgstr "<zařízení> <pozice_klíče>" -#: src/cryptsetup.c:3514 +#: src/cryptsetup.c:3611 msgid "wipes key with number <key slot> from LUKS device" msgstr "smaže klíč s číslem <pozice_klíče> ze zařízení LUKS" -#: src/cryptsetup.c:3515 +#: src/cryptsetup.c:3612 msgid "print UUID of LUKS device" msgstr "zobrazí UUID zařízení LUKS" -#: src/cryptsetup.c:3516 +#: src/cryptsetup.c:3613 msgid "tests <device> for LUKS partition header" msgstr "otestuje <zařízení> na hlavičku oddílu LUKS" -#: src/cryptsetup.c:3517 +#: src/cryptsetup.c:3614 msgid "dump LUKS partition information" msgstr "vypíše údaje o oddílu LUKS" -#: src/cryptsetup.c:3518 +#: src/cryptsetup.c:3615 msgid "dump TCRYPT device information" msgstr "vypíše údaje o oddílu TCRYPT" -#: src/cryptsetup.c:3519 +#: src/cryptsetup.c:3616 msgid "dump BITLK device information" msgstr "vypíše údaje o zařízení BITLK" -#: src/cryptsetup.c:3520 +#: src/cryptsetup.c:3617 msgid "dump FVAULT2 device information" msgstr "vypíše údaje o zařízení FVAULT2" # TODO: not consistent with previous line -#: src/cryptsetup.c:3521 +#: src/cryptsetup.c:3618 msgid "Suspend LUKS device and wipe key (all IOs are frozen)" msgstr "Uspí zařízení LUKS a smaže klíč (všechny operace budou zmrazeny)" # TODO: not consistent with previous line -#: src/cryptsetup.c:3522 +#: src/cryptsetup.c:3619 msgid "Resume suspended LUKS device" msgstr "Probudí uspané zařízení LUKS" # TODO: not consistent with previous line -#: src/cryptsetup.c:3523 +#: src/cryptsetup.c:3620 msgid "Backup LUKS device header and keyslots" msgstr "Zálohuje hlavičku zařízení LUKS a jeho pozice s klíči" # TODO: not consistent with previous line -#: src/cryptsetup.c:3524 +#: src/cryptsetup.c:3621 msgid "Restore LUKS device header and keyslots" msgstr "Obnoví hlavičku zařízení LUKS a jeho pozice s klíči" -#: src/cryptsetup.c:3525 +#: src/cryptsetup.c:3622 msgid "<add|remove|import|export> <device>" msgstr "<add|remove|import|export> <zařízení>" -#: src/cryptsetup.c:3525 +#: src/cryptsetup.c:3622 msgid "Manipulate LUKS2 tokens" msgstr "Zachází s tokeny LUKS2" -#: src/cryptsetup.c:3544 src/veritysetup.c:509 src/integritysetup.c:563 +#: src/cryptsetup.c:3641 src/veritysetup.c:509 src/integritysetup.c:563 msgid "" "\n" "<action> is one of:\n" @@ -2865,7 +2886,7 @@ msgstr "" "\n" "<akce> je jedna z:\n" -#: src/cryptsetup.c:3550 +#: src/cryptsetup.c:3647 msgid "" "\n" "You can also use old <action> syntax aliases:\n" @@ -2877,7 +2898,7 @@ msgstr "" "\topen: create (plainOpen), luksOpen, loopaesOpen, tcryptOpen, bitlkOpen, fvault2Open\n" "\tclose: remove (plainClose), luksClose, loopaesClose, tcryptClose, bitlkClose, fvault2Close\n" -#: src/cryptsetup.c:3554 +#: src/cryptsetup.c:3651 #, c-format msgid "" "\n" @@ -2892,7 +2913,7 @@ msgstr "" "<pozice_klíče> je číslo pozice klíče LUKS, který se má upravit\n" "<soubor_s_klíčem> je volitelný soubor s novým klíčem pro akci luksAddKey\n" -#: src/cryptsetup.c:3561 +#: src/cryptsetup.c:3658 #, c-format msgid "" "\n" @@ -2901,7 +2922,7 @@ msgstr "" "\n" "Výchozí zakompilovaný formát metadat (pro akci luksFormat) je %s.\n" -#: src/cryptsetup.c:3566 +#: src/cryptsetup.c:3663 msgid "" "\n" "LUKS2 external token plugin support is enabled.\n" @@ -2909,12 +2930,12 @@ msgstr "" "\n" "Podpora pro zásuvný modul externího tokenu LUKS2 je zapnuta.\n" -#: src/cryptsetup.c:3567 +#: src/cryptsetup.c:3664 #, c-format msgid "LUKS2 external token plugin path: %s.\n" msgstr "Cesta k zásuvnému modulu externího tokenu LUKS2: %s.\n" -#: src/cryptsetup.c:3569 +#: src/cryptsetup.c:3666 msgid "" "\n" "LUKS2 external token plugin support is disabled.\n" @@ -2922,7 +2943,7 @@ msgstr "" "\n" "Podpora pro zásuvný modul externího tokenu LUKS2 je vypnuta.\n" -#: src/cryptsetup.c:3573 +#: src/cryptsetup.c:3670 #, c-format msgid "" "\n" @@ -2939,7 +2960,7 @@ msgstr "" "Výchozí PBKDF pro LUKS2: %s\n" "\tDoba iterací: %d, nutná paměť: %d kB, souběžná vlákna: %d\n" -#: src/cryptsetup.c:3584 +#: src/cryptsetup.c:3681 #, c-format msgid "" "\n" @@ -2954,100 +2975,111 @@ msgstr "" "\tplain: %s, Klíč: %d bitů, Haš hesla: %s\n" "\tLUKS: %s, Klíč: %d bitů, Haš hlavičky LUKS: %s, RNG: %s\n" -#: src/cryptsetup.c:3593 +#: src/cryptsetup.c:3690 msgid "\tLUKS: Default keysize with XTS mode (two internal keys) will be doubled.\n" msgstr "\tLUKS: V režimu XTS (dva vnitřní klíče) bude výchozí velikost klíče zdvojnásobena.\n" -#: src/cryptsetup.c:3611 src/veritysetup.c:651 src/integritysetup.c:723 +#: src/cryptsetup.c:3708 src/veritysetup.c:651 src/integritysetup.c:723 #, c-format msgid "%s: requires %s as arguments" msgstr "%s: vyžaduje %s jako argumenty" -#: src/cryptsetup.c:3651 src/utils_reencrypt_luks1.c:1198 +#: src/cryptsetup.c:3748 src/utils_reencrypt_luks1.c:1198 msgid "Key slot is invalid." msgstr "Pozice klíče není platná." -#: src/cryptsetup.c:3678 +#: src/cryptsetup.c:3776 msgid "Device size must be multiple of 512 bytes sector." msgstr "Velikost zařízení musí být násobkem 512bajtových sektorů." -#: src/cryptsetup.c:3683 +#: src/cryptsetup.c:3781 msgid "Invalid max reencryption hotzone size specification." msgstr "Zadána neplatná maximální velikost horké zóny při přešifrování." -#: src/cryptsetup.c:3697 src/cryptsetup.c:3709 +#: src/cryptsetup.c:3795 src/cryptsetup.c:3807 msgid "Key size must be a multiple of 8 bits" msgstr "Velikost klíče musí být násobkem 8 bitů." -#: src/cryptsetup.c:3714 +# TODO: Pluralize +#: src/cryptsetup.c:3814 +#, c-format +msgid "At most %d volume key specifications can be supplied." +msgstr "Zadat lze nejvíce %d klíčů svazku." + +#: src/cryptsetup.c:3826 +#, c-format +msgid "At most %d keyring link specifications can be supplied." +msgstr "Zadat lze nejvíce %d klíčenek." + +#: src/cryptsetup.c:3835 msgid "Maximum device reduce size is 1 GiB." msgstr "Maximální velikost zmenšení zařízení je 1 GiB." -#: src/cryptsetup.c:3717 +#: src/cryptsetup.c:3838 msgid "Reduce size must be multiple of 512 bytes sector." msgstr "Velikost zmenšení musí být násobkem 512bajtových sektorů." -#: src/cryptsetup.c:3734 +#: src/cryptsetup.c:3855 msgid "Option --priority can be only ignore/normal/prefer." msgstr "Přepínač --priority smí mít pouze argument ignore, normal a prefer." -#: src/cryptsetup.c:3753 src/veritysetup.c:572 src/integritysetup.c:643 +#: src/cryptsetup.c:3874 src/veritysetup.c:572 src/integritysetup.c:643 msgid "Show this help message" msgstr "Zobrazí tuto nápovědu" -#: src/cryptsetup.c:3754 src/veritysetup.c:573 src/integritysetup.c:644 +#: src/cryptsetup.c:3875 src/veritysetup.c:573 src/integritysetup.c:644 msgid "Display brief usage" msgstr "Zobrazí stručný návod na použití" -#: src/cryptsetup.c:3755 src/veritysetup.c:574 src/integritysetup.c:645 +#: src/cryptsetup.c:3876 src/veritysetup.c:574 src/integritysetup.c:645 msgid "Print package version" msgstr "Vypíše verzi balíku" -#: src/cryptsetup.c:3766 src/veritysetup.c:585 src/integritysetup.c:656 +#: src/cryptsetup.c:3887 src/veritysetup.c:585 src/integritysetup.c:656 msgid "Help options:" msgstr "Přepínače nápovědy:" -#: src/cryptsetup.c:3789 src/veritysetup.c:606 src/integritysetup.c:676 +#: src/cryptsetup.c:3910 src/veritysetup.c:606 src/integritysetup.c:676 msgid "[OPTION...] <action> <action-specific>" msgstr "[PŘEPÍNAČ…] <akce> <přepínače_akce>" -#: src/cryptsetup.c:3798 src/veritysetup.c:615 src/integritysetup.c:687 +#: src/cryptsetup.c:3919 src/veritysetup.c:615 src/integritysetup.c:687 msgid "Argument <action> missing." msgstr "Chybí argument <akce>." -#: src/cryptsetup.c:3877 src/veritysetup.c:646 src/integritysetup.c:718 +#: src/cryptsetup.c:3998 src/veritysetup.c:646 src/integritysetup.c:718 msgid "Unknown action." msgstr "Neznámá akce." -#: src/cryptsetup.c:3895 +#: src/cryptsetup.c:4016 msgid "Option --key-file takes precedence over specified key file argument." msgstr "Přepínač --key-file má přednost před zadaným argumentem souboru s klíčem." -#: src/cryptsetup.c:3901 +#: src/cryptsetup.c:4022 msgid "Only one --key-file argument is allowed." msgstr "Je dovolen pouze jeden argument přepínače --key-file." -#: src/cryptsetup.c:3906 +#: src/cryptsetup.c:4027 msgid "Password-based key derivation function (PBKDF) can be only pbkdf2 or argon2i/argon2id." msgstr "Funkce pro odvození klíče na základě hesla (PBKDF) smí být pouze pbkdf2 nebo argon2i/argon2id." -#: src/cryptsetup.c:3911 +#: src/cryptsetup.c:4032 msgid "PBKDF forced iterations cannot be combined with iteration time option." msgstr "Vynucené iterace PBKDF nelze kombinovat s volnou doby iterací." -#: src/cryptsetup.c:3916 +#: src/cryptsetup.c:4037 msgid "Cannot link volume key to a keyring when keyring is disabled." msgstr "Je-li klíčenka vypnuta, klíč svazku nelze do klíčenky přidat." -#: src/cryptsetup.c:3927 +#: src/cryptsetup.c:4048 msgid "Options --keyslot-cipher and --keyslot-key-size must be used together." msgstr "Přepínače --keyslot-cipher a --keyslot-key-size musí být použity spolu." -#: src/cryptsetup.c:3935 +#: src/cryptsetup.c:4056 msgid "No action taken. Invoked with --test-args option.\n" msgstr "Žádný úkon nebude proveden. Zavoláno s přepínačem --test-args.\n" -#: src/cryptsetup.c:3948 +#: src/cryptsetup.c:4069 msgid "Cannot disable metadata locking." msgstr "Zamykání metadata nelze vypnout." @@ -3516,20 +3548,20 @@ msgstr "Nejsou dostupné žádné použitelné pozice s klíči." msgid "Can't do passphrase verification on non-tty inputs." msgstr "Se vstupem mimo terminál nelze ověřit heslo." -#: src/utils_luks.c:183 +#: src/utils_luks.c:186 #, c-format msgid "Failed to open file %s in read-only mode." msgstr "Soubor %s se nepodařilo otevřít pouze pro čtení." -#: src/utils_luks.c:196 +#: src/utils_luks.c:199 msgid "Provide valid LUKS2 token JSON:\n" msgstr "Poskytněte JSON s platným tokenem LUKS2:\n" -#: src/utils_luks.c:203 +#: src/utils_luks.c:206 msgid "Failed to read JSON file." msgstr "Soubor s dokumentem JSON se nepodařilo přečíst." -#: src/utils_luks.c:208 +#: src/utils_luks.c:211 msgid "" "\n" "Read interrupted." @@ -3537,12 +3569,12 @@ msgstr "" "\n" "Čtení přerušeno." -#: src/utils_luks.c:249 +#: src/utils_luks.c:252 #, c-format msgid "Failed to open file %s in write mode." msgstr "Otevření souboru %s pro zápis selhalo." -#: src/utils_luks.c:258 +#: src/utils_luks.c:261 msgid "" "\n" "Write interrupted." @@ -3550,7 +3582,7 @@ msgstr "" "\n" "Zápis přerušen." -#: src/utils_luks.c:262 +#: src/utils_luks.c:265 msgid "Failed to write JSON file." msgstr "Zapsaní souboru s dokumentem JSON selhalo." @@ -3639,7 +3671,7 @@ msgstr "" "Požadovaný --sector-size %<PRIu32> není slučitelný se superblokem %s\n" "(velikost bloku %<PRIu32> bajtů) nalezeném na zařízení %s." -#: src/utils_reencrypt.c:533 src/utils_reencrypt.c:1412 +#: src/utils_reencrypt.c:533 src/utils_reencrypt.c:1421 msgid "Encryption without detached header (--header) is not possible without data device size reduction (--reduce-device-size)." msgstr "Přešifrování bez oddělené hlavičky (--header) není možné bez zmenšení velikosti datového zařízení (--reduce-device-size)." @@ -3689,53 +3721,53 @@ msgstr "Obnovuje se původní hlavička LUKS2." msgid "Original LUKS2 header restore failed." msgstr "Obnovení původní hlavičky LUKS2 selhalo." -#: src/utils_reencrypt.c:759 +#: src/utils_reencrypt.c:765 #, c-format msgid "Header file %s does not exist. Do you want to initialize LUKS2 decryption of device %s and export LUKS2 header to file %s?" msgstr "Soubor s hlavičkou %s neexistuje. Přejete si zahájit dešifrování LUKS2 zařízení %s a export hlavičku LUKS2 do souboru %s?" -#: src/utils_reencrypt.c:807 +#: src/utils_reencrypt.c:815 msgid "Failed to add read/write permissions to exported header file." msgstr "Přidání práv na čtení/zápis souboru s hlavičkou selhalo." -#: src/utils_reencrypt.c:860 +#: src/utils_reencrypt.c:869 #, c-format msgid "Reencryption initialization failed. Header backup is available in %s." msgstr "Inicializace přešifrování selhala. Záloha hlavičky je dostupná v %s." -#: src/utils_reencrypt.c:888 +#: src/utils_reencrypt.c:897 msgid "LUKS2 decryption is supported with detached header device only (with data offset set to 0)." msgstr "Dešifrování LUKS2 je podporováno jen u zařízení s oddělenou hlavičkou (počátek dat na 0)." -#: src/utils_reencrypt.c:1023 src/utils_reencrypt.c:1032 +#: src/utils_reencrypt.c:1032 src/utils_reencrypt.c:1041 msgid "Not enough free keyslots for reencryption." msgstr "Nedostatek pozic s klíči pro přešifrování." -#: src/utils_reencrypt.c:1053 src/utils_reencrypt_luks1.c:1100 +#: src/utils_reencrypt.c:1062 src/utils_reencrypt_luks1.c:1100 msgid "Key file can be used only with --key-slot or with exactly one key slot active." msgstr "Soubor s klíčem lze použít jen s přepínačem --key-slot nebo s právě jednou aktivní pozicí klíče." -#: src/utils_reencrypt.c:1062 src/utils_reencrypt_luks1.c:1147 +#: src/utils_reencrypt.c:1071 src/utils_reencrypt_luks1.c:1147 #: src/utils_reencrypt_luks1.c:1158 #, c-format msgid "Enter passphrase for key slot %d: " msgstr "Zadejte heslo pro pozici klíče %d: " -#: src/utils_reencrypt.c:1074 +#: src/utils_reencrypt.c:1083 #, c-format msgid "Enter passphrase for key slot %u: " msgstr "Zadejte heslo pro pozici klíče %u: " -#: src/utils_reencrypt.c:1126 +#: src/utils_reencrypt.c:1135 #, c-format msgid "Switching data encryption cipher to %s.\n" msgstr "Přepíná se algoritmus šifrování dat na %s.\n" -#: src/utils_reencrypt.c:1180 +#: src/utils_reencrypt.c:1189 msgid "No data segment parameters changed. Reencryption aborted." msgstr "Žádné parametry oblasti s daty nebyly změněny. Přešifrování zrušeno." -#: src/utils_reencrypt.c:1282 +#: src/utils_reencrypt.c:1291 msgid "" "Encryption sector size increase on offline device is not supported.\n" "Activate the device first or use --force-offline-reencrypt option (dangerous!)." @@ -3744,7 +3776,7 @@ msgstr "" "podporováno. Nejprve zařízení aktivujte, nebo použijte přepínač\n" "--force-offline-reencrypt (nebezpečné!)." -#: src/utils_reencrypt.c:1322 src/utils_reencrypt_luks1.c:726 +#: src/utils_reencrypt.c:1331 src/utils_reencrypt_luks1.c:726 #: src/utils_reencrypt_luks1.c:798 msgid "" "\n" @@ -3753,58 +3785,58 @@ msgstr "" "\n" "Přešifrování přerušeno." -#: src/utils_reencrypt.c:1327 +#: src/utils_reencrypt.c:1336 msgid "Resuming LUKS reencryption in forced offline mode.\n" msgstr "Dokončuje se přešifrování LUKS ve vynuceném režimu offline.\n" -#: src/utils_reencrypt.c:1350 +#: src/utils_reencrypt.c:1359 #, c-format msgid "Device %s contains broken LUKS metadata. Aborting operation." msgstr "Zařízení %s obsahuje porušená metadata LUKS. Operace se ruší." -#: src/utils_reencrypt.c:1366 src/utils_reencrypt.c:1388 +#: src/utils_reencrypt.c:1375 src/utils_reencrypt.c:1397 #, c-format msgid "Device %s is already LUKS device. Aborting operation." msgstr "Zařízení %s je již zařízením LUKS. Operace se ruší." -#: src/utils_reencrypt.c:1394 +#: src/utils_reencrypt.c:1403 #, c-format msgid "Device %s is already in LUKS reencryption. Aborting operation." msgstr "Zařízení %s je již ve stavu přešifrování LUKS. Operace se ruší." -#: src/utils_reencrypt.c:1476 +#: src/utils_reencrypt.c:1485 msgid "LUKS2 decryption requires --header option." msgstr "Dešifrování LUKS2 vyžaduje přepínač --header." -#: src/utils_reencrypt.c:1524 +#: src/utils_reencrypt.c:1533 msgid "Command requires device as argument." msgstr "Příkaz vyžaduje jako argument zařízení." -#: src/utils_reencrypt.c:1537 +#: src/utils_reencrypt.c:1546 #, c-format msgid "Conflicting versions. Device %s is LUKS1." msgstr "Neslučitelné verze. Zařízení %s je LUKS1." -#: src/utils_reencrypt.c:1543 +#: src/utils_reencrypt.c:1552 #, c-format msgid "Conflicting versions. Device %s is in LUKS1 reencryption." msgstr "Neslučitelné verze. Zařízení %s je ve stavu přešifrování LUKS1." -#: src/utils_reencrypt.c:1549 +#: src/utils_reencrypt.c:1558 #, c-format msgid "Conflicting versions. Device %s is LUKS2." msgstr "Neslučitelné verze. Zařízení %s je LUKS2." -#: src/utils_reencrypt.c:1555 +#: src/utils_reencrypt.c:1564 #, c-format msgid "Conflicting versions. Device %s is in LUKS2 reencryption." msgstr "Neslučitelné verze. Zařízení %s je ve stavu přešifrování LUKS2." -#: src/utils_reencrypt.c:1561 +#: src/utils_reencrypt.c:1570 msgid "LUKS2 reencryption already initialized. Aborting operation." msgstr "Přešifrování LUKS2 je již inicializováno. Operace se ruší." -#: src/utils_reencrypt.c:1568 +#: src/utils_reencrypt.c:1577 msgid "Device reencryption not in progress." msgstr "Neprobíhá žádné přešifrování zařízení." @@ -5,10 +5,10 @@ # msgid "" msgstr "" -"Project-Id-Version: cryptsetup 2.7.0-rc1\n" +"Project-Id-Version: cryptsetup 2.7.1-rc0\n" "Report-Msgid-Bugs-To: cryptsetup@lists.linux.dev\n" -"POT-Creation-Date: 2023-12-20 15:16+0100\n" -"PO-Revision-Date: 2023-12-29 00:11+0100\n" +"POT-Creation-Date: 2024-02-29 20:38+0100\n" +"PO-Revision-Date: 2024-03-01 19:29+0100\n" "Last-Translator: Roland Illig <roland.illig@gmx.de>\n" "Language-Team: German <translation-team-de@lists.sourceforge.net>\n" "Language: de\n" @@ -116,632 +116,640 @@ msgstr "Unbekannte Qualität des Zufallszahlengenerators verlangt." msgid "Error reading from RNG." msgstr "Fehler beim Einlesen vom Zufallszahlengenerator." -#: lib/setup.c:261 +#: lib/setup.c:262 msgid "OPAL support is disabled in libcryptsetup." msgstr "OPAL-Unterstützung ist in libcryptsetup deaktiviert." -#: lib/setup.c:263 +#: lib/setup.c:264 #, c-format msgid "Device %s or kernel does not support OPAL encryption." msgstr "Gerät »%s« oder Kernel unterstützt OPAL-Verschlüsselung nicht." -#: lib/setup.c:279 +#: lib/setup.c:280 msgid "Cannot initialize crypto RNG backend." msgstr "Fehler beim Initialisieren des Krypto-Zufallszahlengenerator-Backends." -#: lib/setup.c:285 +#: lib/setup.c:286 msgid "Cannot initialize crypto backend." msgstr "Fehler beim Initialisieren des Krypto-Backends." -#: lib/setup.c:317 lib/setup.c:2777 lib/verity/verity.c:122 +#: lib/setup.c:318 lib/setup.c:2778 lib/verity/verity.c:122 #, c-format msgid "Hash algorithm %s not supported." msgstr "Hash-Algorithmus »%s« wird nicht unterstützt." -#: lib/setup.c:320 lib/loopaes/loopaes.c:90 +#: lib/setup.c:321 lib/loopaes/loopaes.c:90 #, c-format msgid "Key processing error (using hash %s)." msgstr "Fehler beim Verarbeiten des Schlüssels (mit Hash-Algorithmus »%s«)." -#: lib/setup.c:391 lib/setup.c:428 +#: lib/setup.c:392 lib/setup.c:429 msgid "Cannot determine device type. Incompatible activation of device?" msgstr "Geräte-Art kann nicht bestimmt werden. Inkompatible Aktivierung des Geräts?" -#: lib/setup.c:397 lib/setup.c:3971 +#: lib/setup.c:398 lib/setup.c:3973 msgid "This operation is supported only for LUKS device." msgstr "Diese Operation wird nur für LUKS-Geräte unterstützt." -#: lib/setup.c:434 +#: lib/setup.c:435 msgid "This operation is supported only for LUKS2 device." msgstr "Diese Operation wird nur für LUKS2-Geräte unterstützt." -#: lib/setup.c:491 lib/luks2/luks2_reencrypt.c:3056 +#: lib/setup.c:492 lib/luks2/luks2_reencrypt.c:3071 msgid "All key slots full." msgstr "Alle Schlüsselfächer sind voll." -#: lib/setup.c:502 +#: lib/setup.c:503 #, c-format msgid "Key slot %d is invalid, please select between 0 and %d." msgstr "Schlüsselfach %d ist ungültig, bitte wählen Sie eins zwischen 0 und %d." -#: lib/setup.c:508 +#: lib/setup.c:509 #, c-format msgid "Key slot %d is full, please select another one." msgstr "Schlüsselfach %d ist voll, bitte wählen Sie ein anderes." -#: lib/setup.c:619 lib/setup.c:3672 +#: lib/setup.c:620 lib/setup.c:3673 msgid "Device size is not aligned to device logical block size." msgstr "Gerätegröße ist nicht an logischer Sektorgröße ausgerichtet." -#: lib/setup.c:717 +#: lib/setup.c:718 #, c-format msgid "Header detected but device %s is too small." msgstr "Header gefunden, aber Gerät »%s« ist zu klein." -#: lib/setup.c:758 lib/setup.c:3563 lib/setup.c:5163 -#: lib/luks2/luks2_reencrypt.c:3848 lib/luks2/luks2_reencrypt.c:4305 +#: lib/setup.c:759 lib/setup.c:3564 lib/setup.c:5351 lib/setup.c:5371 +#: lib/luks2/luks2_reencrypt.c:3863 lib/luks2/luks2_reencrypt.c:4320 msgid "This operation is not supported for this device type." msgstr "Diese Operation wird für diese Geräteart nicht unterstützt." -#: lib/setup.c:763 +#: lib/setup.c:764 msgid "Illegal operation with reencryption in-progress." msgstr "Ungültige Operation, während die Wiederverschlüsselung läuft." -#: lib/setup.c:895 +#: lib/setup.c:896 msgid "Failed to rollback LUKS2 metadata in memory." msgstr "Fehler beim Rückabwickeln der LUKS2-Metadaten im Speicher." -#: lib/setup.c:982 lib/luks1/keymanage.c:249 lib/luks1/keymanage.c:527 -#: lib/luks2/luks2_json_metadata.c:1374 src/cryptsetup.c:1799 -#: src/cryptsetup.c:1962 src/cryptsetup.c:2017 src/cryptsetup.c:2222 -#: src/cryptsetup.c:2392 src/cryptsetup.c:2673 src/cryptsetup.c:2981 -#: src/cryptsetup.c:3049 src/utils_reencrypt.c:1488 +#: lib/setup.c:983 lib/luks1/keymanage.c:249 lib/luks1/keymanage.c:527 +#: lib/luks2/luks2_json_metadata.c:1374 src/cryptsetup.c:1878 +#: src/cryptsetup.c:2059 src/cryptsetup.c:2114 src/cryptsetup.c:2319 +#: src/cryptsetup.c:2489 src/cryptsetup.c:2770 src/cryptsetup.c:3078 +#: src/cryptsetup.c:3146 src/utils_reencrypt.c:1497 #: src/utils_reencrypt_luks1.c:1192 tokens/ssh/cryptsetup-ssh.c:85 #, c-format msgid "Device %s is not a valid LUKS device." msgstr "Gerät »%s« ist kein gültiges LUKS-Gerät." -#: lib/setup.c:985 lib/luks1/keymanage.c:530 +#: lib/setup.c:986 lib/luks1/keymanage.c:530 #, c-format msgid "Unsupported LUKS version %d." msgstr "Nicht unterstützte LUKS-Version %d." -#: lib/setup.c:1358 +#: lib/setup.c:1359 #, c-format msgid "No known cipher specification pattern detected for active device %s." msgstr "Kein bekanntes Verschlüsselungsmuster für aktives Gerät »%s« entdeckt." -#: lib/setup.c:1604 lib/setup.c:3317 lib/setup.c:3399 lib/setup.c:3411 -#: lib/setup.c:3581 lib/setup.c:5755 +#: lib/setup.c:1605 lib/setup.c:3318 lib/setup.c:3400 lib/setup.c:3412 +#: lib/setup.c:3582 lib/setup.c:5995 #, c-format msgid "Device %s is not active." msgstr "Gerät »%s« ist nicht aktiv." -#: lib/setup.c:1621 +#: lib/setup.c:1622 #, c-format msgid "Underlying device for crypt device %s disappeared." msgstr "Zugrundeliegendes Gerät für das Kryptogerät »%s« ist verschwunden." -#: lib/setup.c:1703 +#: lib/setup.c:1704 msgid "Invalid plain crypt parameters." msgstr "Ungültige Parameter für Plain-Verschlüsselung." -#: lib/setup.c:1708 lib/setup.c:2680 +#: lib/setup.c:1709 lib/setup.c:2681 msgid "Invalid key size." msgstr "Ungültige Schlüsselgröße." -#: lib/setup.c:1713 lib/setup.c:2685 lib/setup.c:2888 +#: lib/setup.c:1714 lib/setup.c:2686 lib/setup.c:2889 msgid "UUID is not supported for this crypt type." msgstr "UUID wird für diese Verschlüsselungsart nicht unterstützt." -#: lib/setup.c:1718 lib/setup.c:2690 +#: lib/setup.c:1719 lib/setup.c:2691 msgid "Detached metadata device is not supported for this crypt type." msgstr "Gerät für separierte Metadaten wird für diese Verschlüsselungsart nicht unterstützt." -#: lib/setup.c:1728 lib/setup.c:1963 lib/luks2/luks2_reencrypt.c:3012 -#: src/cryptsetup.c:1467 src/cryptsetup.c:3726 +#: lib/setup.c:1729 lib/setup.c:1964 lib/luks2/luks2_reencrypt.c:3027 +#: src/cryptsetup.c:1475 src/cryptsetup.c:3847 msgid "Unsupported encryption sector size." msgstr "Nicht unterstützte Sektorengröße für Verschlüsselung." -#: lib/setup.c:1736 lib/setup.c:1992 lib/setup.c:3666 +#: lib/setup.c:1737 lib/setup.c:1993 lib/setup.c:3667 msgid "Device size is not aligned to requested sector size." msgstr "Gerätegröße ist nicht an verlangter Sektorgröße ausgerichtet." -#: lib/setup.c:1788 lib/setup.c:2025 lib/setup.c:2357 +#: lib/setup.c:1789 lib/setup.c:2026 lib/setup.c:2358 msgid "Can't format LUKS without device." msgstr "Ohne Gerät kann LUKS nicht formatiert werden." -#: lib/setup.c:1794 lib/setup.c:2031 lib/setup.c:2363 +#: lib/setup.c:1795 lib/setup.c:2032 lib/setup.c:2364 msgid "Requested data alignment is not compatible with data offset." msgstr "Die angeforderte Datenausrichtung ist nicht mit dem Datenoffset kompatibel." -#: lib/setup.c:1834 lib/setup.c:2049 +#: lib/setup.c:1835 lib/setup.c:2050 msgid "WARNING: DAX device can corrupt data as it does not guarantee atomic sector updates.\n" msgstr "Warnung: DAX-Gerät kann Daten beschädigen, da es nicht garantiert, dass Sektoren atomar aktualisiert werden.\n" -#: lib/setup.c:1872 lib/setup.c:2144 lib/setup.c:2165 lib/setup.c:2541 -#: lib/setup.c:2587 lib/setup.c:2900 +#: lib/setup.c:1873 lib/setup.c:2145 lib/setup.c:2166 lib/setup.c:2542 +#: lib/setup.c:2588 lib/setup.c:2901 #, c-format msgid "Cannot wipe header on device %s." msgstr "Fehler beim Auslöschen des Headers auf Gerät »%s«." -#: lib/setup.c:1885 lib/setup.c:2204 +#: lib/setup.c:1886 lib/setup.c:2205 #, c-format msgid "Device %s is too small for activation, there is no remaining space for data.\n" msgstr "Gerät %s ist zu klein für die Aktivierung, es ist kein Platz mehr für Daten vorhanden.\n" -#: lib/setup.c:1925 +#: lib/setup.c:1926 msgid "Volume key is too small for encryption with integrity extensions." msgstr "Laufwerksschlüssel ist zu klein für die Verschlüsselung mit Integritätserweiterungen." -#: lib/setup.c:1934 +#: lib/setup.c:1935 #, c-format msgid "Cipher %s-%s (key size %zd bits) is not available." msgstr "Verschlüsselung »%s-%s« (Schlüsselgröße %zd Bits) ist nicht verfügbar." -#: lib/setup.c:1973 +#: lib/setup.c:1974 msgid "WARNING: The device activation will fail, dm-crypt is missing support for requested encryption sector size.\n" msgstr "WARNUNG: Die Geräteaktivierung wird fehlschlagen, dm-crypt fehlt die Unterstützung für die angeforderte Verschlüsselungsgröße.\n" -#: lib/setup.c:2147 lib/setup.c:2484 lib/setup.c:2544 lib/utils_device.c:917 -#: lib/luks1/keyencryption.c:255 lib/luks2/luks2_reencrypt.c:3080 -#: lib/luks2/luks2_reencrypt.c:4364 +#: lib/setup.c:2148 lib/setup.c:2485 lib/setup.c:2545 lib/utils_device.c:917 +#: lib/luks1/keyencryption.c:255 lib/luks2/luks2_reencrypt.c:3095 +#: lib/luks2/luks2_reencrypt.c:4380 #, c-format msgid "Device %s is too small." msgstr "Gerät »%s« ist zu klein." -#: lib/setup.c:2158 lib/setup.c:2184 lib/setup.c:2580 lib/setup.c:2626 +#: lib/setup.c:2159 lib/setup.c:2185 lib/setup.c:2581 lib/setup.c:2627 #, c-format msgid "Cannot format device %s in use." msgstr "Gerät »%s« kann nicht formatiert werden, da es gerade benutzt wird." -#: lib/setup.c:2161 lib/setup.c:2187 lib/setup.c:2583 lib/setup.c:2629 +#: lib/setup.c:2162 lib/setup.c:2188 lib/setup.c:2584 lib/setup.c:2630 #, c-format msgid "Cannot format device %s, permission denied." msgstr "Gerät »%s« kann nicht formatiert werden, Zugriff verweigert." -#: lib/setup.c:2173 lib/setup.c:2600 lib/setup.c:2960 +#: lib/setup.c:2174 lib/setup.c:2601 lib/setup.c:2961 #, c-format msgid "Cannot format integrity for device %s." msgstr "Fehler beim Formatieren der Integrität auf Gerät »%s«." -#: lib/setup.c:2191 lib/setup.c:2637 +#: lib/setup.c:2192 lib/setup.c:2638 #, c-format msgid "Cannot format device %s." msgstr "Gerät »%s« kann nicht formatiert werden." -#: lib/setup.c:2234 +#: lib/setup.c:2235 msgid "Cannot get OPAL alignment parameters." msgstr "Fehler beim Ermitteln der OPAL-Ausrichtungs-Parameter." -#: lib/setup.c:2243 +#: lib/setup.c:2244 msgid "Bogus OPAL logical block size." msgstr "Falsche Größe für logischen OPAL-Block." -#: lib/setup.c:2249 +#: lib/setup.c:2250 msgid "Requested data offset is not compatible with OPAL block size." msgstr "Der gewünschte Datenoffset ist nicht mit der OPAL-Blockgröße kompatibel." -#: lib/setup.c:2256 +#: lib/setup.c:2257 msgid "Requested data alignment is not compatible with OPAL alignment." msgstr "Die gewünschte Datenausrichtung ist nicht mit der OPAL-Ausrichtung kompatibel." -#: lib/setup.c:2276 +#: lib/setup.c:2277 msgid "Data offset does not satisfy OPAL alignment requirements." msgstr "Der Datenoffset erfüllt die OPAL-Ausrichtungsbedingungen nicht." -#: lib/setup.c:2289 +#: lib/setup.c:2290 msgid "Requested data alignment does not satisfy locking range alignment requirements." msgstr "Die gewünschte Datenausrichtung erfüllt die Anforderungen an die Ausrichtung des Sperrbereichs nicht." -#: lib/setup.c:2494 +#: lib/setup.c:2495 #, c-format msgid "Compensating device size by %<PRIu64> sectors to align it with OPAL alignment granularity." msgstr "Gerätegröße wird um %<PRIu64> Sektoren angepasst, um zur Granularität der OPAL-Ausrichtung zu passen." -#: lib/setup.c:2552 lib/setup.c:4068 lib/setup.c:4223 lib/utils_wipe.c:368 +#: lib/setup.c:2553 lib/setup.c:4070 lib/setup.c:4253 lib/utils_wipe.c:368 #: lib/luks2/luks2_json_metadata.c:2703 lib/luks2/luks2_json_metadata.c:2955 #, c-format msgid "Failed to acquire OPAL lock on device %s." msgstr "Fehler beim Zugriff auf die OPAL-Sperre für das Gerät »%s«." -#: lib/setup.c:2561 +#: lib/setup.c:2562 msgid "Incorrect OPAL Admin key." msgstr "Falscher OPAL-Admin-Schlüssel." -#: lib/setup.c:2563 +#: lib/setup.c:2564 msgid "Cannot setup OPAL segment." msgstr "Fehler beim Einrichten des OPAL-Segments." -#: lib/setup.c:2633 +#: lib/setup.c:2634 #, c-format msgid "Cannot format device %s, OPAL device seems to be fully write-protected now." msgstr "Gerät »%s« kann nicht formatiert werden, OPAL-Gerät scheint jetzt komplett schreibgeschützt zu sein." -#: lib/setup.c:2635 +#: lib/setup.c:2636 msgid "This is perhaps a bug in firmware. Run OPAL PSID reset and reconnect for recovery." msgstr "Das könnte ein Fehler in der Firmware sein. Lassen Sie »OPAL PSID reset und reconnect« zur Wiederherstellung." -#: lib/setup.c:2655 +#: lib/setup.c:2656 #, c-format msgid "Locking range %d reset on device %s failed." msgstr "Fehler beim Zurücksetzen des Sperrbereichs %d auf Gerät »%s«." -#: lib/setup.c:2675 +#: lib/setup.c:2676 msgid "Can't format LOOPAES without device." msgstr "Ohne Gerät kann LOOPAES nicht formatiert werden." -#: lib/setup.c:2720 +#: lib/setup.c:2721 msgid "Can't format VERITY without device." msgstr "Ohne Gerät kann VERITY nicht formatiert werden." -#: lib/setup.c:2731 lib/verity/verity.c:101 +#: lib/setup.c:2732 lib/verity/verity.c:101 #, c-format msgid "Unsupported VERITY hash type %d." msgstr "Nicht unterstützte VERITY-Hash-Art %d." -#: lib/setup.c:2737 lib/verity/verity.c:109 +#: lib/setup.c:2738 lib/verity/verity.c:109 msgid "Unsupported VERITY block size." msgstr "Nicht unterstützte VERITY-Blockgröße." -#: lib/setup.c:2742 lib/verity/verity.c:74 +#: lib/setup.c:2743 lib/verity/verity.c:74 msgid "Unsupported VERITY hash offset." msgstr "Nicht unterstützter VERITY-Hash-Offset." -#: lib/setup.c:2747 +#: lib/setup.c:2748 msgid "Unsupported VERITY FEC offset." msgstr "Nicht unterstützter VERITY-FEC-Offset." -#: lib/setup.c:2771 +#: lib/setup.c:2772 msgid "Data area overlaps with hash area." msgstr "Datenbereich und Hashbereich überlappen sich." -#: lib/setup.c:2796 +#: lib/setup.c:2797 msgid "Hash area overlaps with FEC area." msgstr "Hashbereich und FEC-Bereich überlappen sich." -#: lib/setup.c:2803 +#: lib/setup.c:2804 msgid "Data area overlaps with FEC area." msgstr "Datenbereich und FEC-Bereich überlappen sich." -#: lib/setup.c:2939 +#: lib/setup.c:2940 #, c-format msgid "WARNING: Requested tag size %d bytes differs from %s size output (%d bytes).\n" msgstr "WARNUNG: Angeforderte Taggröße mit %d Bytes unterscheidet sich von der Ausgabe der Größe %s (%d Bytes).\n" -#: lib/setup.c:3018 +#: lib/setup.c:3019 #, c-format msgid "Unknown crypt device type %s requested." msgstr "Unbekannte Art des Verschlüsselungsgeräts »%s« verlangt." -#: lib/setup.c:3325 lib/setup.c:3404 lib/setup.c:3417 +#: lib/setup.c:3326 lib/setup.c:3405 lib/setup.c:3418 #, c-format msgid "Unsupported parameters on device %s." msgstr "Nicht unterstützte Parameter für Gerät %s." -#: lib/setup.c:3331 lib/setup.c:3424 lib/luks2/luks2_reencrypt.c:2908 -#: lib/luks2/luks2_reencrypt.c:3145 lib/luks2/luks2_reencrypt.c:3540 +#: lib/setup.c:3332 lib/setup.c:3425 lib/luks2/luks2_reencrypt.c:2923 +#: lib/luks2/luks2_reencrypt.c:3160 lib/luks2/luks2_reencrypt.c:3555 #, c-format msgid "Mismatching parameters on device %s." msgstr "Parameter für Gerät %s sind durcheinander." -#: lib/setup.c:3448 +#: lib/setup.c:3449 msgid "Crypt devices mismatch." msgstr "Verschlüsselungsgeräte passen nicht zusammen." -#: lib/setup.c:3485 lib/setup.c:3490 lib/luks2/luks2_reencrypt.c:2390 -#: lib/luks2/luks2_reencrypt.c:2924 lib/luks2/luks2_reencrypt.c:4109 +#: lib/setup.c:3486 lib/setup.c:3491 lib/luks2/luks2_reencrypt.c:2405 +#: lib/luks2/luks2_reencrypt.c:2939 lib/luks2/luks2_reencrypt.c:4124 #, c-format msgid "Failed to reload device %s." msgstr "Gerät »%s« konnte nicht neugeladen werden." -#: lib/setup.c:3496 lib/setup.c:3502 lib/luks2/luks2_reencrypt.c:2361 -#: lib/luks2/luks2_reencrypt.c:2368 lib/luks2/luks2_reencrypt.c:2938 +#: lib/setup.c:3497 lib/setup.c:3503 lib/luks2/luks2_reencrypt.c:2376 +#: lib/luks2/luks2_reencrypt.c:2383 lib/luks2/luks2_reencrypt.c:2953 #, c-format msgid "Failed to suspend device %s." msgstr "Gerät »%s« konnte nicht stillgelegt werden." -#: lib/setup.c:3508 lib/luks2/luks2_reencrypt.c:2375 -#: lib/luks2/luks2_reencrypt.c:2959 lib/luks2/luks2_reencrypt.c:4022 -#: lib/luks2/luks2_reencrypt.c:4113 +#: lib/setup.c:3509 lib/luks2/luks2_reencrypt.c:2390 +#: lib/luks2/luks2_reencrypt.c:2974 lib/luks2/luks2_reencrypt.c:4037 +#: lib/luks2/luks2_reencrypt.c:4128 #, c-format msgid "Failed to resume device %s." msgstr "Gerät »%s« konnte nicht fortgesetzt werden." -#: lib/setup.c:3523 +#: lib/setup.c:3524 #, c-format msgid "Fatal error while reloading device %s (on top of device %s)." msgstr "Schwerwiegender Fehler beim Neuladen von Gerät »%s« (über Gerät »%s«)." -#: lib/setup.c:3526 lib/setup.c:3528 +#: lib/setup.c:3527 lib/setup.c:3529 #, c-format msgid "Failed to switch device %s to dm-error." msgstr "Gerät »%s« konnte nicht auf dm-error umgeschaltet werden." -#: lib/setup.c:3568 +#: lib/setup.c:3569 msgid "Can not resize LUKS2 device with static size." msgstr "Größe des LUKS2-Geräts kann nicht geändert werden, da sie statisch ist." -#: lib/setup.c:3613 +#: lib/setup.c:3614 msgid "Cannot resize loop device." msgstr "Fehler beim Ändern der Größe des Loopback-Geräts." -#: lib/setup.c:3657 +#: lib/setup.c:3658 msgid "WARNING: Maximum size already set or kernel doesn't support resize.\n" msgstr "WARNUNG: Die maximale Größe ist bereits eingestellt oder der Kernel unterstützt die Größenänderung nicht.\n" -#: lib/setup.c:3723 +#: lib/setup.c:3724 msgid "Resize failed, the kernel doesn't support it." msgstr "Fehler bei Größenänderung, der Kernel unterstützt sie nicht." -#: lib/setup.c:3755 +#: lib/setup.c:3756 msgid "Do you really want to change UUID of device?" msgstr "Wollen Sie wirklich die UUID des Geräts ändern?" -#: lib/setup.c:3847 +#: lib/setup.c:3848 msgid "Header backup file does not contain compatible LUKS header." msgstr "Header-Backupdatei enthält keinen kompatiblen LUKS-Header." -#: lib/setup.c:3956 +#: lib/setup.c:3958 #, c-format msgid "Volume %s is not active." msgstr "Laufwerk »%s« ist nicht aktiv." -#: lib/setup.c:4022 +#: lib/setup.c:4024 #, c-format msgid "Volume %s is already suspended." msgstr "Laufwerk »%s« ist bereits im Ruhezustand." -#: lib/setup.c:4050 +#: lib/setup.c:4052 #, c-format msgid "Suspend is not supported for device %s." msgstr "Das Gerät »%s« unterstützt keinen Ruhezustand." -#: lib/setup.c:4052 lib/setup.c:4060 +#: lib/setup.c:4054 lib/setup.c:4062 #, c-format msgid "Error during suspending device %s." msgstr "Das Gerät »%s« kann nicht in den Ruhezustand versetzt werden." -#: lib/setup.c:4074 +#: lib/setup.c:4076 #, c-format msgid "Device %s was suspended but hardware OPAL device cannot be locked." msgstr "Gerät »%s« ist im Ruhezustand, aber das Hardware-OPAL-Gerät kann nicht gesperrt werden." -#: lib/setup.c:4106 lib/setup.c:4250 +#: lib/setup.c:4108 lib/setup.c:4280 #, c-format msgid "Resume is not supported for device %s." msgstr "Das Gerät »%s« kann nicht aus dem Ruhezustand aufgeweckt werden." -#: lib/setup.c:4108 lib/setup.c:4241 lib/setup.c:4252 +#: lib/setup.c:4110 lib/setup.c:4271 lib/setup.c:4282 #, c-format msgid "Error during resuming device %s." msgstr "Fehler beim Aufwecken von Gerät »%s« aus dem Ruhezustand." -#: lib/setup.c:4131 -msgid "Failed to link key to the specified keyring." -msgstr "Fehler beim Verknüpfen des Schlüssels zum angegebenen Schlüsselbund." - -#: lib/setup.c:4150 +#: lib/setup.c:4129 msgid "Failed to unlink volume key from user specified keyring." msgstr "Fehler beim Ablösen des Laufwerkschlüssels vom benutzerspezifischen Schlüsselbund." -#: lib/setup.c:4213 lib/setup.c:4934 lib/setup.c:5549 +#: lib/setup.c:4244 lib/setup.c:4966 lib/setup.c:5787 msgid "Failed to link volume key in user defined keyring." msgstr "Fehler beim Verknüpfen des Laufwerkschlüssels im benutzerspezifischen Schlüsselbund." -#: lib/setup.c:4313 src/cryptsetup.c:2755 +#: lib/setup.c:4345 src/cryptsetup.c:2852 #, c-format msgid "Volume %s is not suspended." msgstr "Laufwerk »%s« ist nicht im Ruhezustand." -#: lib/setup.c:4414 lib/setup.c:5310 lib/setup.c:5317 lib/setup.c:7176 -#: lib/setup.c:7198 lib/setup.c:7247 src/cryptsetup.c:2265 +#: lib/setup.c:4446 lib/setup.c:5106 lib/setup.c:5523 lib/setup.c:5542 +#: lib/setup.c:7416 lib/setup.c:7438 lib/setup.c:7487 src/cryptsetup.c:2362 msgid "Volume key does not match the volume." msgstr "Der Laufwerksschlüssel passt nicht zum Laufwerk." -#: lib/setup.c:4568 +#: lib/setup.c:4600 msgid "Failed to swap new key slot." msgstr "Neues Schlüsselfach konnte nicht ausgewechselt werden." -#: lib/setup.c:4666 +#: lib/setup.c:4698 #, c-format msgid "Key slot %d is invalid." msgstr "Schlüsselfach %d ist ungültig." -#: lib/setup.c:4672 src/cryptsetup.c:1975 src/cryptsetup.c:2467 -#: src/cryptsetup.c:3149 src/cryptsetup.c:3209 +#: lib/setup.c:4704 src/cryptsetup.c:2072 src/cryptsetup.c:2564 +#: src/cryptsetup.c:3246 src/cryptsetup.c:3306 #, c-format msgid "Keyslot %d is not active." msgstr "Schlüsselfach %d ist nicht aktiv." -#: lib/setup.c:4691 +#: lib/setup.c:4723 msgid "Device header overlaps with data area." msgstr "Geräteheader und Datenbereich überlappen sich." -#: lib/setup.c:5041 +#: lib/setup.c:5076 lib/setup.c:5176 msgid "Reencryption in-progress. Cannot activate device." msgstr "Wiederverschlüsselung läuft bereits. Das Gerät kann nicht aktiviert werden." -#: lib/setup.c:5043 lib/luks2/luks2_json_metadata.c:2861 -#: lib/luks2/luks2_reencrypt.c:3646 +#: lib/setup.c:5078 lib/setup.c:5178 lib/luks2/luks2_json_metadata.c:2861 +#: lib/luks2/luks2_reencrypt.c:3661 msgid "Failed to get reencryption lock." msgstr "Fehler beim Zugriff auf die Sperre zur Wiederverschlüsselung." -#: lib/setup.c:5056 lib/luks2/luks2_reencrypt.c:3665 +#: lib/setup.c:5090 +msgid "LUKS2 reencryption recovery using volume key(s) failed." +msgstr "Fehler beim Wiederherstellen der LUKS2-Wiederverschlüsselung mittels Laufwerksschlüssel(n)." + +#: lib/setup.c:5142 lib/setup.c:5232 +msgid "Failed to link volume keys in user defined keyring." +msgstr "Fehler beim Verknüpfen von Laufwerkschlüsseln im benutzerspezifischen Schlüsselbund." + +#: lib/setup.c:5191 lib/luks2/luks2_reencrypt.c:3680 msgid "LUKS2 reencryption recovery failed." msgstr "Fehler beim Wiederherstellen der LUKS2-Wiederverschlüsselung." -#: lib/setup.c:5228 lib/setup.c:5328 lib/setup.c:5386 +#: lib/setup.c:5439 lib/setup.c:5553 lib/setup.c:5610 msgid "Device type is not properly initialized." msgstr "Geräteart ist nicht richtig initialisiert." -#: lib/setup.c:5283 +#: lib/setup.c:5494 #, c-format msgid "Device %s already exists." msgstr "Das Gerät »%s« existiert bereits." -#: lib/setup.c:5290 +#: lib/setup.c:5501 #, c-format msgid "Cannot use device %s, name is invalid or still in use." msgstr "Gerät »%s« kann nicht verwendet werden, da es gerade benutzt wird oder der Name ungültig ist." -#: lib/setup.c:5306 +#: lib/setup.c:5519 msgid "Incorrect volume key specified for plain device." msgstr "Falscher Laufwerksschlüssel für Plain-Gerät angegeben." -#: lib/setup.c:5424 +#: lib/setup.c:5533 +msgid "Reencryption volume keys do not match the volume." +msgstr "Die Laufwerksschlüssel für die Wiederverschlüsselung passen nicht zum Laufwerk." + +#: lib/setup.c:5646 msgid "Kernel keyring is not supported by the kernel." msgstr "Der Kernel-Schlüsselbund wird vom Kernel nicht unterstützt." -#: lib/setup.c:5428 +#: lib/setup.c:5650 msgid "Kernel keyring missing: required for passing signature to kernel." msgstr "Der Kernel-Schlüsselbund fehlt. Wird benötigt, um die Signatur zum Kernel zu übergeben." -#: lib/setup.c:5668 +#: lib/setup.c:5908 msgid "Incorrect root hash specified for verity device." msgstr "Falscher Root-Hash-Schlüssel für VERITY-Gerät angegeben." -#: lib/setup.c:5711 +#: lib/setup.c:5951 msgid "OPAL does not support deferred deactivation." msgstr "OPAL unterstützt verzögertes Deaktivieren nicht." -#: lib/setup.c:5727 +#: lib/setup.c:5967 #, c-format msgid "Could not cancel deferred remove from device %s." msgstr "Fehler beim Abbrechen des verzögerten Löschens von Gerät »%s«." -#: lib/setup.c:5734 lib/setup.c:5750 lib/luks2/luks2_json_metadata.c:2915 +#: lib/setup.c:5974 lib/setup.c:5990 lib/luks2/luks2_json_metadata.c:2915 #: src/utils_reencrypt.c:116 #, c-format msgid "Device %s is still in use." msgstr "Gerät »%s« wird gerade benutzt." -#: lib/setup.c:5759 +#: lib/setup.c:5999 #, c-format msgid "Invalid device %s." msgstr "Ungültiges Gerät »%s«." -#: lib/setup.c:5899 +#: lib/setup.c:6139 msgid "Volume key buffer too small." msgstr "Laufwerks-Schlüsselpuffer zu klein." -#: lib/setup.c:5916 +#: lib/setup.c:6156 msgid "Cannot retrieve volume key for LUKS2 device." msgstr "Fehler beim Ermitteln des Laufwerksschlüssels für LUKS2-Gerät." -#: lib/setup.c:5925 +#: lib/setup.c:6165 msgid "Cannot retrieve volume key for LUKS1 device." msgstr "Fehler beim Ermitteln des Laufwerksschlüssels für LUKS1-Gerät." -#: lib/setup.c:5935 +#: lib/setup.c:6175 msgid "Cannot retrieve volume key for plain device." msgstr "Fehler beim Ermitteln des Laufwerksschlüssels für Plain-Gerät." -#: lib/setup.c:5943 +#: lib/setup.c:6183 msgid "Cannot retrieve root hash for verity device." msgstr "Root-Hash für Verity-Gerät kann nicht ermittelt werden." -#: lib/setup.c:5950 +#: lib/setup.c:6190 msgid "Cannot retrieve volume key for BITLK device." msgstr "Fehler beim Ermitteln des Laufwerksschlüssels für BITLK-Gerät." -#: lib/setup.c:5955 +#: lib/setup.c:6195 msgid "Cannot retrieve volume key for FVAULT2 device." msgstr "Fehler beim Ermitteln des Laufwerksschlüssels für FVAULT2-Gerät." -#: lib/setup.c:5957 +#: lib/setup.c:6197 #, c-format msgid "This operation is not supported for %s crypt device." msgstr "Diese Operation wird für Kryptogerät »%s« nicht unterstützt." -#: lib/setup.c:6141 lib/setup.c:6152 +#: lib/setup.c:6381 lib/setup.c:6392 msgid "Dump operation is not supported for this device type." msgstr "Die Dump-Operation wird für diese Geräteart nicht unterstützt." -#: lib/setup.c:6511 +#: lib/setup.c:6751 #, c-format msgid "Data offset is not multiple of %u bytes." msgstr "Datenoffset ist kein Vielfaches von %u Bytes." -#: lib/setup.c:6819 +#: lib/setup.c:7059 #, c-format msgid "Cannot convert device %s which is still in use." msgstr "Gerät »%s« kann nicht konvertiert werden, da es gerade benutzt wird." -#: lib/setup.c:7117 lib/setup.c:7256 +#: lib/setup.c:7357 lib/setup.c:7496 #, c-format msgid "Failed to assign keyslot %u as the new volume key." msgstr "Schlüsselfach %u konnte nicht dem Laufwerksschlüssel zugeordnet werden." -#: lib/setup.c:7141 +#: lib/setup.c:7381 msgid "Failed to initialize default LUKS2 keyslot parameters." msgstr "Fehler beim Initialisieren der LUKS2-Schlüsselfach-Parameter." -#: lib/setup.c:7147 +#: lib/setup.c:7387 #, c-format msgid "Failed to assign keyslot %d to digest." msgstr "Schlüsselfach %d konnte nicht dem Digest zugeordnet werden." -#: lib/setup.c:7372 +#: lib/setup.c:7612 msgid "Cannot add key slot, all slots disabled and no volume key provided." msgstr "Schlüsselfach kann nicht hinzugefügt werden, da alle Fächer deaktiviert sind und kein Laufwerksschlüssel angegeben wurde." -#: lib/setup.c:7441 lib/verity/verity.c:343 +#: lib/setup.c:7681 lib/verity/verity.c:343 msgid "Failed to load key in kernel keyring." msgstr "Fehler beim Laden des Schlüssels im Kernel-Schlüsselbund." -#: lib/setup.c:7559 +#: lib/setup.c:7799 msgid "Failed to unlink volume key from thread keyring." msgstr "Fehler beim Loslösen des Laufwerkschlüssels vom Thread-Schlüsselbund." -#: lib/setup.c:7586 +#: lib/setup.c:7843 #, c-format msgid "Could not find keyring described by \"%s\"." msgstr "Schlüsselbund mit der Beschreibung »%s« nicht gefunden." -#: lib/setup.c:7645 +#: lib/setup.c:7908 msgid "Failed to acquire global memory-hard access serialization lock." msgstr "Globale Speicherzugriffsserialisierungssperre konnte nicht angefordert werden." -#: lib/utils.c:205 lib/tcrypt/tcrypt.c:503 +#: lib/utils.c:215 lib/tcrypt/tcrypt.c:503 msgid "Failed to open key file." msgstr "Fehler beim Öffnen der Schlüsseldatei." -#: lib/utils.c:210 +#: lib/utils.c:220 msgid "Cannot read keyfile from a terminal." msgstr "Fehler beim Einlesen der Schlüsseldatei »%s« vom Terminal." -#: lib/utils.c:226 +#: lib/utils.c:236 msgid "Failed to stat key file." msgstr "Fehler beim Öffnen der Schlüsseldatei." -#: lib/utils.c:234 lib/utils.c:255 +#: lib/utils.c:244 lib/utils.c:265 msgid "Cannot seek to requested keyfile offset." msgstr "Fehler beim Zugriff auf die Schlüsseldatei." -#: lib/utils.c:249 lib/utils.c:264 src/utils_password.c:226 +#: lib/utils.c:259 lib/utils.c:274 src/utils_password.c:226 #: src/utils_password.c:238 msgid "Out of memory while reading passphrase." msgstr "Zu wenig Speicher zum Einlesen der Passphrase." -#: lib/utils.c:284 +#: lib/utils.c:294 msgid "Error reading passphrase." msgstr "Fehler beim Einlesen der Passphrase." -#: lib/utils.c:301 +#: lib/utils.c:311 msgid "Nothing to read on input." msgstr "Nichts zu lesen in der Eingabe." -#: lib/utils.c:308 +#: lib/utils.c:318 msgid "Maximum keyfile size exceeded." msgstr "Größenbegrenzung für die Schlüsseldatei überschritten." -#: lib/utils.c:313 +#: lib/utils.c:323 msgid "Cannot read requested amount of data." msgstr "Die gewünschte Menge an Daten kann nicht eingelesen werden." #: lib/utils_device.c:213 lib/utils_storage_wrappers.c:110 -#: lib/luks1/keyencryption.c:91 src/utils_reencrypt.c:1461 +#: lib/luks1/keyencryption.c:91 src/utils_reencrypt.c:1470 #, c-format msgid "Device %s does not exist or access denied." msgstr "Gerät »%s« existiert nicht oder Zugriff verweigert." @@ -1072,7 +1080,7 @@ msgstr "LUKS-Verschlüsselungsmodus %s ist ungültig." msgid "LUKS hash %s is invalid." msgstr "LUKS-Hash %s ist ungültig." -#: lib/luks1/keymanage.c:574 src/cryptsetup.c:1352 +#: lib/luks1/keymanage.c:574 src/cryptsetup.c:1360 msgid "No known problems detected for LUKS header." msgstr "Keine bekannten Probleme im LUKS-Header erkannt." @@ -1166,11 +1174,11 @@ msgstr "Maximale Länge der TCRYPT-Passphrase (%zu) überschritten." msgid "PBKDF2 hash algorithm %s not available, skipping." msgstr "Der Hash-Algorithmus »%s« für PBKDF2 wird nicht unterstützt, überspringe diesen Teil." -#: lib/tcrypt/tcrypt.c:621 src/cryptsetup.c:1227 +#: lib/tcrypt/tcrypt.c:621 src/cryptsetup.c:1235 msgid "Required kernel crypto interface not available." msgstr "Die benötigte Crypto-Kernel-Schnittstelle ist nicht verfügbar." -#: lib/tcrypt/tcrypt.c:623 src/cryptsetup.c:1229 +#: lib/tcrypt/tcrypt.c:623 src/cryptsetup.c:1237 msgid "Ensure you have algif_skcipher kernel module loaded." msgstr "Stellen Sie sicher, dass das Kernelmodul »algif_skcipher« geladen ist." @@ -1487,17 +1495,17 @@ msgstr "Kernel unterstützt feste Ausrichtung der Metadaten für dm-integrity ni msgid "Kernel refuses to activate insecure recalculate option (see legacy activation options to override)." msgstr "Der Kernel weigert sich, die unsichere Neuberechnungs-Option zu aktivieren. Um dies zu übersteuern, können Sie die veralteten Aktivierungsoptionen nutzen." -#: lib/luks2/luks2_disk_metadata.c:391 lib/luks2/luks2_json_metadata.c:1197 +#: lib/luks2/luks2_disk_metadata.c:392 lib/luks2/luks2_json_metadata.c:1197 #: lib/luks2/luks2_json_metadata.c:1520 #, c-format msgid "Failed to acquire write lock on device %s." msgstr "Fehler beim exklusiven Schreibzugriff auf Gerät »%s«." -#: lib/luks2/luks2_disk_metadata.c:400 +#: lib/luks2/luks2_disk_metadata.c:401 msgid "Detected attempt for concurrent LUKS2 metadata update. Aborting operation." msgstr "Es wurde ein Versuch erkannt, die LUKS2-Metadaten nebenläufig zu ändern. Die Operation wird abgebrochen." -#: lib/luks2/luks2_disk_metadata.c:699 lib/luks2/luks2_disk_metadata.c:720 +#: lib/luks2/luks2_disk_metadata.c:710 lib/luks2/luks2_disk_metadata.c:731 msgid "" "Device contains ambiguous signatures, cannot auto-recover LUKS2.\n" "Please run \"cryptsetup repair\" for recovery." @@ -1582,16 +1590,16 @@ msgstr "" msgid "Ignored unknown flag %s." msgstr "Unbekannter Schalter »%s« wird ignoriert." -#: lib/luks2/luks2_json_metadata.c:2525 lib/luks2/luks2_reencrypt.c:2090 +#: lib/luks2/luks2_json_metadata.c:2525 lib/luks2/luks2_reencrypt.c:2105 #, c-format msgid "Missing key for dm-crypt segment %u" msgstr "Fehlender Schlüssel für dm-crypt-Segment %u" -#: lib/luks2/luks2_json_metadata.c:2537 lib/luks2/luks2_reencrypt.c:2104 +#: lib/luks2/luks2_json_metadata.c:2537 lib/luks2/luks2_reencrypt.c:2119 msgid "Failed to set dm-crypt segment." msgstr "Fehler beim Festlegen des »dm-crypt«-Segments." -#: lib/luks2/luks2_json_metadata.c:2543 lib/luks2/luks2_reencrypt.c:2110 +#: lib/luks2/luks2_json_metadata.c:2543 lib/luks2/luks2_reencrypt.c:2125 msgid "Failed to set dm-linear segment." msgstr "Fehler beim Festlegen des »dm-linear«-Segments." @@ -1628,7 +1636,7 @@ msgstr "Das zugrundeliegende dm-integrity-Gerät hat unerwartete Datensektoren b msgid "Reencryption in-progress. Cannot deactivate device." msgstr "Wiederverschlüsselung läuft gerade. Das Gerät kann nicht deaktiviert werden." -#: lib/luks2/luks2_json_metadata.c:2870 lib/luks2/luks2_reencrypt.c:4159 +#: lib/luks2/luks2_json_metadata.c:2870 lib/luks2/luks2_reencrypt.c:4174 #, c-format msgid "Failed to replace suspended device %s with dm-error target." msgstr "Das stillgelegte Gerät »%s« mit dm-error-Ziel konnte nicht in den Fehlerzustand gesetzt werden." @@ -1672,7 +1680,7 @@ msgid "Cannot use %s-%s cipher for keyslot encryption." msgstr "Der Algorithmus %s-%s kann nicht für Schlüsselfach-Verschlüsselung verwendet werden." #: lib/luks2/luks2_keyslot_luks2.c:285 lib/luks2/luks2_keyslot_luks2.c:404 -#: lib/luks2/luks2_keyslot_reenc.c:447 lib/luks2/luks2_reencrypt.c:2714 +#: lib/luks2/luks2_keyslot_reenc.c:447 lib/luks2/luks2_reencrypt.c:2729 #, c-format msgid "Hash algorithm %s is not available." msgstr "Der Hash-Algorithmus »%s« ist nicht verfügbar." @@ -1707,7 +1715,7 @@ msgstr "Fehler beim Prüfen des Zustands von Gerät mit der UUID %s." msgid "Unable to convert header with LUKSMETA additional metadata." msgstr "Fehler beim Konvertieren des Headers mit zusätzlichen LUKSMETA-Metadaten." -#: lib/luks2/luks2_luks1_convert.c:602 lib/luks2/luks2_reencrypt.c:3795 +#: lib/luks2/luks2_luks1_convert.c:602 lib/luks2/luks2_reencrypt.c:3810 #, c-format msgid "Unable to use cipher specification %s-%s for LUKS2." msgstr "Die Chiffrierspezifikation %s-%s kann für LUKS2 nicht verwendet werden." @@ -1765,252 +1773,252 @@ msgstr "Fehler beim Konvertieren in LUKS1-Format: Schlüsselfach %u (über Maxim msgid "Cannot convert to LUKS1 format - keyslot %u is not LUKS1 compatible." msgstr "Fehler beim Konvertieren in LUKS1-Format: Schlüsselfach %u ist nicht zu LUKS1 kompatibel." -#: lib/luks2/luks2_reencrypt.c:1181 +#: lib/luks2/luks2_reencrypt.c:1196 #, c-format msgid "Hotzone size must be multiple of calculated zone alignment (%zu bytes)." msgstr "Die Größe der Hotzone muss ein Vielfaches der berechneten Zonenausrichtung (%zu Bytes) sein." -#: lib/luks2/luks2_reencrypt.c:1186 +#: lib/luks2/luks2_reencrypt.c:1201 #, c-format msgid "Device size must be multiple of calculated zone alignment (%zu bytes)." msgstr "Gerätegröße muss ein Vielfaches der berechneten Zonenausrichtung (%zu Bytes) sein." -#: lib/luks2/luks2_reencrypt.c:1393 lib/luks2/luks2_reencrypt.c:1580 -#: lib/luks2/luks2_reencrypt.c:1663 lib/luks2/luks2_reencrypt.c:1705 -#: lib/luks2/luks2_reencrypt.c:3954 +#: lib/luks2/luks2_reencrypt.c:1408 lib/luks2/luks2_reencrypt.c:1595 +#: lib/luks2/luks2_reencrypt.c:1678 lib/luks2/luks2_reencrypt.c:1720 +#: lib/luks2/luks2_reencrypt.c:3969 msgid "Failed to initialize old segment storage wrapper." msgstr "Fehler beim Initialisieren der Umverpackung für den Speicher alter Segmente." -#: lib/luks2/luks2_reencrypt.c:1407 lib/luks2/luks2_reencrypt.c:1558 +#: lib/luks2/luks2_reencrypt.c:1422 lib/luks2/luks2_reencrypt.c:1573 msgid "Failed to initialize new segment storage wrapper." msgstr "Fehler beim Initialisieren der Umverpackung für den Speicher neuer Segmente." -#: lib/luks2/luks2_reencrypt.c:1534 lib/luks2/luks2_reencrypt.c:3966 +#: lib/luks2/luks2_reencrypt.c:1549 lib/luks2/luks2_reencrypt.c:3981 msgid "Failed to initialize hotzone protection." msgstr "Fehler beim Initialisieren des Hotzone-Schutzes." -#: lib/luks2/luks2_reencrypt.c:1607 +#: lib/luks2/luks2_reencrypt.c:1622 msgid "Failed to read checksums for current hotzone." msgstr "Fehler beim Lesen der Prüfsummen für die aktuelle Hotzone." -#: lib/luks2/luks2_reencrypt.c:1614 lib/luks2/luks2_reencrypt.c:3980 +#: lib/luks2/luks2_reencrypt.c:1629 lib/luks2/luks2_reencrypt.c:3995 #, c-format msgid "Failed to read hotzone area starting at %<PRIu64>." msgstr "Fehler beim Lesen des Hotzone-Bereichs, der bei %<PRIu64> beginnt." -#: lib/luks2/luks2_reencrypt.c:1633 +#: lib/luks2/luks2_reencrypt.c:1648 #, c-format msgid "Failed to decrypt sector %zu." msgstr "Fehler beim Entschlüsseln von Sektor %zu." -#: lib/luks2/luks2_reencrypt.c:1639 +#: lib/luks2/luks2_reencrypt.c:1654 #, c-format msgid "Failed to recover sector %zu." msgstr "Fehler beim Wiederherstellen von Sektor %zu." -#: lib/luks2/luks2_reencrypt.c:2203 +#: lib/luks2/luks2_reencrypt.c:2218 #, c-format msgid "Source and target device sizes don't match. Source %<PRIu64>, target: %<PRIu64>." msgstr "Die Größe der Quell- und Zielgeräte stimmt nicht überein. Quelle %<PRIu64>, Ziel: %<PRIu64>." -#: lib/luks2/luks2_reencrypt.c:2301 +#: lib/luks2/luks2_reencrypt.c:2316 #, c-format msgid "Failed to activate hotzone device %s." msgstr "Fehler beim Aktivieren des Hotzone-Geräts »%s«." -#: lib/luks2/luks2_reencrypt.c:2318 +#: lib/luks2/luks2_reencrypt.c:2333 #, c-format msgid "Failed to activate overlay device %s with actual origin table." msgstr "Fehler beim Aktivieren des Überlagerungsgeräts »%s« mit der tatsächlichen Ursprungstabelle." -#: lib/luks2/luks2_reencrypt.c:2325 +#: lib/luks2/luks2_reencrypt.c:2340 #, c-format msgid "Failed to load new mapping for device %s." msgstr "Fehler beim Laden der neuen Zuordnung für Gerät »%s«." -#: lib/luks2/luks2_reencrypt.c:2396 +#: lib/luks2/luks2_reencrypt.c:2411 msgid "Failed to refresh reencryption devices stack." msgstr "Fehler beim Auffrischen des Gerätestapels für Wiederverschlüsselung." -#: lib/luks2/luks2_reencrypt.c:2596 +#: lib/luks2/luks2_reencrypt.c:2611 msgid "Failed to set new keyslots area size." msgstr "Fehler beim Festlegen der neuen Bereichsgröße für Schlüsselfächer." -#: lib/luks2/luks2_reencrypt.c:2732 +#: lib/luks2/luks2_reencrypt.c:2747 #, c-format msgid "Data shift value is not aligned to encryption sector size (%<PRIu32> bytes)." msgstr "Datenverschiebung ist nicht an der angeforderten Verschlüsselungs-Sektorgröße (%<PRIu32> Bytes) ausgerichtet." -#: lib/luks2/luks2_reencrypt.c:2769 src/utils_reencrypt.c:189 +#: lib/luks2/luks2_reencrypt.c:2784 src/utils_reencrypt.c:189 #, c-format msgid "Unsupported resilience mode %s" msgstr "Nicht unterstützter Modus »%s« für Widerstandsfähigkeit" -#: lib/luks2/luks2_reencrypt.c:2806 +#: lib/luks2/luks2_reencrypt.c:2821 msgid "Moved segment size can not be greater than data shift value." msgstr "Die Größe des verschobenen Segments kann nicht größer als der Wert der Datenverschiebung sein." -#: lib/luks2/luks2_reencrypt.c:2848 +#: lib/luks2/luks2_reencrypt.c:2863 msgid "Invalid reencryption resilience parameters." msgstr "Ungültige Parameter für die robuste Wiederverschlüsselung." -#: lib/luks2/luks2_reencrypt.c:2870 +#: lib/luks2/luks2_reencrypt.c:2885 #, c-format msgid "Moved segment too large. Requested size %<PRIu64>, available space for: %<PRIu64>." msgstr "Das verschobene Segment ist zu groß. Angeforderte Größe %<PRIu64>, verfügbarer Platz %<PRIu64>." -#: lib/luks2/luks2_reencrypt.c:2957 +#: lib/luks2/luks2_reencrypt.c:2972 msgid "Failed to clear table." msgstr "Fehler beim Leeren der Tabelle." -#: lib/luks2/luks2_reencrypt.c:3043 +#: lib/luks2/luks2_reencrypt.c:3058 msgid "Reduced data size is larger than real device size." msgstr "Die reduzierte Datengröße ist größer als die tatsächliche Gerätegröße." -#: lib/luks2/luks2_reencrypt.c:3050 +#: lib/luks2/luks2_reencrypt.c:3065 #, c-format msgid "Data device is not aligned to encryption sector size (%<PRIu32> bytes)." msgstr "Datengerät ist nicht an der angeforderten Verschlüsselungs-Sektorgröße (%<PRIu32> Bytes) ausgerichtet." -#: lib/luks2/luks2_reencrypt.c:3084 +#: lib/luks2/luks2_reencrypt.c:3099 #, c-format msgid "Data shift (%<PRIu64> sectors) is less than future data offset (%<PRIu64> sectors)." msgstr "Datenverschiebung (%<PRIu64> Sektoren) ist weniger als der zukünftige Datenoffset (%<PRIu64> Sektoren)." -#: lib/luks2/luks2_reencrypt.c:3091 lib/luks2/luks2_reencrypt.c:3589 -#: lib/luks2/luks2_reencrypt.c:3610 +#: lib/luks2/luks2_reencrypt.c:3106 lib/luks2/luks2_reencrypt.c:3604 +#: lib/luks2/luks2_reencrypt.c:3625 #, c-format msgid "Failed to open %s in exclusive mode (already mapped or mounted)." msgstr "Fehler beim exklusiven Öffnen von »%s« (wird bereits anderweitig benutzt)." -#: lib/luks2/luks2_reencrypt.c:3280 +#: lib/luks2/luks2_reencrypt.c:3295 msgid "Device not marked for LUKS2 reencryption." msgstr "Das Gerät ist nicht für LUKS2-Wiederverschlüsselung markiert." -#: lib/luks2/luks2_reencrypt.c:3297 lib/luks2/luks2_reencrypt.c:4271 +#: lib/luks2/luks2_reencrypt.c:3312 lib/luks2/luks2_reencrypt.c:4286 msgid "Failed to load LUKS2 reencryption context." msgstr "Fehler beim Laden des LUKS2-Wiederverschlüsselungs-Kontextes." -#: lib/luks2/luks2_reencrypt.c:3387 +#: lib/luks2/luks2_reencrypt.c:3402 msgid "Failed to get reencryption state." msgstr "Fehler beim Einlesen des Wiederverschlüsselungs-Zustands." -#: lib/luks2/luks2_reencrypt.c:3391 lib/luks2/luks2_reencrypt.c:3705 +#: lib/luks2/luks2_reencrypt.c:3406 lib/luks2/luks2_reencrypt.c:3720 msgid "Device is not in reencryption." msgstr "Das Gerät befindet sich nicht in der Wiederverschlüsselung." -#: lib/luks2/luks2_reencrypt.c:3398 lib/luks2/luks2_reencrypt.c:3712 +#: lib/luks2/luks2_reencrypt.c:3413 lib/luks2/luks2_reencrypt.c:3727 msgid "Reencryption process is already running." msgstr "Der Wiederverschlüsselungs-Vorgang läuft bereits." -#: lib/luks2/luks2_reencrypt.c:3400 lib/luks2/luks2_reencrypt.c:3714 +#: lib/luks2/luks2_reencrypt.c:3415 lib/luks2/luks2_reencrypt.c:3729 msgid "Failed to acquire reencryption lock." msgstr "Fehler beim Zugriff auf die Schreibsperre für die Wiederverschlüsselung." -#: lib/luks2/luks2_reencrypt.c:3418 +#: lib/luks2/luks2_reencrypt.c:3433 msgid "Cannot proceed with reencryption. Run reencryption recovery first." msgstr "Wiederverschlüsselung kann nicht fortgesetzt werden. Führen Sie zuerst die Wiederverschlüsselungs-Wiederherstellung durch." -#: lib/luks2/luks2_reencrypt.c:3553 +#: lib/luks2/luks2_reencrypt.c:3568 msgid "Active device size and requested reencryption size don't match." msgstr "Aktive Gerätegröße und angeforderte Wiederverschlüsselungsgröße passen nicht zusammen." -#: lib/luks2/luks2_reencrypt.c:3567 +#: lib/luks2/luks2_reencrypt.c:3582 msgid "Illegal device size requested in reencryption parameters." msgstr "Ungültige Gerätegröße wurde in den Wiederverschlüsselungsparametern angefordert." -#: lib/luks2/luks2_reencrypt.c:3644 +#: lib/luks2/luks2_reencrypt.c:3659 msgid "Reencryption in-progress. Cannot perform recovery." msgstr "Wiederverschlüsselung läuft bereits. Wiederherstellung ist nicht möglich." -#: lib/luks2/luks2_reencrypt.c:3812 +#: lib/luks2/luks2_reencrypt.c:3827 msgid "LUKS2 reencryption already initialized in metadata." msgstr "LUKS2-Wiederverschlüsselung ist in den Metadaten bereits initialisiert." -#: lib/luks2/luks2_reencrypt.c:3819 +#: lib/luks2/luks2_reencrypt.c:3834 msgid "Failed to initialize LUKS2 reencryption in metadata." msgstr "LUKS2-Wiederverschlüsselung konnte in den Metadaten nicht initialisiert werden." -#: lib/luks2/luks2_reencrypt.c:3872 lib/luks2/luks2_reencrypt.c:3907 +#: lib/luks2/luks2_reencrypt.c:3887 lib/luks2/luks2_reencrypt.c:3922 msgid "Reencryption is not supported for DAX (persistent memory) devices." msgstr "Wiederverschlüsselung wird für DAX-Geräte (persistenten Speicher) nicht unterstützt." -#: lib/luks2/luks2_reencrypt.c:3879 +#: lib/luks2/luks2_reencrypt.c:3894 msgid "Failed to read passphrase from keyring." msgstr "Fehler beim Lesen der Passphrase vom Schlüsselbund." -#: lib/luks2/luks2_reencrypt.c:3936 +#: lib/luks2/luks2_reencrypt.c:3951 msgid "Failed to set device segments for next reencryption hotzone." msgstr "Fehler beim Festlegen der Gerätesegmente für die nächste Wiederverschlüsselungs-Hotzone." -#: lib/luks2/luks2_reencrypt.c:3988 +#: lib/luks2/luks2_reencrypt.c:4003 msgid "Failed to write reencryption resilience metadata." msgstr "Fehler beim Schreiben der Metadaten für robuste Wiederverschlüsselung." -#: lib/luks2/luks2_reencrypt.c:3995 +#: lib/luks2/luks2_reencrypt.c:4010 msgid "Decryption failed." msgstr "Fehler beim Entschlüsseln." -#: lib/luks2/luks2_reencrypt.c:4000 +#: lib/luks2/luks2_reencrypt.c:4015 #, c-format msgid "Failed to write hotzone area starting at %<PRIu64>." msgstr "Fehler beim Schreiben des Hotzone-Bereichs, der bei %<PRIu64> beginnt." -#: lib/luks2/luks2_reencrypt.c:4005 +#: lib/luks2/luks2_reencrypt.c:4020 msgid "Failed to sync data." msgstr "Fehler beim Synchronisieren von Daten." -#: lib/luks2/luks2_reencrypt.c:4013 +#: lib/luks2/luks2_reencrypt.c:4028 msgid "Failed to update metadata after current reencryption hotzone completed." msgstr "Fehler beim Aktualisieren der Metadaten, nachdem die aktuelle Wiederverschlüsselungs-Hotzone beendet wurde." -#: lib/luks2/luks2_reencrypt.c:4102 +#: lib/luks2/luks2_reencrypt.c:4117 msgid "Failed to write LUKS2 metadata." msgstr "Fehler beim Schreiben der LUKS2-Metadaten." -#: lib/luks2/luks2_reencrypt.c:4125 +#: lib/luks2/luks2_reencrypt.c:4140 msgid "Failed to wipe unused data device area." msgstr "Fehler beim gründlichen Löschen des ungenutzten Bereichs auf dem Gerät." -#: lib/luks2/luks2_reencrypt.c:4131 +#: lib/luks2/luks2_reencrypt.c:4146 #, c-format msgid "Failed to remove unused (unbound) keyslot %d." msgstr "Fehler beim Entfernen des ungenutzten (ungebundenen) Schlüsselfachs %d." -#: lib/luks2/luks2_reencrypt.c:4141 +#: lib/luks2/luks2_reencrypt.c:4156 msgid "Failed to remove reencryption keyslot." msgstr "Fehler beim Entfernen des Schlüsselfachs zur Wiederverschlüsselung." -#: lib/luks2/luks2_reencrypt.c:4151 +#: lib/luks2/luks2_reencrypt.c:4166 #, c-format msgid "Fatal error while reencrypting chunk starting at %<PRIu64>, %<PRIu64> sectors long." msgstr "Schwerwiegender Fehler beim Wiederverschlüsseln des Blocks bei %<PRIu64>, %<PRIu64> Sektoren lang." -#: lib/luks2/luks2_reencrypt.c:4155 +#: lib/luks2/luks2_reencrypt.c:4170 msgid "Online reencryption failed." msgstr "Fehler bei Online-Wiederverschlüsselung." -#: lib/luks2/luks2_reencrypt.c:4160 +#: lib/luks2/luks2_reencrypt.c:4175 msgid "Do not resume the device unless replaced with error target manually." msgstr "Das Gerät nicht fortsetzen, außer es wird manuell durch das Fehlerziel ersetzt." -#: lib/luks2/luks2_reencrypt.c:4212 +#: lib/luks2/luks2_reencrypt.c:4227 msgid "Cannot proceed with reencryption. Unexpected reencryption status." msgstr "Wiederverschlüsselung kann nicht fortgesetzt werden. Unerwarteter Zustand der Wiederverschlüsselung." -#: lib/luks2/luks2_reencrypt.c:4218 +#: lib/luks2/luks2_reencrypt.c:4233 msgid "Missing or invalid reencrypt context." msgstr "Fehlender oder ungültiger Wiederverschlüsselungs-Kontext." -#: lib/luks2/luks2_reencrypt.c:4225 +#: lib/luks2/luks2_reencrypt.c:4240 msgid "Failed to initialize reencryption device stack." msgstr "Fehler beim Initialisieren des Gerätestapels für Wiederverschlüsselung." -#: lib/luks2/luks2_reencrypt.c:4247 lib/luks2/luks2_reencrypt.c:4284 +#: lib/luks2/luks2_reencrypt.c:4262 lib/luks2/luks2_reencrypt.c:4299 msgid "Failed to update reencryption context." msgstr "Fehler beim Aktualisieren des Wiederverschlüsselungskontexts." -#: lib/luks2/luks2_reencrypt_digest.c:405 +#: lib/luks2/luks2_reencrypt_digest.c:421 msgid "Reencryption metadata is invalid." msgstr "Die Metadaten für die Wiederverschlüsselung sind ungültig." @@ -2034,101 +2042,101 @@ msgstr "In OPAL-Bereich %d ist das Sperren deaktiviert." msgid "Unexpected OPAL range %d lock state." msgstr "Unerwarteter Sperrzustand in OPAL-Bereich %d." -#: src/cryptsetup.c:85 +#: src/cryptsetup.c:93 msgid "Keyslot encryption parameters can be set only for LUKS2 device." msgstr "Verschlüsselungsparameter für Schlüsselfach wird nur für LUKS2-Geräte unterstützt." -#: src/cryptsetup.c:128 src/cryptsetup.c:2145 +#: src/cryptsetup.c:136 src/cryptsetup.c:2242 #, c-format msgid "Enter token PIN: " msgstr "Geben Sie die PIN des Tokens ein: " -#: src/cryptsetup.c:130 src/cryptsetup.c:2147 +#: src/cryptsetup.c:138 src/cryptsetup.c:2244 #, c-format msgid "Enter token %d PIN: " msgstr "Geben Sie die PIN des Tokens %d ein: " -#: src/cryptsetup.c:188 src/cryptsetup.c:1174 src/cryptsetup.c:1515 -#: src/utils_reencrypt.c:1137 src/utils_reencrypt_luks1.c:517 +#: src/cryptsetup.c:196 src/cryptsetup.c:1182 src/cryptsetup.c:1523 +#: src/utils_reencrypt.c:1146 src/utils_reencrypt_luks1.c:517 #: src/utils_reencrypt_luks1.c:580 msgid "No known cipher specification pattern detected." msgstr "Kein bekanntes Verschlüsselungsmuster entdeckt." -#: src/cryptsetup.c:198 +#: src/cryptsetup.c:206 #, c-format msgid "WARNING: Using default options for cipher (%s-%s, key size %u bits) that could be incompatible with older versions." msgstr "Warnung: Für den Verschlüsselungsalgorithmus werden die Standardeinstellungen (%s-%s, Schlüsselgröße %u Bit) verwendet, das kann inkompatibel zu älteren Versionen sein." -#: src/cryptsetup.c:203 +#: src/cryptsetup.c:211 #, c-format msgid "WARNING: Using default options for hash (%s) that could be incompatible with older versions." msgstr "Warnung: Für den Hashalgorithmus werden die Standardeinstellungen (%s) verwendet, das kann inkompatibel zu älteren Versionen sein." -#: src/cryptsetup.c:207 +#: src/cryptsetup.c:215 msgid "For plain mode, always use options --cipher, --key-size and if no keyfile is used, then also --hash." msgstr "Im einfachen Modus stets die Optionen --cipher, --key-size und (wenn keine Schlüsseldatei verwendet wird) auch --hash nutzen." -#: src/cryptsetup.c:213 +#: src/cryptsetup.c:221 msgid "WARNING: The --hash parameter is being ignored in plain mode with keyfile specified.\n" msgstr "WARNUNG: Der Parameter --hash wird im Plain-Modus ignoriert, wenn eine Schlüsseldatei angegeben ist.\n" -#: src/cryptsetup.c:221 +#: src/cryptsetup.c:229 msgid "WARNING: The --keyfile-size option is being ignored, the read size is the same as the encryption key size.\n" msgstr "WARNUNG: Die Option --keyfile-size wird ignoriert, da die Lesegröße die gleiche ist wie die Verschlüsselungsschlüsselgröße ist.\n" -#: src/cryptsetup.c:258 src/cryptsetup.c:1360 src/cryptsetup.c:1558 -#: src/integritysetup.c:197 src/utils_reencrypt.c:1346 +#: src/cryptsetup.c:266 src/cryptsetup.c:1368 src/cryptsetup.c:1566 +#: src/integritysetup.c:197 src/utils_reencrypt.c:1355 #, c-format msgid "Blkid scan failed for %s." msgstr "Fehler beim Blkid-Scan für %s." -#: src/cryptsetup.c:264 +#: src/cryptsetup.c:272 #, c-format msgid "Detected device signature(s) on %s. Proceeding further may damage existing data." msgstr "Gerätesignaturen auf »%s« erkannt. Wenn Sie fortfahren, könnte das bestehende Daten beschädigen." -#: src/cryptsetup.c:270 src/cryptsetup.c:1248 src/cryptsetup.c:1296 -#: src/cryptsetup.c:1367 src/cryptsetup.c:1492 src/cryptsetup.c:1570 -#: src/cryptsetup.c:2525 src/cryptsetup.c:2952 src/integritysetup.c:187 +#: src/cryptsetup.c:278 src/cryptsetup.c:1256 src/cryptsetup.c:1304 +#: src/cryptsetup.c:1375 src/cryptsetup.c:1500 src/cryptsetup.c:1578 +#: src/cryptsetup.c:2622 src/cryptsetup.c:3049 src/integritysetup.c:187 #: src/utils_reencrypt.c:138 src/utils_reencrypt.c:314 -#: src/utils_reencrypt.c:764 +#: src/utils_reencrypt.c:772 msgid "Operation aborted.\n" msgstr "Vorgang abgebrochen.\n" -#: src/cryptsetup.c:343 +#: src/cryptsetup.c:351 msgid "Option --key-file is required." msgstr "Die Option »--key-file« muss angegeben werden." -#: src/cryptsetup.c:394 +#: src/cryptsetup.c:402 msgid "Enter VeraCrypt PIM: " msgstr "VeraCrypt-PIM eingeben: " -#: src/cryptsetup.c:403 +#: src/cryptsetup.c:411 msgid "Invalid PIM value: parse error." msgstr "Ungültiger PIM-Wert: Formatfehler." -#: src/cryptsetup.c:406 +#: src/cryptsetup.c:414 msgid "Invalid PIM value: 0." msgstr "Ungültiger PIM-Wert: 0." -#: src/cryptsetup.c:409 +#: src/cryptsetup.c:417 msgid "Invalid PIM value: outside of range." msgstr "Ungültiger PIM-Wert: außerhalb des gültigen Bereichs." -#: src/cryptsetup.c:432 +#: src/cryptsetup.c:440 msgid "No device header detected with this passphrase." msgstr "Kein Geräte-Header mit dieser Passphrase gefunden." -#: src/cryptsetup.c:505 src/cryptsetup.c:681 +#: src/cryptsetup.c:513 src/cryptsetup.c:689 #, c-format msgid "Device %s is not a valid BITLK device." msgstr "Gerät »%s« ist kein gültiges BITLK-Gerät." -#: src/cryptsetup.c:513 +#: src/cryptsetup.c:521 msgid "Cannot determine volume key size for BITLK, please use --key-size option." msgstr "Die Größe des Laufwerksschlüssels für BITLK kann nicht ermittelt werden, bitte nutzen Sie die Option »--key-size«." -#: src/cryptsetup.c:555 +#: src/cryptsetup.c:563 msgid "" "Header dump with volume key is sensitive information\n" "which allows access to encrypted partition without passphrase.\n" @@ -2140,7 +2148,7 @@ msgstr "" "daher ausschließlich an einem sicheren Ort und verschlüsselt\n" "aufbewahrt werden." -#: src/cryptsetup.c:622 src/cryptsetup.c:703 src/cryptsetup.c:2550 +#: src/cryptsetup.c:630 src/cryptsetup.c:711 src/cryptsetup.c:2647 msgid "" "The header dump with volume key is sensitive information\n" "that allows access to encrypted partition without a passphrase.\n" @@ -2152,73 +2160,73 @@ msgstr "" "daher ausschließlich an einem sicheren Ort und verschlüsselt\n" "aufbewahrt werden." -#: src/cryptsetup.c:758 src/cryptsetup.c:788 +#: src/cryptsetup.c:766 src/cryptsetup.c:796 #, c-format msgid "Device %s is not a valid FVAULT2 device." msgstr "Gerät »%s« ist kein gültiges FVAULT2-Gerät." -#: src/cryptsetup.c:796 +#: src/cryptsetup.c:804 msgid "Cannot determine volume key size for FVAULT2, please use --key-size option." msgstr "Die Größe des Laufwerksschlüssels für FVAULT2 kann nicht ermittelt werden, bitte nutzen Sie die Option »--key-size«." -#: src/cryptsetup.c:850 src/veritysetup.c:323 src/integritysetup.c:409 +#: src/cryptsetup.c:858 src/veritysetup.c:323 src/integritysetup.c:409 #, c-format msgid "Device %s is still active and scheduled for deferred removal.\n" msgstr "Gerät »%s« ist noch aktiv und zum verzögerten Entfernen eingeplant.\n" # upstream: period missing -#: src/cryptsetup.c:884 src/cryptsetup.c:1824 src/cryptsetup.c:2080 -#: src/cryptsetup.c:2234 src/cryptsetup.c:2681 src/cryptsetup.c:2763 -#: src/cryptsetup.c:3290 +#: src/cryptsetup.c:892 src/cryptsetup.c:1903 src/cryptsetup.c:2177 +#: src/cryptsetup.c:2331 src/cryptsetup.c:2778 src/cryptsetup.c:2860 +#: src/cryptsetup.c:3387 #, c-format msgid "Failed to set external tokens path %s." msgstr "Fehler beim Festlegen des externen Tokenpfads »%s«." -#: src/cryptsetup.c:893 +#: src/cryptsetup.c:901 msgid "Resize of active device requires volume key in keyring but --disable-keyring option is set." msgstr "Um die Größe von aktiven Geräten zu öndern, muss der Laufwerksschlüssel im Schlüsselbund sein, aber die Option --disable-keyring wurde angegeben." -#: src/cryptsetup.c:1053 +#: src/cryptsetup.c:1061 msgid "Benchmark interrupted." msgstr "Benchmark unterbrochen." -#: src/cryptsetup.c:1074 +#: src/cryptsetup.c:1082 #, c-format msgid "PBKDF2-%-9s N/A\n" msgstr "PBKDF2-%-9s (nicht zutreffend)\n" -#: src/cryptsetup.c:1076 +#: src/cryptsetup.c:1084 #, c-format msgid "PBKDF2-%-9s %7u iterations per second for %zu-bit key\n" msgstr "PBKDF2-%-9s %7u Iterationen pro Sekunde für %zu-Bit-Schlüssel\n" -#: src/cryptsetup.c:1090 +#: src/cryptsetup.c:1098 #, c-format msgid "%-10s N/A\n" msgstr "%-10s (nicht zutreffend)\n" -#: src/cryptsetup.c:1092 +#: src/cryptsetup.c:1100 #, c-format msgid "%-10s %4u iterations, %5u memory, %1u parallel threads (CPUs) for %zu-bit key (requested %u ms time)\n" msgstr "%-10s %4u Iterationen, %5u Speicher, %1u parallele Threads (CPUs) für %zu-Bit-Schlüssel (Zieldauer %u Millisekunden)\n" -#: src/cryptsetup.c:1116 +#: src/cryptsetup.c:1124 msgid "Result of benchmark is not reliable." msgstr "Das Ergebnis des Benchmarks ist nicht zuverlässig." -#: src/cryptsetup.c:1166 +#: src/cryptsetup.c:1174 msgid "# Tests are approximate using memory only (no storage IO).\n" msgstr "# Die Tests sind nur annähernd genau, da sie nicht auf den Datenträger zugreifen.\n" # upstream: the following line should also be translated. This is because the long word "Schlüssel" for "Key" will break the layout, as well as "Verschlüsselung" for "Encryption". # To help the translators, you should provide an example for what goes into the %x placeholders, since I had to make an educated guess that the second %s would be exactly 4 characters long. This is an unnecessary burden for the translators. #. TRANSLATORS: The string is header of a table and must be exactly (right side) aligned. -#: src/cryptsetup.c:1186 +#: src/cryptsetup.c:1194 #, c-format msgid "#%*s Algorithm | Key | Encryption | Decryption\n" msgstr "#%*s Algorithmus | Schlüssel | Verschlüsselung | Entschlüsselung\n" -#: src/cryptsetup.c:1190 +#: src/cryptsetup.c:1198 #, c-format msgid "Cipher %s (with %i bits key) is not available." msgstr "Verschlüsselung »%s« (mit Schlüsselgröße %i Bits) ist nicht verfügbar." @@ -2226,15 +2234,15 @@ msgstr "Verschlüsselung »%s« (mit Schlüsselgröße %i Bits) ist nicht verfü # upstream: the following line should also be translated. This is because the long word "Schlüssel" for "Key" will break the layout, as well as "Verschlüsselung" for "Encryption". # To help the translators, you should provide an example for what goes into the %x placeholders, since I had to make an educated guess that the second %s would be exactly 4 characters long. This is an unnecessary burden for the translators. #. TRANSLATORS: The string is header of a table and must be exactly (right side) aligned. -#: src/cryptsetup.c:1209 +#: src/cryptsetup.c:1217 msgid "# Algorithm | Key | Encryption | Decryption\n" msgstr "# Algorithmus | Schlüssel | Verschlüsselung | Entschlüsselung\n" -#: src/cryptsetup.c:1220 +#: src/cryptsetup.c:1228 msgid "N/A" msgstr "N/A" -#: src/cryptsetup.c:1245 +#: src/cryptsetup.c:1253 msgid "" "Unprotected LUKS2 reencryption metadata detected. Please verify the reencryption operation is desirable (see luksDump output)\n" "and continue (upgrade metadata) only if you acknowledge the operation as genuine." @@ -2242,27 +2250,27 @@ msgstr "" "Ungeschützte LUKS2-Metadaten für die Wiederverschlüsselung entdeckt. Bitte überprüfen Sie, ob die Wiederverschlüsselungsoperation erwünscht ist (siehe luksDump-Ausgabe)\n" "und fahren Sie nur fort (Upgrade der Metadaten), wenn Sie den Vorgang als echt anerkennen." -#: src/cryptsetup.c:1251 +#: src/cryptsetup.c:1259 msgid "Enter passphrase to protect and upgrade reencryption metadata: " msgstr "Geben Sie die Passphrase für den Schutz und das Aktualisieren der Metadaten für die Wiederverschlüsselung ein: " -#: src/cryptsetup.c:1295 +#: src/cryptsetup.c:1303 msgid "Really proceed with LUKS2 reencryption recovery?" msgstr "Wirklich mit der Wiederherstellung der LUKS2-Wiederverschlüsselung fortfahren?" -#: src/cryptsetup.c:1304 +#: src/cryptsetup.c:1312 msgid "Enter passphrase to verify reencryption metadata digest: " msgstr "Geben Sie die Passphrase für das Prüfen der Metadaten für die Wiederverschlüsselung ein: " -#: src/cryptsetup.c:1306 +#: src/cryptsetup.c:1314 msgid "Enter passphrase for reencryption recovery: " msgstr "Geben Sie die Passphrase für die Wiederherstellung der Wiederverschlüsselung ein: " -#: src/cryptsetup.c:1366 +#: src/cryptsetup.c:1374 msgid "Really try to repair LUKS device header?" msgstr "Wirklich versuchen, den LUKS-Geräteheader wiederherzustellen?" -#: src/cryptsetup.c:1390 src/integritysetup.c:89 src/integritysetup.c:247 +#: src/cryptsetup.c:1398 src/integritysetup.c:89 src/integritysetup.c:247 msgid "" "\n" "Wipe interrupted." @@ -2270,7 +2278,7 @@ msgstr "" "\n" "Gründlich löschen unterbrochen." -#: src/cryptsetup.c:1395 src/integritysetup.c:94 src/integritysetup.c:284 +#: src/cryptsetup.c:1403 src/integritysetup.c:94 src/integritysetup.c:284 msgid "" "Wiping device to initialize integrity checksum.\n" "You can interrupt this by pressing CTRL+c (rest of not wiped device will contain invalid checksum).\n" @@ -2279,144 +2287,156 @@ msgstr "" "Sie können diesen Vorgang mit Strg+C unterbrechen (der nicht gesäuberte Bereich des Geräts wird dann ungültige Prüfsummen haben).\n" # upstream: it is boring that I have to translate the newline at the end of each of these messages. Translating strings without newlines is much easier and faster. Since it is redundant anyway (all calls to log_err have a trailing newline), this newline should be written implicitly. -#: src/cryptsetup.c:1417 src/integritysetup.c:116 +#: src/cryptsetup.c:1425 src/integritysetup.c:116 #, c-format msgid "Cannot deactivate temporary device %s." msgstr "Fehler beim Deaktivieren des temporären Geräts »%s«." -#: src/cryptsetup.c:1472 +#: src/cryptsetup.c:1480 msgid "Integrity option can be used only for LUKS2 format." msgstr "Die Integritätsoption kann nur für das LUKS2-Format verwendet werden." -#: src/cryptsetup.c:1477 src/cryptsetup.c:1542 +#: src/cryptsetup.c:1485 src/cryptsetup.c:1550 msgid "Unsupported LUKS2 metadata size options." msgstr "Nicht unterstützte Optionen für Größe der LUKS-Metadaten." -#: src/cryptsetup.c:1482 +#: src/cryptsetup.c:1490 msgid "OPAL is supported only for LUKS2 format." msgstr "OPAL wird nur für das LUKS2-Format unterstützt." -#: src/cryptsetup.c:1491 +#: src/cryptsetup.c:1499 msgid "Header file does not exist, do you want to create it?" msgstr "Die Headerdatei existiert nicht, soll sie angelegt werden?" -#: src/cryptsetup.c:1499 +#: src/cryptsetup.c:1507 #, c-format msgid "Cannot create header file %s." msgstr "Fehler beim Anlegen der Headerdatei »%s«." -#: src/cryptsetup.c:1522 src/integritysetup.c:144 src/integritysetup.c:152 +#: src/cryptsetup.c:1530 src/integritysetup.c:144 src/integritysetup.c:152 #: src/integritysetup.c:161 src/integritysetup.c:324 src/integritysetup.c:332 #: src/integritysetup.c:342 msgid "No known integrity specification pattern detected." msgstr "Kein bekanntes Integritätsspezifikationsmuster entdeckt." -#: src/cryptsetup.c:1535 +#: src/cryptsetup.c:1543 #, c-format msgid "Cannot use %s as on-disk header." msgstr "Das Gerät »%s« kann nicht als Datenträger-Header benutzt werden." -#: src/cryptsetup.c:1564 src/integritysetup.c:181 +#: src/cryptsetup.c:1572 src/integritysetup.c:181 #, c-format msgid "This will overwrite data on %s irrevocably." msgstr "Hiermit werden die Daten auf »%s« unwiderruflich überschrieben." -#: src/cryptsetup.c:1601 +#: src/cryptsetup.c:1609 msgid "OPAL Admin password cannot be empty." msgstr "Das OPAL-Admin-Passwort darf nicht leer sein." -#: src/cryptsetup.c:1615 src/cryptsetup.c:2097 src/cryptsetup.c:2247 -#: src/cryptsetup.c:2407 src/cryptsetup.c:2473 src/utils_reencrypt_luks1.c:443 +#: src/cryptsetup.c:1623 src/cryptsetup.c:2194 src/cryptsetup.c:2344 +#: src/cryptsetup.c:2504 src/cryptsetup.c:2570 src/utils_reencrypt_luks1.c:443 msgid "Failed to set pbkdf parameters." msgstr "Fehler beim Festlegen der PBKDF-Parameter." -#: src/cryptsetup.c:1745 +#: src/cryptsetup.c:1755 msgid "Type specification in --link-vk-to-keyring keyring specification is ignored." msgstr "Die Typangabe in --link-vk-to-keyring wird ignoriert." -#: src/cryptsetup.c:1765 +#: src/cryptsetup.c:1820 +msgid "Key types have to be the same for both volume keys." +msgstr "Beide Laufwerksschlüssel müssen vom gleichen Schlüsseltyp sein." + +#: src/cryptsetup.c:1825 +msgid "Both volume keys have to be linked to the same keyring." +msgstr "Beide Laufwerksschlüssel müssen mit demselben Schlüsselbund verknüpft sein." + +#: src/cryptsetup.c:1835 +msgid "You need to supply more key names." +msgstr "Sie müssen weitere Schlüsselnamen angeben." + +#: src/cryptsetup.c:1839 msgid "Invalid --link-vk-to-keyring value." msgstr "Ungültiger Wert für --link-vk-to-keyring." -#: src/cryptsetup.c:1805 +#: src/cryptsetup.c:1884 msgid "Reduced data offset is allowed only for detached LUKS header." msgstr "Verringerter Datenoffset ist nur für separaten LUKS-Header erlaubt." -#: src/cryptsetup.c:1812 +#: src/cryptsetup.c:1891 #, c-format msgid "LUKS file container %s is too small for activation, there is no remaining space for data." msgstr "LUKS-Datei-Container %s ist zu klein für die Aktivierung, es ist kein Platz mehr für Daten vorhanden." -#: src/cryptsetup.c:1839 src/cryptsetup.c:2253 +#: src/cryptsetup.c:1918 src/cryptsetup.c:2350 msgid "Cannot determine volume key size for LUKS without keyslots, please use --key-size option." msgstr "Die Größe des Laufwerksschlüssels erfordert Schlüsselfächer, bitte nutzen Sie dazu die Option »--key-size«." -#: src/cryptsetup.c:1890 +#: src/cryptsetup.c:1985 msgid "Device activated but cannot make flags persistent." msgstr "Gerät aktiviert, aber die Schalter können nicht dauerhaft gespeichert werden." -#: src/cryptsetup.c:1972 src/cryptsetup.c:2040 +#: src/cryptsetup.c:2069 src/cryptsetup.c:2137 #, c-format msgid "Keyslot %d is selected for deletion." msgstr "Schlüsselfach %d zum Löschen ausgewählt." -#: src/cryptsetup.c:1984 src/cryptsetup.c:2044 +#: src/cryptsetup.c:2081 src/cryptsetup.c:2141 msgid "This is the last keyslot. Device will become unusable after purging this key." msgstr "Dies ist das letzte Schlüsselfach. Wenn Sie diesen Schlüssel löschen, wird das Gerät unbrauchbar." -#: src/cryptsetup.c:1985 +#: src/cryptsetup.c:2082 msgid "Enter any remaining passphrase: " msgstr "Geben Sie irgendeine verbleibende Passphrase ein: " -#: src/cryptsetup.c:1986 src/cryptsetup.c:2046 +#: src/cryptsetup.c:2083 src/cryptsetup.c:2143 msgid "Operation aborted, the keyslot was NOT wiped.\n" msgstr "Vorgang abgebrochen, das Schlüsselfach wurde NICHT gesäubert.\n" -#: src/cryptsetup.c:2022 +#: src/cryptsetup.c:2119 msgid "Enter passphrase to be deleted: " msgstr "Geben Sie die zu löschende Passphrase ein: " -#: src/cryptsetup.c:2072 src/cryptsetup.c:2456 src/cryptsetup.c:3114 -#: src/cryptsetup.c:3281 +#: src/cryptsetup.c:2169 src/cryptsetup.c:2553 src/cryptsetup.c:3211 +#: src/cryptsetup.c:3378 #, c-format msgid "Device %s is not a valid LUKS2 device." msgstr "Gerät »%s« ist kein gültiges LUKS2-Gerät." -#: src/cryptsetup.c:2111 src/cryptsetup.c:2330 +#: src/cryptsetup.c:2208 src/cryptsetup.c:2427 msgid "Enter new passphrase for key slot: " msgstr "Geben Sie die neue Passphrase für das Schlüsselfach ein: " -#: src/cryptsetup.c:2213 +#: src/cryptsetup.c:2310 msgid "WARNING: The --key-slot parameter is used for new keyslot number.\n" msgstr "WARNUNG: Der Parameter --key-slot wird für die neue Nummer des Schlüsselfachs verwendet.\n" -#: src/cryptsetup.c:2286 src/utils_reencrypt_luks1.c:1149 +#: src/cryptsetup.c:2383 src/utils_reencrypt_luks1.c:1149 #, c-format msgid "Enter any existing passphrase: " msgstr "Geben Sie irgendeine bestehende Passphrase ein: " -#: src/cryptsetup.c:2411 +#: src/cryptsetup.c:2508 msgid "Enter passphrase to be changed: " msgstr "Geben Sie die zu ändernde Passphrase ein: " -#: src/cryptsetup.c:2427 src/utils_reencrypt_luks1.c:1135 +#: src/cryptsetup.c:2524 src/utils_reencrypt_luks1.c:1135 msgid "Enter new passphrase: " msgstr "Geben Sie die neue Passphrase ein: " -#: src/cryptsetup.c:2477 +#: src/cryptsetup.c:2574 msgid "Enter passphrase for keyslot to be converted: " msgstr "Geben Sie die Passphrase für das umzuwandelnde Schlüsselfach ein: " -#: src/cryptsetup.c:2501 +#: src/cryptsetup.c:2598 msgid "Only one device argument for isLuks operation is supported." msgstr "Die Operation »isLuks« unterstützt nur genau ein Geräte-Argument." -#: src/cryptsetup.c:2609 +#: src/cryptsetup.c:2706 #, c-format msgid "Keyslot %d does not contain unbound key." msgstr "Schlüsselfach %d enthält keinen unverbundenen Schlüssel." -#: src/cryptsetup.c:2614 +#: src/cryptsetup.c:2711 msgid "" "The header dump with unbound key is sensitive information.\n" "This dump should be stored encrypted in a safe place." @@ -2425,52 +2445,52 @@ msgstr "" "Dieser Dump sollte daher ausschließlich an einem sicheren Ort und\n" "verschlüsselt aufbewahrt werden." -#: src/cryptsetup.c:2709 src/cryptsetup.c:2746 +#: src/cryptsetup.c:2806 src/cryptsetup.c:2843 #, c-format msgid "%s is not active %s device name." msgstr "%s ist kein aktives %s-Gerät." -#: src/cryptsetup.c:2741 +#: src/cryptsetup.c:2838 #, c-format msgid "%s is not active LUKS device name or header is missing." msgstr "%s ist kein aktives LUKS-Gerät, oder der Header fehlt." -#: src/cryptsetup.c:2819 src/cryptsetup.c:2838 +#: src/cryptsetup.c:2916 src/cryptsetup.c:2935 msgid "Option --header-backup-file is required." msgstr "Option »--header-backup-file« muss angegeben werden." -#: src/cryptsetup.c:2869 +#: src/cryptsetup.c:2966 #, c-format msgid "%s is not cryptsetup managed device." msgstr "%s ist kein von cryptsetup verwaltetes Gerät." -#: src/cryptsetup.c:2880 +#: src/cryptsetup.c:2977 #, c-format msgid "Refresh is not supported for device type %s" msgstr "Die Geräteart »%s« kann nicht aufgefrischt werden" -#: src/cryptsetup.c:2930 +#: src/cryptsetup.c:3027 #, c-format msgid "Unrecognized metadata device type %s." msgstr "Unbekannte Art »%s« des Metadaten-Geräts." -#: src/cryptsetup.c:2932 +#: src/cryptsetup.c:3029 msgid "Command requires device and mapped name as arguments." msgstr "Dieser Befehl benötigt den Gerätenamen und den zugeordneten Namen als Argumente." -#: src/cryptsetup.c:2942 +#: src/cryptsetup.c:3039 msgid "Enter OPAL PSID: " msgstr "Geben Sie die OPAL-PSID ein: " -#: src/cryptsetup.c:2942 +#: src/cryptsetup.c:3039 msgid "Enter OPAL Admin password: " msgstr "Geben Sie das OPAL-Admin-Passwort ein: " -#: src/cryptsetup.c:2951 +#: src/cryptsetup.c:3048 msgid "WARNING: WHOLE disk will be factory reset and all data will be lost! Continue?" msgstr "Warnung: Der GESAMTE Datenträger wird auf die Werkseinstellungen zurückgesetzt, und alle Daten gehen verloren. Fortsetzen?" -#: src/cryptsetup.c:2994 +#: src/cryptsetup.c:3091 #, c-format msgid "" "This operation will erase all keyslots on device %s.\n" @@ -2479,351 +2499,351 @@ msgstr "" "Diese Operation wird alle Schlüsselfächer auf Gerät »%s« löschen.\n" "Dadurch wird das Gerät unbrauchbar." -#: src/cryptsetup.c:3001 +#: src/cryptsetup.c:3098 msgid "Operation aborted, keyslots were NOT wiped.\n" msgstr "Vorgang abgebrochen, die Schlüsselfächer wurden NICHT gesäubert.\n" -#: src/cryptsetup.c:3040 +#: src/cryptsetup.c:3137 msgid "Invalid LUKS type, only luks1 and luks2 are supported." msgstr "Invalid LUKS type, only luks1 and luks2 are supported." -#: src/cryptsetup.c:3056 +#: src/cryptsetup.c:3153 #, c-format msgid "Device is already %s type." msgstr "Das Gerät hat bereits den Typ »%s«." -#: src/cryptsetup.c:3063 +#: src/cryptsetup.c:3160 #, c-format msgid "This operation will convert %s to %s format.\n" msgstr "Diese Operation wird für »%s« ins Format »%s« umwandeln.\n" -#: src/cryptsetup.c:3066 +#: src/cryptsetup.c:3163 msgid "Operation aborted, device was NOT converted.\n" msgstr "Vorgang abgebrochen, das Gerät wurde NICHT konvertiert.\n" -#: src/cryptsetup.c:3106 +#: src/cryptsetup.c:3203 msgid "Option --priority, --label or --subsystem is missing." msgstr "Die Option --priority, --label oder --subsystem fehlt." -#: src/cryptsetup.c:3140 src/cryptsetup.c:3180 src/cryptsetup.c:3200 +#: src/cryptsetup.c:3237 src/cryptsetup.c:3277 src/cryptsetup.c:3297 #, c-format msgid "Token %d is invalid." msgstr "Token %d ist ungültig." -#: src/cryptsetup.c:3143 src/cryptsetup.c:3203 +#: src/cryptsetup.c:3240 src/cryptsetup.c:3300 #, c-format msgid "Token %d in use." msgstr "Token %d ist in Benutzung." -#: src/cryptsetup.c:3155 +#: src/cryptsetup.c:3252 #, c-format msgid "Failed to add luks2-keyring token %d." msgstr "Fehler beim Hinzufügen des LUKS2-Schlüsselring-Tokens %d." -#: src/cryptsetup.c:3166 src/cryptsetup.c:3229 +#: src/cryptsetup.c:3263 src/cryptsetup.c:3326 #, c-format msgid "Failed to assign token %d to keyslot %d." msgstr "Token %d kann nicht dem Schlüsselfach %d zugeordnet werden." -#: src/cryptsetup.c:3183 +#: src/cryptsetup.c:3280 #, c-format msgid "Token %d is not in use." msgstr "Token %d wird gerade nicht verwendet." -#: src/cryptsetup.c:3220 +#: src/cryptsetup.c:3317 msgid "Failed to import token from file." msgstr "Token konnte nicht aus der Datei importiert werden." -#: src/cryptsetup.c:3245 +#: src/cryptsetup.c:3342 #, c-format msgid "Failed to get token %d for export." msgstr "Auf Token %d kann nicht für den Export zugegriffen werden." -#: src/cryptsetup.c:3258 +#: src/cryptsetup.c:3355 #, c-format msgid "Token %d is not assigned to keyslot %d." msgstr "Token %d ist nicht dem Schlüsselfach %d zugeordnet." -#: src/cryptsetup.c:3260 src/cryptsetup.c:3267 +#: src/cryptsetup.c:3357 src/cryptsetup.c:3364 #, c-format msgid "Failed to unassign token %d from keyslot %d." msgstr "Token %d kann nicht vom Schlüsselfach %d losgelöst werden." -#: src/cryptsetup.c:3326 +#: src/cryptsetup.c:3423 msgid "Option --tcrypt-hidden, --tcrypt-system or --tcrypt-backup is supported only for TCRYPT device." msgstr "Die Optionen --tcrypt-hidden, --tcrypt-system und --tcrypt-backup sind nur zusammen mit einem TCRYPT-Gerät erlaubt." -#: src/cryptsetup.c:3329 +#: src/cryptsetup.c:3426 msgid "Option --veracrypt or --disable-veracrypt is supported only for TCRYPT device type." msgstr "Die Optionen --veracrypt und --disable-veracrypt werden nur für TCRYPT-kompatible Geräte unterstützt." -#: src/cryptsetup.c:3332 +#: src/cryptsetup.c:3429 msgid "Option --veracrypt-pim is supported only for VeraCrypt compatible devices." msgstr "Die Option --veracrypt-pim wird nur für VeraCrypt-kompatible Geräte unterstützt." -#: src/cryptsetup.c:3336 +#: src/cryptsetup.c:3433 msgid "Option --veracrypt-query-pim is supported only for VeraCrypt compatible devices." msgstr "Die Option --veracrypt-query-pim wird nur für VeraCrypt-kompatible Geräte unterstützt." -#: src/cryptsetup.c:3338 +#: src/cryptsetup.c:3435 msgid "The options --veracrypt-pim and --veracrypt-query-pim are mutually exclusive." msgstr "Die Optionen --veracrypt-pim und --veracrypt-query-pim schließen sich gegenseitig aus." -#: src/cryptsetup.c:3347 +#: src/cryptsetup.c:3444 msgid "Option --persistent is not allowed with --test-passphrase." msgstr "Die Option --persistent ist nicht mit --test-passphrase kombinierbar." -#: src/cryptsetup.c:3350 +#: src/cryptsetup.c:3447 msgid "Options --refresh and --test-passphrase are mutually exclusive." msgstr "Die Optionen --refresh und --test-passphrase schließen sich gegenseitig aus." -#: src/cryptsetup.c:3353 +#: src/cryptsetup.c:3450 msgid "Option --shared is allowed only for open of plain device." msgstr "Die Option --shared ist nur beim beim »open«-Befehl eines Plain-Gerätes erlaubt." -#: src/cryptsetup.c:3356 +#: src/cryptsetup.c:3453 msgid "Option --skip is supported only for open of plain and loopaes devices." msgstr "Die Option --skip ist nur beim Öffnen von plain- und loopaes-Geräten erlaubt." -#: src/cryptsetup.c:3359 +#: src/cryptsetup.c:3456 msgid "Option --offset with open action is only supported for plain and loopaes devices." msgstr "Die Option --offset mit der Aktion Öffnen wird nur für einfache und loopaes-Geräte unterstützt." -#: src/cryptsetup.c:3362 +#: src/cryptsetup.c:3459 msgid "Option --tcrypt-hidden cannot be combined with --allow-discards." msgstr "Die Option --tcrypt-hidden kann nicht mit --allow-discards kombiniert werden." -#: src/cryptsetup.c:3366 +#: src/cryptsetup.c:3463 msgid "Sector size option with open action is supported only for plain devices." msgstr "Die Option \"Sektorgröße\" mit der Aktion \"Öffnen\" wird nur für einfache Geräte unterstützt." -#: src/cryptsetup.c:3370 +#: src/cryptsetup.c:3467 msgid "Large IV sectors option is supported only for opening plain type device with sector size larger than 512 bytes." msgstr "Die Option für große IV-Sektoren wird nur unterstützt, wenn das geöffnete Gerät Sektoren größer als 512 Bytes hat." -#: src/cryptsetup.c:3375 +#: src/cryptsetup.c:3472 msgid "Option --test-passphrase is allowed only for open of LUKS, TCRYPT, BITLK and FVAULT2 devices." msgstr "Die Option --test-passphrase ist nur beim Öffnen von LUKS-, TCRYPT-, BITLK- und FVAULT2-Geräten erlaubt." -#: src/cryptsetup.c:3378 src/cryptsetup.c:3401 +#: src/cryptsetup.c:3475 src/cryptsetup.c:3498 msgid "Options --device-size and --size cannot be combined." msgstr "Die Optionen --device-size und --size können nicht kombiniert werden." -#: src/cryptsetup.c:3381 +#: src/cryptsetup.c:3478 msgid "Option --unbound is allowed only for open of luks device." msgstr "Die Option »--unbound« ist nur beim »open«-Befehl eines LUKS-Gerätes erlaubt." -#: src/cryptsetup.c:3384 +#: src/cryptsetup.c:3481 msgid "Option --unbound cannot be used without --test-passphrase." msgstr "Die Option »--unbound« kann nur in Kombination mit »--test-passphrase« verwendet werden." -#: src/cryptsetup.c:3393 src/veritysetup.c:671 src/integritysetup.c:767 +#: src/cryptsetup.c:3490 src/veritysetup.c:671 src/integritysetup.c:767 msgid "Options --cancel-deferred and --deferred cannot be used at the same time." msgstr "Die Optionen --cancel-deferred und --deferred können nicht kombiniert werden." -#: src/cryptsetup.c:3409 +#: src/cryptsetup.c:3506 msgid "Options --reduce-device-size and --device-size cannot be combined." msgstr "Die Optionen --reduce-device-size und --device-size können nicht kombiniert werden." -#: src/cryptsetup.c:3412 +#: src/cryptsetup.c:3509 msgid "Option --active-name can be set only for LUKS2 device." msgstr "Die Option »--active-name« ist nur auf LUKS2-Geräte anwendbar." -#: src/cryptsetup.c:3415 +#: src/cryptsetup.c:3512 msgid "Options --active-name and --force-offline-reencrypt cannot be combined." msgstr "Die Optionen »--active-name« und »--force-offline-reencrypt« können nicht kombiniert werden." -#: src/cryptsetup.c:3423 src/cryptsetup.c:3453 +#: src/cryptsetup.c:3520 src/cryptsetup.c:3550 msgid "Keyslot specification is required." msgstr "Das Schlüsselfach muss angegeben werden." -#: src/cryptsetup.c:3431 +#: src/cryptsetup.c:3528 msgid "Options --align-payload and --offset cannot be combined." msgstr "Die Optionen --align-payload und --offset können nicht kombiniert werden." -#: src/cryptsetup.c:3434 +#: src/cryptsetup.c:3531 msgid "Option --integrity-no-wipe can be used only for format action with integrity extension." msgstr "Die Option --integrity-no-wipe ist nur für die »format«-Aktion mit Integritätserweiterung erlaubt." -#: src/cryptsetup.c:3437 +#: src/cryptsetup.c:3534 msgid "Only one of --use-[u]random options is allowed." msgstr "Nur eine der Optionen --use-[u]random ist erlaubt." -#: src/cryptsetup.c:3445 +#: src/cryptsetup.c:3542 msgid "Key size is required with --unbound option." msgstr "Die Option »--unbound« erfordert die Schlüsselgröße." -#: src/cryptsetup.c:3465 +#: src/cryptsetup.c:3562 msgid "Invalid token action." msgstr "Ungültige Token-Aktion." -#: src/cryptsetup.c:3468 +#: src/cryptsetup.c:3565 msgid "--key-description parameter is mandatory for token add action." msgstr "Der Parameter --key-description ist Pflicht für die Aktion »token add«." -#: src/cryptsetup.c:3472 src/cryptsetup.c:3485 +#: src/cryptsetup.c:3569 src/cryptsetup.c:3582 msgid "Action requires specific token. Use --token-id parameter." msgstr "Die Aktion erfordert ein bestimmtes Token. Verwenden Sie den Parameter --token-id." -#: src/cryptsetup.c:3476 +#: src/cryptsetup.c:3573 msgid "Option --unbound is valid only with token add action." msgstr "Die Option »--unbound« kann nur zusammen mit der Aktion zum Hinzufügen eines Tokens verwendet werden." -#: src/cryptsetup.c:3478 +#: src/cryptsetup.c:3575 msgid "Options --key-slot and --unbound cannot be combined." msgstr "Die Optionen --key-slot und --unbound können nicht kombiniert werden." -#: src/cryptsetup.c:3483 +#: src/cryptsetup.c:3580 msgid "Action requires specific keyslot. Use --key-slot parameter." msgstr "Die Aktion erfordert ein bestimmtes Schlüsselfach. Verwenden Sie den Parameter --key-slot." -#: src/cryptsetup.c:3499 +#: src/cryptsetup.c:3596 msgid "<device> [--type <type>] [<name>]" msgstr "<Gerät> [--type <Art>] [<Name>]" -#: src/cryptsetup.c:3499 src/veritysetup.c:491 src/integritysetup.c:544 +#: src/cryptsetup.c:3596 src/veritysetup.c:491 src/integritysetup.c:544 msgid "open device as <name>" msgstr "Gerät als <Name> öffnen" -#: src/cryptsetup.c:3500 src/cryptsetup.c:3501 src/cryptsetup.c:3502 +#: src/cryptsetup.c:3597 src/cryptsetup.c:3598 src/cryptsetup.c:3599 #: src/veritysetup.c:492 src/veritysetup.c:493 src/integritysetup.c:545 #: src/integritysetup.c:546 src/integritysetup.c:548 msgid "<name>" msgstr "<Name>" -#: src/cryptsetup.c:3500 src/veritysetup.c:492 src/integritysetup.c:545 +#: src/cryptsetup.c:3597 src/veritysetup.c:492 src/integritysetup.c:545 msgid "close device (remove mapping)" msgstr "Gerät schließen (Zuordnung entfernen)" -#: src/cryptsetup.c:3501 src/integritysetup.c:548 +#: src/cryptsetup.c:3598 src/integritysetup.c:548 msgid "resize active device" msgstr "Größe des aktiven Geräts ändern" -#: src/cryptsetup.c:3502 +#: src/cryptsetup.c:3599 msgid "show device status" msgstr "Gerätestatus anzeigen" -#: src/cryptsetup.c:3503 +#: src/cryptsetup.c:3600 msgid "[--cipher <cipher>]" msgstr "[--cipher <Algorithmus>]" -#: src/cryptsetup.c:3503 +#: src/cryptsetup.c:3600 msgid "benchmark cipher" msgstr "Verschlüsselungsalgorithmus benchmarken" -#: src/cryptsetup.c:3504 src/cryptsetup.c:3505 src/cryptsetup.c:3506 -#: src/cryptsetup.c:3507 src/cryptsetup.c:3508 src/cryptsetup.c:3515 -#: src/cryptsetup.c:3516 src/cryptsetup.c:3517 src/cryptsetup.c:3518 -#: src/cryptsetup.c:3519 src/cryptsetup.c:3520 src/cryptsetup.c:3521 -#: src/cryptsetup.c:3522 src/cryptsetup.c:3523 src/cryptsetup.c:3524 +#: src/cryptsetup.c:3601 src/cryptsetup.c:3602 src/cryptsetup.c:3603 +#: src/cryptsetup.c:3604 src/cryptsetup.c:3605 src/cryptsetup.c:3612 +#: src/cryptsetup.c:3613 src/cryptsetup.c:3614 src/cryptsetup.c:3615 +#: src/cryptsetup.c:3616 src/cryptsetup.c:3617 src/cryptsetup.c:3618 +#: src/cryptsetup.c:3619 src/cryptsetup.c:3620 src/cryptsetup.c:3621 msgid "<device>" msgstr "<Gerät>" -#: src/cryptsetup.c:3504 +#: src/cryptsetup.c:3601 msgid "try to repair on-disk metadata" msgstr "Versuchen, die Metadaten auf dem Datenträger zu reparieren" -#: src/cryptsetup.c:3505 +#: src/cryptsetup.c:3602 msgid "reencrypt LUKS2 device" msgstr "LUKS2-Gerät wiederverschlüsseln" -#: src/cryptsetup.c:3506 +#: src/cryptsetup.c:3603 msgid "erase all keyslots (remove encryption key)" msgstr "Alle Schlüsselfächer löschen (Verschlüsselungsschlüssel entfernen)" -#: src/cryptsetup.c:3507 +#: src/cryptsetup.c:3604 msgid "convert LUKS from/to LUKS2 format" msgstr "Zwischen den Formaten LUKS und LUKS2 umwandeln" -#: src/cryptsetup.c:3508 +#: src/cryptsetup.c:3605 msgid "set permanent configuration options for LUKS2" msgstr "Permanente Konfigurationsoptionen für LUKS2 festlegen" -#: src/cryptsetup.c:3509 src/cryptsetup.c:3510 +#: src/cryptsetup.c:3606 src/cryptsetup.c:3607 msgid "<device> [<new key file>]" msgstr "<Gerät> [<neue Schlüsseldatei>]" -#: src/cryptsetup.c:3509 +#: src/cryptsetup.c:3606 msgid "formats a LUKS device" msgstr "Ein LUKS-Gerät formatieren" -#: src/cryptsetup.c:3510 +#: src/cryptsetup.c:3607 msgid "add key to LUKS device" msgstr "Schlüssel zu LUKS-Gerät hinzufügen" -#: src/cryptsetup.c:3511 src/cryptsetup.c:3512 src/cryptsetup.c:3513 +#: src/cryptsetup.c:3608 src/cryptsetup.c:3609 src/cryptsetup.c:3610 msgid "<device> [<key file>]" msgstr "<Gerät> [<Schlüsseldatei>]" -#: src/cryptsetup.c:3511 +#: src/cryptsetup.c:3608 msgid "removes supplied key or key file from LUKS device" msgstr "Entfernt bereitgestellten Schlüssel oder Schlüsseldatei vom LUKS-Gerät" -#: src/cryptsetup.c:3512 +#: src/cryptsetup.c:3609 msgid "changes supplied key or key file of LUKS device" msgstr "Ändert den angegebenen Schlüssel oder die Schlüsseldatei des LUKS-Geräts" -#: src/cryptsetup.c:3513 +#: src/cryptsetup.c:3610 msgid "converts a key to new pbkdf parameters" msgstr "Wandelt einen Schlüssel in neue PBKDF-Parameter um" -#: src/cryptsetup.c:3514 +#: src/cryptsetup.c:3611 msgid "<device> <key slot>" msgstr "<Gerät> <Schlüsselfach>" -#: src/cryptsetup.c:3514 +#: src/cryptsetup.c:3611 msgid "wipes key with number <key slot> from LUKS device" msgstr "Löscht Schlüssel mit Nummer <Schlüsselfach> vom LUKS-Gerät" -#: src/cryptsetup.c:3515 +#: src/cryptsetup.c:3612 msgid "print UUID of LUKS device" msgstr "UUID des LUKS-Geräts ausgeben" -#: src/cryptsetup.c:3516 +#: src/cryptsetup.c:3613 msgid "tests <device> for LUKS partition header" msgstr "Testet <Gerät> auf Header einer LUKS-Partition" -#: src/cryptsetup.c:3517 +#: src/cryptsetup.c:3614 msgid "dump LUKS partition information" msgstr "LUKS-Partitionsinformationen ausgeben" -#: src/cryptsetup.c:3518 +#: src/cryptsetup.c:3615 msgid "dump TCRYPT device information" msgstr "TCRYPT-Geräteinformationen ausgeben" -#: src/cryptsetup.c:3519 +#: src/cryptsetup.c:3616 msgid "dump BITLK device information" msgstr "BITLK-Geräteinformationen ausgeben" -#: src/cryptsetup.c:3520 +#: src/cryptsetup.c:3617 msgid "dump FVAULT2 device information" msgstr "VFAULT2-Geräteinformationen ausgeben" -#: src/cryptsetup.c:3521 +#: src/cryptsetup.c:3618 msgid "Suspend LUKS device and wipe key (all IOs are frozen)" msgstr "LUKS-Gerät in Ruhezustand versetzen und alle Schlüssel auslöschen (alle IOs werden eingefroren)" -#: src/cryptsetup.c:3522 +#: src/cryptsetup.c:3619 msgid "Resume suspended LUKS device" msgstr "LUKS-Gerät aus dem Ruhezustand aufwecken" -#: src/cryptsetup.c:3523 +#: src/cryptsetup.c:3620 msgid "Backup LUKS device header and keyslots" msgstr "Header und Schlüsselfächer eines LUKS-Geräts sichern" -#: src/cryptsetup.c:3524 +#: src/cryptsetup.c:3621 msgid "Restore LUKS device header and keyslots" msgstr "Header und Schlüsselfächer eines LUKS-Geräts wiederherstellen" -#: src/cryptsetup.c:3525 +#: src/cryptsetup.c:3622 msgid "<add|remove|import|export> <device>" msgstr "<add|remove|import|export> <Gerät>" -#: src/cryptsetup.c:3525 +#: src/cryptsetup.c:3622 msgid "Manipulate LUKS2 tokens" msgstr "LUKS2-Token manipulieren" -#: src/cryptsetup.c:3544 src/veritysetup.c:509 src/integritysetup.c:563 +#: src/cryptsetup.c:3641 src/veritysetup.c:509 src/integritysetup.c:563 msgid "" "\n" "<action> is one of:\n" @@ -2831,7 +2851,7 @@ msgstr "" "\n" "<Aktion> ist eine von:\n" -#: src/cryptsetup.c:3550 +#: src/cryptsetup.c:3647 msgid "" "\n" "You can also use old <action> syntax aliases:\n" @@ -2843,7 +2863,7 @@ msgstr "" "\topen: create (plainOpen), luksOpen, loopaesOpen, tcryptOpen, bitlkOpen, fvault2Open\n" "\tclose: remove (plainClose), luksClose, loopaesClose, tcryptClose, bitlkClose, fvault2Close\n" -#: src/cryptsetup.c:3554 +#: src/cryptsetup.c:3651 #, c-format msgid "" "\n" @@ -2858,7 +2878,7 @@ msgstr "" "<Schlüsselfach> ist die Nummer des zu verändernden LUKS-Schlüsselfachs\n" "<Schlüsseldatei> optionale Schlüsseldatei für den neuen Schlüssel der »luksAddKey«-Aktion\n" -#: src/cryptsetup.c:3561 +#: src/cryptsetup.c:3658 #, c-format msgid "" "\n" @@ -2867,7 +2887,7 @@ msgstr "" "\n" "Vorgegebenes festeingebautes Metadatenformat ist %s (für luksFormat-Aktion).\n" -#: src/cryptsetup.c:3566 +#: src/cryptsetup.c:3663 msgid "" "\n" "LUKS2 external token plugin support is enabled.\n" @@ -2875,12 +2895,12 @@ msgstr "" "\n" "Die Plugin-Unterstützung für externe LUKS2-Tokens ist aktiviert.\n" -#: src/cryptsetup.c:3567 +#: src/cryptsetup.c:3664 #, c-format msgid "LUKS2 external token plugin path: %s.\n" msgstr "Pfad des Plugins für externe LUKS2-Token: %s.\n" -#: src/cryptsetup.c:3569 +#: src/cryptsetup.c:3666 msgid "" "\n" "LUKS2 external token plugin support is disabled.\n" @@ -2888,7 +2908,7 @@ msgstr "" "\n" "Die Plugin-Unterstützung für externe LUKS2-Tokens ist deaktiviert.\n" -#: src/cryptsetup.c:3573 +#: src/cryptsetup.c:3670 #, c-format msgid "" "\n" @@ -2905,7 +2925,7 @@ msgstr "" "Vorgabe-PBKDF für LUKS2: %s\n" "\tIterationszeit: %d, benötigter Speicher: %d kB, parallele Threads: %d\n" -#: src/cryptsetup.c:3584 +#: src/cryptsetup.c:3681 #, c-format msgid "" "\n" @@ -2920,100 +2940,110 @@ msgstr "" "\tplain: %s, Schlüssel: %d Bits, Passphrase-Hashen: %s\n" "\tLUKS: %s, Schlüssel: %d Bits, LUKS-Header-Hashen: %s, Zufallszahlengenerator: %s\n" -#: src/cryptsetup.c:3593 +#: src/cryptsetup.c:3690 msgid "\tLUKS: Default keysize with XTS mode (two internal keys) will be doubled.\n" msgstr "\tLUKS: Standard-Schlüsselgröße mit XTS-Modus (zwei interne Schlüssel) wird verdoppelt.\n" -#: src/cryptsetup.c:3611 src/veritysetup.c:651 src/integritysetup.c:723 +#: src/cryptsetup.c:3708 src/veritysetup.c:651 src/integritysetup.c:723 #, c-format msgid "%s: requires %s as arguments" msgstr "%s: Benötigt %s als Argumente" -#: src/cryptsetup.c:3651 src/utils_reencrypt_luks1.c:1198 +#: src/cryptsetup.c:3748 src/utils_reencrypt_luks1.c:1198 msgid "Key slot is invalid." msgstr "Schlüsselfach ist ungültig." -#: src/cryptsetup.c:3678 +#: src/cryptsetup.c:3776 msgid "Device size must be multiple of 512 bytes sector." msgstr "Die Gerätegröße muss ein Vielfaches von 512-Byte-Sektoren sein." -#: src/cryptsetup.c:3683 +#: src/cryptsetup.c:3781 msgid "Invalid max reencryption hotzone size specification." msgstr "Ungültige Angabe der Maximalgröße für die Wiederverschlüsselungs-Hotzone." -#: src/cryptsetup.c:3697 src/cryptsetup.c:3709 +#: src/cryptsetup.c:3795 src/cryptsetup.c:3807 msgid "Key size must be a multiple of 8 bits" msgstr "Schlüsselgröße muss ein Vielfaches von 8 Bit sein" -#: src/cryptsetup.c:3714 +#: src/cryptsetup.c:3814 +#, c-format +msgid "At most %d volume key specifications can be supplied." +msgstr "Es können maximal %d Laufwerksschlüssel-Angaben verarbeitet werden." + +#: src/cryptsetup.c:3826 +#, c-format +msgid "At most %d keyring link specifications can be supplied." +msgstr "Es können maximal %d Schlüsselbund-Verknüpfungsangaben verarbeitet werden." + +#: src/cryptsetup.c:3835 msgid "Maximum device reduce size is 1 GiB." msgstr "Die maximale Verkleinerungsgröße ist 1 GiB." -#: src/cryptsetup.c:3717 +#: src/cryptsetup.c:3838 msgid "Reduce size must be multiple of 512 bytes sector." msgstr "Die verkleinerte Größe muss ein Vielfaches von 512-Byte-Sektoren sein." -#: src/cryptsetup.c:3734 +#: src/cryptsetup.c:3855 msgid "Option --priority can be only ignore/normal/prefer." msgstr "Die Option --priority kann nur »ignore/normal/prefer« sein." -#: src/cryptsetup.c:3753 src/veritysetup.c:572 src/integritysetup.c:643 +#: src/cryptsetup.c:3874 src/veritysetup.c:572 src/integritysetup.c:643 msgid "Show this help message" msgstr "Diese Hilfe anzeigen" -#: src/cryptsetup.c:3754 src/veritysetup.c:573 src/integritysetup.c:644 +#: src/cryptsetup.c:3875 src/veritysetup.c:573 src/integritysetup.c:644 msgid "Display brief usage" msgstr "Kurze Aufrufsyntax anzeigen" -#: src/cryptsetup.c:3755 src/veritysetup.c:574 src/integritysetup.c:645 +#: src/cryptsetup.c:3876 src/veritysetup.c:574 src/integritysetup.c:645 msgid "Print package version" msgstr "Paketversion ausgeben" -#: src/cryptsetup.c:3766 src/veritysetup.c:585 src/integritysetup.c:656 +#: src/cryptsetup.c:3887 src/veritysetup.c:585 src/integritysetup.c:656 msgid "Help options:" msgstr "Hilfe-Optionen:" -#: src/cryptsetup.c:3789 src/veritysetup.c:606 src/integritysetup.c:676 +#: src/cryptsetup.c:3910 src/veritysetup.c:606 src/integritysetup.c:676 msgid "[OPTION...] <action> <action-specific>" msgstr "[OPTION...] <Aktion> <aktionsabhängig>" -#: src/cryptsetup.c:3798 src/veritysetup.c:615 src/integritysetup.c:687 +#: src/cryptsetup.c:3919 src/veritysetup.c:615 src/integritysetup.c:687 msgid "Argument <action> missing." msgstr "Argument <Aktion> fehlt." -#: src/cryptsetup.c:3877 src/veritysetup.c:646 src/integritysetup.c:718 +#: src/cryptsetup.c:3998 src/veritysetup.c:646 src/integritysetup.c:718 msgid "Unknown action." msgstr "Unbekannte Aktion." -#: src/cryptsetup.c:3895 +#: src/cryptsetup.c:4016 msgid "Option --key-file takes precedence over specified key file argument." msgstr "Die Option --key-file wirkt stärker als das angegebene Schlüsseldatei-Argument." -#: src/cryptsetup.c:3901 +#: src/cryptsetup.c:4022 msgid "Only one --key-file argument is allowed." msgstr "Die Option --key-file ist nur einmal erlaubt." -#: src/cryptsetup.c:3906 +#: src/cryptsetup.c:4027 msgid "Password-based key derivation function (PBKDF) can be only pbkdf2 or argon2i/argon2id." msgstr "Passwortbasierte Schlüsselableitungsfunktion (PBKDF) kann nur »pbkdf2« oder »argon2i/argon2id« sein." -#: src/cryptsetup.c:3911 +#: src/cryptsetup.c:4032 msgid "PBKDF forced iterations cannot be combined with iteration time option." msgstr "Bei PBKDF darf nur entweder die Anzahl der Durchläufe oder die Zeitbegrenzung angegeben werden." -#: src/cryptsetup.c:3916 +#: src/cryptsetup.c:4037 msgid "Cannot link volume key to a keyring when keyring is disabled." msgstr "Laufwerkschlüssel kann nicht mit einem Schlüsselbund verbunden werden, solange der Schlüsselbund deaktiviert ist." -#: src/cryptsetup.c:3927 +#: src/cryptsetup.c:4048 msgid "Options --keyslot-cipher and --keyslot-key-size must be used together." msgstr "Die Optionen --keyslot-cipher und --keyslot-keysize können nur zusammen benutzt werden." -#: src/cryptsetup.c:3935 +#: src/cryptsetup.c:4056 msgid "No action taken. Invoked with --test-args option.\n" msgstr "Es wird keine Aktion ausgeführt. Aufgerufen mit der Option --test-args.\n" -#: src/cryptsetup.c:3948 +#: src/cryptsetup.c:4069 msgid "Cannot disable metadata locking." msgstr "Fehler beim Deaktivieren der Metadaten-Dateisperre." @@ -3478,20 +3508,20 @@ msgstr "Es ist kein nutzbares Schlüsselfach verfügbar." msgid "Can't do passphrase verification on non-tty inputs." msgstr "Passphrase-Verifikation ist nur auf Terminal-Eingaben möglich." -#: src/utils_luks.c:183 +#: src/utils_luks.c:186 #, c-format msgid "Failed to open file %s in read-only mode." msgstr "Datei %s konnte nicht im Nur-Lese-Modus geöffnet werden." -#: src/utils_luks.c:196 +#: src/utils_luks.c:199 msgid "Provide valid LUKS2 token JSON:\n" msgstr "Geben Sie gültiges LUKS2-Token-JSON an:\n" -#: src/utils_luks.c:203 +#: src/utils_luks.c:206 msgid "Failed to read JSON file." msgstr "JSON-Datei konnte nicht gelesen werden." -#: src/utils_luks.c:208 +#: src/utils_luks.c:211 msgid "" "\n" "Read interrupted." @@ -3499,12 +3529,12 @@ msgstr "" "\n" "Lesen unterbrochen." -#: src/utils_luks.c:249 +#: src/utils_luks.c:252 #, c-format msgid "Failed to open file %s in write mode." msgstr "Datei %s konnte nicht im Schreibmodus geöffnet werden." -#: src/utils_luks.c:258 +#: src/utils_luks.c:261 msgid "" "\n" "Write interrupted." @@ -3512,7 +3542,7 @@ msgstr "" "\n" "Schreiben unterbrochen." -#: src/utils_luks.c:262 +#: src/utils_luks.c:265 msgid "Failed to write JSON file." msgstr "JSON-Datei konnte nicht geschrieben werden." @@ -3600,7 +3630,7 @@ msgstr "" "Angeforderte --sector-size %<PRIu32> ist nicht kompatibel mit dem %s-Superblock\n" "(Blockgröße: %<PRIu32>Bytes), der auf dem Gerät %s erkannt wurde." -#: src/utils_reencrypt.c:533 src/utils_reencrypt.c:1412 +#: src/utils_reencrypt.c:533 src/utils_reencrypt.c:1421 msgid "Encryption without detached header (--header) is not possible without data device size reduction (--reduce-device-size)." msgstr "Verschlüsselung ohne separaten Kopfbereich (--header) ist nur möglich, wenn die Größe des Hauptgeräts reduziert wird (--reduce-device-size)." @@ -3650,53 +3680,53 @@ msgstr "Wiederherstellung des ursprünglichen LUKS2-Headers." msgid "Original LUKS2 header restore failed." msgstr "Fehler beim Wiederherstellen des ursprünglichen LUKS2-Headers." -#: src/utils_reencrypt.c:759 +#: src/utils_reencrypt.c:765 #, c-format msgid "Header file %s does not exist. Do you want to initialize LUKS2 decryption of device %s and export LUKS2 header to file %s?" msgstr "Die Header-Datei %s existiert nicht. Möchten Sie die LUKS2-Entschlüsselung von Gerät %s initialisieren und LUKS2-Header in Datei %s exportieren?" -#: src/utils_reencrypt.c:807 +#: src/utils_reencrypt.c:815 msgid "Failed to add read/write permissions to exported header file." msgstr "Fehler beim Hinzufügen der Lese-/Schreibberechtigung für die exportierte Header-Datei." -#: src/utils_reencrypt.c:860 +#: src/utils_reencrypt.c:869 #, c-format msgid "Reencryption initialization failed. Header backup is available in %s." msgstr "Fehler beim Initialisieren der Wiederverschlüsselung. Eine Sicherungskopie des Headers befindet sich in %s." -#: src/utils_reencrypt.c:888 +#: src/utils_reencrypt.c:897 msgid "LUKS2 decryption is supported with detached header device only (with data offset set to 0)." msgstr "LUKS2-Entschlüsselung wird nur mit losgelöstem Headergerät unterstützt (mit Datenoffset auf 0 gesetzt)." -#: src/utils_reencrypt.c:1023 src/utils_reencrypt.c:1032 +#: src/utils_reencrypt.c:1032 src/utils_reencrypt.c:1041 msgid "Not enough free keyslots for reencryption." msgstr "Nicht genügend freie Schlüsselfächer für Wiederverschlüsselung." -#: src/utils_reencrypt.c:1053 src/utils_reencrypt_luks1.c:1100 +#: src/utils_reencrypt.c:1062 src/utils_reencrypt_luks1.c:1100 msgid "Key file can be used only with --key-slot or with exactly one key slot active." msgstr "Schlüsseldatei kann nur mit --key-slot oder mit genau einem aktiven Schlüsselfach benutzt werden." -#: src/utils_reencrypt.c:1062 src/utils_reencrypt_luks1.c:1147 +#: src/utils_reencrypt.c:1071 src/utils_reencrypt_luks1.c:1147 #: src/utils_reencrypt_luks1.c:1158 #, c-format msgid "Enter passphrase for key slot %d: " msgstr "Geben Sie die Passphrase für Schlüsselfach %d ein: " -#: src/utils_reencrypt.c:1074 +#: src/utils_reencrypt.c:1083 #, c-format msgid "Enter passphrase for key slot %u: " msgstr "Geben Sie die Passphrase für Schlüsselfach %u ein: " -#: src/utils_reencrypt.c:1126 +#: src/utils_reencrypt.c:1135 #, c-format msgid "Switching data encryption cipher to %s.\n" msgstr "Der Verschlüsselungsalgorithmus wird auf %s geändert.\n" -#: src/utils_reencrypt.c:1180 +#: src/utils_reencrypt.c:1189 msgid "No data segment parameters changed. Reencryption aborted." msgstr "Keine Datensegmentparameter geändert. Wiederverschlüsselung abgebrochen." -#: src/utils_reencrypt.c:1282 +#: src/utils_reencrypt.c:1291 msgid "" "Encryption sector size increase on offline device is not supported.\n" "Activate the device first or use --force-offline-reencrypt option (dangerous!)." @@ -3704,7 +3734,7 @@ msgstr "" "Die Zunahme der Größe des Verschlüsselungssektors auf einem Offline-Gerät wird nicht unterstützt.\n" "Aktivieren Sie das Gerät zuerst oder verwenden Sie die Option »--force-offline-reencrypt« (gefährlich!)." -#: src/utils_reencrypt.c:1322 src/utils_reencrypt_luks1.c:726 +#: src/utils_reencrypt.c:1331 src/utils_reencrypt_luks1.c:726 #: src/utils_reencrypt_luks1.c:798 msgid "" "\n" @@ -3713,58 +3743,58 @@ msgstr "" "\n" "Wiederverschlüsselung unterbrochen." -#: src/utils_reencrypt.c:1327 +#: src/utils_reencrypt.c:1336 msgid "Resuming LUKS reencryption in forced offline mode.\n" msgstr "LUKS-Wiederverschlüsselung wird im erzwungenen Offline-Modus fortgesetzt.\n" -#: src/utils_reencrypt.c:1350 +#: src/utils_reencrypt.c:1359 #, c-format msgid "Device %s contains broken LUKS metadata. Aborting operation." msgstr "Das Gerät %s enthält fehlerhafte LUKS-Metadaten. Vorgang wird abgebrochen." -#: src/utils_reencrypt.c:1366 src/utils_reencrypt.c:1388 +#: src/utils_reencrypt.c:1375 src/utils_reencrypt.c:1397 #, c-format msgid "Device %s is already LUKS device. Aborting operation." msgstr "Gerät %s ist bereits ein LUKS-Gerät. Vorgang wird abgebrochen." -#: src/utils_reencrypt.c:1394 +#: src/utils_reencrypt.c:1403 #, c-format msgid "Device %s is already in LUKS reencryption. Aborting operation." msgstr "Gerät %s befindet sich bereits in der LUKS-Wiederverschlüsselung. Vorgang wird abgebrochen." -#: src/utils_reencrypt.c:1476 +#: src/utils_reencrypt.c:1485 msgid "LUKS2 decryption requires --header option." msgstr "LUKS2-Entschlüsselung erfordert die Option »--header«." -#: src/utils_reencrypt.c:1524 +#: src/utils_reencrypt.c:1533 msgid "Command requires device as argument." msgstr "Dieser Befehl benötigt den Gerätenamen als Argument." -#: src/utils_reencrypt.c:1537 +#: src/utils_reencrypt.c:1546 #, c-format msgid "Conflicting versions. Device %s is LUKS1." msgstr "Widersprüchliche Versionen. Gerät %s ist LUKS1." -#: src/utils_reencrypt.c:1543 +#: src/utils_reencrypt.c:1552 #, c-format msgid "Conflicting versions. Device %s is in LUKS1 reencryption." msgstr "Widersprüchliche Versionen. Gerät %s befindet sich in der LUKS1-Wiederverschlüsselung." -#: src/utils_reencrypt.c:1549 +#: src/utils_reencrypt.c:1558 #, c-format msgid "Conflicting versions. Device %s is LUKS2." msgstr "Widersprüchliche Versionen. Gerät %s ist LUKS2." -#: src/utils_reencrypt.c:1555 +#: src/utils_reencrypt.c:1564 #, c-format msgid "Conflicting versions. Device %s is in LUKS2 reencryption." msgstr "Widersprüchliche Versionen. Gerät %s befindet sich in LUKS2-Wiederverschlüsselung." -#: src/utils_reencrypt.c:1561 +#: src/utils_reencrypt.c:1570 msgid "LUKS2 reencryption already initialized. Aborting operation." msgstr "Die LUKS2-Wiederverschlüsselung wurde bereits begonnen. Die Operation wird abgebrochen." -#: src/utils_reencrypt.c:1568 +#: src/utils_reencrypt.c:1577 msgid "Device reencryption not in progress." msgstr "Derzeit läuft keine Wiederverschlüsselung." @@ -1,16 +1,16 @@ # Messages français pour cryptsetup. -# Copyright (C) 2023 Free Software Foundation, Inc. +# Copyright (C) 2024 Free Software Foundation, Inc. # This file is put in the public domain. # # Solveig <perso@solveig.org>, 2009. # Nicolas Provost <nprovost@quadriv.com>, 2011. -# Frédéric Marchal <fmarchal@perso.be>, 2023. +# Frédéric Marchal <fmarchal@perso.be>, 2024. msgid "" msgstr "" -"Project-Id-Version: cryptsetup 2.7.0-rc1\n" +"Project-Id-Version: cryptsetup 2.7.1-rc0\n" "Report-Msgid-Bugs-To: cryptsetup@lists.linux.dev\n" -"POT-Creation-Date: 2023-12-20 15:16+0100\n" -"PO-Revision-Date: 2023-12-21 11:38+0100\n" +"POT-Creation-Date: 2024-02-29 20:38+0100\n" +"PO-Revision-Date: 2024-03-01 18:31+0100\n" "Last-Translator: Frédéric Marchal <fmarchal@perso.be>\n" "Language-Team: French <traduc@traduc.org>\n" "Language: fr\n" @@ -117,632 +117,640 @@ msgstr "La qualité du générateur aléatoire RNG demandé est inconnue." msgid "Error reading from RNG." msgstr "Erreur en lecture du générateur aléatoire RNG " -#: lib/setup.c:261 +#: lib/setup.c:262 msgid "OPAL support is disabled in libcryptsetup." msgstr "Le support de OPAL est désactivé dans libcryptsetup." -#: lib/setup.c:263 +#: lib/setup.c:264 #, c-format msgid "Device %s or kernel does not support OPAL encryption." msgstr "Le périphérique %s ou le noyau ne supporte pas le chiffrement OPAL." -#: lib/setup.c:279 +#: lib/setup.c:280 msgid "Cannot initialize crypto RNG backend." msgstr "Impossible d'initialiser le moteur aléatoire RNG pour le chiffrement." -#: lib/setup.c:285 +#: lib/setup.c:286 msgid "Cannot initialize crypto backend." msgstr "Impossible d'initialiser le moteur de chiffrement." -#: lib/setup.c:317 lib/setup.c:2777 lib/verity/verity.c:122 +#: lib/setup.c:318 lib/setup.c:2778 lib/verity/verity.c:122 #, c-format msgid "Hash algorithm %s not supported." msgstr "L'algorithme de hachage %s n'est pas supporté." -#: lib/setup.c:320 lib/loopaes/loopaes.c:90 +#: lib/setup.c:321 lib/loopaes/loopaes.c:90 #, c-format msgid "Key processing error (using hash %s)." msgstr "Erreur de traitement de clé (valeur hachage %s)." -#: lib/setup.c:391 lib/setup.c:428 +#: lib/setup.c:392 lib/setup.c:429 msgid "Cannot determine device type. Incompatible activation of device?" msgstr "Impossible de déterminer le type de périphérique. Activation du périphérique incompatible ?" -#: lib/setup.c:397 lib/setup.c:3971 +#: lib/setup.c:398 lib/setup.c:3973 msgid "This operation is supported only for LUKS device." msgstr "Cette opération n'est possible que pour les périphériques LUKS." -#: lib/setup.c:434 +#: lib/setup.c:435 msgid "This operation is supported only for LUKS2 device." msgstr "Cette opération n'est possible que pour les périphériques LUKS2." -#: lib/setup.c:491 lib/luks2/luks2_reencrypt.c:3056 +#: lib/setup.c:492 lib/luks2/luks2_reencrypt.c:3071 msgid "All key slots full." msgstr "Tous les emplacements de clés sont utilisés." -#: lib/setup.c:502 +#: lib/setup.c:503 #, c-format msgid "Key slot %d is invalid, please select between 0 and %d." msgstr "L'emplacement de clé %d n'est pas valide, merci d'en choisir un entre 0 et %d." -#: lib/setup.c:508 +#: lib/setup.c:509 #, c-format msgid "Key slot %d is full, please select another one." msgstr "L'emplacement de clé %d est utilisé, merci d'en sélectionner un autre." -#: lib/setup.c:619 lib/setup.c:3672 +#: lib/setup.c:620 lib/setup.c:3673 msgid "Device size is not aligned to device logical block size." msgstr "La taille du périphérique n'est pas alignée avec la taille d'un bloc logique du périphérique." -#: lib/setup.c:717 +#: lib/setup.c:718 #, c-format msgid "Header detected but device %s is too small." msgstr "En-tête détecté mais le périphérique %s est trop petit." -#: lib/setup.c:758 lib/setup.c:3563 lib/setup.c:5163 -#: lib/luks2/luks2_reencrypt.c:3848 lib/luks2/luks2_reencrypt.c:4305 +#: lib/setup.c:759 lib/setup.c:3564 lib/setup.c:5351 lib/setup.c:5371 +#: lib/luks2/luks2_reencrypt.c:3863 lib/luks2/luks2_reencrypt.c:4320 msgid "This operation is not supported for this device type." msgstr "Cette opération n'est pas supportée pour ce type de périphérique." -#: lib/setup.c:763 +#: lib/setup.c:764 msgid "Illegal operation with reencryption in-progress." msgstr "Opération illégale avec une re-chiffrement en cours." -#: lib/setup.c:895 +#: lib/setup.c:896 msgid "Failed to rollback LUKS2 metadata in memory." msgstr "Échec lors du retour en arrière des métadonnées LUKS2 en mémoire." -#: lib/setup.c:982 lib/luks1/keymanage.c:249 lib/luks1/keymanage.c:527 -#: lib/luks2/luks2_json_metadata.c:1374 src/cryptsetup.c:1799 -#: src/cryptsetup.c:1962 src/cryptsetup.c:2017 src/cryptsetup.c:2222 -#: src/cryptsetup.c:2392 src/cryptsetup.c:2673 src/cryptsetup.c:2981 -#: src/cryptsetup.c:3049 src/utils_reencrypt.c:1488 +#: lib/setup.c:983 lib/luks1/keymanage.c:249 lib/luks1/keymanage.c:527 +#: lib/luks2/luks2_json_metadata.c:1374 src/cryptsetup.c:1878 +#: src/cryptsetup.c:2059 src/cryptsetup.c:2114 src/cryptsetup.c:2319 +#: src/cryptsetup.c:2489 src/cryptsetup.c:2770 src/cryptsetup.c:3078 +#: src/cryptsetup.c:3146 src/utils_reencrypt.c:1497 #: src/utils_reencrypt_luks1.c:1192 tokens/ssh/cryptsetup-ssh.c:85 #, c-format msgid "Device %s is not a valid LUKS device." msgstr "%s n'est pas un périphérique LUKS valide." -#: lib/setup.c:985 lib/luks1/keymanage.c:530 +#: lib/setup.c:986 lib/luks1/keymanage.c:530 #, c-format msgid "Unsupported LUKS version %d." msgstr "La version %d de LUKS n'est pas supportée." -#: lib/setup.c:1358 +#: lib/setup.c:1359 #, c-format msgid "No known cipher specification pattern detected for active device %s." msgstr "Aucun motif connu d'algorithme de chiffrement n'a été détecté pour le périphérique actif %s." -#: lib/setup.c:1604 lib/setup.c:3317 lib/setup.c:3399 lib/setup.c:3411 -#: lib/setup.c:3581 lib/setup.c:5755 +#: lib/setup.c:1605 lib/setup.c:3318 lib/setup.c:3400 lib/setup.c:3412 +#: lib/setup.c:3582 lib/setup.c:5995 #, c-format msgid "Device %s is not active." msgstr "Le périphérique %s n'est pas activé." -#: lib/setup.c:1621 +#: lib/setup.c:1622 #, c-format msgid "Underlying device for crypt device %s disappeared." msgstr "Le périphérique sous-jacent pour le périphérique chiffré %s a disparu." -#: lib/setup.c:1703 +#: lib/setup.c:1704 msgid "Invalid plain crypt parameters." msgstr "Paramètres de chiffrement non valides." -#: lib/setup.c:1708 lib/setup.c:2680 +#: lib/setup.c:1709 lib/setup.c:2681 msgid "Invalid key size." msgstr "La taille de la clé n'est pas valide." -#: lib/setup.c:1713 lib/setup.c:2685 lib/setup.c:2888 +#: lib/setup.c:1714 lib/setup.c:2686 lib/setup.c:2889 msgid "UUID is not supported for this crypt type." msgstr "le UUID n'est pas supporté avec ce type de chiffrement." -#: lib/setup.c:1718 lib/setup.c:2690 +#: lib/setup.c:1719 lib/setup.c:2691 msgid "Detached metadata device is not supported for this crypt type." msgstr "Un périphérique avec des métadonnées détachées n'est pas supporté avec ce type de chiffrement." -#: lib/setup.c:1728 lib/setup.c:1963 lib/luks2/luks2_reencrypt.c:3012 -#: src/cryptsetup.c:1467 src/cryptsetup.c:3726 +#: lib/setup.c:1729 lib/setup.c:1964 lib/luks2/luks2_reencrypt.c:3027 +#: src/cryptsetup.c:1475 src/cryptsetup.c:3847 msgid "Unsupported encryption sector size." msgstr "Taille de secteur de chiffrement non supportée." -#: lib/setup.c:1736 lib/setup.c:1992 lib/setup.c:3666 +#: lib/setup.c:1737 lib/setup.c:1993 lib/setup.c:3667 msgid "Device size is not aligned to requested sector size." msgstr "La taille du périphérique n'est pas alignée avec la taille de secteur demandée." -#: lib/setup.c:1788 lib/setup.c:2025 lib/setup.c:2357 +#: lib/setup.c:1789 lib/setup.c:2026 lib/setup.c:2358 msgid "Can't format LUKS without device." msgstr "Impossible de formater en LUKS sans périphérique." -#: lib/setup.c:1794 lib/setup.c:2031 lib/setup.c:2363 +#: lib/setup.c:1795 lib/setup.c:2032 lib/setup.c:2364 msgid "Requested data alignment is not compatible with data offset." msgstr "L'alignement de données demandé n'est pas compatible avec le décalage des données." -#: lib/setup.c:1834 lib/setup.c:2049 +#: lib/setup.c:1835 lib/setup.c:2050 msgid "WARNING: DAX device can corrupt data as it does not guarantee atomic sector updates.\n" msgstr "ATTENTION : Un périphérique DAX peut corrompre les données car il ne garanti pas la mise à jour atomique des secteurs.\n" -#: lib/setup.c:1872 lib/setup.c:2144 lib/setup.c:2165 lib/setup.c:2541 -#: lib/setup.c:2587 lib/setup.c:2900 +#: lib/setup.c:1873 lib/setup.c:2145 lib/setup.c:2166 lib/setup.c:2542 +#: lib/setup.c:2588 lib/setup.c:2901 #, c-format msgid "Cannot wipe header on device %s." msgstr "Impossible d'effacer l'en-tête du périphérique %s." -#: lib/setup.c:1885 lib/setup.c:2204 +#: lib/setup.c:1886 lib/setup.c:2205 #, c-format msgid "Device %s is too small for activation, there is no remaining space for data.\n" msgstr "Le périphérique %s est trop petit pour l'activation, il ne reste pas d'espace pour les données.\n" -#: lib/setup.c:1925 +#: lib/setup.c:1926 msgid "Volume key is too small for encryption with integrity extensions." msgstr "La clé de volume est trop petite pour chiffrer avec les extensions d'intégrité." -#: lib/setup.c:1934 +#: lib/setup.c:1935 #, c-format msgid "Cipher %s-%s (key size %zd bits) is not available." msgstr "Le chiffrement %s-%s (clé de %zd bits) n'est pas disponible." -#: lib/setup.c:1973 +#: lib/setup.c:1974 msgid "WARNING: The device activation will fail, dm-crypt is missing support for requested encryption sector size.\n" msgstr "AVERTISSEMENT: L'activation du périphérique va échouer, dm-crypt ne supporte pas la taille de secteur de chiffrement demandée.\n" -#: lib/setup.c:2147 lib/setup.c:2484 lib/setup.c:2544 lib/utils_device.c:917 -#: lib/luks1/keyencryption.c:255 lib/luks2/luks2_reencrypt.c:3080 -#: lib/luks2/luks2_reencrypt.c:4364 +#: lib/setup.c:2148 lib/setup.c:2485 lib/setup.c:2545 lib/utils_device.c:917 +#: lib/luks1/keyencryption.c:255 lib/luks2/luks2_reencrypt.c:3095 +#: lib/luks2/luks2_reencrypt.c:4380 #, c-format msgid "Device %s is too small." msgstr "Le périphérique %s est trop petit." -#: lib/setup.c:2158 lib/setup.c:2184 lib/setup.c:2580 lib/setup.c:2626 +#: lib/setup.c:2159 lib/setup.c:2185 lib/setup.c:2581 lib/setup.c:2627 #, c-format msgid "Cannot format device %s in use." msgstr "Impossible de formater le périphérique %s qui est en cours d'utilisation." -#: lib/setup.c:2161 lib/setup.c:2187 lib/setup.c:2583 lib/setup.c:2629 +#: lib/setup.c:2162 lib/setup.c:2188 lib/setup.c:2584 lib/setup.c:2630 #, c-format msgid "Cannot format device %s, permission denied." msgstr "Impossible de formater le périphérique %s. Permission refusée." -#: lib/setup.c:2173 lib/setup.c:2600 lib/setup.c:2960 +#: lib/setup.c:2174 lib/setup.c:2601 lib/setup.c:2961 #, c-format msgid "Cannot format integrity for device %s." msgstr "Impossible de formater l'intégrité du périphérique %s." -#: lib/setup.c:2191 lib/setup.c:2637 +#: lib/setup.c:2192 lib/setup.c:2638 #, c-format msgid "Cannot format device %s." msgstr "Impossible de formater le périphérique %s" -#: lib/setup.c:2234 +#: lib/setup.c:2235 msgid "Cannot get OPAL alignment parameters." msgstr "Impossible d'obtenir les paramètres d'alignement de OPAL." -#: lib/setup.c:2243 +#: lib/setup.c:2244 msgid "Bogus OPAL logical block size." msgstr "Taille de bloc logique OPAL incorrecte." -#: lib/setup.c:2249 +#: lib/setup.c:2250 msgid "Requested data offset is not compatible with OPAL block size." msgstr "L'offset de données demandé n'est pas compatible avec la taille de bloc de OPAL." -#: lib/setup.c:2256 +#: lib/setup.c:2257 msgid "Requested data alignment is not compatible with OPAL alignment." msgstr "L'alignement de données demandé n'est pas compatible avec l'alignement de OPAL." -#: lib/setup.c:2276 +#: lib/setup.c:2277 msgid "Data offset does not satisfy OPAL alignment requirements." msgstr "L'offset de données ne satisfait pas les exigences d'alignement de OPAL." -#: lib/setup.c:2289 +#: lib/setup.c:2290 msgid "Requested data alignment does not satisfy locking range alignment requirements." msgstr "L'alignement de données demandé les exigences de la plage d'alignement du verrouillage." -#: lib/setup.c:2494 +#: lib/setup.c:2495 #, c-format msgid "Compensating device size by %<PRIu64> sectors to align it with OPAL alignment granularity." msgstr "La taille du périphérique est compensée avec %<PRIu64> secteurs pour l'aligner avec la granularité de l'alignement de OPAL." -#: lib/setup.c:2552 lib/setup.c:4068 lib/setup.c:4223 lib/utils_wipe.c:368 +#: lib/setup.c:2553 lib/setup.c:4070 lib/setup.c:4253 lib/utils_wipe.c:368 #: lib/luks2/luks2_json_metadata.c:2703 lib/luks2/luks2_json_metadata.c:2955 #, c-format msgid "Failed to acquire OPAL lock on device %s." msgstr "Impossible d'acquérir le verrou OPAL sur le périphérique %s." -#: lib/setup.c:2561 +#: lib/setup.c:2562 msgid "Incorrect OPAL Admin key." msgstr "Clé admin OPAL incorrecte." -#: lib/setup.c:2563 +#: lib/setup.c:2564 msgid "Cannot setup OPAL segment." msgstr "Impossible de configurer le segment OPAL." -#: lib/setup.c:2633 +#: lib/setup.c:2634 #, c-format msgid "Cannot format device %s, OPAL device seems to be fully write-protected now." msgstr "Impossible de formater le périphérique %s. Le périphérique OPAL semble maintenant être complètement protégé contre l'écriture." -#: lib/setup.c:2635 +#: lib/setup.c:2636 msgid "This is perhaps a bug in firmware. Run OPAL PSID reset and reconnect for recovery." msgstr "Il s'agit peut-être d'un bogue du micro logiciel. Exécutez une réinitialisation PSID OPAL et reconnectez pour récupération." -#: lib/setup.c:2655 +#: lib/setup.c:2656 #, c-format msgid "Locking range %d reset on device %s failed." msgstr "La réinitialisation de la plage %d de verrouillage du périphérique %s a échouée." -#: lib/setup.c:2675 +#: lib/setup.c:2676 msgid "Can't format LOOPAES without device." msgstr "Impossible de formater LOOPAES sans périphérique." -#: lib/setup.c:2720 +#: lib/setup.c:2721 msgid "Can't format VERITY without device." msgstr "Impossible de formater VERITY sans périphérique." -#: lib/setup.c:2731 lib/verity/verity.c:101 +#: lib/setup.c:2732 lib/verity/verity.c:101 #, c-format msgid "Unsupported VERITY hash type %d." msgstr "Type de hachage VERITY %d non supporté." -#: lib/setup.c:2737 lib/verity/verity.c:109 +#: lib/setup.c:2738 lib/verity/verity.c:109 msgid "Unsupported VERITY block size." msgstr "Taille de bloc VERITY non supportée." -#: lib/setup.c:2742 lib/verity/verity.c:74 +#: lib/setup.c:2743 lib/verity/verity.c:74 msgid "Unsupported VERITY hash offset." msgstr "Décalage de hachage VERITY non supporté." -#: lib/setup.c:2747 +#: lib/setup.c:2748 msgid "Unsupported VERITY FEC offset." msgstr "Décalage VERITY FEC non supporté." -#: lib/setup.c:2771 +#: lib/setup.c:2772 msgid "Data area overlaps with hash area." msgstr "La zone de données recouvre la zone de hachage." -#: lib/setup.c:2796 +#: lib/setup.c:2797 msgid "Hash area overlaps with FEC area." msgstr "La zone de hachage recouvre la zone FEC." -#: lib/setup.c:2803 +#: lib/setup.c:2804 msgid "Data area overlaps with FEC area." msgstr "La zone de données recouvre la zone FEC." -#: lib/setup.c:2939 +#: lib/setup.c:2940 #, c-format msgid "WARNING: Requested tag size %d bytes differs from %s size output (%d bytes).\n" msgstr "ATTENTION : La taille %d demandée pour l'étiquette est différente de la taille de sortie de %s (%d octets).\n" -#: lib/setup.c:3018 +#: lib/setup.c:3019 #, c-format msgid "Unknown crypt device type %s requested." msgstr "Type de chiffrement de périphérique demandé (%s) inconnu." -#: lib/setup.c:3325 lib/setup.c:3404 lib/setup.c:3417 +#: lib/setup.c:3326 lib/setup.c:3405 lib/setup.c:3418 #, c-format msgid "Unsupported parameters on device %s." msgstr "Paramètres non supportés sur le périphérique %s." -#: lib/setup.c:3331 lib/setup.c:3424 lib/luks2/luks2_reencrypt.c:2908 -#: lib/luks2/luks2_reencrypt.c:3145 lib/luks2/luks2_reencrypt.c:3540 +#: lib/setup.c:3332 lib/setup.c:3425 lib/luks2/luks2_reencrypt.c:2923 +#: lib/luks2/luks2_reencrypt.c:3160 lib/luks2/luks2_reencrypt.c:3555 #, c-format msgid "Mismatching parameters on device %s." msgstr "Paramètres non concordants sur le périphérique %s." -#: lib/setup.c:3448 +#: lib/setup.c:3449 msgid "Crypt devices mismatch." msgstr "Désaccord entre les périphériques crypt." -#: lib/setup.c:3485 lib/setup.c:3490 lib/luks2/luks2_reencrypt.c:2390 -#: lib/luks2/luks2_reencrypt.c:2924 lib/luks2/luks2_reencrypt.c:4109 +#: lib/setup.c:3486 lib/setup.c:3491 lib/luks2/luks2_reencrypt.c:2405 +#: lib/luks2/luks2_reencrypt.c:2939 lib/luks2/luks2_reencrypt.c:4124 #, c-format msgid "Failed to reload device %s." msgstr "Impossible de recharger le périphérique %s." -#: lib/setup.c:3496 lib/setup.c:3502 lib/luks2/luks2_reencrypt.c:2361 -#: lib/luks2/luks2_reencrypt.c:2368 lib/luks2/luks2_reencrypt.c:2938 +#: lib/setup.c:3497 lib/setup.c:3503 lib/luks2/luks2_reencrypt.c:2376 +#: lib/luks2/luks2_reencrypt.c:2383 lib/luks2/luks2_reencrypt.c:2953 #, c-format msgid "Failed to suspend device %s." msgstr "Impossible de suspendre le périphérique %s." -#: lib/setup.c:3508 lib/luks2/luks2_reencrypt.c:2375 -#: lib/luks2/luks2_reencrypt.c:2959 lib/luks2/luks2_reencrypt.c:4022 -#: lib/luks2/luks2_reencrypt.c:4113 +#: lib/setup.c:3509 lib/luks2/luks2_reencrypt.c:2390 +#: lib/luks2/luks2_reencrypt.c:2974 lib/luks2/luks2_reencrypt.c:4037 +#: lib/luks2/luks2_reencrypt.c:4128 #, c-format msgid "Failed to resume device %s." msgstr "Impossible de redémarrer le périphérique %s." -#: lib/setup.c:3523 +#: lib/setup.c:3524 #, c-format msgid "Fatal error while reloading device %s (on top of device %s)." msgstr "Erreur fatale en rechargeant le périphérique %s (au dessus du périphérique %s)" -#: lib/setup.c:3526 lib/setup.c:3528 +#: lib/setup.c:3527 lib/setup.c:3529 #, c-format msgid "Failed to switch device %s to dm-error." msgstr "Impossible de basculer le périphérique %s en dm-error." -#: lib/setup.c:3568 +#: lib/setup.c:3569 msgid "Can not resize LUKS2 device with static size." msgstr "Impossible de redimensionner le périphérique LUKS2 avec une taille statique." -#: lib/setup.c:3613 +#: lib/setup.c:3614 msgid "Cannot resize loop device." msgstr "Impossible de redimensionner le périphérique loopback." -#: lib/setup.c:3657 +#: lib/setup.c:3658 msgid "WARNING: Maximum size already set or kernel doesn't support resize.\n" msgstr "ATTENTION: La taille maximale est déjà définie ou le noyau ne supporte pas le redimensionnement.\n" -#: lib/setup.c:3723 +#: lib/setup.c:3724 msgid "Resize failed, the kernel doesn't support it." msgstr "Le redimensionnement a échoué, le noyau ne le supporte pas." -#: lib/setup.c:3755 +#: lib/setup.c:3756 msgid "Do you really want to change UUID of device?" msgstr "Voulez vous réellement changer l'UUID du périphérique ?" -#: lib/setup.c:3847 +#: lib/setup.c:3848 msgid "Header backup file does not contain compatible LUKS header." msgstr "Le fichier de sauvegarde de l'en-tête ne contient pas d'en-tête compatible LUKS." -#: lib/setup.c:3956 +#: lib/setup.c:3958 #, c-format msgid "Volume %s is not active." msgstr "Le volume %s n'est pas actif." -#: lib/setup.c:4022 +#: lib/setup.c:4024 #, c-format msgid "Volume %s is already suspended." msgstr "Le volume %s est déjà suspendu." -#: lib/setup.c:4050 +#: lib/setup.c:4052 #, c-format msgid "Suspend is not supported for device %s." msgstr "Le périphérique %s ne supporte pas la suspension." -#: lib/setup.c:4052 lib/setup.c:4060 +#: lib/setup.c:4054 lib/setup.c:4062 #, c-format msgid "Error during suspending device %s." msgstr "Erreur lors de la suspension du périphérique %s." -#: lib/setup.c:4074 +#: lib/setup.c:4076 #, c-format msgid "Device %s was suspended but hardware OPAL device cannot be locked." msgstr "Le périphérique %s a été suspendu mais le périphérique matériel OPAL ne sait pas être verrouillé." -#: lib/setup.c:4106 lib/setup.c:4250 +#: lib/setup.c:4108 lib/setup.c:4280 #, c-format msgid "Resume is not supported for device %s." msgstr "Le périphérique %s ne supporte pas la remise en service." -#: lib/setup.c:4108 lib/setup.c:4241 lib/setup.c:4252 +#: lib/setup.c:4110 lib/setup.c:4271 lib/setup.c:4282 #, c-format msgid "Error during resuming device %s." msgstr "Erreur lors de la remise en service du périphérique %s." -#: lib/setup.c:4131 -msgid "Failed to link key to the specified keyring." -msgstr "Impossible de lier la clé au porte-clé spécifié." - -#: lib/setup.c:4150 +#: lib/setup.c:4129 msgid "Failed to unlink volume key from user specified keyring." msgstr "Impossible de délier la clé du porte-clé utilisateur spécifié." -#: lib/setup.c:4213 lib/setup.c:4934 lib/setup.c:5549 +#: lib/setup.c:4244 lib/setup.c:4966 lib/setup.c:5787 msgid "Failed to link volume key in user defined keyring." msgstr "Impossible de lier la clé de volume dans le porte-clé utilisateur." -#: lib/setup.c:4313 src/cryptsetup.c:2755 +#: lib/setup.c:4345 src/cryptsetup.c:2852 #, c-format msgid "Volume %s is not suspended." msgstr "Le volume %s n'est pas suspendu." -#: lib/setup.c:4414 lib/setup.c:5310 lib/setup.c:5317 lib/setup.c:7176 -#: lib/setup.c:7198 lib/setup.c:7247 src/cryptsetup.c:2265 +#: lib/setup.c:4446 lib/setup.c:5106 lib/setup.c:5523 lib/setup.c:5542 +#: lib/setup.c:7416 lib/setup.c:7438 lib/setup.c:7487 src/cryptsetup.c:2362 msgid "Volume key does not match the volume." msgstr "Ceci n'est pas la clé du volume." -#: lib/setup.c:4568 +#: lib/setup.c:4600 msgid "Failed to swap new key slot." msgstr "Nouvel emplacement de clé impossible à échanger." -#: lib/setup.c:4666 +#: lib/setup.c:4698 #, c-format msgid "Key slot %d is invalid." msgstr "L'emplacement de clé %d n'est pas valide." -#: lib/setup.c:4672 src/cryptsetup.c:1975 src/cryptsetup.c:2467 -#: src/cryptsetup.c:3149 src/cryptsetup.c:3209 +#: lib/setup.c:4704 src/cryptsetup.c:2072 src/cryptsetup.c:2564 +#: src/cryptsetup.c:3246 src/cryptsetup.c:3306 #, c-format msgid "Keyslot %d is not active." msgstr "L'emplacement de clé %d n'est pas actif." -#: lib/setup.c:4691 +#: lib/setup.c:4723 msgid "Device header overlaps with data area." msgstr "L'en-tête du périphérique recouvre la zone de données." -#: lib/setup.c:5041 +#: lib/setup.c:5076 lib/setup.c:5176 msgid "Reencryption in-progress. Cannot activate device." msgstr "Re-chiffrement en cours. Impossible d'activer le périphérique." -#: lib/setup.c:5043 lib/luks2/luks2_json_metadata.c:2861 -#: lib/luks2/luks2_reencrypt.c:3646 +#: lib/setup.c:5078 lib/setup.c:5178 lib/luks2/luks2_json_metadata.c:2861 +#: lib/luks2/luks2_reencrypt.c:3661 msgid "Failed to get reencryption lock." msgstr "Impossible d'obtenir le verrou de re-chiffrement." -#: lib/setup.c:5056 lib/luks2/luks2_reencrypt.c:3665 +#: lib/setup.c:5090 +msgid "LUKS2 reencryption recovery using volume key(s) failed." +msgstr "La récupération du rechiffrement LUKS2 avec la/les clé(s) de volume a échoué." + +#: lib/setup.c:5142 lib/setup.c:5232 +msgid "Failed to link volume keys in user defined keyring." +msgstr "Impossible de lier les clés de volume dans le porte-clé utilisateur." + +#: lib/setup.c:5191 lib/luks2/luks2_reencrypt.c:3680 msgid "LUKS2 reencryption recovery failed." msgstr "La récupération du rechiffrement LUKS2 a échoué." -#: lib/setup.c:5228 lib/setup.c:5328 lib/setup.c:5386 +#: lib/setup.c:5439 lib/setup.c:5553 lib/setup.c:5610 msgid "Device type is not properly initialized." msgstr "Type de périphérique improprement initialisé." -#: lib/setup.c:5283 +#: lib/setup.c:5494 #, c-format msgid "Device %s already exists." msgstr "Le périphérique %s existe déjà." -#: lib/setup.c:5290 +#: lib/setup.c:5501 #, c-format msgid "Cannot use device %s, name is invalid or still in use." msgstr "Impossible d'utiliser le périphérique %s, le nom est invalide ou est toujours utilisé." -#: lib/setup.c:5306 +#: lib/setup.c:5519 msgid "Incorrect volume key specified for plain device." msgstr "Clé de volume incorrecte pour le périphérique en clair." -#: lib/setup.c:5424 +#: lib/setup.c:5533 +msgid "Reencryption volume keys do not match the volume." +msgstr "Les clés de rechiffrement du volume ne correspondent pas au volume." + +#: lib/setup.c:5646 msgid "Kernel keyring is not supported by the kernel." msgstr "Le porte-clé du noyau n'est pas supporté par ce noyau." -#: lib/setup.c:5428 +#: lib/setup.c:5650 msgid "Kernel keyring missing: required for passing signature to kernel." msgstr "Le porte-clé du noyau est manquant : il est requis pour passer une signature au noyau." -#: lib/setup.c:5668 +#: lib/setup.c:5908 msgid "Incorrect root hash specified for verity device." msgstr "Hachage racine incorrect spécifié pour le périphérique verity." -#: lib/setup.c:5711 +#: lib/setup.c:5951 msgid "OPAL does not support deferred deactivation." msgstr "OPAL ne supporte pas la désactivation différée." -#: lib/setup.c:5727 +#: lib/setup.c:5967 #, c-format msgid "Could not cancel deferred remove from device %s." msgstr "Impossible d'annuler la suppression différée du périphérique %s." -#: lib/setup.c:5734 lib/setup.c:5750 lib/luks2/luks2_json_metadata.c:2915 +#: lib/setup.c:5974 lib/setup.c:5990 lib/luks2/luks2_json_metadata.c:2915 #: src/utils_reencrypt.c:116 #, c-format msgid "Device %s is still in use." msgstr "Le périphérique %s est toujours occupé." -#: lib/setup.c:5759 +#: lib/setup.c:5999 #, c-format msgid "Invalid device %s." msgstr "Le périphérique %s n'est pas valide." -#: lib/setup.c:5899 +#: lib/setup.c:6139 msgid "Volume key buffer too small." msgstr "Le tampon de la clé du volume est trop petit." -#: lib/setup.c:5916 +#: lib/setup.c:6156 msgid "Cannot retrieve volume key for LUKS2 device." msgstr "Impossible de récupérer la clé du volume pour le périphérique LUKS2." -#: lib/setup.c:5925 +#: lib/setup.c:6165 msgid "Cannot retrieve volume key for LUKS1 device." msgstr "Impossible de récupérer la clé du volume pour le périphérique LUKS1." -#: lib/setup.c:5935 +#: lib/setup.c:6175 msgid "Cannot retrieve volume key for plain device." msgstr "Impossible de récupérer la clé du volume pour ce périphérique de type « plain »." -#: lib/setup.c:5943 +#: lib/setup.c:6183 msgid "Cannot retrieve root hash for verity device." msgstr "Impossible de récupérer le hachage racine pour le périphérique verity." -#: lib/setup.c:5950 +#: lib/setup.c:6190 msgid "Cannot retrieve volume key for BITLK device." msgstr "Impossible de récupérer la clé du volume pour le périphérique BITLK." -#: lib/setup.c:5955 +#: lib/setup.c:6195 msgid "Cannot retrieve volume key for FVAULT2 device." msgstr "Impossible de récupérer la clé du volume pour le périphérique FVAULT2." -#: lib/setup.c:5957 +#: lib/setup.c:6197 #, c-format msgid "This operation is not supported for %s crypt device." msgstr "Cette opération n'est pas possible pour le périphérique chiffré %s." -#: lib/setup.c:6141 lib/setup.c:6152 +#: lib/setup.c:6381 lib/setup.c:6392 msgid "Dump operation is not supported for this device type." msgstr "L'opération de vidage n'est pas supportée pour ce type de périphérique." -#: lib/setup.c:6511 +#: lib/setup.c:6751 #, c-format msgid "Data offset is not multiple of %u bytes." msgstr "Le décalage des données n'est pas un multiple de %u octets." -#: lib/setup.c:6819 +#: lib/setup.c:7059 #, c-format msgid "Cannot convert device %s which is still in use." msgstr "Impossible de convertir le périphérique %s qui est toujours en cours d'utilisation." -#: lib/setup.c:7117 lib/setup.c:7256 +#: lib/setup.c:7357 lib/setup.c:7496 #, c-format msgid "Failed to assign keyslot %u as the new volume key." msgstr "Échec de l'affectation de l'emplacement de clé %u pour la nouvelle clé de volume." -#: lib/setup.c:7141 +#: lib/setup.c:7381 msgid "Failed to initialize default LUKS2 keyslot parameters." msgstr "Échec de l'initialisation des paramètres par défaut des emplacement de clé LUKS2." -#: lib/setup.c:7147 +#: lib/setup.c:7387 #, c-format msgid "Failed to assign keyslot %d to digest." msgstr "Échec de l'affectation de l'emplacement de clé %d aux résumé." -#: lib/setup.c:7372 +#: lib/setup.c:7612 msgid "Cannot add key slot, all slots disabled and no volume key provided." msgstr "Impossible d'ajouter un emplacement de clé, tous les emplacements sont désactivés et aucune clé n'a été fournie pour ce volume." -#: lib/setup.c:7441 lib/verity/verity.c:343 +#: lib/setup.c:7681 lib/verity/verity.c:343 msgid "Failed to load key in kernel keyring." msgstr "Impossible de charger la clé dans le porte-clé du noyau." -#: lib/setup.c:7559 +#: lib/setup.c:7799 msgid "Failed to unlink volume key from thread keyring." msgstr "Impossible de délier la clé de volume du thread du porte-clé." -#: lib/setup.c:7586 +#: lib/setup.c:7843 #, c-format msgid "Could not find keyring described by \"%s\"." msgstr "Impossible de trouver le porte-clé décrit par « %s »." -#: lib/setup.c:7645 +#: lib/setup.c:7908 msgid "Failed to acquire global memory-hard access serialization lock." msgstr "Erreur lors de l'acquisition du verrou global de sérialisation des accès strictes à la mémoire" -#: lib/utils.c:205 lib/tcrypt/tcrypt.c:503 +#: lib/utils.c:215 lib/tcrypt/tcrypt.c:503 msgid "Failed to open key file." msgstr "Impossible d'ouvrir le fichier de clef." -#: lib/utils.c:210 +#: lib/utils.c:220 msgid "Cannot read keyfile from a terminal." msgstr "Impossible de lire le fichier de clé depuis un terminal." -#: lib/utils.c:226 +#: lib/utils.c:236 msgid "Failed to stat key file." msgstr "Impossible d'exécuter « stat » sur le fichier de clef." -#: lib/utils.c:234 lib/utils.c:255 +#: lib/utils.c:244 lib/utils.c:265 msgid "Cannot seek to requested keyfile offset." msgstr "Impossible de sauter au décalage demandé dans le fichier de clé." -#: lib/utils.c:249 lib/utils.c:264 src/utils_password.c:226 +#: lib/utils.c:259 lib/utils.c:274 src/utils_password.c:226 #: src/utils_password.c:238 msgid "Out of memory while reading passphrase." msgstr "Plus assez de mémoire lors de la lecture de la phrase secrète." -#: lib/utils.c:284 +#: lib/utils.c:294 msgid "Error reading passphrase." msgstr "Erreur de lecture de la phrase secrète." -#: lib/utils.c:301 +#: lib/utils.c:311 msgid "Nothing to read on input." msgstr "Rien à lire en entrée." -#: lib/utils.c:308 +#: lib/utils.c:318 msgid "Maximum keyfile size exceeded." msgstr "Taille max. de fichier de clé dépassée." -#: lib/utils.c:313 +#: lib/utils.c:323 msgid "Cannot read requested amount of data." msgstr "Impossible de lire la quantité de données demandée." #: lib/utils_device.c:213 lib/utils_storage_wrappers.c:110 -#: lib/luks1/keyencryption.c:91 src/utils_reencrypt.c:1461 +#: lib/luks1/keyencryption.c:91 src/utils_reencrypt.c:1470 #, c-format msgid "Device %s does not exist or access denied." msgstr "Le périphérique %s n'existe pas ou l'accès y est interdit." @@ -1072,7 +1080,7 @@ msgstr "Le mode de chiffrement LUKS %s n'est pas valide." msgid "LUKS hash %s is invalid." msgstr "La valeur hachée LUKS %s n'est pas valide." -#: lib/luks1/keymanage.c:574 src/cryptsetup.c:1352 +#: lib/luks1/keymanage.c:574 src/cryptsetup.c:1360 msgid "No known problems detected for LUKS header." msgstr "Aucun problème connu détecté pour l'en-tête LUKS." @@ -1165,11 +1173,11 @@ msgstr "Longueur maximum de la phrase secrète TCRYPT (%zu) dépassée." msgid "PBKDF2 hash algorithm %s not available, skipping." msgstr "L'algorithme de hachage PBKDF2 %s n'est pas supporté, ignoré." -#: lib/tcrypt/tcrypt.c:621 src/cryptsetup.c:1227 +#: lib/tcrypt/tcrypt.c:621 src/cryptsetup.c:1235 msgid "Required kernel crypto interface not available." msgstr "L'interface du noyau requise pour le chiffrement n'est pas disponible." -#: lib/tcrypt/tcrypt.c:623 src/cryptsetup.c:1229 +#: lib/tcrypt/tcrypt.c:623 src/cryptsetup.c:1237 msgid "Ensure you have algif_skcipher kernel module loaded." msgstr "Vérifiez que le module du noyau algif_skcipher est chargé." @@ -1486,17 +1494,17 @@ msgstr "Le noyau ne supporte pas les alignements de méta-données fixés de dm- msgid "Kernel refuses to activate insecure recalculate option (see legacy activation options to override)." msgstr "Le noyau refuse d'activer l'option de recalcul non sûre (voyez les options d'activation historique pour outrepasser)." -#: lib/luks2/luks2_disk_metadata.c:391 lib/luks2/luks2_json_metadata.c:1197 +#: lib/luks2/luks2_disk_metadata.c:392 lib/luks2/luks2_json_metadata.c:1197 #: lib/luks2/luks2_json_metadata.c:1520 #, c-format msgid "Failed to acquire write lock on device %s." msgstr "Impossible d'acquérir un verrou en écriture sur le périphérique %s." -#: lib/luks2/luks2_disk_metadata.c:400 +#: lib/luks2/luks2_disk_metadata.c:401 msgid "Detected attempt for concurrent LUKS2 metadata update. Aborting operation." msgstr "Tentative détectée de mettre à jour les métadonnées LUKS2 de manière concurrent. L'opération est abandonnée." -#: lib/luks2/luks2_disk_metadata.c:699 lib/luks2/luks2_disk_metadata.c:720 +#: lib/luks2/luks2_disk_metadata.c:710 lib/luks2/luks2_disk_metadata.c:731 msgid "" "Device contains ambiguous signatures, cannot auto-recover LUKS2.\n" "Please run \"cryptsetup repair\" for recovery." @@ -1581,16 +1589,16 @@ msgstr "" msgid "Ignored unknown flag %s." msgstr "Fanion inconnu %s ignoré." -#: lib/luks2/luks2_json_metadata.c:2525 lib/luks2/luks2_reencrypt.c:2090 +#: lib/luks2/luks2_json_metadata.c:2525 lib/luks2/luks2_reencrypt.c:2105 #, c-format msgid "Missing key for dm-crypt segment %u" msgstr "Clé manquante pour le segment %u de dm-crypt" -#: lib/luks2/luks2_json_metadata.c:2537 lib/luks2/luks2_reencrypt.c:2104 +#: lib/luks2/luks2_json_metadata.c:2537 lib/luks2/luks2_reencrypt.c:2119 msgid "Failed to set dm-crypt segment." msgstr "Impossible de définir le segment dm-crypt." -#: lib/luks2/luks2_json_metadata.c:2543 lib/luks2/luks2_reencrypt.c:2110 +#: lib/luks2/luks2_json_metadata.c:2543 lib/luks2/luks2_reencrypt.c:2125 msgid "Failed to set dm-linear segment." msgstr "Impossible de définir le segment dm-linear." @@ -1627,7 +1635,7 @@ msgstr "Les secteurs de données fournis sont inattendus pour le périphérique msgid "Reencryption in-progress. Cannot deactivate device." msgstr "Re-chiffrement en cours. Le périphérique ne peut être désactivé." -#: lib/luks2/luks2_json_metadata.c:2870 lib/luks2/luks2_reencrypt.c:4159 +#: lib/luks2/luks2_json_metadata.c:2870 lib/luks2/luks2_reencrypt.c:4174 #, c-format msgid "Failed to replace suspended device %s with dm-error target." msgstr "Échec du remplacement du périphérique suspendu %s avec la cible dm-error." @@ -1671,7 +1679,7 @@ msgid "Cannot use %s-%s cipher for keyslot encryption." msgstr "Impossible d'utiliser le chiffrement %s-%s pour le chiffrement de l'emplacement de clé" #: lib/luks2/luks2_keyslot_luks2.c:285 lib/luks2/luks2_keyslot_luks2.c:404 -#: lib/luks2/luks2_keyslot_reenc.c:447 lib/luks2/luks2_reencrypt.c:2714 +#: lib/luks2/luks2_keyslot_reenc.c:447 lib/luks2/luks2_reencrypt.c:2729 #, c-format msgid "Hash algorithm %s is not available." msgstr "L'algorithme de hachage %s n'est pas disponible." @@ -1706,7 +1714,7 @@ msgstr "Ne peut vérifier le statut du périphérique avec le uuid : %s." msgid "Unable to convert header with LUKSMETA additional metadata." msgstr "Impossible de convertir un en-tête avec des métadonnées LUKSMETA supplémentaires." -#: lib/luks2/luks2_luks1_convert.c:602 lib/luks2/luks2_reencrypt.c:3795 +#: lib/luks2/luks2_luks1_convert.c:602 lib/luks2/luks2_reencrypt.c:3810 #, c-format msgid "Unable to use cipher specification %s-%s for LUKS2." msgstr "Impossible d'utiliser la spécification de chiffrement %s-%s pour LUKS2." @@ -1764,253 +1772,253 @@ msgstr "Impossible de convertir au format LUKS1 – l'emplacement %u (sur les em msgid "Cannot convert to LUKS1 format - keyslot %u is not LUKS1 compatible." msgstr "Impossible de convertir au format LUKS1 – l'emplacement de clé %u n'est pas compatible avec LUKS1." -#: lib/luks2/luks2_reencrypt.c:1181 +#: lib/luks2/luks2_reencrypt.c:1196 #, c-format msgid "Hotzone size must be multiple of calculated zone alignment (%zu bytes)." msgstr "La taille de la zone chaude doit être un multiple de l'alignement de zone calculé (%zu octets)." -#: lib/luks2/luks2_reencrypt.c:1186 +#: lib/luks2/luks2_reencrypt.c:1201 #, c-format msgid "Device size must be multiple of calculated zone alignment (%zu bytes)." msgstr "La taille du périphérique doit être un multiple de l'alignement de zone calculé (%zu octets)." -#: lib/luks2/luks2_reencrypt.c:1393 lib/luks2/luks2_reencrypt.c:1580 -#: lib/luks2/luks2_reencrypt.c:1663 lib/luks2/luks2_reencrypt.c:1705 -#: lib/luks2/luks2_reencrypt.c:3954 +#: lib/luks2/luks2_reencrypt.c:1408 lib/luks2/luks2_reencrypt.c:1595 +#: lib/luks2/luks2_reencrypt.c:1678 lib/luks2/luks2_reencrypt.c:1720 +#: lib/luks2/luks2_reencrypt.c:3969 msgid "Failed to initialize old segment storage wrapper." msgstr "Impossible d'initialiser l'encapsulation pour le stockage de l'ancien segment." -#: lib/luks2/luks2_reencrypt.c:1407 lib/luks2/luks2_reencrypt.c:1558 +#: lib/luks2/luks2_reencrypt.c:1422 lib/luks2/luks2_reencrypt.c:1573 msgid "Failed to initialize new segment storage wrapper." msgstr "Impossible d'initialiser l'encapsulation pour le stockage du nouveau segment." -#: lib/luks2/luks2_reencrypt.c:1534 lib/luks2/luks2_reencrypt.c:3966 +#: lib/luks2/luks2_reencrypt.c:1549 lib/luks2/luks2_reencrypt.c:3981 msgid "Failed to initialize hotzone protection." msgstr "Impossible d'initialiser la protection des zones chaudes." -#: lib/luks2/luks2_reencrypt.c:1607 +#: lib/luks2/luks2_reencrypt.c:1622 msgid "Failed to read checksums for current hotzone." msgstr "Impossible de lire les sommes de contrôle pour la zone chaude actuelle." -#: lib/luks2/luks2_reencrypt.c:1614 lib/luks2/luks2_reencrypt.c:3980 +#: lib/luks2/luks2_reencrypt.c:1629 lib/luks2/luks2_reencrypt.c:3995 #, c-format msgid "Failed to read hotzone area starting at %<PRIu64>." msgstr "Échec de la lecture de la zone chaude démarrant à %<PRIu64>." -#: lib/luks2/luks2_reencrypt.c:1633 +#: lib/luks2/luks2_reencrypt.c:1648 #, c-format msgid "Failed to decrypt sector %zu." msgstr "Échec lors du déchiffrement du secteur %zu." -#: lib/luks2/luks2_reencrypt.c:1639 +#: lib/luks2/luks2_reencrypt.c:1654 #, c-format msgid "Failed to recover sector %zu." msgstr "Échec lors de la récupération du secteur %zu." -#: lib/luks2/luks2_reencrypt.c:2203 +#: lib/luks2/luks2_reencrypt.c:2218 #, c-format msgid "Source and target device sizes don't match. Source %<PRIu64>, target: %<PRIu64>." msgstr "Les tailles des périphériques source et cible ne correspondent pas. Source %<PRIu64>, cible: %<PRIu64>." -#: lib/luks2/luks2_reencrypt.c:2301 +#: lib/luks2/luks2_reencrypt.c:2316 #, c-format msgid "Failed to activate hotzone device %s." msgstr "Échec de l'activation du périphérique de zone chaude %s." -#: lib/luks2/luks2_reencrypt.c:2318 +#: lib/luks2/luks2_reencrypt.c:2333 #, c-format msgid "Failed to activate overlay device %s with actual origin table." msgstr "Impossible d'activer le périphérique de surcouche %s avec la table d'origine actuelle." -#: lib/luks2/luks2_reencrypt.c:2325 +#: lib/luks2/luks2_reencrypt.c:2340 #, c-format msgid "Failed to load new mapping for device %s." msgstr "Impossible de charger la nouvelle cartographie du périphérique %s." -#: lib/luks2/luks2_reencrypt.c:2396 +#: lib/luks2/luks2_reencrypt.c:2411 msgid "Failed to refresh reencryption devices stack." msgstr "Impossible de rafraîchir la pile des périphériques de rechiffrement." -#: lib/luks2/luks2_reencrypt.c:2596 +#: lib/luks2/luks2_reencrypt.c:2611 msgid "Failed to set new keyslots area size." msgstr "Impossible de définir la taille de la nouvelle zone des emplacements de clés." -#: lib/luks2/luks2_reencrypt.c:2732 +#: lib/luks2/luks2_reencrypt.c:2747 #, c-format msgid "Data shift value is not aligned to encryption sector size (%<PRIu32> bytes)." msgstr "La valeur de décalage de données n'est pas alignée sur la taille de secteur de chiffrement (%<PRIu32> octets)." -#: lib/luks2/luks2_reencrypt.c:2769 src/utils_reencrypt.c:189 +#: lib/luks2/luks2_reencrypt.c:2784 src/utils_reencrypt.c:189 #, c-format msgid "Unsupported resilience mode %s" msgstr "Mode de résilience %s non supporté" -#: lib/luks2/luks2_reencrypt.c:2806 +#: lib/luks2/luks2_reencrypt.c:2821 msgid "Moved segment size can not be greater than data shift value." msgstr "La taille du secteur déplacé ne peut pas être plus grande que la valeur de décalage des données." -#: lib/luks2/luks2_reencrypt.c:2848 +#: lib/luks2/luks2_reencrypt.c:2863 msgid "Invalid reencryption resilience parameters." msgstr "Paramètres de rechiffrement de la résilience invalides." -#: lib/luks2/luks2_reencrypt.c:2870 +#: lib/luks2/luks2_reencrypt.c:2885 #, c-format msgid "Moved segment too large. Requested size %<PRIu64>, available space for: %<PRIu64>." msgstr "Le segment déplacé est trop grand. La taille demandée est %<PRIu64>, l'espace disponible est %<PRIu64>" -#: lib/luks2/luks2_reencrypt.c:2957 +#: lib/luks2/luks2_reencrypt.c:2972 msgid "Failed to clear table." msgstr "Erreur lors de la suppression de la table." -#: lib/luks2/luks2_reencrypt.c:3043 +#: lib/luks2/luks2_reencrypt.c:3058 msgid "Reduced data size is larger than real device size." msgstr "La taille des données réduites est plus grande que la taille réelle du périphérique." -#: lib/luks2/luks2_reencrypt.c:3050 +#: lib/luks2/luks2_reencrypt.c:3065 #, c-format msgid "Data device is not aligned to encryption sector size (%<PRIu32> bytes)." msgstr "Le périphérique de données n'est pas aligné sur la taille de secteur de chiffrement (%<PRIu32> octets)." -#: lib/luks2/luks2_reencrypt.c:3084 +#: lib/luks2/luks2_reencrypt.c:3099 #, c-format msgid "Data shift (%<PRIu64> sectors) is less than future data offset (%<PRIu64> sectors)." msgstr "Le décalage de données (%<PRIu64> secteurs) est plus petit que le décalage de données future (%<PRIu64> secteurs)." -#: lib/luks2/luks2_reencrypt.c:3091 lib/luks2/luks2_reencrypt.c:3589 -#: lib/luks2/luks2_reencrypt.c:3610 +#: lib/luks2/luks2_reencrypt.c:3106 lib/luks2/luks2_reencrypt.c:3604 +#: lib/luks2/luks2_reencrypt.c:3625 #, c-format msgid "Failed to open %s in exclusive mode (already mapped or mounted)." msgstr "Erreur lors de l'ouverture de %s en mode exclusif (déjà mappé ou monté)." -#: lib/luks2/luks2_reencrypt.c:3280 +#: lib/luks2/luks2_reencrypt.c:3295 msgid "Device not marked for LUKS2 reencryption." msgstr "Le périphérique n'est pas marqué pour le rechiffrement LUKS2." -#: lib/luks2/luks2_reencrypt.c:3297 lib/luks2/luks2_reencrypt.c:4271 +#: lib/luks2/luks2_reencrypt.c:3312 lib/luks2/luks2_reencrypt.c:4286 msgid "Failed to load LUKS2 reencryption context." msgstr "Échec du chargement du contexte de rechiffrement LUKS2" -#: lib/luks2/luks2_reencrypt.c:3387 +#: lib/luks2/luks2_reencrypt.c:3402 msgid "Failed to get reencryption state." msgstr "Impossible d'obtenir l'état de rechiffrement." -#: lib/luks2/luks2_reencrypt.c:3391 lib/luks2/luks2_reencrypt.c:3705 +#: lib/luks2/luks2_reencrypt.c:3406 lib/luks2/luks2_reencrypt.c:3720 msgid "Device is not in reencryption." msgstr "Le périphérique n'est pas en rechiffrement." -#: lib/luks2/luks2_reencrypt.c:3398 lib/luks2/luks2_reencrypt.c:3712 +#: lib/luks2/luks2_reencrypt.c:3413 lib/luks2/luks2_reencrypt.c:3727 msgid "Reencryption process is already running." msgstr "Le rechiffrement est déjà en cours." -#: lib/luks2/luks2_reencrypt.c:3400 lib/luks2/luks2_reencrypt.c:3714 +#: lib/luks2/luks2_reencrypt.c:3415 lib/luks2/luks2_reencrypt.c:3729 msgid "Failed to acquire reencryption lock." msgstr "Impossible d'acquérir le verrou de rechiffrement." -#: lib/luks2/luks2_reencrypt.c:3418 +#: lib/luks2/luks2_reencrypt.c:3433 msgid "Cannot proceed with reencryption. Run reencryption recovery first." msgstr "Impossible de réaliser le rechiffrement. Exécutez d'abord la récupération du rechiffrement." -#: lib/luks2/luks2_reencrypt.c:3553 +#: lib/luks2/luks2_reencrypt.c:3568 msgid "Active device size and requested reencryption size don't match." msgstr "La taille du périphérique actif et la taille de rechiffrement demandée ne correspondent pas." -#: lib/luks2/luks2_reencrypt.c:3567 +#: lib/luks2/luks2_reencrypt.c:3582 msgid "Illegal device size requested in reencryption parameters." msgstr "Taille de périphérique illégale demandée dans les paramètres de rechiffrement." -#: lib/luks2/luks2_reencrypt.c:3644 +#: lib/luks2/luks2_reencrypt.c:3659 msgid "Reencryption in-progress. Cannot perform recovery." msgstr "Rechiffrement en cours. La récupération ne peut pas être réalisée." -#: lib/luks2/luks2_reencrypt.c:3812 +#: lib/luks2/luks2_reencrypt.c:3827 msgid "LUKS2 reencryption already initialized in metadata." msgstr "Rechiffrement LUKS2 déjà initialisé dans les métadonnées." -#: lib/luks2/luks2_reencrypt.c:3819 +#: lib/luks2/luks2_reencrypt.c:3834 msgid "Failed to initialize LUKS2 reencryption in metadata." msgstr "Échec de l'initialisation du rechiffrement LUKS2 dans les métadonnées." -#: lib/luks2/luks2_reencrypt.c:3872 lib/luks2/luks2_reencrypt.c:3907 +#: lib/luks2/luks2_reencrypt.c:3887 lib/luks2/luks2_reencrypt.c:3922 msgid "Reencryption is not supported for DAX (persistent memory) devices." msgstr "Le rechiffrement n'est pas supporté avec les périphériques DAX (mémoire persistante)." -#: lib/luks2/luks2_reencrypt.c:3879 +#: lib/luks2/luks2_reencrypt.c:3894 msgid "Failed to read passphrase from keyring." msgstr "Échec lors de la lecture du mot de passe depuis le porte-clé." -#: lib/luks2/luks2_reencrypt.c:3936 +#: lib/luks2/luks2_reencrypt.c:3951 msgid "Failed to set device segments for next reencryption hotzone." msgstr "Impossible de définir les segments du périphérique pour le rechiffrement suivant de la zone chaude." -#: lib/luks2/luks2_reencrypt.c:3988 +#: lib/luks2/luks2_reencrypt.c:4003 msgid "Failed to write reencryption resilience metadata." msgstr "Échec lors de l'écriture des métadonnées de la résilience du rechiffrement." -#: lib/luks2/luks2_reencrypt.c:3995 +#: lib/luks2/luks2_reencrypt.c:4010 msgid "Decryption failed." msgstr "Échec du déchiffrement." -#: lib/luks2/luks2_reencrypt.c:4000 +#: lib/luks2/luks2_reencrypt.c:4015 #, c-format msgid "Failed to write hotzone area starting at %<PRIu64>." msgstr "Échec de l'écriture de la zone chaude démarrant à %<PRIu64>." -#: lib/luks2/luks2_reencrypt.c:4005 +#: lib/luks2/luks2_reencrypt.c:4020 msgid "Failed to sync data." msgstr "Erreur lors de la synchronisation des données." -#: lib/luks2/luks2_reencrypt.c:4013 +#: lib/luks2/luks2_reencrypt.c:4028 msgid "Failed to update metadata after current reencryption hotzone completed." msgstr "Échec de la mise à jour des métadonnées après la fin du rechiffrement de la zone chaude courante." -#: lib/luks2/luks2_reencrypt.c:4102 +#: lib/luks2/luks2_reencrypt.c:4117 msgid "Failed to write LUKS2 metadata." msgstr "Échec lors de l'écriture des métadonnées LUKS2" -#: lib/luks2/luks2_reencrypt.c:4125 +#: lib/luks2/luks2_reencrypt.c:4140 msgid "Failed to wipe unused data device area." msgstr "Impossible d'effacer la zone du périphérique contenant les données inutilisées." -#: lib/luks2/luks2_reencrypt.c:4131 +#: lib/luks2/luks2_reencrypt.c:4146 #, c-format msgid "Failed to remove unused (unbound) keyslot %d." msgstr "Erreur lors de la suppression de l'emplacement de clé inutilisé (unbound) %d." -#: lib/luks2/luks2_reencrypt.c:4141 +#: lib/luks2/luks2_reencrypt.c:4156 msgid "Failed to remove reencryption keyslot." msgstr "Erreur lors de la suppression de l'emplacement de clé de re-chiffrement." -#: lib/luks2/luks2_reencrypt.c:4151 +#: lib/luks2/luks2_reencrypt.c:4166 #, c-format msgid "Fatal error while reencrypting chunk starting at %<PRIu64>, %<PRIu64> sectors long." msgstr "Erreur fatale en rechiffrant le morceau commençant à %<PRIu64> d'une longueur de %<PRIu64> secteurs." -#: lib/luks2/luks2_reencrypt.c:4155 +#: lib/luks2/luks2_reencrypt.c:4170 msgid "Online reencryption failed." msgstr "Échec du rechiffrement en-ligne." # Frédéric: Je n'ai pas la moindre idée de ce que le développeur a voulu écrire. Qu'est-ce que "error target" dans ce contexte ? -#: lib/luks2/luks2_reencrypt.c:4160 +#: lib/luks2/luks2_reencrypt.c:4175 msgid "Do not resume the device unless replaced with error target manually." msgstr "Ne pas redémarrer le périphérique à moins qu'il ait été remplacé manuellement par la cible en erreur." -#: lib/luks2/luks2_reencrypt.c:4212 +#: lib/luks2/luks2_reencrypt.c:4227 msgid "Cannot proceed with reencryption. Unexpected reencryption status." msgstr "Impossible de réaliser le rechiffrement. Statut de rechiffrement inattendu." -#: lib/luks2/luks2_reencrypt.c:4218 +#: lib/luks2/luks2_reencrypt.c:4233 msgid "Missing or invalid reencrypt context." msgstr "Contexte de rechiffrement manquant ou invalide." -#: lib/luks2/luks2_reencrypt.c:4225 +#: lib/luks2/luks2_reencrypt.c:4240 msgid "Failed to initialize reencryption device stack." msgstr "Impossible d'initialiser la pile du périphérique de rechiffrement." -#: lib/luks2/luks2_reencrypt.c:4247 lib/luks2/luks2_reencrypt.c:4284 +#: lib/luks2/luks2_reencrypt.c:4262 lib/luks2/luks2_reencrypt.c:4299 msgid "Failed to update reencryption context." msgstr "Échec de la mise à jour du contexte de rechiffrement." -#: lib/luks2/luks2_reencrypt_digest.c:405 +#: lib/luks2/luks2_reencrypt_digest.c:421 msgid "Reencryption metadata is invalid." msgstr "Les méta-données de rechiffrement sont invalides." @@ -2034,101 +2042,101 @@ msgstr "Pour la plage OPAL %d, le verrouillage est désactivé." msgid "Unexpected OPAL range %d lock state." msgstr "État de verrouillage inattendu pour la plage OPAL %d." -#: src/cryptsetup.c:85 +#: src/cryptsetup.c:93 msgid "Keyslot encryption parameters can be set only for LUKS2 device." msgstr "Les paramètres de chiffrement des emplacement de clés peuvent uniquement être définis pour un périphérique LUKS2." -#: src/cryptsetup.c:128 src/cryptsetup.c:2145 +#: src/cryptsetup.c:136 src/cryptsetup.c:2242 #, c-format msgid "Enter token PIN: " msgstr "Entrez le code PIN du jeton : " -#: src/cryptsetup.c:130 src/cryptsetup.c:2147 +#: src/cryptsetup.c:138 src/cryptsetup.c:2244 #, c-format msgid "Enter token %d PIN: " msgstr "Entrez le code PIN du jeton %d : " -#: src/cryptsetup.c:188 src/cryptsetup.c:1174 src/cryptsetup.c:1515 -#: src/utils_reencrypt.c:1137 src/utils_reencrypt_luks1.c:517 +#: src/cryptsetup.c:196 src/cryptsetup.c:1182 src/cryptsetup.c:1523 +#: src/utils_reencrypt.c:1146 src/utils_reencrypt_luks1.c:517 #: src/utils_reencrypt_luks1.c:580 msgid "No known cipher specification pattern detected." msgstr "Aucun motif connu d'algorithme de chiffrement n'a été détecté." -#: src/cryptsetup.c:198 +#: src/cryptsetup.c:206 #, c-format msgid "WARNING: Using default options for cipher (%s-%s, key size %u bits) that could be incompatible with older versions." msgstr "ATTENTION : Utilisation des options par défaut pour le chiffrement (%s-%s, taille de clé %u bits) qui pourraient être incompatibles avec les vieilles versions." -#: src/cryptsetup.c:203 +#: src/cryptsetup.c:211 #, c-format msgid "WARNING: Using default options for hash (%s) that could be incompatible with older versions." msgstr "ATTENTION : Utilisation des options par défaut pour le hachage (%s) qui pourraient être incompatibles avec les vieilles versions." -#: src/cryptsetup.c:207 +#: src/cryptsetup.c:215 msgid "For plain mode, always use options --cipher, --key-size and if no keyfile is used, then also --hash." msgstr "En mode simple, utilisez toujours les options --cipher, --key-size et si aucun fichier de clé n'est utilisé, alors, aussi --hash." -#: src/cryptsetup.c:213 +#: src/cryptsetup.c:221 msgid "WARNING: The --hash parameter is being ignored in plain mode with keyfile specified.\n" msgstr "ATTENTION: Le paramètre --hash est ignoré en mode non chiffré quand le fichier de clé est spécifié.\n" -#: src/cryptsetup.c:221 +#: src/cryptsetup.c:229 msgid "WARNING: The --keyfile-size option is being ignored, the read size is the same as the encryption key size.\n" msgstr "ATTENTION: L'option --keyfile-size est ignorée. La taille de lecture est la même que la taille de la clé de chiffrement.\n" -#: src/cryptsetup.c:258 src/cryptsetup.c:1360 src/cryptsetup.c:1558 -#: src/integritysetup.c:197 src/utils_reencrypt.c:1346 +#: src/cryptsetup.c:266 src/cryptsetup.c:1368 src/cryptsetup.c:1566 +#: src/integritysetup.c:197 src/utils_reencrypt.c:1355 #, c-format msgid "Blkid scan failed for %s." msgstr "L'analyse de blkid a échouée pour %s." -#: src/cryptsetup.c:264 +#: src/cryptsetup.c:272 #, c-format msgid "Detected device signature(s) on %s. Proceeding further may damage existing data." msgstr "Signature(s) de périphérique détectée(s) sur %s. Continuer risque d'endommager les données existantes." -#: src/cryptsetup.c:270 src/cryptsetup.c:1248 src/cryptsetup.c:1296 -#: src/cryptsetup.c:1367 src/cryptsetup.c:1492 src/cryptsetup.c:1570 -#: src/cryptsetup.c:2525 src/cryptsetup.c:2952 src/integritysetup.c:187 +#: src/cryptsetup.c:278 src/cryptsetup.c:1256 src/cryptsetup.c:1304 +#: src/cryptsetup.c:1375 src/cryptsetup.c:1500 src/cryptsetup.c:1578 +#: src/cryptsetup.c:2622 src/cryptsetup.c:3049 src/integritysetup.c:187 #: src/utils_reencrypt.c:138 src/utils_reencrypt.c:314 -#: src/utils_reencrypt.c:764 +#: src/utils_reencrypt.c:772 msgid "Operation aborted.\n" msgstr "Opération interrompue.\n" -#: src/cryptsetup.c:343 +#: src/cryptsetup.c:351 msgid "Option --key-file is required." msgstr "L'option --key-file est requise." -#: src/cryptsetup.c:394 +#: src/cryptsetup.c:402 msgid "Enter VeraCrypt PIM: " msgstr "Entrez le PIN VeraCrypt : " -#: src/cryptsetup.c:403 +#: src/cryptsetup.c:411 msgid "Invalid PIM value: parse error." msgstr "Valeur PIN invalide : erreur d'analyse" -#: src/cryptsetup.c:406 +#: src/cryptsetup.c:414 msgid "Invalid PIM value: 0." msgstr "Valeur PIN invalide: 0" -#: src/cryptsetup.c:409 +#: src/cryptsetup.c:417 msgid "Invalid PIM value: outside of range." msgstr "Valeur PIN invalide: hors des limites." -#: src/cryptsetup.c:432 +#: src/cryptsetup.c:440 msgid "No device header detected with this passphrase." msgstr "Aucun en-tête détecté avec cette phrase secrète sur le périphérique." -#: src/cryptsetup.c:505 src/cryptsetup.c:681 +#: src/cryptsetup.c:513 src/cryptsetup.c:689 #, c-format msgid "Device %s is not a valid BITLK device." msgstr "Le périphérique %s n'est pas un périphérique BITLK valide." -#: src/cryptsetup.c:513 +#: src/cryptsetup.c:521 msgid "Cannot determine volume key size for BITLK, please use --key-size option." msgstr "Impossible de déterminer la taille de la clé de volume pour BITLK, veuillez utiliser l'option --key-size." -#: src/cryptsetup.c:555 +#: src/cryptsetup.c:563 msgid "" "Header dump with volume key is sensitive information\n" "which allows access to encrypted partition without passphrase.\n" @@ -2138,7 +2146,7 @@ msgstr "" "sensible qui permet d'accéder à la partition chiffrée sans mot de passe.\n" "Ce contenu devrait toujours être stocké, chiffré, en lieu sûr." -#: src/cryptsetup.c:622 src/cryptsetup.c:703 src/cryptsetup.c:2550 +#: src/cryptsetup.c:630 src/cryptsetup.c:711 src/cryptsetup.c:2647 msgid "" "The header dump with volume key is sensitive information\n" "that allows access to encrypted partition without a passphrase.\n" @@ -2148,84 +2156,84 @@ msgstr "" "sensible qui permet d'accéder à la partition chiffrée sans mot de passe.\n" "Ce contenu devrait être stocké, chiffré, en lieu sûr." -#: src/cryptsetup.c:758 src/cryptsetup.c:788 +#: src/cryptsetup.c:766 src/cryptsetup.c:796 #, c-format msgid "Device %s is not a valid FVAULT2 device." msgstr "Le périphérique %s n'est pas un périphérique FVAULT2 valide." -#: src/cryptsetup.c:796 +#: src/cryptsetup.c:804 msgid "Cannot determine volume key size for FVAULT2, please use --key-size option." msgstr "Impossible de déterminer la taille de la clé de volume pour FVAULT2, veuillez utiliser l'option --key-size." -#: src/cryptsetup.c:850 src/veritysetup.c:323 src/integritysetup.c:409 +#: src/cryptsetup.c:858 src/veritysetup.c:323 src/integritysetup.c:409 #, c-format msgid "Device %s is still active and scheduled for deferred removal.\n" msgstr "Le périphérique %s est toujours actif et prévu pour une suppression différée.\n" -#: src/cryptsetup.c:884 src/cryptsetup.c:1824 src/cryptsetup.c:2080 -#: src/cryptsetup.c:2234 src/cryptsetup.c:2681 src/cryptsetup.c:2763 -#: src/cryptsetup.c:3290 +#: src/cryptsetup.c:892 src/cryptsetup.c:1903 src/cryptsetup.c:2177 +#: src/cryptsetup.c:2331 src/cryptsetup.c:2778 src/cryptsetup.c:2860 +#: src/cryptsetup.c:3387 #, c-format msgid "Failed to set external tokens path %s." msgstr "Échec en essayant de définir le chemin %s pour les jetons externes." -#: src/cryptsetup.c:893 +#: src/cryptsetup.c:901 msgid "Resize of active device requires volume key in keyring but --disable-keyring option is set." msgstr "Le redimensionnement d'un périphérique actif requiert que la clé du volume soit dans le porte-clé mais l'option --disable-keyring est définie." -#: src/cryptsetup.c:1053 +#: src/cryptsetup.c:1061 msgid "Benchmark interrupted." msgstr "Test de performance interrompu." -#: src/cryptsetup.c:1074 +#: src/cryptsetup.c:1082 #, c-format msgid "PBKDF2-%-9s N/A\n" msgstr "PBKDF2-%-9s N/A\n" -#: src/cryptsetup.c:1076 +#: src/cryptsetup.c:1084 #, c-format msgid "PBKDF2-%-9s %7u iterations per second for %zu-bit key\n" msgstr "PBKDF2-%-9s %7u itérations par seconde pour une clé de %zu bits\n" -#: src/cryptsetup.c:1090 +#: src/cryptsetup.c:1098 #, c-format msgid "%-10s N/A\n" msgstr "%-10s N/A\n" -#: src/cryptsetup.c:1092 +#: src/cryptsetup.c:1100 #, c-format msgid "%-10s %4u iterations, %5u memory, %1u parallel threads (CPUs) for %zu-bit key (requested %u ms time)\n" msgstr "%-10s %4u itérations, %5u mémoire, %1u threads parallèles (CPUs) pour une clé de %zu bits (temps de %u ms demandé)\n" -#: src/cryptsetup.c:1116 +#: src/cryptsetup.c:1124 msgid "Result of benchmark is not reliable." msgstr "Le résultat de l'évaluation de performance n'est pas fiable." -#: src/cryptsetup.c:1166 +#: src/cryptsetup.c:1174 msgid "# Tests are approximate using memory only (no storage IO).\n" msgstr "# Tests approximatifs en utilisant uniquement la mémoire (pas de stockage E/S).\n" #. TRANSLATORS: The string is header of a table and must be exactly (right side) aligned. -#: src/cryptsetup.c:1186 +#: src/cryptsetup.c:1194 #, c-format msgid "#%*s Algorithm | Key | Encryption | Decryption\n" msgstr "#%*s Algorithme | Clé | Chiffrement | Déchiffrement\n" -#: src/cryptsetup.c:1190 +#: src/cryptsetup.c:1198 #, c-format msgid "Cipher %s (with %i bits key) is not available." msgstr "Le chiffrement %s (avec une clé de %i bits) n'est pas disponible." #. TRANSLATORS: The string is header of a table and must be exactly (right side) aligned. -#: src/cryptsetup.c:1209 +#: src/cryptsetup.c:1217 msgid "# Algorithm | Key | Encryption | Decryption\n" msgstr "# Algorithme | Clé | Chiffrement | Déchiffrement\n" -#: src/cryptsetup.c:1220 +#: src/cryptsetup.c:1228 msgid "N/A" msgstr "N/D" -#: src/cryptsetup.c:1245 +#: src/cryptsetup.c:1253 msgid "" "Unprotected LUKS2 reencryption metadata detected. Please verify the reencryption operation is desirable (see luksDump output)\n" "and continue (upgrade metadata) only if you acknowledge the operation as genuine." @@ -2234,27 +2242,27 @@ msgstr "" "désirable (consultez la sortie de luksDump) et continuez (mise à niveau des métadonnées) uniquement si vous constatez que\n" "l'opération est légitime." -#: src/cryptsetup.c:1251 +#: src/cryptsetup.c:1259 msgid "Enter passphrase to protect and upgrade reencryption metadata: " msgstr "Entrez la phrase secrète pour protéger et mettre à niveau les métadonnées de rechiffrement : " -#: src/cryptsetup.c:1295 +#: src/cryptsetup.c:1303 msgid "Really proceed with LUKS2 reencryption recovery?" msgstr "Réellement procéder à la récupération du rechiffrement LUKS2 ?" -#: src/cryptsetup.c:1304 +#: src/cryptsetup.c:1312 msgid "Enter passphrase to verify reencryption metadata digest: " msgstr "Entrez la phrase secrète pour vérifier le résumé des métadonnées du rechiffrement : " -#: src/cryptsetup.c:1306 +#: src/cryptsetup.c:1314 msgid "Enter passphrase for reencryption recovery: " msgstr "Entrez la phrase secrète pour la récupération du rechiffrement : " -#: src/cryptsetup.c:1366 +#: src/cryptsetup.c:1374 msgid "Really try to repair LUKS device header?" msgstr "Réellement essayer de réparer l'en-tête du périphérique LUKS ?" -#: src/cryptsetup.c:1390 src/integritysetup.c:89 src/integritysetup.c:247 +#: src/cryptsetup.c:1398 src/integritysetup.c:89 src/integritysetup.c:247 msgid "" "\n" "Wipe interrupted." @@ -2262,7 +2270,7 @@ msgstr "" "\n" "Effacement interrompu." -#: src/cryptsetup.c:1395 src/integritysetup.c:94 src/integritysetup.c:284 +#: src/cryptsetup.c:1403 src/integritysetup.c:94 src/integritysetup.c:284 msgid "" "Wiping device to initialize integrity checksum.\n" "You can interrupt this by pressing CTRL+c (rest of not wiped device will contain invalid checksum).\n" @@ -2270,144 +2278,156 @@ msgstr "" "Effacement du périphérique pour initialiser les sommes de contrôle d'intégrité.\n" "Vous pouvez interrompre ceci en appuyant sur CTRL+c (le reste du périphérique effacé contiendra toujours des sommes de contrôle invalides).\n" -#: src/cryptsetup.c:1417 src/integritysetup.c:116 +#: src/cryptsetup.c:1425 src/integritysetup.c:116 #, c-format msgid "Cannot deactivate temporary device %s." msgstr "Impossible de désactiver le périphérique temporaire %s." -#: src/cryptsetup.c:1472 +#: src/cryptsetup.c:1480 msgid "Integrity option can be used only for LUKS2 format." msgstr "L'option d'intégrité peut uniquement être utilisée avec le format LUKS2." -#: src/cryptsetup.c:1477 src/cryptsetup.c:1542 +#: src/cryptsetup.c:1485 src/cryptsetup.c:1550 msgid "Unsupported LUKS2 metadata size options." msgstr "Options de taille des métadonnées LUKS2 non supportées." -#: src/cryptsetup.c:1482 +#: src/cryptsetup.c:1490 msgid "OPAL is supported only for LUKS2 format." msgstr "OPAL est uniquement supporté avec le format LUKS2." -#: src/cryptsetup.c:1491 +#: src/cryptsetup.c:1499 msgid "Header file does not exist, do you want to create it?" msgstr "Le fichier d'en-tête n'existe pas, voulez-vous le créer ?" -#: src/cryptsetup.c:1499 +#: src/cryptsetup.c:1507 #, c-format msgid "Cannot create header file %s." msgstr "Impossible de créer le fichier d'en-tête %s." -#: src/cryptsetup.c:1522 src/integritysetup.c:144 src/integritysetup.c:152 +#: src/cryptsetup.c:1530 src/integritysetup.c:144 src/integritysetup.c:152 #: src/integritysetup.c:161 src/integritysetup.c:324 src/integritysetup.c:332 #: src/integritysetup.c:342 msgid "No known integrity specification pattern detected." msgstr "Aucun motif connu de spécification d'intégrité n'a été détecté." -#: src/cryptsetup.c:1535 +#: src/cryptsetup.c:1543 #, c-format msgid "Cannot use %s as on-disk header." msgstr "Ne peut utiliser %s comme en-tête sur disque." -#: src/cryptsetup.c:1564 src/integritysetup.c:181 +#: src/cryptsetup.c:1572 src/integritysetup.c:181 #, c-format msgid "This will overwrite data on %s irrevocably." msgstr "Cette action écrasera définitivement les données sur %s." -#: src/cryptsetup.c:1601 +#: src/cryptsetup.c:1609 msgid "OPAL Admin password cannot be empty." msgstr "Le mot de passe Admin de OPAL ne peut pas être vide." -#: src/cryptsetup.c:1615 src/cryptsetup.c:2097 src/cryptsetup.c:2247 -#: src/cryptsetup.c:2407 src/cryptsetup.c:2473 src/utils_reencrypt_luks1.c:443 +#: src/cryptsetup.c:1623 src/cryptsetup.c:2194 src/cryptsetup.c:2344 +#: src/cryptsetup.c:2504 src/cryptsetup.c:2570 src/utils_reencrypt_luks1.c:443 msgid "Failed to set pbkdf parameters." msgstr "Impossible de définir les paramètres pbkdf." -#: src/cryptsetup.c:1745 +#: src/cryptsetup.c:1755 msgid "Type specification in --link-vk-to-keyring keyring specification is ignored." msgstr "La spécification de type dans la spécification du porte-clé --link-vk-to-keyring est ignorée." -#: src/cryptsetup.c:1765 +#: src/cryptsetup.c:1820 +msgid "Key types have to be the same for both volume keys." +msgstr "Les types de clés doivent être les même pour les deux clés de volume." + +#: src/cryptsetup.c:1825 +msgid "Both volume keys have to be linked to the same keyring." +msgstr "Les deux clés de volume doivent être liée au même porte-clé" + +#: src/cryptsetup.c:1835 +msgid "You need to supply more key names." +msgstr "Vous devez fournir plus de noms de clés." + +#: src/cryptsetup.c:1839 msgid "Invalid --link-vk-to-keyring value." msgstr "Valeur invalide pour --link-vk-to-keyring." -#: src/cryptsetup.c:1805 +#: src/cryptsetup.c:1884 msgid "Reduced data offset is allowed only for detached LUKS header." msgstr "Décalage réduit de données est uniquement permis dans un en-tête LUKS détaché." -#: src/cryptsetup.c:1812 +#: src/cryptsetup.c:1891 #, c-format msgid "LUKS file container %s is too small for activation, there is no remaining space for data." msgstr "Le container %s du fichier LUKS est trop petit pour l'activation, il ne reste pas d'espace pour les données." -#: src/cryptsetup.c:1839 src/cryptsetup.c:2253 +#: src/cryptsetup.c:1918 src/cryptsetup.c:2350 msgid "Cannot determine volume key size for LUKS without keyslots, please use --key-size option." msgstr "Impossible de déterminer la taille de la clé de volume pour LUKS sans emplacement de clé, veuillez utiliser l'option --key-size." -#: src/cryptsetup.c:1890 +#: src/cryptsetup.c:1985 msgid "Device activated but cannot make flags persistent." msgstr "Le périphérique a été activé mais les fanions ne peuvent pas être rendus permanents." -#: src/cryptsetup.c:1972 src/cryptsetup.c:2040 +#: src/cryptsetup.c:2069 src/cryptsetup.c:2137 #, c-format msgid "Keyslot %d is selected for deletion." msgstr "Emplacement de clé %d sélectionné pour suppression." -#: src/cryptsetup.c:1984 src/cryptsetup.c:2044 +#: src/cryptsetup.c:2081 src/cryptsetup.c:2141 msgid "This is the last keyslot. Device will become unusable after purging this key." msgstr "Ceci est le dernier emplacement de clé. Le périphérique sera inutilisable après la suppression de cette clé." -#: src/cryptsetup.c:1985 +#: src/cryptsetup.c:2082 msgid "Enter any remaining passphrase: " msgstr "Entrez toute phrase secrète restante : " -#: src/cryptsetup.c:1986 src/cryptsetup.c:2046 +#: src/cryptsetup.c:2083 src/cryptsetup.c:2143 msgid "Operation aborted, the keyslot was NOT wiped.\n" msgstr "Opération interrompue, l'emplacement de clé n'a PAS été effacé.\n" -#: src/cryptsetup.c:2022 +#: src/cryptsetup.c:2119 msgid "Enter passphrase to be deleted: " msgstr "Entrez la phrase secrète à effacer : " -#: src/cryptsetup.c:2072 src/cryptsetup.c:2456 src/cryptsetup.c:3114 -#: src/cryptsetup.c:3281 +#: src/cryptsetup.c:2169 src/cryptsetup.c:2553 src/cryptsetup.c:3211 +#: src/cryptsetup.c:3378 #, c-format msgid "Device %s is not a valid LUKS2 device." msgstr "%s n'est pas un périphérique LUKS2 valide." -#: src/cryptsetup.c:2111 src/cryptsetup.c:2330 +#: src/cryptsetup.c:2208 src/cryptsetup.c:2427 msgid "Enter new passphrase for key slot: " msgstr "Entrez une nouvelle phrase secrète pour l'emplacement de clé : " -#: src/cryptsetup.c:2213 +#: src/cryptsetup.c:2310 msgid "WARNING: The --key-slot parameter is used for new keyslot number.\n" msgstr "ATTENTION: Le paramètre --key-slot est utilisé pour le nouveau numéro de l'emplacement de clé.\n" -#: src/cryptsetup.c:2286 src/utils_reencrypt_luks1.c:1149 +#: src/cryptsetup.c:2383 src/utils_reencrypt_luks1.c:1149 #, c-format msgid "Enter any existing passphrase: " msgstr "Entrez une phrase secrète existante : " -#: src/cryptsetup.c:2411 +#: src/cryptsetup.c:2508 msgid "Enter passphrase to be changed: " msgstr "Entrez la phrase secrète à changer : " -#: src/cryptsetup.c:2427 src/utils_reencrypt_luks1.c:1135 +#: src/cryptsetup.c:2524 src/utils_reencrypt_luks1.c:1135 msgid "Enter new passphrase: " msgstr "Entrez la nouvelle phrase secrète : " -#: src/cryptsetup.c:2477 +#: src/cryptsetup.c:2574 msgid "Enter passphrase for keyslot to be converted: " msgstr "Entrez la phrase secrète pour l'emplacement de clé à convertir: " -#: src/cryptsetup.c:2501 +#: src/cryptsetup.c:2598 msgid "Only one device argument for isLuks operation is supported." msgstr "L'opération isLuks supporte seulement un périphérique en argument." -#: src/cryptsetup.c:2609 +#: src/cryptsetup.c:2706 #, c-format msgid "Keyslot %d does not contain unbound key." msgstr "L'emplacement de clé %d ne contient pas de clé non liée." -#: src/cryptsetup.c:2614 +#: src/cryptsetup.c:2711 msgid "" "The header dump with unbound key is sensitive information.\n" "This dump should be stored encrypted in a safe place." @@ -2415,52 +2435,52 @@ msgstr "" "Le contenu de l'en-tête avec une clé non liée est une information sensible.\n" "Ce contenu devrait être stocké, chiffré, en lieu sûr." -#: src/cryptsetup.c:2709 src/cryptsetup.c:2746 +#: src/cryptsetup.c:2806 src/cryptsetup.c:2843 #, c-format msgid "%s is not active %s device name." msgstr "%s n'est pas un nom de périphérique %s actif." -#: src/cryptsetup.c:2741 +#: src/cryptsetup.c:2838 #, c-format msgid "%s is not active LUKS device name or header is missing." msgstr "%s n'est pas un nom de périphérique LUKS actif ou l'en-tête est manquant." -#: src/cryptsetup.c:2819 src/cryptsetup.c:2838 +#: src/cryptsetup.c:2916 src/cryptsetup.c:2935 msgid "Option --header-backup-file is required." msgstr "L'option --header-backup-file est requise." -#: src/cryptsetup.c:2869 +#: src/cryptsetup.c:2966 #, c-format msgid "%s is not cryptsetup managed device." msgstr "%s n'est pas un périphérique géré par cryptsetup." -#: src/cryptsetup.c:2880 +#: src/cryptsetup.c:2977 #, c-format msgid "Refresh is not supported for device type %s" msgstr "Le rafraîchissement n'est pas supporté pour un périphérique de type %s" -#: src/cryptsetup.c:2930 +#: src/cryptsetup.c:3027 #, c-format msgid "Unrecognized metadata device type %s." msgstr "Type de métadonnée du périphérique %s non reconnu." -#: src/cryptsetup.c:2932 +#: src/cryptsetup.c:3029 msgid "Command requires device and mapped name as arguments." msgstr "La commande exige un périphérique et un nom de correspondance comme arguments." -#: src/cryptsetup.c:2942 +#: src/cryptsetup.c:3039 msgid "Enter OPAL PSID: " msgstr "Entrez le PSID OPAL : " -#: src/cryptsetup.c:2942 +#: src/cryptsetup.c:3039 msgid "Enter OPAL Admin password: " msgstr "Entrez le mot de passe Admin de OPAL : " -#: src/cryptsetup.c:2951 +#: src/cryptsetup.c:3048 msgid "WARNING: WHOLE disk will be factory reset and all data will be lost! Continue?" msgstr "ATTENTION : Le disque ENTIER sera réinitialisé d'usine et toutes les données seront perdues ! Continuer ?" -#: src/cryptsetup.c:2994 +#: src/cryptsetup.c:3091 #, c-format msgid "" "This operation will erase all keyslots on device %s.\n" @@ -2469,351 +2489,351 @@ msgstr "" "Cette opération va supprimer tous les emplacements de clés du périphérique %s.\n" "Le périphérique sera inutilisable après cette opération." -#: src/cryptsetup.c:3001 +#: src/cryptsetup.c:3098 msgid "Operation aborted, keyslots were NOT wiped.\n" msgstr "Opération interrompue, les emplacements de clés n'ont PAS été effacés.\n" -#: src/cryptsetup.c:3040 +#: src/cryptsetup.c:3137 msgid "Invalid LUKS type, only luks1 and luks2 are supported." msgstr "Type LUKS invalide, seuls luks1 et luks2 sont supportés." -#: src/cryptsetup.c:3056 +#: src/cryptsetup.c:3153 #, c-format msgid "Device is already %s type." msgstr "Le périphérique est déjà du type %s." -#: src/cryptsetup.c:3063 +#: src/cryptsetup.c:3160 #, c-format msgid "This operation will convert %s to %s format.\n" msgstr "Cette opération va convertir %s au format %s.\n" -#: src/cryptsetup.c:3066 +#: src/cryptsetup.c:3163 msgid "Operation aborted, device was NOT converted.\n" msgstr "Opération interrompue, le périphérique n'a PAS été converti.\n" -#: src/cryptsetup.c:3106 +#: src/cryptsetup.c:3203 msgid "Option --priority, --label or --subsystem is missing." msgstr "L'option --priority, --label ou --subsystem est manquante." -#: src/cryptsetup.c:3140 src/cryptsetup.c:3180 src/cryptsetup.c:3200 +#: src/cryptsetup.c:3237 src/cryptsetup.c:3277 src/cryptsetup.c:3297 #, c-format msgid "Token %d is invalid." msgstr "Le jeton %d est invalide." -#: src/cryptsetup.c:3143 src/cryptsetup.c:3203 +#: src/cryptsetup.c:3240 src/cryptsetup.c:3300 #, c-format msgid "Token %d in use." msgstr "Le jeton %d est utilisé." -#: src/cryptsetup.c:3155 +#: src/cryptsetup.c:3252 #, c-format msgid "Failed to add luks2-keyring token %d." msgstr "Échec lors de l'ajout du jeton %d au porte-clé luks2." -#: src/cryptsetup.c:3166 src/cryptsetup.c:3229 +#: src/cryptsetup.c:3263 src/cryptsetup.c:3326 #, c-format msgid "Failed to assign token %d to keyslot %d." msgstr "Échec lors de l'affectation du jeton %d à l'emplacement de clé %d." -#: src/cryptsetup.c:3183 +#: src/cryptsetup.c:3280 #, c-format msgid "Token %d is not in use." msgstr "Le jeton %d n'est pas utilisé." -#: src/cryptsetup.c:3220 +#: src/cryptsetup.c:3317 msgid "Failed to import token from file." msgstr "Impossible d'importer le jeton depuis le fichier." -#: src/cryptsetup.c:3245 +#: src/cryptsetup.c:3342 #, c-format msgid "Failed to get token %d for export." msgstr "Impossible d'obtenir le jeton %d pour l'export." -#: src/cryptsetup.c:3258 +#: src/cryptsetup.c:3355 #, c-format msgid "Token %d is not assigned to keyslot %d." msgstr "Le jeton %d n'est pas assigné à l'emplacement de clé %d." -#: src/cryptsetup.c:3260 src/cryptsetup.c:3267 +#: src/cryptsetup.c:3357 src/cryptsetup.c:3364 #, c-format msgid "Failed to unassign token %d from keyslot %d." msgstr "Impossible de dissocier le jeton %d de l'emplacement de clé %d." -#: src/cryptsetup.c:3326 +#: src/cryptsetup.c:3423 msgid "Option --tcrypt-hidden, --tcrypt-system or --tcrypt-backup is supported only for TCRYPT device." msgstr "Les options --tcrypt-hidden, --tcrypt-system ou --tcrypt-backup sont supportées seulement pour un périphérique TCRYPT." -#: src/cryptsetup.c:3329 +#: src/cryptsetup.c:3426 msgid "Option --veracrypt or --disable-veracrypt is supported only for TCRYPT device type." msgstr "L'option --veracrypt ou --disable-veracrypt est uniquement supportée pour un périphérique de type TCRYPT." -#: src/cryptsetup.c:3332 +#: src/cryptsetup.c:3429 msgid "Option --veracrypt-pim is supported only for VeraCrypt compatible devices." msgstr "L'option --veracrypt-pim est uniquement supportée pour un périphérique compatible avec VeraCrypt." -#: src/cryptsetup.c:3336 +#: src/cryptsetup.c:3433 msgid "Option --veracrypt-query-pim is supported only for VeraCrypt compatible devices." msgstr "L'option --veracrypt-query-pim est uniquement supportée pour un périphérique compatible avec VeraCrypt." -#: src/cryptsetup.c:3338 +#: src/cryptsetup.c:3435 msgid "The options --veracrypt-pim and --veracrypt-query-pim are mutually exclusive." msgstr "Les options --veracrypt-pim et --veracrypt-query-pim sont mutuellement exclusives." -#: src/cryptsetup.c:3347 +#: src/cryptsetup.c:3444 msgid "Option --persistent is not allowed with --test-passphrase." msgstr "L'option --persistent n'est pas permise avec --test-passphrase." -#: src/cryptsetup.c:3350 +#: src/cryptsetup.c:3447 msgid "Options --refresh and --test-passphrase are mutually exclusive." msgstr "Les options --refresh et --test-passphrase sont mutuellement exclusives." -#: src/cryptsetup.c:3353 +#: src/cryptsetup.c:3450 msgid "Option --shared is allowed only for open of plain device." msgstr "L'option --shared est permise uniquement pour ouvrir un périphérique ordinaire." -#: src/cryptsetup.c:3356 +#: src/cryptsetup.c:3453 msgid "Option --skip is supported only for open of plain and loopaes devices." msgstr "L'option --skip est supportée uniquement pour ouvrir des périphériques ordinaires et loopaes." -#: src/cryptsetup.c:3359 +#: src/cryptsetup.c:3456 msgid "Option --offset with open action is only supported for plain and loopaes devices." msgstr "L'option --offset avec l'action d'ouverture est supportée uniquement pour des périphériques ordinaires et loopaes." -#: src/cryptsetup.c:3362 +#: src/cryptsetup.c:3459 msgid "Option --tcrypt-hidden cannot be combined with --allow-discards." msgstr "L'option --tcrypt-hidden ne peut pas être combinée avec --allow-discards." -#: src/cryptsetup.c:3366 +#: src/cryptsetup.c:3463 msgid "Sector size option with open action is supported only for plain devices." msgstr "L'option de taille de secteur avec l'action d'ouverture est uniquement supportée pour des périphérique ordinaires." -#: src/cryptsetup.c:3370 +#: src/cryptsetup.c:3467 msgid "Large IV sectors option is supported only for opening plain type device with sector size larger than 512 bytes." msgstr "L'option des secteurs IV (vecteur d'initialisation) de grande taille est supportée uniquement à l'ouverture de périphériques de type simple avec une taille de secteur supérieure à 512 octets." -#: src/cryptsetup.c:3375 +#: src/cryptsetup.c:3472 msgid "Option --test-passphrase is allowed only for open of LUKS, TCRYPT, BITLK and FVAULT2 devices." msgstr "L'option --test-passphrase est autorisée uniquement pour ouvrir des périphériques LUKS, TCRYPT, BITLK et FVAULT2." -#: src/cryptsetup.c:3378 src/cryptsetup.c:3401 +#: src/cryptsetup.c:3475 src/cryptsetup.c:3498 msgid "Options --device-size and --size cannot be combined." msgstr "Les options --device-size et --size ne peuvent pas être combinées." -#: src/cryptsetup.c:3381 +#: src/cryptsetup.c:3478 msgid "Option --unbound is allowed only for open of luks device." msgstr "L'option --unbound est permise uniquement pour ouvrir un périphérique luks." -#: src/cryptsetup.c:3384 +#: src/cryptsetup.c:3481 msgid "Option --unbound cannot be used without --test-passphrase." msgstr "L'option --unbound ne peut pas être utilisée sans --test-passphrase." -#: src/cryptsetup.c:3393 src/veritysetup.c:671 src/integritysetup.c:767 +#: src/cryptsetup.c:3490 src/veritysetup.c:671 src/integritysetup.c:767 msgid "Options --cancel-deferred and --deferred cannot be used at the same time." msgstr "Les options --cancel-deferred et --deferred ne peuvent pas être utilisées en même temps." -#: src/cryptsetup.c:3409 +#: src/cryptsetup.c:3506 msgid "Options --reduce-device-size and --device-size cannot be combined." msgstr "Les options --reduce-device-size et --device-size ne peuvent pas être combinées." -#: src/cryptsetup.c:3412 +#: src/cryptsetup.c:3509 msgid "Option --active-name can be set only for LUKS2 device." msgstr "L'option --active-name peut uniquement être définie pour un périphérique LUKS2." -#: src/cryptsetup.c:3415 +#: src/cryptsetup.c:3512 msgid "Options --active-name and --force-offline-reencrypt cannot be combined." msgstr "Les options --active-name et --force-offline-reencrypt ne peuvent pas être combinées." -#: src/cryptsetup.c:3423 src/cryptsetup.c:3453 +#: src/cryptsetup.c:3520 src/cryptsetup.c:3550 msgid "Keyslot specification is required." msgstr "Une spécification d'emplacement de clé est requise." -#: src/cryptsetup.c:3431 +#: src/cryptsetup.c:3528 msgid "Options --align-payload and --offset cannot be combined." msgstr "Les options --align-payload et --offset ne peuvent pas être combinées." -#: src/cryptsetup.c:3434 +#: src/cryptsetup.c:3531 msgid "Option --integrity-no-wipe can be used only for format action with integrity extension." msgstr "L'option --integrity-no-wipe peut uniquement être utilisée pour une action de formatage avec l'extension d'intégrité." -#: src/cryptsetup.c:3437 +#: src/cryptsetup.c:3534 msgid "Only one of --use-[u]random options is allowed." msgstr "Seule une des deux possibilités --use-[u]random est autorisée." -#: src/cryptsetup.c:3445 +#: src/cryptsetup.c:3542 msgid "Key size is required with --unbound option." msgstr "La taille de clé est requise avec l'option --unbound." -#: src/cryptsetup.c:3465 +#: src/cryptsetup.c:3562 msgid "Invalid token action." msgstr "L'action de jeton est invalide." -#: src/cryptsetup.c:3468 +#: src/cryptsetup.c:3565 msgid "--key-description parameter is mandatory for token add action." msgstr "Le paramètre --key-description est requis pour l'action d'ajout d'un jeton." -#: src/cryptsetup.c:3472 src/cryptsetup.c:3485 +#: src/cryptsetup.c:3569 src/cryptsetup.c:3582 msgid "Action requires specific token. Use --token-id parameter." msgstr "L'action requiert un jeton spécifique. Utilisez le paramètre --token-id." -#: src/cryptsetup.c:3476 +#: src/cryptsetup.c:3573 msgid "Option --unbound is valid only with token add action." msgstr "L'option --unbound est uniquement valable avec l'action d'ajout d'un jeton." -#: src/cryptsetup.c:3478 +#: src/cryptsetup.c:3575 msgid "Options --key-slot and --unbound cannot be combined." msgstr "Les options --key-slot et --unbound ne peuvent pas être combinées." -#: src/cryptsetup.c:3483 +#: src/cryptsetup.c:3580 msgid "Action requires specific keyslot. Use --key-slot parameter." msgstr "L'action requiert un jeton spécifique. Utilisez le paramètre --key-slot." -#: src/cryptsetup.c:3499 +#: src/cryptsetup.c:3596 msgid "<device> [--type <type>] [<name>]" msgstr "<périphérique> [--type <type>] [<nom>]" -#: src/cryptsetup.c:3499 src/veritysetup.c:491 src/integritysetup.c:544 +#: src/cryptsetup.c:3596 src/veritysetup.c:491 src/integritysetup.c:544 msgid "open device as <name>" msgstr "ouvrir le périphérique comme <nom>" -#: src/cryptsetup.c:3500 src/cryptsetup.c:3501 src/cryptsetup.c:3502 +#: src/cryptsetup.c:3597 src/cryptsetup.c:3598 src/cryptsetup.c:3599 #: src/veritysetup.c:492 src/veritysetup.c:493 src/integritysetup.c:545 #: src/integritysetup.c:546 src/integritysetup.c:548 msgid "<name>" msgstr "<nom>" -#: src/cryptsetup.c:3500 src/veritysetup.c:492 src/integritysetup.c:545 +#: src/cryptsetup.c:3597 src/veritysetup.c:492 src/integritysetup.c:545 msgid "close device (remove mapping)" msgstr "fermeture du périphérique (supprime le « mapping »)" -#: src/cryptsetup.c:3501 src/integritysetup.c:548 +#: src/cryptsetup.c:3598 src/integritysetup.c:548 msgid "resize active device" msgstr "redimensionner le périphérique actif" -#: src/cryptsetup.c:3502 +#: src/cryptsetup.c:3599 msgid "show device status" msgstr "afficher le statut du périphérique" -#: src/cryptsetup.c:3503 +#: src/cryptsetup.c:3600 msgid "[--cipher <cipher>]" msgstr "[--cipher <chiffrement>]" -#: src/cryptsetup.c:3503 +#: src/cryptsetup.c:3600 msgid "benchmark cipher" msgstr "chiffrement pour test de performance" -#: src/cryptsetup.c:3504 src/cryptsetup.c:3505 src/cryptsetup.c:3506 -#: src/cryptsetup.c:3507 src/cryptsetup.c:3508 src/cryptsetup.c:3515 -#: src/cryptsetup.c:3516 src/cryptsetup.c:3517 src/cryptsetup.c:3518 -#: src/cryptsetup.c:3519 src/cryptsetup.c:3520 src/cryptsetup.c:3521 -#: src/cryptsetup.c:3522 src/cryptsetup.c:3523 src/cryptsetup.c:3524 +#: src/cryptsetup.c:3601 src/cryptsetup.c:3602 src/cryptsetup.c:3603 +#: src/cryptsetup.c:3604 src/cryptsetup.c:3605 src/cryptsetup.c:3612 +#: src/cryptsetup.c:3613 src/cryptsetup.c:3614 src/cryptsetup.c:3615 +#: src/cryptsetup.c:3616 src/cryptsetup.c:3617 src/cryptsetup.c:3618 +#: src/cryptsetup.c:3619 src/cryptsetup.c:3620 src/cryptsetup.c:3621 msgid "<device>" msgstr "<périphérique>" -#: src/cryptsetup.c:3504 +#: src/cryptsetup.c:3601 msgid "try to repair on-disk metadata" msgstr "essayer de réparer les métadonnées sur le disque" -#: src/cryptsetup.c:3505 +#: src/cryptsetup.c:3602 msgid "reencrypt LUKS2 device" msgstr "rechiffrer le périphérique LUKS2" -#: src/cryptsetup.c:3506 +#: src/cryptsetup.c:3603 msgid "erase all keyslots (remove encryption key)" msgstr "supprimer tous les emplacements de clés (supprime la clé de chiffrement)" -#: src/cryptsetup.c:3507 +#: src/cryptsetup.c:3604 msgid "convert LUKS from/to LUKS2 format" msgstr "convertir LUKS depuis/vers le format LUKS2" -#: src/cryptsetup.c:3508 +#: src/cryptsetup.c:3605 msgid "set permanent configuration options for LUKS2" msgstr "définir les options de configuration permanentes pour LUKS2" -#: src/cryptsetup.c:3509 src/cryptsetup.c:3510 +#: src/cryptsetup.c:3606 src/cryptsetup.c:3607 msgid "<device> [<new key file>]" msgstr "<périphérique> [<fichier de la nouvelle clé>]" -#: src/cryptsetup.c:3509 +#: src/cryptsetup.c:3606 msgid "formats a LUKS device" msgstr "formater un périphérique LUKS" -#: src/cryptsetup.c:3510 +#: src/cryptsetup.c:3607 msgid "add key to LUKS device" msgstr "ajouter une clé au périphérique LUKS" -#: src/cryptsetup.c:3511 src/cryptsetup.c:3512 src/cryptsetup.c:3513 +#: src/cryptsetup.c:3608 src/cryptsetup.c:3609 src/cryptsetup.c:3610 msgid "<device> [<key file>]" msgstr "<périphérique> [<fichier de clé>]" -#: src/cryptsetup.c:3511 +#: src/cryptsetup.c:3608 msgid "removes supplied key or key file from LUKS device" msgstr "retire du périphérique LUKS la clé ou le fichier de clé fourni" -#: src/cryptsetup.c:3512 +#: src/cryptsetup.c:3609 msgid "changes supplied key or key file of LUKS device" msgstr "modifie la clé ou le fichier de clé fourni pour le périphérique LUKS" -#: src/cryptsetup.c:3513 +#: src/cryptsetup.c:3610 msgid "converts a key to new pbkdf parameters" msgstr "converti une clé vers les nouveaux paramètres pbkdf" -#: src/cryptsetup.c:3514 +#: src/cryptsetup.c:3611 msgid "<device> <key slot>" msgstr "<périphérique> <emplacement de clé>" -#: src/cryptsetup.c:3514 +#: src/cryptsetup.c:3611 msgid "wipes key with number <key slot> from LUKS device" msgstr "efface de façon sécurisée la clé avec le numéro <emplacement de clé> du périphérique LUKS" -#: src/cryptsetup.c:3515 +#: src/cryptsetup.c:3612 msgid "print UUID of LUKS device" msgstr "afficher l'UUID du périphérique LUKS" -#: src/cryptsetup.c:3516 +#: src/cryptsetup.c:3613 msgid "tests <device> for LUKS partition header" msgstr "teste si <périphérique> a un en-tête de partition LUKS" -#: src/cryptsetup.c:3517 +#: src/cryptsetup.c:3614 msgid "dump LUKS partition information" msgstr "affiche les informations LUKS de la partition" -#: src/cryptsetup.c:3518 +#: src/cryptsetup.c:3615 msgid "dump TCRYPT device information" msgstr "affiche les informations du périphérique TCRYPT" -#: src/cryptsetup.c:3519 +#: src/cryptsetup.c:3616 msgid "dump BITLK device information" msgstr "affiche les informations du périphérique BITLK" -#: src/cryptsetup.c:3520 +#: src/cryptsetup.c:3617 msgid "dump FVAULT2 device information" msgstr "affiche les informations du périphérique FVAULT2" -#: src/cryptsetup.c:3521 +#: src/cryptsetup.c:3618 msgid "Suspend LUKS device and wipe key (all IOs are frozen)" msgstr "Suspendre le périphérique LUKS et effacer de façon sécurisée la clé (toutes les entrées/sorties sont suspendues)" -#: src/cryptsetup.c:3522 +#: src/cryptsetup.c:3619 msgid "Resume suspended LUKS device" msgstr "Remettre en service le périphérique LUKS suspendu" -#: src/cryptsetup.c:3523 +#: src/cryptsetup.c:3620 msgid "Backup LUKS device header and keyslots" msgstr "Sauvegarder l'en-tête et les emplacements de clés du périphérique LUKS" -#: src/cryptsetup.c:3524 +#: src/cryptsetup.c:3621 msgid "Restore LUKS device header and keyslots" msgstr "Restaurer l'en-tête et les emplacements de clés du périphérique LUKS" -#: src/cryptsetup.c:3525 +#: src/cryptsetup.c:3622 msgid "<add|remove|import|export> <device>" msgstr "<add|remove|import|export> <périphérique>" -#: src/cryptsetup.c:3525 +#: src/cryptsetup.c:3622 msgid "Manipulate LUKS2 tokens" msgstr "Manipuler les jetons LUKS2" -#: src/cryptsetup.c:3544 src/veritysetup.c:509 src/integritysetup.c:563 +#: src/cryptsetup.c:3641 src/veritysetup.c:509 src/integritysetup.c:563 msgid "" "\n" "<action> is one of:\n" @@ -2821,7 +2841,7 @@ msgstr "" "\n" "<action> est l'une de :\n" -#: src/cryptsetup.c:3550 +#: src/cryptsetup.c:3647 msgid "" "\n" "You can also use old <action> syntax aliases:\n" @@ -2833,7 +2853,7 @@ msgstr "" "\touvrir : create (plainOpen), luksOpen, loopaesOpen, tcryptOpen, bitlkOpen, fvault2Open\n" "\tfermer : remove (plainClose), luksClose, loopaesClose, tcryptClose, bitlkClose, fvault2Close\n" -#: src/cryptsetup.c:3554 +#: src/cryptsetup.c:3651 #, c-format msgid "" "\n" @@ -2848,7 +2868,7 @@ msgstr "" "<emplacement> est le numéro de l'emplacement de clé LUKS à modifier\n" "<fichier de clé> est un fichier optionnel contenant la nouvelle clé pour l'action luksAddKey\n" -#: src/cryptsetup.c:3561 +#: src/cryptsetup.c:3658 #, c-format msgid "" "\n" @@ -2857,7 +2877,7 @@ msgstr "" "\n" "Le format de métadonnées compilé par défaut est %s (pour l'action luksFormat).\n" -#: src/cryptsetup.c:3566 +#: src/cryptsetup.c:3663 msgid "" "\n" "LUKS2 external token plugin support is enabled.\n" @@ -2865,12 +2885,12 @@ msgstr "" "\n" "Le support du greffon de jeton externe LUKS2 est enabled.\n" -#: src/cryptsetup.c:3567 +#: src/cryptsetup.c:3664 #, c-format msgid "LUKS2 external token plugin path: %s.\n" msgstr "Chemin du greffon de jeton externe LUKS2 : %s.\n" -#: src/cryptsetup.c:3569 +#: src/cryptsetup.c:3666 msgid "" "\n" "LUKS2 external token plugin support is disabled.\n" @@ -2878,7 +2898,7 @@ msgstr "" "\n" "Le support du greffon de jeton externe LUKS2 est désactivé.\n" -#: src/cryptsetup.c:3573 +#: src/cryptsetup.c:3670 #, c-format msgid "" "\n" @@ -2895,7 +2915,7 @@ msgstr "" "PBKDF par défaut pour LUKS2 : %s\n" "\tTemps d'itération: %d, Mémoire requise: %d ko, Threads parallèles: %d\n" -#: src/cryptsetup.c:3584 +#: src/cryptsetup.c:3681 #, c-format msgid "" "\n" @@ -2910,100 +2930,110 @@ msgstr "" "\tplain: %s, Clé: %d bits, Hachage mot de passe: %s\n" "\tLUKS: %s, Clé: %d bits, Hachage en-tête LUKS: %s, RNG: %s\n" -#: src/cryptsetup.c:3593 +#: src/cryptsetup.c:3690 msgid "\tLUKS: Default keysize with XTS mode (two internal keys) will be doubled.\n" msgstr "\tLUKS: La taille de clé par défaut en mode XTS (deux clés internes) sera doublée.\n" -#: src/cryptsetup.c:3611 src/veritysetup.c:651 src/integritysetup.c:723 +#: src/cryptsetup.c:3708 src/veritysetup.c:651 src/integritysetup.c:723 #, c-format msgid "%s: requires %s as arguments" msgstr "%s : exige %s comme arguments." -#: src/cryptsetup.c:3651 src/utils_reencrypt_luks1.c:1198 +#: src/cryptsetup.c:3748 src/utils_reencrypt_luks1.c:1198 msgid "Key slot is invalid." msgstr "Emplacement de clé non valide." -#: src/cryptsetup.c:3678 +#: src/cryptsetup.c:3776 msgid "Device size must be multiple of 512 bytes sector." msgstr "La taille du périphérique doit être un multiple d'un secteur de 512 octets." -#: src/cryptsetup.c:3683 +#: src/cryptsetup.c:3781 msgid "Invalid max reencryption hotzone size specification." msgstr "La spécification de la taille maximale de la zone chaude de rechiffrement est invalide." -#: src/cryptsetup.c:3697 src/cryptsetup.c:3709 +#: src/cryptsetup.c:3795 src/cryptsetup.c:3807 msgid "Key size must be a multiple of 8 bits" msgstr "La taille de la clé doit être un multiple de 8 bits" -#: src/cryptsetup.c:3714 +#: src/cryptsetup.c:3814 +#, c-format +msgid "At most %d volume key specifications can be supplied." +msgstr "Au plus %d spécifications de clés de volume peuvent être fournies." + +#: src/cryptsetup.c:3826 +#, c-format +msgid "At most %d keyring link specifications can be supplied." +msgstr "Au plus %d spécifications de liaison de porte-clé peuvent être fournies." + +#: src/cryptsetup.c:3835 msgid "Maximum device reduce size is 1 GiB." msgstr "La taille maximum réduite pour le périphérique est 1 GiB." -#: src/cryptsetup.c:3717 +#: src/cryptsetup.c:3838 msgid "Reduce size must be multiple of 512 bytes sector." msgstr "La taille réduite doit être un multiple d'un secteur de 512 octets." -#: src/cryptsetup.c:3734 +#: src/cryptsetup.c:3855 msgid "Option --priority can be only ignore/normal/prefer." msgstr "L'option --priority peut uniquement être ignore/normal/prefer." -#: src/cryptsetup.c:3753 src/veritysetup.c:572 src/integritysetup.c:643 +#: src/cryptsetup.c:3874 src/veritysetup.c:572 src/integritysetup.c:643 msgid "Show this help message" msgstr "Afficher ce message d'aide" -#: src/cryptsetup.c:3754 src/veritysetup.c:573 src/integritysetup.c:644 +#: src/cryptsetup.c:3875 src/veritysetup.c:573 src/integritysetup.c:644 msgid "Display brief usage" msgstr "Afficher, en résumé, la syntaxe d'invocation" -#: src/cryptsetup.c:3755 src/veritysetup.c:574 src/integritysetup.c:645 +#: src/cryptsetup.c:3876 src/veritysetup.c:574 src/integritysetup.c:645 msgid "Print package version" msgstr "Afficher la version du paquet" -#: src/cryptsetup.c:3766 src/veritysetup.c:585 src/integritysetup.c:656 +#: src/cryptsetup.c:3887 src/veritysetup.c:585 src/integritysetup.c:656 msgid "Help options:" msgstr "Options d'aide :" -#: src/cryptsetup.c:3789 src/veritysetup.c:606 src/integritysetup.c:676 +#: src/cryptsetup.c:3910 src/veritysetup.c:606 src/integritysetup.c:676 msgid "[OPTION...] <action> <action-specific>" msgstr "[OPTION...] <action> <paramètres de l'action>" -#: src/cryptsetup.c:3798 src/veritysetup.c:615 src/integritysetup.c:687 +#: src/cryptsetup.c:3919 src/veritysetup.c:615 src/integritysetup.c:687 msgid "Argument <action> missing." msgstr "Il manque l'argument <action>." -#: src/cryptsetup.c:3877 src/veritysetup.c:646 src/integritysetup.c:718 +#: src/cryptsetup.c:3998 src/veritysetup.c:646 src/integritysetup.c:718 msgid "Unknown action." msgstr "Action inconnue." -#: src/cryptsetup.c:3895 +#: src/cryptsetup.c:4016 msgid "Option --key-file takes precedence over specified key file argument." msgstr "L'option --key-file est prioritaire par rapport à un fichier de clé spécifié en argument." -#: src/cryptsetup.c:3901 +#: src/cryptsetup.c:4022 msgid "Only one --key-file argument is allowed." msgstr "Un seul argument --key-file est autorisé." -#: src/cryptsetup.c:3906 +#: src/cryptsetup.c:4027 msgid "Password-based key derivation function (PBKDF) can be only pbkdf2 or argon2i/argon2id." msgstr "La fonction de dérivation d'une clé basée sur un mot de passe (PBKDF = Password-Based Key Derivation Function) peut uniquement être pbkdf2 ou argon2i/argon2id." -#: src/cryptsetup.c:3911 +#: src/cryptsetup.c:4032 msgid "PBKDF forced iterations cannot be combined with iteration time option." msgstr "Les itérations forcées de PBKDF ne peuvent pas être combinées avec l'option de temps d'itération." -#: src/cryptsetup.c:3916 +#: src/cryptsetup.c:4037 msgid "Cannot link volume key to a keyring when keyring is disabled." msgstr "Impossible de lier une clé de volume à un porte-clé quand le porte-clé est désactivé." -#: src/cryptsetup.c:3927 +#: src/cryptsetup.c:4048 msgid "Options --keyslot-cipher and --keyslot-key-size must be used together." msgstr "Les options --keyslot-cipher et --keyslot-key-size doivent être utilisées ensembles." -#: src/cryptsetup.c:3935 +#: src/cryptsetup.c:4056 msgid "No action taken. Invoked with --test-args option.\n" msgstr "Aucune action réalisée. Invoqué avec l'option --test-args.\n" -#: src/cryptsetup.c:3948 +#: src/cryptsetup.c:4069 msgid "Cannot disable metadata locking." msgstr "Impossible de désactiver le verrouillage des métadonnées." @@ -3468,20 +3498,20 @@ msgstr "Aucun emplacement de clé utilisable est disponible." msgid "Can't do passphrase verification on non-tty inputs." msgstr "Impossible de vérifier une phrase secrète non saisie sur une console." -#: src/utils_luks.c:183 +#: src/utils_luks.c:186 #, c-format msgid "Failed to open file %s in read-only mode." msgstr "Impossible d'ouvrir le fichier %s en lecture seule." -#: src/utils_luks.c:196 +#: src/utils_luks.c:199 msgid "Provide valid LUKS2 token JSON:\n" msgstr "Fournissez le jeton LUKS valide au format JSON:\n" -#: src/utils_luks.c:203 +#: src/utils_luks.c:206 msgid "Failed to read JSON file." msgstr "Impossible de lire le fichier JSON." -#: src/utils_luks.c:208 +#: src/utils_luks.c:211 msgid "" "\n" "Read interrupted." @@ -3489,12 +3519,12 @@ msgstr "" "\n" "Lecture interrompue." -#: src/utils_luks.c:249 +#: src/utils_luks.c:252 #, c-format msgid "Failed to open file %s in write mode." msgstr "Impossible d'ouvrir le fichier %s en écriture seule." -#: src/utils_luks.c:258 +#: src/utils_luks.c:261 msgid "" "\n" "Write interrupted." @@ -3502,7 +3532,7 @@ msgstr "" "\n" "Écriture interrompue." -#: src/utils_luks.c:262 +#: src/utils_luks.c:265 msgid "Failed to write JSON file." msgstr "Erreur lors de l'écriture du fichier JSON." @@ -3590,7 +3620,7 @@ msgstr "" "La taille de secteur demandée avec --sector-size %<PRIu32> est incompatible avec le superbloc %s\n" "(taille de bloc : %<PRIu32> octets) détecté sur le périphérique %s." -#: src/utils_reencrypt.c:533 src/utils_reencrypt.c:1412 +#: src/utils_reencrypt.c:533 src/utils_reencrypt.c:1421 msgid "Encryption without detached header (--header) is not possible without data device size reduction (--reduce-device-size)." msgstr "Le chiffrement sans en-tête détaché (--header) n'est pas possible sans une réduction de la taille du périphérique de données (--reduce-device-size)" @@ -3640,53 +3670,53 @@ msgstr "Restauration de l'en-tête LUKS2 original." msgid "Original LUKS2 header restore failed." msgstr "Échec de la restauration de l'en-tête LUKS2 original." -#: src/utils_reencrypt.c:759 +#: src/utils_reencrypt.c:765 #, c-format msgid "Header file %s does not exist. Do you want to initialize LUKS2 decryption of device %s and export LUKS2 header to file %s?" msgstr "Le fichier d'en-tête %s n'existe pas. Voulez-vous initialiser le déchiffrement LUKS2 du périphérique %s et exporter l'en-tête LUKS2 dans le fichier %s ?" -#: src/utils_reencrypt.c:807 +#: src/utils_reencrypt.c:815 msgid "Failed to add read/write permissions to exported header file." msgstr "Échec de l'ajout des permissions lecture/écriture pour exporter le fichier d'en-tête." -#: src/utils_reencrypt.c:860 +#: src/utils_reencrypt.c:869 #, c-format msgid "Reencryption initialization failed. Header backup is available in %s." msgstr "L'initialisation du rechiffrement a échoué. La sauvegarde de l'en-tête est disponible dans %s." -#: src/utils_reencrypt.c:888 +#: src/utils_reencrypt.c:897 msgid "LUKS2 decryption is supported with detached header device only (with data offset set to 0)." msgstr "Le déchiffrement LUKS2 est uniquement supporté avec un périphérique à l'en-tête détaché (avec l'offset de données défini à 0)." -#: src/utils_reencrypt.c:1023 src/utils_reencrypt.c:1032 +#: src/utils_reencrypt.c:1032 src/utils_reencrypt.c:1041 msgid "Not enough free keyslots for reencryption." msgstr "Pas assez d'emplacements de clés libres pour le rechiffrement." -#: src/utils_reencrypt.c:1053 src/utils_reencrypt_luks1.c:1100 +#: src/utils_reencrypt.c:1062 src/utils_reencrypt_luks1.c:1100 msgid "Key file can be used only with --key-slot or with exactly one key slot active." msgstr "Le fichier de clé peut uniquement être utilisé avec --key-slot ou avec exactement un seul emplacement de clé actif." -#: src/utils_reencrypt.c:1062 src/utils_reencrypt_luks1.c:1147 +#: src/utils_reencrypt.c:1071 src/utils_reencrypt_luks1.c:1147 #: src/utils_reencrypt_luks1.c:1158 #, c-format msgid "Enter passphrase for key slot %d: " msgstr "Entrez la phrase secrète pour l'emplacement de clé %d : " -#: src/utils_reencrypt.c:1074 +#: src/utils_reencrypt.c:1083 #, c-format msgid "Enter passphrase for key slot %u: " msgstr "Entrez la phrase secrète pour l'emplacement de clé %u : " -#: src/utils_reencrypt.c:1126 +#: src/utils_reencrypt.c:1135 #, c-format msgid "Switching data encryption cipher to %s.\n" msgstr "Basculement de l'algorithme de chiffrement de données vers %s.\n" -#: src/utils_reencrypt.c:1180 +#: src/utils_reencrypt.c:1189 msgid "No data segment parameters changed. Reencryption aborted." msgstr "Aucun paramètre de segment de donnée changé. Rechiffrement abandonné." -#: src/utils_reencrypt.c:1282 +#: src/utils_reencrypt.c:1291 msgid "" "Encryption sector size increase on offline device is not supported.\n" "Activate the device first or use --force-offline-reencrypt option (dangerous!)." @@ -3694,7 +3724,7 @@ msgstr "" "L'augmentation de la taille du secteur de chiffrement n'est pas supportée sur un périphérique hors-ligne.\n" "Activez d'abord le périphérique ou utilisez l'option --force-offline-reencrypt (dangereux !)." -#: src/utils_reencrypt.c:1322 src/utils_reencrypt_luks1.c:726 +#: src/utils_reencrypt.c:1331 src/utils_reencrypt_luks1.c:726 #: src/utils_reencrypt_luks1.c:798 msgid "" "\n" @@ -3703,58 +3733,58 @@ msgstr "" "\n" "Rechiffrement interrompu." -#: src/utils_reencrypt.c:1327 +#: src/utils_reencrypt.c:1336 msgid "Resuming LUKS reencryption in forced offline mode.\n" msgstr "Redémarrage du rechiffrement LUKS en mode hors-ligne forcé.\n" -#: src/utils_reencrypt.c:1350 +#: src/utils_reencrypt.c:1359 #, c-format msgid "Device %s contains broken LUKS metadata. Aborting operation." msgstr "Le périphérique %s contient des métadonnées LUKS endommagées. L'opération est abandonnée." -#: src/utils_reencrypt.c:1366 src/utils_reencrypt.c:1388 +#: src/utils_reencrypt.c:1375 src/utils_reencrypt.c:1397 #, c-format msgid "Device %s is already LUKS device. Aborting operation." msgstr "Le périphérique %s est déjà un périphérique LUKS. L'opération est abandonnée." -#: src/utils_reencrypt.c:1394 +#: src/utils_reencrypt.c:1403 #, c-format msgid "Device %s is already in LUKS reencryption. Aborting operation." msgstr "Le périphérique %s est déjà en cours de rechiffrement LUKS. L'opération est abandonnée." -#: src/utils_reencrypt.c:1476 +#: src/utils_reencrypt.c:1485 msgid "LUKS2 decryption requires --header option." msgstr "Le déchiffrement LUKS2 requiert l'option --header." -#: src/utils_reencrypt.c:1524 +#: src/utils_reencrypt.c:1533 msgid "Command requires device as argument." msgstr "La commande exige un périphérique comme argument." -#: src/utils_reencrypt.c:1537 +#: src/utils_reencrypt.c:1546 #, c-format msgid "Conflicting versions. Device %s is LUKS1." msgstr "Versions conflictuelles. Le périphérique %s est LUKS1." -#: src/utils_reencrypt.c:1543 +#: src/utils_reencrypt.c:1552 #, c-format msgid "Conflicting versions. Device %s is in LUKS1 reencryption." msgstr "Versions conflictuelles. Le périphérique %s est en cours de rechiffrement LUKS1." -#: src/utils_reencrypt.c:1549 +#: src/utils_reencrypt.c:1558 #, c-format msgid "Conflicting versions. Device %s is LUKS2." msgstr "Versions conflictuelle. Le périphérique %s est LUKS2" -#: src/utils_reencrypt.c:1555 +#: src/utils_reencrypt.c:1564 #, c-format msgid "Conflicting versions. Device %s is in LUKS2 reencryption." msgstr "Versions conflictuelles. Le périphérique %s est en cours de rechiffrement LUKS2." -#: src/utils_reencrypt.c:1561 +#: src/utils_reencrypt.c:1570 msgid "LUKS2 reencryption already initialized. Aborting operation." msgstr "Rechiffrement LUKS2 déjà initialisé. Abandon de l'opération." -#: src/utils_reencrypt.c:1568 +#: src/utils_reencrypt.c:1577 msgid "Device reencryption not in progress." msgstr "Le rechiffrement du périphérique n'est pas en cours." @@ -1,14 +1,14 @@ # Japanese messages for cryptsetup. # Copyright (C) 2019, 2020 Free Software Foundation, Inc. # This file is put in the public domain, to the extent permitted under applicable law. -# Hiroshi Takekawa <sian@big.or.jp>, <sian.ht@gmail.com>, 2019, 2020, 2021, 2022, 2023 +# Hiroshi Takekawa <sian@big.or.jp>, <sian.ht@gmail.com>, 2019, 2020, 2021, 2022, 2023, 2024 # msgid "" msgstr "" -"Project-Id-Version: cryptsetup 2.7.0-rc1\n" +"Project-Id-Version: cryptsetup 2.7.1-rc0\n" "Report-Msgid-Bugs-To: cryptsetup@lists.linux.dev\n" -"POT-Creation-Date: 2023-12-20 15:16+0100\n" -"PO-Revision-Date: 2023-12-21 20:17+0900\n" +"POT-Creation-Date: 2024-02-29 20:38+0100\n" +"PO-Revision-Date: 2024-03-02 14:50+0900\n" "Last-Translator: Hiroshi Takekawa <sian@big.or.jp>\n" "Language-Team: Japanese <translation-team-ja@lists.sourceforge.net>\n" "Language: ja\n" @@ -114,632 +114,640 @@ msgstr "不明な RNG(乱数生成器) の質(quality)が要求されました msgid "Error reading from RNG." msgstr "RNG(乱数生成器)から読み込み中にエラー。" -#: lib/setup.c:261 +#: lib/setup.c:262 msgid "OPAL support is disabled in libcryptsetup." msgstr "OPAL サポートは libcryptsetup で無効化されています。" -#: lib/setup.c:263 +#: lib/setup.c:264 #, c-format msgid "Device %s or kernel does not support OPAL encryption." msgstr "デバイス %s かカーネルが OPAL 暗号化をサポートしていません。" -#: lib/setup.c:279 +#: lib/setup.c:280 msgid "Cannot initialize crypto RNG backend." msgstr "暗号向けRNG(乱数生成器)バックエンドの初期化ができません。" -#: lib/setup.c:285 +#: lib/setup.c:286 msgid "Cannot initialize crypto backend." msgstr "暗号バックエンドの初期化ができません。" -#: lib/setup.c:317 lib/setup.c:2777 lib/verity/verity.c:122 +#: lib/setup.c:318 lib/setup.c:2778 lib/verity/verity.c:122 #, c-format msgid "Hash algorithm %s not supported." msgstr "ハッシュアルゴリズム %s がサポートされていません。" -#: lib/setup.c:320 lib/loopaes/loopaes.c:90 +#: lib/setup.c:321 lib/loopaes/loopaes.c:90 #, c-format msgid "Key processing error (using hash %s)." msgstr "鍵の処理でエラー (ハッシュ %s を使用)。" -#: lib/setup.c:391 lib/setup.c:428 +#: lib/setup.c:392 lib/setup.c:429 msgid "Cannot determine device type. Incompatible activation of device?" msgstr "デバイスタイプがわかりません。互換性のないデバイスのアクティベーションをしようとしていませんか？" -#: lib/setup.c:397 lib/setup.c:3971 +#: lib/setup.c:398 lib/setup.c:3973 msgid "This operation is supported only for LUKS device." msgstr "この操作は LUKS デバイスでしかサポートされていません。" -#: lib/setup.c:434 +#: lib/setup.c:435 msgid "This operation is supported only for LUKS2 device." msgstr "この操作は LUKS2 デバイスでしかサポートされていません。" -#: lib/setup.c:491 lib/luks2/luks2_reencrypt.c:3056 +#: lib/setup.c:492 lib/luks2/luks2_reencrypt.c:3071 msgid "All key slots full." msgstr "キースロットがいっぱいです。" -#: lib/setup.c:502 +#: lib/setup.c:503 #, c-format msgid "Key slot %d is invalid, please select between 0 and %d." msgstr "キースロット %d は不正です。0 から %d の間を選んでください。" -#: lib/setup.c:508 +#: lib/setup.c:509 #, c-format msgid "Key slot %d is full, please select another one." msgstr "キースロット %d は使われています。別の番号を選んでください。" -#: lib/setup.c:619 lib/setup.c:3672 +#: lib/setup.c:620 lib/setup.c:3673 msgid "Device size is not aligned to device logical block size." msgstr "デバイスサイズが論理ブロックサイズのアライメントに合いません。" -#: lib/setup.c:717 +#: lib/setup.c:718 #, c-format msgid "Header detected but device %s is too small." msgstr "ヘッダが検出されましたがデバイス %s が小さすぎます。" -#: lib/setup.c:758 lib/setup.c:3563 lib/setup.c:5163 -#: lib/luks2/luks2_reencrypt.c:3848 lib/luks2/luks2_reencrypt.c:4305 +#: lib/setup.c:759 lib/setup.c:3564 lib/setup.c:5351 lib/setup.c:5371 +#: lib/luks2/luks2_reencrypt.c:3863 lib/luks2/luks2_reencrypt.c:4320 msgid "This operation is not supported for this device type." msgstr "この操作はこのデバイスタイプではサポートされていません。" -#: lib/setup.c:763 +#: lib/setup.c:764 msgid "Illegal operation with reencryption in-progress." msgstr "オフラインでの再暗号化中です。中止します。" -#: lib/setup.c:895 +#: lib/setup.c:896 msgid "Failed to rollback LUKS2 metadata in memory." msgstr "メモリ上の LUKS2 メタデータのロールバックに失敗しました。" -#: lib/setup.c:982 lib/luks1/keymanage.c:249 lib/luks1/keymanage.c:527 -#: lib/luks2/luks2_json_metadata.c:1374 src/cryptsetup.c:1799 -#: src/cryptsetup.c:1962 src/cryptsetup.c:2017 src/cryptsetup.c:2222 -#: src/cryptsetup.c:2392 src/cryptsetup.c:2673 src/cryptsetup.c:2981 -#: src/cryptsetup.c:3049 src/utils_reencrypt.c:1488 +#: lib/setup.c:983 lib/luks1/keymanage.c:249 lib/luks1/keymanage.c:527 +#: lib/luks2/luks2_json_metadata.c:1374 src/cryptsetup.c:1878 +#: src/cryptsetup.c:2059 src/cryptsetup.c:2114 src/cryptsetup.c:2319 +#: src/cryptsetup.c:2489 src/cryptsetup.c:2770 src/cryptsetup.c:3078 +#: src/cryptsetup.c:3146 src/utils_reencrypt.c:1497 #: src/utils_reencrypt_luks1.c:1192 tokens/ssh/cryptsetup-ssh.c:85 #, c-format msgid "Device %s is not a valid LUKS device." msgstr "デバイス %s は有効な LUKS デバイスではありません。" -#: lib/setup.c:985 lib/luks1/keymanage.c:530 +#: lib/setup.c:986 lib/luks1/keymanage.c:530 #, c-format msgid "Unsupported LUKS version %d." msgstr "LUKS バージョン %d はサポートされていません。" -#: lib/setup.c:1358 +#: lib/setup.c:1359 #, c-format msgid "No known cipher specification pattern detected for active device %s." msgstr "アクティブなデバイス %s に既知の暗号スペックパターンが検出されませんでした。" -#: lib/setup.c:1604 lib/setup.c:3317 lib/setup.c:3399 lib/setup.c:3411 -#: lib/setup.c:3581 lib/setup.c:5755 +#: lib/setup.c:1605 lib/setup.c:3318 lib/setup.c:3400 lib/setup.c:3412 +#: lib/setup.c:3582 lib/setup.c:5995 #, c-format msgid "Device %s is not active." msgstr "デバイス %s はアクティブではありません。" -#: lib/setup.c:1621 +#: lib/setup.c:1622 #, c-format msgid "Underlying device for crypt device %s disappeared." msgstr "暗号化されたデバイス %s の元になるデバイスが消滅しました。" -#: lib/setup.c:1703 +#: lib/setup.c:1704 msgid "Invalid plain crypt parameters." msgstr "不正な plain crypt のパラメータ。" -#: lib/setup.c:1708 lib/setup.c:2680 +#: lib/setup.c:1709 lib/setup.c:2681 msgid "Invalid key size." msgstr "不正なキーサイズ。" -#: lib/setup.c:1713 lib/setup.c:2685 lib/setup.c:2888 +#: lib/setup.c:1714 lib/setup.c:2686 lib/setup.c:2889 msgid "UUID is not supported for this crypt type." msgstr "UUID はこの暗号タイプではサポートされていません。" -#: lib/setup.c:1718 lib/setup.c:2690 +#: lib/setup.c:1719 lib/setup.c:2691 msgid "Detached metadata device is not supported for this crypt type." msgstr "分離したメタデータデバイスはこの暗号タイプではサポートされていません。" -#: lib/setup.c:1728 lib/setup.c:1963 lib/luks2/luks2_reencrypt.c:3012 -#: src/cryptsetup.c:1467 src/cryptsetup.c:3726 +#: lib/setup.c:1729 lib/setup.c:1964 lib/luks2/luks2_reencrypt.c:3027 +#: src/cryptsetup.c:1475 src/cryptsetup.c:3847 msgid "Unsupported encryption sector size." msgstr "サポートされていない暗号化セクタサイズです。" -#: lib/setup.c:1736 lib/setup.c:1992 lib/setup.c:3666 +#: lib/setup.c:1737 lib/setup.c:1993 lib/setup.c:3667 msgid "Device size is not aligned to requested sector size." msgstr "デバイスサイズが要求されたセクタサイズのアライメントに合いません。" -#: lib/setup.c:1788 lib/setup.c:2025 lib/setup.c:2357 +#: lib/setup.c:1789 lib/setup.c:2026 lib/setup.c:2358 msgid "Can't format LUKS without device." msgstr "デバイスなしには LUKS 形式にフォーマットできません。" -#: lib/setup.c:1794 lib/setup.c:2031 lib/setup.c:2363 +#: lib/setup.c:1795 lib/setup.c:2032 lib/setup.c:2364 msgid "Requested data alignment is not compatible with data offset." msgstr "要求されたデータアライメントとデータオフセットが合いません。" -#: lib/setup.c:1834 lib/setup.c:2049 +#: lib/setup.c:1835 lib/setup.c:2050 msgid "WARNING: DAX device can corrupt data as it does not guarantee atomic sector updates.\n" msgstr "警告: DAX デバイスはアトミックなセクタ更新を保証しないためデータが壊れることがあります。\n" -#: lib/setup.c:1872 lib/setup.c:2144 lib/setup.c:2165 lib/setup.c:2541 -#: lib/setup.c:2587 lib/setup.c:2900 +#: lib/setup.c:1873 lib/setup.c:2145 lib/setup.c:2166 lib/setup.c:2542 +#: lib/setup.c:2588 lib/setup.c:2901 #, c-format msgid "Cannot wipe header on device %s." msgstr "デバイス %s のヘッダを消し去れません。" -#: lib/setup.c:1885 lib/setup.c:2204 +#: lib/setup.c:1886 lib/setup.c:2205 #, c-format msgid "Device %s is too small for activation, there is no remaining space for data.\n" msgstr "デバイス %s はアクティベートするのに小さすぎます。データ用のスペースがありません。\n" -#: lib/setup.c:1925 +#: lib/setup.c:1926 msgid "Volume key is too small for encryption with integrity extensions." msgstr "ボリュームキーは改ざん耐性拡張のため暗号には鍵長が小さすぎます。" -#: lib/setup.c:1934 +#: lib/setup.c:1935 #, c-format msgid "Cipher %s-%s (key size %zd bits) is not available." msgstr "暗号 %s-%s (キーサイズ %zd ビット) は利用できません。" -#: lib/setup.c:1973 +#: lib/setup.c:1974 msgid "WARNING: The device activation will fail, dm-crypt is missing support for requested encryption sector size.\n" msgstr "警告: デバイスアクティベーションが失敗しました。dm-crypt が要求された暗号セクタサイズをサポートしていません。\n" -#: lib/setup.c:2147 lib/setup.c:2484 lib/setup.c:2544 lib/utils_device.c:917 -#: lib/luks1/keyencryption.c:255 lib/luks2/luks2_reencrypt.c:3080 -#: lib/luks2/luks2_reencrypt.c:4364 +#: lib/setup.c:2148 lib/setup.c:2485 lib/setup.c:2545 lib/utils_device.c:917 +#: lib/luks1/keyencryption.c:255 lib/luks2/luks2_reencrypt.c:3095 +#: lib/luks2/luks2_reencrypt.c:4380 #, c-format msgid "Device %s is too small." msgstr "デバイス %s のサイズが小さすぎます。" -#: lib/setup.c:2158 lib/setup.c:2184 lib/setup.c:2580 lib/setup.c:2626 +#: lib/setup.c:2159 lib/setup.c:2185 lib/setup.c:2581 lib/setup.c:2627 #, c-format msgid "Cannot format device %s in use." msgstr "デバイス %s は使用中のためフォーマットできません。" -#: lib/setup.c:2161 lib/setup.c:2187 lib/setup.c:2583 lib/setup.c:2629 +#: lib/setup.c:2162 lib/setup.c:2188 lib/setup.c:2584 lib/setup.c:2630 #, c-format msgid "Cannot format device %s, permission denied." msgstr "デバイス %s は権限がないためフォーマットできません。" -#: lib/setup.c:2173 lib/setup.c:2600 lib/setup.c:2960 +#: lib/setup.c:2174 lib/setup.c:2601 lib/setup.c:2961 #, c-format msgid "Cannot format integrity for device %s." msgstr "デバイス %s を改ざん耐性がつくようフォーマットできません。" -#: lib/setup.c:2191 lib/setup.c:2637 +#: lib/setup.c:2192 lib/setup.c:2638 #, c-format msgid "Cannot format device %s." msgstr "デバイス %s をフォーマットできません。" -#: lib/setup.c:2234 +#: lib/setup.c:2235 msgid "Cannot get OPAL alignment parameters." msgstr "OPAL アライメントパラメータを取得できません。" -#: lib/setup.c:2243 +#: lib/setup.c:2244 msgid "Bogus OPAL logical block size." msgstr "OPAL 論理ブロックサイズがおかしいです。" -#: lib/setup.c:2249 +#: lib/setup.c:2250 msgid "Requested data offset is not compatible with OPAL block size." msgstr "要求されたデータオフセットが OPAL ブロックサイズと互換性がありません。" -#: lib/setup.c:2256 +#: lib/setup.c:2257 msgid "Requested data alignment is not compatible with OPAL alignment." msgstr "要求されたデータアライメントが OPAL アライメントと互換性がありません。" -#: lib/setup.c:2276 +#: lib/setup.c:2277 msgid "Data offset does not satisfy OPAL alignment requirements." msgstr "データオフセットが OPAL アライメント制約を満たしていません。" -#: lib/setup.c:2289 +#: lib/setup.c:2290 msgid "Requested data alignment does not satisfy locking range alignment requirements." msgstr "要求されたデータアライメントはロックレンジアライメントに対する要求を満たしません。" -#: lib/setup.c:2494 +#: lib/setup.c:2495 #, c-format msgid "Compensating device size by %<PRIu64> sectors to align it with OPAL alignment granularity." msgstr "OPAL のアライメント粒度に合わせるためにデバイスサイズが %<PRIu64> セクタ少なくなります。" -#: lib/setup.c:2552 lib/setup.c:4068 lib/setup.c:4223 lib/utils_wipe.c:368 +#: lib/setup.c:2553 lib/setup.c:4070 lib/setup.c:4253 lib/utils_wipe.c:368 #: lib/luks2/luks2_json_metadata.c:2703 lib/luks2/luks2_json_metadata.c:2955 #, c-format msgid "Failed to acquire OPAL lock on device %s." msgstr "デバイス %s の OPAL ロックを取得できませんでした。" -#: lib/setup.c:2561 +#: lib/setup.c:2562 msgid "Incorrect OPAL Admin key." msgstr "OPAL 管理者キーが正しくありません。" -#: lib/setup.c:2563 +#: lib/setup.c:2564 msgid "Cannot setup OPAL segment." msgstr "OPAL セグメントを設定できません。" -#: lib/setup.c:2633 +#: lib/setup.c:2634 #, c-format msgid "Cannot format device %s, OPAL device seems to be fully write-protected now." msgstr "デバイス %s をフォーマットできません。OPAL デバイスは完全に書き込み禁止になっているようです。" -#: lib/setup.c:2635 +#: lib/setup.c:2636 msgid "This is perhaps a bug in firmware. Run OPAL PSID reset and reconnect for recovery." msgstr "おそらくファームウェアのバグです。OPAL PSID リセットをして復旧のために再接続してください。" -#: lib/setup.c:2655 +#: lib/setup.c:2656 #, c-format msgid "Locking range %d reset on device %s failed." msgstr "ロックレンジ %d のリセットをデバイス %s に試みましたが失敗しました。" -#: lib/setup.c:2675 +#: lib/setup.c:2676 msgid "Can't format LOOPAES without device." msgstr "LOOPAES としてフォーマットするにはデバイスが必要です。" -#: lib/setup.c:2720 +#: lib/setup.c:2721 msgid "Can't format VERITY without device." msgstr "VERITY としてフォーマットするにはデバイスが必要です。" -#: lib/setup.c:2731 lib/verity/verity.c:101 +#: lib/setup.c:2732 lib/verity/verity.c:101 #, c-format msgid "Unsupported VERITY hash type %d." msgstr "VERITY ハッシュタイプ %d はサポートしていません。" -#: lib/setup.c:2737 lib/verity/verity.c:109 +#: lib/setup.c:2738 lib/verity/verity.c:109 msgid "Unsupported VERITY block size." msgstr "サポートしていない VERITY ブロックサイズです。" -#: lib/setup.c:2742 lib/verity/verity.c:74 +#: lib/setup.c:2743 lib/verity/verity.c:74 msgid "Unsupported VERITY hash offset." msgstr "サポートしていない VERITY ハッシュオフセットです。" -#: lib/setup.c:2747 +#: lib/setup.c:2748 msgid "Unsupported VERITY FEC offset." msgstr "サポートしていない VERITY FEC オフセットです。" -#: lib/setup.c:2771 +#: lib/setup.c:2772 msgid "Data area overlaps with hash area." msgstr "データ領域がハッシュ領域と重なっています。" -#: lib/setup.c:2796 +#: lib/setup.c:2797 msgid "Hash area overlaps with FEC area." msgstr "ハッシュ領域が FEC 領域と重なっています。" -#: lib/setup.c:2803 +#: lib/setup.c:2804 msgid "Data area overlaps with FEC area." msgstr "データ領域が FEC 領域と重なっています。" -#: lib/setup.c:2939 +#: lib/setup.c:2940 #, c-format msgid "WARNING: Requested tag size %d bytes differs from %s size output (%d bytes).\n" msgstr "警告: 指定されたタグのサイズ %d バイトが %s の出力サイズと異なります (%d バイト)。\n" -#: lib/setup.c:3018 +#: lib/setup.c:3019 #, c-format msgid "Unknown crypt device type %s requested." msgstr "不明な暗号デバイスタイプ %s が指定されました。" -#: lib/setup.c:3325 lib/setup.c:3404 lib/setup.c:3417 +#: lib/setup.c:3326 lib/setup.c:3405 lib/setup.c:3418 #, c-format msgid "Unsupported parameters on device %s." msgstr "デバイス %s のパラメータはサポートしていません。" -#: lib/setup.c:3331 lib/setup.c:3424 lib/luks2/luks2_reencrypt.c:2908 -#: lib/luks2/luks2_reencrypt.c:3145 lib/luks2/luks2_reencrypt.c:3540 +#: lib/setup.c:3332 lib/setup.c:3425 lib/luks2/luks2_reencrypt.c:2923 +#: lib/luks2/luks2_reencrypt.c:3160 lib/luks2/luks2_reencrypt.c:3555 #, c-format msgid "Mismatching parameters on device %s." msgstr "デバイス %s のパラメータがミスマッチしています。" -#: lib/setup.c:3448 +#: lib/setup.c:3449 msgid "Crypt devices mismatch." msgstr "Crypt デバイスが一致しません。" -#: lib/setup.c:3485 lib/setup.c:3490 lib/luks2/luks2_reencrypt.c:2390 -#: lib/luks2/luks2_reencrypt.c:2924 lib/luks2/luks2_reencrypt.c:4109 +#: lib/setup.c:3486 lib/setup.c:3491 lib/luks2/luks2_reencrypt.c:2405 +#: lib/luks2/luks2_reencrypt.c:2939 lib/luks2/luks2_reencrypt.c:4124 #, c-format msgid "Failed to reload device %s." msgstr "デバイス %s のリロードに失敗しました。" -#: lib/setup.c:3496 lib/setup.c:3502 lib/luks2/luks2_reencrypt.c:2361 -#: lib/luks2/luks2_reencrypt.c:2368 lib/luks2/luks2_reencrypt.c:2938 +#: lib/setup.c:3497 lib/setup.c:3503 lib/luks2/luks2_reencrypt.c:2376 +#: lib/luks2/luks2_reencrypt.c:2383 lib/luks2/luks2_reencrypt.c:2953 #, c-format msgid "Failed to suspend device %s." msgstr "デバイス %s のサスペンドに失敗しました。" -#: lib/setup.c:3508 lib/luks2/luks2_reencrypt.c:2375 -#: lib/luks2/luks2_reencrypt.c:2959 lib/luks2/luks2_reencrypt.c:4022 -#: lib/luks2/luks2_reencrypt.c:4113 +#: lib/setup.c:3509 lib/luks2/luks2_reencrypt.c:2390 +#: lib/luks2/luks2_reencrypt.c:2974 lib/luks2/luks2_reencrypt.c:4037 +#: lib/luks2/luks2_reencrypt.c:4128 #, c-format msgid "Failed to resume device %s." msgstr "デバイス %s のリジュームに失敗しました。" -#: lib/setup.c:3523 +#: lib/setup.c:3524 #, c-format msgid "Fatal error while reloading device %s (on top of device %s)." msgstr "デバイス %s のリロード中に致命的なエラー(デバイス %s の上で)。" -#: lib/setup.c:3526 lib/setup.c:3528 +#: lib/setup.c:3527 lib/setup.c:3529 #, c-format msgid "Failed to switch device %s to dm-error." msgstr "デバイス %s を dm-error にスイッチできません。" -#: lib/setup.c:3568 +#: lib/setup.c:3569 msgid "Can not resize LUKS2 device with static size." msgstr "静的サイズの LUKS2 デバイスはリサイズできません。" -#: lib/setup.c:3613 +#: lib/setup.c:3614 msgid "Cannot resize loop device." msgstr "ループデバイスはリサイズできません。" -#: lib/setup.c:3657 +#: lib/setup.c:3658 msgid "WARNING: Maximum size already set or kernel doesn't support resize.\n" msgstr "警告: 最大サイズが既に設定済かカーネルがリサイズをサポートしていません。\n" -#: lib/setup.c:3723 +#: lib/setup.c:3724 msgid "Resize failed, the kernel doesn't support it." msgstr "リサイズに失敗しました。カーネルがサポートしていません。" -#: lib/setup.c:3755 +#: lib/setup.c:3756 msgid "Do you really want to change UUID of device?" msgstr "デバイスの UUID を本当に変更してもいいですか？" -#: lib/setup.c:3847 +#: lib/setup.c:3848 msgid "Header backup file does not contain compatible LUKS header." msgstr "ヘッダのバックアップファイルの中味が LUKS ヘッダと互換性がありません。" -#: lib/setup.c:3956 +#: lib/setup.c:3958 #, c-format msgid "Volume %s is not active." msgstr "ボリューム %s はアクティブではありません。" -#: lib/setup.c:4022 +#: lib/setup.c:4024 #, c-format msgid "Volume %s is already suspended." msgstr "ボリューム %s は既に停止されています。" -#: lib/setup.c:4050 +#: lib/setup.c:4052 #, c-format msgid "Suspend is not supported for device %s." msgstr "デバイス %s の停止はサポートされていません。" -#: lib/setup.c:4052 lib/setup.c:4060 +#: lib/setup.c:4054 lib/setup.c:4062 #, c-format msgid "Error during suspending device %s." msgstr "デバイス %s 停止中にエラー。" -#: lib/setup.c:4074 +#: lib/setup.c:4076 #, c-format msgid "Device %s was suspended but hardware OPAL device cannot be locked." msgstr "デバイス %s は停止されましたが、ハードウェア OPAL デバイスはロックできません。" -#: lib/setup.c:4106 lib/setup.c:4250 +#: lib/setup.c:4108 lib/setup.c:4280 #, c-format msgid "Resume is not supported for device %s." msgstr "デバイス %s は再開をサポートしていません。" -#: lib/setup.c:4108 lib/setup.c:4241 lib/setup.c:4252 +#: lib/setup.c:4110 lib/setup.c:4271 lib/setup.c:4282 #, c-format msgid "Error during resuming device %s." msgstr "デバイス %s の再開中にエラー。" -#: lib/setup.c:4131 -msgid "Failed to link key to the specified keyring." -msgstr "キーを指定されたキーリングにリンクできません。" - -#: lib/setup.c:4150 +#: lib/setup.c:4129 msgid "Failed to unlink volume key from user specified keyring." msgstr "ボリュームキーを指定されたキーリングからアンリンクできません。" -#: lib/setup.c:4213 lib/setup.c:4934 lib/setup.c:5549 +#: lib/setup.c:4244 lib/setup.c:4966 lib/setup.c:5787 msgid "Failed to link volume key in user defined keyring." msgstr "ボリュームキーを指定されたキーリングにリンクできません。" -#: lib/setup.c:4313 src/cryptsetup.c:2755 +#: lib/setup.c:4345 src/cryptsetup.c:2852 #, c-format msgid "Volume %s is not suspended." msgstr "ボリューム %s は停止されていません。" -#: lib/setup.c:4414 lib/setup.c:5310 lib/setup.c:5317 lib/setup.c:7176 -#: lib/setup.c:7198 lib/setup.c:7247 src/cryptsetup.c:2265 +#: lib/setup.c:4446 lib/setup.c:5106 lib/setup.c:5523 lib/setup.c:5542 +#: lib/setup.c:7416 lib/setup.c:7438 lib/setup.c:7487 src/cryptsetup.c:2362 msgid "Volume key does not match the volume." msgstr "ボリュームキーがボリュームに合いません。" -#: lib/setup.c:4568 +#: lib/setup.c:4600 msgid "Failed to swap new key slot." msgstr "新しいキースロットを交換できませんでした。" -#: lib/setup.c:4666 +#: lib/setup.c:4698 #, c-format msgid "Key slot %d is invalid." msgstr "キースロット %d は不正です。" -#: lib/setup.c:4672 src/cryptsetup.c:1975 src/cryptsetup.c:2467 -#: src/cryptsetup.c:3149 src/cryptsetup.c:3209 +#: lib/setup.c:4704 src/cryptsetup.c:2072 src/cryptsetup.c:2564 +#: src/cryptsetup.c:3246 src/cryptsetup.c:3306 #, c-format msgid "Keyslot %d is not active." msgstr "キースロット %d は非アクティブです。" -#: lib/setup.c:4691 +#: lib/setup.c:4723 msgid "Device header overlaps with data area." msgstr "デバイスヘッダがデータ領域に重なっています。" -#: lib/setup.c:5041 +#: lib/setup.c:5076 lib/setup.c:5176 msgid "Reencryption in-progress. Cannot activate device." msgstr "既に再暗号化中です。デバイスをアクティベートできません。" -#: lib/setup.c:5043 lib/luks2/luks2_json_metadata.c:2861 -#: lib/luks2/luks2_reencrypt.c:3646 +#: lib/setup.c:5078 lib/setup.c:5178 lib/luks2/luks2_json_metadata.c:2861 +#: lib/luks2/luks2_reencrypt.c:3661 msgid "Failed to get reencryption lock." msgstr "再暗号化ロックを取得できません。" -#: lib/setup.c:5056 lib/luks2/luks2_reencrypt.c:3665 +#: lib/setup.c:5090 +msgid "LUKS2 reencryption recovery using volume key(s) failed." +msgstr "ボリュームキーを使った LUKS2 の再暗号化のリカバリに失敗しました。" + +#: lib/setup.c:5142 lib/setup.c:5232 +msgid "Failed to link volume keys in user defined keyring." +msgstr "ボリュームキーをユーザが定義したキーリングにリンクできません。" + +#: lib/setup.c:5191 lib/luks2/luks2_reencrypt.c:3680 msgid "LUKS2 reencryption recovery failed." msgstr "LUKS2 の再暗号化は既に初期化されました。" -#: lib/setup.c:5228 lib/setup.c:5328 lib/setup.c:5386 +#: lib/setup.c:5439 lib/setup.c:5553 lib/setup.c:5610 msgid "Device type is not properly initialized." msgstr "デバイスタイプが正しく初期化されていません。" -#: lib/setup.c:5283 +#: lib/setup.c:5494 #, c-format msgid "Device %s already exists." msgstr "デバイス %s は既に存在します。" -#: lib/setup.c:5290 +#: lib/setup.c:5501 #, c-format msgid "Cannot use device %s, name is invalid or still in use." msgstr "デバイス %s を使えません。名前が不正か使用中です。" -#: lib/setup.c:5306 +#: lib/setup.c:5519 msgid "Incorrect volume key specified for plain device." msgstr "正しくないボリュームキーがプレーンデバイスに指定されました。" -#: lib/setup.c:5424 +#: lib/setup.c:5533 +msgid "Reencryption volume keys do not match the volume." +msgstr "再暗号化ボリュームキーがボリュームに合いません。" + +#: lib/setup.c:5646 msgid "Kernel keyring is not supported by the kernel." msgstr "カーネルがカーネルキーリングをサポートしていません。" -#: lib/setup.c:5428 +#: lib/setup.c:5650 msgid "Kernel keyring missing: required for passing signature to kernel." msgstr "署名をカーネルに渡すのに必要なカーネルキーリングをカーネルがサポートしていません。" -#: lib/setup.c:5668 +#: lib/setup.c:5908 msgid "Incorrect root hash specified for verity device." msgstr "正しくないルートハッシュが verity デバイスに指定されました。" -#: lib/setup.c:5711 +#: lib/setup.c:5951 msgid "OPAL does not support deferred deactivation." msgstr "OPAL は遅延デアクティベーションをサポートしていません。" -#: lib/setup.c:5727 +#: lib/setup.c:5967 #, c-format msgid "Could not cancel deferred remove from device %s." msgstr "デバイス %s からの遅延削除をキャンセルできませんでした。" -#: lib/setup.c:5734 lib/setup.c:5750 lib/luks2/luks2_json_metadata.c:2915 +#: lib/setup.c:5974 lib/setup.c:5990 lib/luks2/luks2_json_metadata.c:2915 #: src/utils_reencrypt.c:116 #, c-format msgid "Device %s is still in use." msgstr "デバイス %s は使用中です。" -#: lib/setup.c:5759 +#: lib/setup.c:5999 #, c-format msgid "Invalid device %s." msgstr "デバイス %s は不正です。" -#: lib/setup.c:5899 +#: lib/setup.c:6139 msgid "Volume key buffer too small." msgstr "ボリュームキーのバッファが小さすぎます。" -#: lib/setup.c:5916 +#: lib/setup.c:6156 msgid "Cannot retrieve volume key for LUKS2 device." msgstr "LUKS2 デバイス向けのボリュームキーが取得できません。" -#: lib/setup.c:5925 +#: lib/setup.c:6165 msgid "Cannot retrieve volume key for LUKS1 device." msgstr "LUKS1 デバイス向けのボリュームキーが取得できません。" -#: lib/setup.c:5935 +#: lib/setup.c:6175 msgid "Cannot retrieve volume key for plain device." msgstr "プレーンデバイス向けのボリュームキーが取得できません。" -#: lib/setup.c:5943 +#: lib/setup.c:6183 msgid "Cannot retrieve root hash for verity device." msgstr "verity デバイスのルートハッシュが読み出せません。" -#: lib/setup.c:5950 +#: lib/setup.c:6190 msgid "Cannot retrieve volume key for BITLK device." msgstr "BITLK デバイス向けのボリュームキーが取得できません。" -#: lib/setup.c:5955 +#: lib/setup.c:6195 msgid "Cannot retrieve volume key for FVAULT2 device." msgstr "FVAULT2 デバイス向けのボリュームキーが取得できません。" -#: lib/setup.c:5957 +#: lib/setup.c:6197 #, c-format msgid "This operation is not supported for %s crypt device." msgstr "この操作は %s 暗号化デバイスではサポートされていません。" -#: lib/setup.c:6141 lib/setup.c:6152 +#: lib/setup.c:6381 lib/setup.c:6392 msgid "Dump operation is not supported for this device type." msgstr "このデバイスタイプはダンプ操作をサポートしていません。" -#: lib/setup.c:6511 +#: lib/setup.c:6751 #, c-format msgid "Data offset is not multiple of %u bytes." msgstr "データオフセットが %u バイトの倍数である必要があります。" -#: lib/setup.c:6819 +#: lib/setup.c:7059 #, c-format msgid "Cannot convert device %s which is still in use." msgstr "使用中のデバイス %s を変換できません。" -#: lib/setup.c:7117 lib/setup.c:7256 +#: lib/setup.c:7357 lib/setup.c:7496 #, c-format msgid "Failed to assign keyslot %u as the new volume key." msgstr "新しいボリュームキー向けのキースロット %u を確保できません。" -#: lib/setup.c:7141 +#: lib/setup.c:7381 msgid "Failed to initialize default LUKS2 keyslot parameters." msgstr "デフォルト LUKS2 キースロットパラメータを初期化できません。" -#: lib/setup.c:7147 +#: lib/setup.c:7387 #, c-format msgid "Failed to assign keyslot %d to digest." msgstr "ダイジェストするためのキースロット %d が確保できません。" -#: lib/setup.c:7372 +#: lib/setup.c:7612 msgid "Cannot add key slot, all slots disabled and no volume key provided." msgstr "キースロットを追加できません。全てのスロットが無効でボリュームキーが渡されませんでした。" -#: lib/setup.c:7441 lib/verity/verity.c:343 +#: lib/setup.c:7681 lib/verity/verity.c:343 msgid "Failed to load key in kernel keyring." msgstr "キーをカーネルキーリングにロードできません。" -#: lib/setup.c:7559 +#: lib/setup.c:7799 msgid "Failed to unlink volume key from thread keyring." msgstr "ボリュームキーをスレッドキーリングからアンリンクできません。" -#: lib/setup.c:7586 +#: lib/setup.c:7843 #, c-format msgid "Could not find keyring described by \"%s\"." msgstr "キーリング \"%s\" が見つかりませんでした。" -#: lib/setup.c:7645 +#: lib/setup.c:7908 msgid "Failed to acquire global memory-hard access serialization lock." msgstr "グローバル memory-hard アクセス直列化ロックが取れません。" -#: lib/utils.c:205 lib/tcrypt/tcrypt.c:503 +#: lib/utils.c:215 lib/tcrypt/tcrypt.c:503 msgid "Failed to open key file." msgstr "キーファイルがオープンできません。" -#: lib/utils.c:210 +#: lib/utils.c:220 msgid "Cannot read keyfile from a terminal." msgstr "ターミナルからキーファイルを読みこめません。" -#: lib/utils.c:226 +#: lib/utils.c:236 msgid "Failed to stat key file." msgstr "キーファイルを stat() できません。" -#: lib/utils.c:234 lib/utils.c:255 +#: lib/utils.c:244 lib/utils.c:265 msgid "Cannot seek to requested keyfile offset." msgstr "指定されたキーファイルオフセットにシークできません。" -#: lib/utils.c:249 lib/utils.c:264 src/utils_password.c:226 +#: lib/utils.c:259 lib/utils.c:274 src/utils_password.c:226 #: src/utils_password.c:238 msgid "Out of memory while reading passphrase." msgstr "パスフレーズ読み込み中にメモリが不足しました。" -#: lib/utils.c:284 +#: lib/utils.c:294 msgid "Error reading passphrase." msgstr "パスフレーズの読み込みでエラー。" -#: lib/utils.c:301 +#: lib/utils.c:311 msgid "Nothing to read on input." msgstr "読もうとしたら入力が空です。" -#: lib/utils.c:308 +#: lib/utils.c:318 msgid "Maximum keyfile size exceeded." msgstr "キーファイルが最大サイズを超えています。" -#: lib/utils.c:313 +#: lib/utils.c:323 msgid "Cannot read requested amount of data." msgstr "指定されたサイズのデータを読み込めません。" #: lib/utils_device.c:213 lib/utils_storage_wrappers.c:110 -#: lib/luks1/keyencryption.c:91 src/utils_reencrypt.c:1461 +#: lib/luks1/keyencryption.c:91 src/utils_reencrypt.c:1470 #, c-format msgid "Device %s does not exist or access denied." msgstr "デバイス %s は存在しないかアクセスが拒否されました。" @@ -1068,7 +1076,7 @@ msgstr "LUKS 暗号モード %s は不正です。" msgid "LUKS hash %s is invalid." msgstr "LUKS ハッシュ %s は不正です。" -#: lib/luks1/keymanage.c:574 src/cryptsetup.c:1352 +#: lib/luks1/keymanage.c:574 src/cryptsetup.c:1360 msgid "No known problems detected for LUKS header." msgstr "LUKS ヘッダに既知の不具合は検出されませんでした。" @@ -1161,11 +1169,11 @@ msgstr "TCRYPT パスフレーズの最大長 (%zu) を超えました。" msgid "PBKDF2 hash algorithm %s not available, skipping." msgstr "PBKDF2 ハッシュアルゴリズム %s が利用できないのでスキップします。" -#: lib/tcrypt/tcrypt.c:621 src/cryptsetup.c:1227 +#: lib/tcrypt/tcrypt.c:621 src/cryptsetup.c:1235 msgid "Required kernel crypto interface not available." msgstr "必要なカーネル crypto インターフェースが使用できません。" -#: lib/tcrypt/tcrypt.c:623 src/cryptsetup.c:1229 +#: lib/tcrypt/tcrypt.c:623 src/cryptsetup.c:1237 msgid "Ensure you have algif_skcipher kernel module loaded." msgstr "algif_skcipher カーネルモジュールをロードしてください。" @@ -1482,17 +1490,17 @@ msgstr "カーネルが dm-integrity 固定メタデータアラインメント msgid "Kernel refuses to activate insecure recalculate option (see legacy activation options to override)." msgstr "カーネルが安全でない再計算オプションを拒否しました (レガジーアクティベーションオプションでオーバーライドできます)。" -#: lib/luks2/luks2_disk_metadata.c:391 lib/luks2/luks2_json_metadata.c:1197 +#: lib/luks2/luks2_disk_metadata.c:392 lib/luks2/luks2_json_metadata.c:1197 #: lib/luks2/luks2_json_metadata.c:1520 #, c-format msgid "Failed to acquire write lock on device %s." msgstr "デバイス %s の書き込みのためのロックを取得できませんでした。" -#: lib/luks2/luks2_disk_metadata.c:400 +#: lib/luks2/luks2_disk_metadata.c:401 msgid "Detected attempt for concurrent LUKS2 metadata update. Aborting operation." msgstr "LUKS2 メタデータの更新の並列実行をしそうになりました。実行を中止します。" -#: lib/luks2/luks2_disk_metadata.c:699 lib/luks2/luks2_disk_metadata.c:720 +#: lib/luks2/luks2_disk_metadata.c:710 lib/luks2/luks2_disk_metadata.c:731 msgid "" "Device contains ambiguous signatures, cannot auto-recover LUKS2.\n" "Please run \"cryptsetup repair\" for recovery." @@ -1577,16 +1585,16 @@ msgstr "" msgid "Ignored unknown flag %s." msgstr "不明なフラグ %s を無視しました。" -#: lib/luks2/luks2_json_metadata.c:2525 lib/luks2/luks2_reencrypt.c:2090 +#: lib/luks2/luks2_json_metadata.c:2525 lib/luks2/luks2_reencrypt.c:2105 #, c-format msgid "Missing key for dm-crypt segment %u" msgstr "dm-crypt セグメント %u にキーがありません" -#: lib/luks2/luks2_json_metadata.c:2537 lib/luks2/luks2_reencrypt.c:2104 +#: lib/luks2/luks2_json_metadata.c:2537 lib/luks2/luks2_reencrypt.c:2119 msgid "Failed to set dm-crypt segment." msgstr "dm-crypt セグメントの設定に失敗しました。" -#: lib/luks2/luks2_json_metadata.c:2543 lib/luks2/luks2_reencrypt.c:2110 +#: lib/luks2/luks2_json_metadata.c:2543 lib/luks2/luks2_reencrypt.c:2125 msgid "Failed to set dm-linear segment." msgstr "dm-linear セグメントの設定に失敗しました。" @@ -1623,7 +1631,7 @@ msgstr "dm-integrity デバイスがデータセクタに対して期待通り msgid "Reencryption in-progress. Cannot deactivate device." msgstr "再暗号化が実行中なのでデバイスのデアクティベートできません。. Cannot deactivate device." -#: lib/luks2/luks2_json_metadata.c:2870 lib/luks2/luks2_reencrypt.c:4159 +#: lib/luks2/luks2_json_metadata.c:2870 lib/luks2/luks2_reencrypt.c:4174 #, c-format msgid "Failed to replace suspended device %s with dm-error target." msgstr "サスペンドされたデバイス %s を dm-error ターゲットで置き換えられません。" @@ -1667,7 +1675,7 @@ msgid "Cannot use %s-%s cipher for keyslot encryption." msgstr "キースロットの暗号化に %s- %s 暗号は使えません。" #: lib/luks2/luks2_keyslot_luks2.c:285 lib/luks2/luks2_keyslot_luks2.c:404 -#: lib/luks2/luks2_keyslot_reenc.c:447 lib/luks2/luks2_reencrypt.c:2714 +#: lib/luks2/luks2_keyslot_reenc.c:447 lib/luks2/luks2_reencrypt.c:2729 #, c-format msgid "Hash algorithm %s is not available." msgstr "ハッシュアルゴリズム %s が利用できません。" @@ -1702,7 +1710,7 @@ msgstr "UUID が %s のデバイスの状態が確認できません。" msgid "Unable to convert header with LUKSMETA additional metadata." msgstr "LUKSMETA メタデータ付きのヘッダは変換できません。" -#: lib/luks2/luks2_luks1_convert.c:602 lib/luks2/luks2_reencrypt.c:3795 +#: lib/luks2/luks2_luks1_convert.c:602 lib/luks2/luks2_reencrypt.c:3810 #, c-format msgid "Unable to use cipher specification %s-%s for LUKS2." msgstr "暗号スペック %s-%s は LUKS2 に使えません。" @@ -1760,252 +1768,252 @@ msgstr "LUKS1 形式に変換できません - スロット %u が(最大個数 msgid "Cannot convert to LUKS1 format - keyslot %u is not LUKS1 compatible." msgstr "LUKS1 形式に変換できません - キースロット %u が LUKS1 と互換ではありません。" -#: lib/luks2/luks2_reencrypt.c:1181 +#: lib/luks2/luks2_reencrypt.c:1196 #, c-format msgid "Hotzone size must be multiple of calculated zone alignment (%zu bytes)." msgstr "ホットゾーンサイズは計算されたゾーンアライメントの倍数である必要がありす (%zu バイト)." -#: lib/luks2/luks2_reencrypt.c:1186 +#: lib/luks2/luks2_reencrypt.c:1201 #, c-format msgid "Device size must be multiple of calculated zone alignment (%zu bytes)." msgstr "デバイスサイズが計算ゾーンアライメント (%zu バイト) に合っていません。" -#: lib/luks2/luks2_reencrypt.c:1393 lib/luks2/luks2_reencrypt.c:1580 -#: lib/luks2/luks2_reencrypt.c:1663 lib/luks2/luks2_reencrypt.c:1705 -#: lib/luks2/luks2_reencrypt.c:3954 +#: lib/luks2/luks2_reencrypt.c:1408 lib/luks2/luks2_reencrypt.c:1595 +#: lib/luks2/luks2_reencrypt.c:1678 lib/luks2/luks2_reencrypt.c:1720 +#: lib/luks2/luks2_reencrypt.c:3969 msgid "Failed to initialize old segment storage wrapper." msgstr "古いセグメントのストレージラッパの初期化に失敗しました。" -#: lib/luks2/luks2_reencrypt.c:1407 lib/luks2/luks2_reencrypt.c:1558 +#: lib/luks2/luks2_reencrypt.c:1422 lib/luks2/luks2_reencrypt.c:1573 msgid "Failed to initialize new segment storage wrapper." msgstr "新しいセグメントのストレージラッパの初期化に失敗しました。" -#: lib/luks2/luks2_reencrypt.c:1534 lib/luks2/luks2_reencrypt.c:3966 +#: lib/luks2/luks2_reencrypt.c:1549 lib/luks2/luks2_reencrypt.c:3981 msgid "Failed to initialize hotzone protection." msgstr "ホットゾーン保護の初期化に失敗しました。" -#: lib/luks2/luks2_reencrypt.c:1607 +#: lib/luks2/luks2_reencrypt.c:1622 msgid "Failed to read checksums for current hotzone." msgstr "現在のホットゾーンのチェックサムを読み込めません。" -#: lib/luks2/luks2_reencrypt.c:1614 lib/luks2/luks2_reencrypt.c:3980 +#: lib/luks2/luks2_reencrypt.c:1629 lib/luks2/luks2_reencrypt.c:3995 #, c-format msgid "Failed to read hotzone area starting at %<PRIu64>." msgstr "%<PRIu64> から始めるホットゾーンエリアを読み込めません。" -#: lib/luks2/luks2_reencrypt.c:1633 +#: lib/luks2/luks2_reencrypt.c:1648 #, c-format msgid "Failed to decrypt sector %zu." msgstr "セクタ %zu を復号できません。" -#: lib/luks2/luks2_reencrypt.c:1639 +#: lib/luks2/luks2_reencrypt.c:1654 #, c-format msgid "Failed to recover sector %zu." msgstr "セクタ %zu を復元できません。" -#: lib/luks2/luks2_reencrypt.c:2203 +#: lib/luks2/luks2_reencrypt.c:2218 #, c-format msgid "Source and target device sizes don't match. Source %<PRIu64>, target: %<PRIu64>." msgstr "ソースとターゲットデバイスのサイズが一致しません。ソース %<PRIu64>, ターゲット: %<PRIu64>." -#: lib/luks2/luks2_reencrypt.c:2301 +#: lib/luks2/luks2_reencrypt.c:2316 #, c-format msgid "Failed to activate hotzone device %s." msgstr "ホットゾーンデバイス %s がアクティベートできません。" -#: lib/luks2/luks2_reencrypt.c:2318 +#: lib/luks2/luks2_reencrypt.c:2333 #, c-format msgid "Failed to activate overlay device %s with actual origin table." msgstr "実際の origin table があるオーバーレイデバイス %s をアクティベートできません。" -#: lib/luks2/luks2_reencrypt.c:2325 +#: lib/luks2/luks2_reencrypt.c:2340 #, c-format msgid "Failed to load new mapping for device %s." msgstr "デバイス %s の新しいマッピングをロードできません。" -#: lib/luks2/luks2_reencrypt.c:2396 +#: lib/luks2/luks2_reencrypt.c:2411 msgid "Failed to refresh reencryption devices stack." msgstr "再暗号化デバイススタックのリフレッシュに失敗しました。" -#: lib/luks2/luks2_reencrypt.c:2596 +#: lib/luks2/luks2_reencrypt.c:2611 msgid "Failed to set new keyslots area size." msgstr "新しいキースロットエリアサイズを設定できません。" -#: lib/luks2/luks2_reencrypt.c:2732 +#: lib/luks2/luks2_reencrypt.c:2747 #, c-format msgid "Data shift value is not aligned to encryption sector size (%<PRIu32> bytes)." msgstr "データシフト値が要求された暗号化セクタサイズにアラインされていません(%<PRIu32> バイト)。" -#: lib/luks2/luks2_reencrypt.c:2769 src/utils_reencrypt.c:189 +#: lib/luks2/luks2_reencrypt.c:2784 src/utils_reencrypt.c:189 #, c-format msgid "Unsupported resilience mode %s" msgstr "耐性(resilience)モード %s はサポートしていません" -#: lib/luks2/luks2_reencrypt.c:2806 +#: lib/luks2/luks2_reencrypt.c:2821 msgid "Moved segment size can not be greater than data shift value." msgstr "移動されるセグメントサイズはデータシフト値より大きくできません。" -#: lib/luks2/luks2_reencrypt.c:2848 +#: lib/luks2/luks2_reencrypt.c:2863 msgid "Invalid reencryption resilience parameters." msgstr "不正な再暗号化耐性パラメータを要求されました。" -#: lib/luks2/luks2_reencrypt.c:2870 +#: lib/luks2/luks2_reencrypt.c:2885 #, c-format msgid "Moved segment too large. Requested size %<PRIu64>, available space for: %<PRIu64>." msgstr "移動されるセグメントが大きすぎます。要求されているサイズは %<PRIu64> ですが、使えるサイズは %<PRIu64> です。" -#: lib/luks2/luks2_reencrypt.c:2957 +#: lib/luks2/luks2_reencrypt.c:2972 msgid "Failed to clear table." msgstr "テーブルをクリアできません。" -#: lib/luks2/luks2_reencrypt.c:3043 +#: lib/luks2/luks2_reencrypt.c:3058 msgid "Reduced data size is larger than real device size." msgstr "小さくしたデータサイズが実際のデバイスサイズより大きいです。" -#: lib/luks2/luks2_reencrypt.c:3050 +#: lib/luks2/luks2_reencrypt.c:3065 #, c-format msgid "Data device is not aligned to encryption sector size (%<PRIu32> bytes)." msgstr "データデバイスが暗号化セクタサイズにアラインされていません(%<PRIu32> バイト)." -#: lib/luks2/luks2_reencrypt.c:3084 +#: lib/luks2/luks2_reencrypt.c:3099 #, c-format msgid "Data shift (%<PRIu64> sectors) is less than future data offset (%<PRIu64> sectors)." msgstr "データシフト (%<PRIu64> セクタ) が今後のデータオフセットより少ないです (%<PRIu64> セクタ)。" -#: lib/luks2/luks2_reencrypt.c:3091 lib/luks2/luks2_reencrypt.c:3589 -#: lib/luks2/luks2_reencrypt.c:3610 +#: lib/luks2/luks2_reencrypt.c:3106 lib/luks2/luks2_reencrypt.c:3604 +#: lib/luks2/luks2_reencrypt.c:3625 #, c-format msgid "Failed to open %s in exclusive mode (already mapped or mounted)." msgstr "デバイス %s を排他モードでオープンでません (既にマップされているかマウントされています)。" -#: lib/luks2/luks2_reencrypt.c:3280 +#: lib/luks2/luks2_reencrypt.c:3295 msgid "Device not marked for LUKS2 reencryption." msgstr "デバイスは LUKS2 再暗号化向けにマークされていません。" -#: lib/luks2/luks2_reencrypt.c:3297 lib/luks2/luks2_reencrypt.c:4271 +#: lib/luks2/luks2_reencrypt.c:3312 lib/luks2/luks2_reencrypt.c:4286 msgid "Failed to load LUKS2 reencryption context." msgstr "LUKS2 再暗号化コンテキストをロードできません。" -#: lib/luks2/luks2_reencrypt.c:3387 +#: lib/luks2/luks2_reencrypt.c:3402 msgid "Failed to get reencryption state." msgstr "再暗号化状態を取得できません。" -#: lib/luks2/luks2_reencrypt.c:3391 lib/luks2/luks2_reencrypt.c:3705 +#: lib/luks2/luks2_reencrypt.c:3406 lib/luks2/luks2_reencrypt.c:3720 msgid "Device is not in reencryption." msgstr "デバイス %s は再暗号化中ではありません。" -#: lib/luks2/luks2_reencrypt.c:3398 lib/luks2/luks2_reencrypt.c:3712 +#: lib/luks2/luks2_reencrypt.c:3413 lib/luks2/luks2_reencrypt.c:3727 msgid "Reencryption process is already running." msgstr "既に再暗号化中です。" -#: lib/luks2/luks2_reencrypt.c:3400 lib/luks2/luks2_reencrypt.c:3714 +#: lib/luks2/luks2_reencrypt.c:3415 lib/luks2/luks2_reencrypt.c:3729 msgid "Failed to acquire reencryption lock." msgstr "再暗号化ロックを取得できません。" -#: lib/luks2/luks2_reencrypt.c:3418 +#: lib/luks2/luks2_reencrypt.c:3433 msgid "Cannot proceed with reencryption. Run reencryption recovery first." msgstr "再暗号化を開始できません。再暗号化のリカバリを先にしてください。" -#: lib/luks2/luks2_reencrypt.c:3553 +#: lib/luks2/luks2_reencrypt.c:3568 msgid "Active device size and requested reencryption size don't match." msgstr "実際のデバイスサイズと要求された再暗号化サイズが一致しません。" -#: lib/luks2/luks2_reencrypt.c:3567 +#: lib/luks2/luks2_reencrypt.c:3582 msgid "Illegal device size requested in reencryption parameters." msgstr "再暗号化のパラメータとして不正なデバイスサイズが要求されました。" -#: lib/luks2/luks2_reencrypt.c:3644 +#: lib/luks2/luks2_reencrypt.c:3659 msgid "Reencryption in-progress. Cannot perform recovery." msgstr "既に再暗号化中です。復元を実行できません。" -#: lib/luks2/luks2_reencrypt.c:3812 +#: lib/luks2/luks2_reencrypt.c:3827 msgid "LUKS2 reencryption already initialized in metadata." msgstr "メタデータの LUKS2 の再暗号化は既に初期化されました。" -#: lib/luks2/luks2_reencrypt.c:3819 +#: lib/luks2/luks2_reencrypt.c:3834 msgid "Failed to initialize LUKS2 reencryption in metadata." msgstr "メタデータの LUKS2 再暗号化に失敗しました。" -#: lib/luks2/luks2_reencrypt.c:3872 lib/luks2/luks2_reencrypt.c:3907 +#: lib/luks2/luks2_reencrypt.c:3887 lib/luks2/luks2_reencrypt.c:3922 msgid "Reencryption is not supported for DAX (persistent memory) devices." msgstr "再暗号化は DAX デバイスではサポートされていません。" -#: lib/luks2/luks2_reencrypt.c:3879 +#: lib/luks2/luks2_reencrypt.c:3894 msgid "Failed to read passphrase from keyring." msgstr "キーリングからパスフレーズが読み出せません。" -#: lib/luks2/luks2_reencrypt.c:3936 +#: lib/luks2/luks2_reencrypt.c:3951 msgid "Failed to set device segments for next reencryption hotzone." msgstr "デバイスセグメントの次の再暗号化ホットゾーンの設定に失敗しました。" -#: lib/luks2/luks2_reencrypt.c:3988 +#: lib/luks2/luks2_reencrypt.c:4003 msgid "Failed to write reencryption resilience metadata." msgstr "再暗号化した耐性用メタデータを書き込めません。" -#: lib/luks2/luks2_reencrypt.c:3995 +#: lib/luks2/luks2_reencrypt.c:4010 msgid "Decryption failed." msgstr "復号に失敗しました。" -#: lib/luks2/luks2_reencrypt.c:4000 +#: lib/luks2/luks2_reencrypt.c:4015 #, c-format msgid "Failed to write hotzone area starting at %<PRIu64>." msgstr "%<PRIu64> から始まるホットゾーンエリアに書き込めません。" -#: lib/luks2/luks2_reencrypt.c:4005 +#: lib/luks2/luks2_reencrypt.c:4020 msgid "Failed to sync data." msgstr "データを sync できません。" -#: lib/luks2/luks2_reencrypt.c:4013 +#: lib/luks2/luks2_reencrypt.c:4028 msgid "Failed to update metadata after current reencryption hotzone completed." msgstr "現在のホットゾーンの再暗号化完了後にメタデータが更新できません。" -#: lib/luks2/luks2_reencrypt.c:4102 +#: lib/luks2/luks2_reencrypt.c:4117 msgid "Failed to write LUKS2 metadata." msgstr "LUKS2 メタデータが書き込めません。" -#: lib/luks2/luks2_reencrypt.c:4125 +#: lib/luks2/luks2_reencrypt.c:4140 msgid "Failed to wipe unused data device area." msgstr "未使用データデバイス領域を消せません。" -#: lib/luks2/luks2_reencrypt.c:4131 +#: lib/luks2/luks2_reencrypt.c:4146 #, c-format msgid "Failed to remove unused (unbound) keyslot %d." msgstr "未使用のキースロット %d を削除できませんでした。" -#: lib/luks2/luks2_reencrypt.c:4141 +#: lib/luks2/luks2_reencrypt.c:4156 msgid "Failed to remove reencryption keyslot." msgstr "再暗号化キースロットが削除できません。" -#: lib/luks2/luks2_reencrypt.c:4151 +#: lib/luks2/luks2_reencrypt.c:4166 #, c-format msgid "Fatal error while reencrypting chunk starting at %<PRIu64>, %<PRIu64> sectors long." msgstr "%<PRIu64> から %<PRIu64> セクタのチャンクの再暗号化中に致命的なエラー。" -#: lib/luks2/luks2_reencrypt.c:4155 +#: lib/luks2/luks2_reencrypt.c:4170 msgid "Online reencryption failed." msgstr "オンライン再暗号化に失敗しました。" -#: lib/luks2/luks2_reencrypt.c:4160 +#: lib/luks2/luks2_reencrypt.c:4175 msgid "Do not resume the device unless replaced with error target manually." msgstr "手動でエラーターゲットに置き換えた場合以外はデバイスのレジュームをしないでください。" -#: lib/luks2/luks2_reencrypt.c:4212 +#: lib/luks2/luks2_reencrypt.c:4227 msgid "Cannot proceed with reencryption. Unexpected reencryption status." msgstr "再暗号化を開始できません。予期しない再暗号化状態です。" -#: lib/luks2/luks2_reencrypt.c:4218 +#: lib/luks2/luks2_reencrypt.c:4233 msgid "Missing or invalid reencrypt context." msgstr "ないか不正な再暗号化コンテキストです。" -#: lib/luks2/luks2_reencrypt.c:4225 +#: lib/luks2/luks2_reencrypt.c:4240 msgid "Failed to initialize reencryption device stack." msgstr "再暗号化デバイススタックの初期化に失敗しました。" -#: lib/luks2/luks2_reencrypt.c:4247 lib/luks2/luks2_reencrypt.c:4284 +#: lib/luks2/luks2_reencrypt.c:4262 lib/luks2/luks2_reencrypt.c:4299 msgid "Failed to update reencryption context." msgstr "再暗号化コンテキストが更新できません。" -#: lib/luks2/luks2_reencrypt_digest.c:405 +#: lib/luks2/luks2_reencrypt_digest.c:421 msgid "Reencryption metadata is invalid." msgstr "再暗号化メタデータが不正です。" @@ -2029,101 +2037,101 @@ msgstr "OPAL レンジ %d ロックは無効です。" msgid "Unexpected OPAL range %d lock state." msgstr "OPAL レンジ %d のロック状態が期待されたものではありません。" -#: src/cryptsetup.c:85 +#: src/cryptsetup.c:93 msgid "Keyslot encryption parameters can be set only for LUKS2 device." msgstr "キースロットの暗号化パラメータは LUKS2 デバイスでしか設定できません。" -#: src/cryptsetup.c:128 src/cryptsetup.c:2145 +#: src/cryptsetup.c:136 src/cryptsetup.c:2242 #, c-format msgid "Enter token PIN: " msgstr "トークンPINを入力してください: " -#: src/cryptsetup.c:130 src/cryptsetup.c:2147 +#: src/cryptsetup.c:138 src/cryptsetup.c:2244 #, c-format msgid "Enter token %d PIN: " msgstr "トークン %d PINを入力してください: " -#: src/cryptsetup.c:188 src/cryptsetup.c:1174 src/cryptsetup.c:1515 -#: src/utils_reencrypt.c:1137 src/utils_reencrypt_luks1.c:517 +#: src/cryptsetup.c:196 src/cryptsetup.c:1182 src/cryptsetup.c:1523 +#: src/utils_reencrypt.c:1146 src/utils_reencrypt_luks1.c:517 #: src/utils_reencrypt_luks1.c:580 msgid "No known cipher specification pattern detected." msgstr "未知の暗号スペックです。" -#: src/cryptsetup.c:198 +#: src/cryptsetup.c:206 #, c-format msgid "WARNING: Using default options for cipher (%s-%s, key size %u bits) that could be incompatible with older versions." msgstr "警告: 古いバージョンと互換性がない可能性がある暗号 (%s-%s, キーサイズ %u ビット) のデフォルトオプションを使用します。" -#: src/cryptsetup.c:203 +#: src/cryptsetup.c:211 #, c-format msgid "WARNING: Using default options for hash (%s) that could be incompatible with older versions." msgstr "警告: 古いバージョンと互換性がない可能性があるハッシュ (%s) のデフォルトオプションを使用します。" -#: src/cryptsetup.c:207 +#: src/cryptsetup.c:215 msgid "For plain mode, always use options --cipher, --key-size and if no keyfile is used, then also --hash." msgstr "プレインモードでは常に --cipher, --key-size オプションを使い、keyfile も使わない場合は --hash も使用してください。" -#: src/cryptsetup.c:213 +#: src/cryptsetup.c:221 msgid "WARNING: The --hash parameter is being ignored in plain mode with keyfile specified.\n" msgstr "警告: --hash パラメータは plain モードでキーファイルが指定されていると無視されます。\n" -#: src/cryptsetup.c:221 +#: src/cryptsetup.c:229 msgid "WARNING: The --keyfile-size option is being ignored, the read size is the same as the encryption key size.\n" msgstr "警告: --keyfile-size オプションは無視されて、読み込みサイズは暗号鍵のサイズと同じになります。\n" -#: src/cryptsetup.c:258 src/cryptsetup.c:1360 src/cryptsetup.c:1558 -#: src/integritysetup.c:197 src/utils_reencrypt.c:1346 +#: src/cryptsetup.c:266 src/cryptsetup.c:1368 src/cryptsetup.c:1566 +#: src/integritysetup.c:197 src/utils_reencrypt.c:1355 #, c-format msgid "Blkid scan failed for %s." msgstr "%s の Blkid スキャンが失敗しました。" -#: src/cryptsetup.c:264 +#: src/cryptsetup.c:272 #, c-format msgid "Detected device signature(s) on %s. Proceeding further may damage existing data." msgstr "%s にデバイス署名が検出されました。既にあるデータを破壊しかねません。" -#: src/cryptsetup.c:270 src/cryptsetup.c:1248 src/cryptsetup.c:1296 -#: src/cryptsetup.c:1367 src/cryptsetup.c:1492 src/cryptsetup.c:1570 -#: src/cryptsetup.c:2525 src/cryptsetup.c:2952 src/integritysetup.c:187 +#: src/cryptsetup.c:278 src/cryptsetup.c:1256 src/cryptsetup.c:1304 +#: src/cryptsetup.c:1375 src/cryptsetup.c:1500 src/cryptsetup.c:1578 +#: src/cryptsetup.c:2622 src/cryptsetup.c:3049 src/integritysetup.c:187 #: src/utils_reencrypt.c:138 src/utils_reencrypt.c:314 -#: src/utils_reencrypt.c:764 +#: src/utils_reencrypt.c:772 msgid "Operation aborted.\n" msgstr "中止されました。\n" -#: src/cryptsetup.c:343 +#: src/cryptsetup.c:351 msgid "Option --key-file is required." msgstr "オプション --key-file が必要です。" -#: src/cryptsetup.c:394 +#: src/cryptsetup.c:402 msgid "Enter VeraCrypt PIM: " msgstr "VeraCrypt PIM を入力してください: " -#: src/cryptsetup.c:403 +#: src/cryptsetup.c:411 msgid "Invalid PIM value: parse error." msgstr "不正な PIM: 解釈できません。" -#: src/cryptsetup.c:406 +#: src/cryptsetup.c:414 msgid "Invalid PIM value: 0." msgstr "不正 PIM の値で 0 です。" -#: src/cryptsetup.c:409 +#: src/cryptsetup.c:417 msgid "Invalid PIM value: outside of range." msgstr "不正な PIM の値: 範囲外です。" -#: src/cryptsetup.c:432 +#: src/cryptsetup.c:440 msgid "No device header detected with this passphrase." msgstr "このパスフレーズではデバイスヘッダが検出されませんでした。" -#: src/cryptsetup.c:505 src/cryptsetup.c:681 +#: src/cryptsetup.c:513 src/cryptsetup.c:689 #, c-format msgid "Device %s is not a valid BITLK device." msgstr "デバイス %s は有効な BITLK デバイスではありません。" -#: src/cryptsetup.c:513 +#: src/cryptsetup.c:521 msgid "Cannot determine volume key size for BITLK, please use --key-size option." msgstr "BITLK のボリュームキーサイズが決定できないので、--key-size を使ってください。" -#: src/cryptsetup.c:555 +#: src/cryptsetup.c:563 msgid "" "Header dump with volume key is sensitive information\n" "which allows access to encrypted partition without passphrase.\n" @@ -2133,7 +2141,7 @@ msgstr "" "暗号化されたパーティションにパスフレーズなしでアクセス可能にます。\n" "このダンプは暗号化された安全な所に保存してください。" -#: src/cryptsetup.c:622 src/cryptsetup.c:703 src/cryptsetup.c:2550 +#: src/cryptsetup.c:630 src/cryptsetup.c:711 src/cryptsetup.c:2647 msgid "" "The header dump with volume key is sensitive information\n" "that allows access to encrypted partition without a passphrase.\n" @@ -2143,84 +2151,84 @@ msgstr "" "暗号化されたパーティションにパスフレーズなしでアクセス可能になります。\n" "このダンプは暗号化された安全な所に保存してください。" -#: src/cryptsetup.c:758 src/cryptsetup.c:788 +#: src/cryptsetup.c:766 src/cryptsetup.c:796 #, c-format msgid "Device %s is not a valid FVAULT2 device." msgstr "デバイス %s は有効な FVAULT2 デバイスではありません。" -#: src/cryptsetup.c:796 +#: src/cryptsetup.c:804 msgid "Cannot determine volume key size for FVAULT2, please use --key-size option." msgstr "FVAULT2 のボリュームキーサイズが決定できないので、--key-size を使ってください。" -#: src/cryptsetup.c:850 src/veritysetup.c:323 src/integritysetup.c:409 +#: src/cryptsetup.c:858 src/veritysetup.c:323 src/integritysetup.c:409 #, c-format msgid "Device %s is still active and scheduled for deferred removal.\n" msgstr "デバイス %s はまたアクティブで後から削除される予定になっています。.\n" -#: src/cryptsetup.c:884 src/cryptsetup.c:1824 src/cryptsetup.c:2080 -#: src/cryptsetup.c:2234 src/cryptsetup.c:2681 src/cryptsetup.c:2763 -#: src/cryptsetup.c:3290 +#: src/cryptsetup.c:892 src/cryptsetup.c:1903 src/cryptsetup.c:2177 +#: src/cryptsetup.c:2331 src/cryptsetup.c:2778 src/cryptsetup.c:2860 +#: src/cryptsetup.c:3387 #, c-format msgid "Failed to set external tokens path %s." msgstr "外部トークンパス %s の設定に失敗しました。" -#: src/cryptsetup.c:893 +#: src/cryptsetup.c:901 msgid "Resize of active device requires volume key in keyring but --disable-keyring option is set." msgstr "アクティブなデバイスをリサイズするにはボリュームキーがキーリングに必要ですが、--disable-keyring が指定されています。" -#: src/cryptsetup.c:1053 +#: src/cryptsetup.c:1061 msgid "Benchmark interrupted." msgstr "ベンチマークが中止されました。" -#: src/cryptsetup.c:1074 +#: src/cryptsetup.c:1082 #, c-format msgid "PBKDF2-%-9s N/A\n" msgstr "PBKDF2-%-9s 計測値なし\n" -#: src/cryptsetup.c:1076 +#: src/cryptsetup.c:1084 #, c-format msgid "PBKDF2-%-9s %7u iterations per second for %zu-bit key\n" msgstr "PBKDF2-%-9s %7u 回/秒 (%zu ビットの鍵)\n" -#: src/cryptsetup.c:1090 +#: src/cryptsetup.c:1098 #, c-format msgid "%-10s N/A\n" msgstr "%-10s 計測値なし\n" -#: src/cryptsetup.c:1092 +#: src/cryptsetup.c:1100 #, c-format msgid "%-10s %4u iterations, %5u memory, %1u parallel threads (CPUs) for %zu-bit key (requested %u ms time)\n" msgstr "%-10s %4u 回, %5u KB使用, %1u スレッド (%zu のビットの鍵) (%u ms 計測)\n" -#: src/cryptsetup.c:1116 +#: src/cryptsetup.c:1124 msgid "Result of benchmark is not reliable." msgstr "ベンチマークの結果は信頼できません。" -#: src/cryptsetup.c:1166 +#: src/cryptsetup.c:1174 msgid "# Tests are approximate using memory only (no storage IO).\n" msgstr "# テストはストレージI/Oがなくメモリ上のもののため目安です。\n" #. TRANSLATORS: The string is header of a table and must be exactly (right side) aligned. -#: src/cryptsetup.c:1186 +#: src/cryptsetup.c:1194 #, c-format msgid "#%*s Algorithm | Key | Encryption | Decryption\n" msgstr "#%*s Algorithm | キー | 暗号化 | 復号化\n" -#: src/cryptsetup.c:1190 +#: src/cryptsetup.c:1198 #, c-format msgid "Cipher %s (with %i bits key) is not available." msgstr "暗号 %s (キーサイズ %i ビット) は利用できません。" #. TRANSLATORS: The string is header of a table and must be exactly (right side) aligned. -#: src/cryptsetup.c:1209 +#: src/cryptsetup.c:1217 msgid "# Algorithm | Key | Encryption | Decryption\n" msgstr "# Algorithm | キー | 暗号化 | 復号化\n" -#: src/cryptsetup.c:1220 +#: src/cryptsetup.c:1228 msgid "N/A" msgstr "計測値なし" -#: src/cryptsetup.c:1245 +#: src/cryptsetup.c:1253 msgid "" "Unprotected LUKS2 reencryption metadata detected. Please verify the reencryption operation is desirable (see luksDump output)\n" "and continue (upgrade metadata) only if you acknowledge the operation as genuine." @@ -2228,27 +2236,27 @@ msgstr "" "保護されていない LUKS2 再暗号化メタデータが検出されました。再暗号化操作が望ましいものか確認してください。(luksDump の出力を見てください)\n" "そのうえで、この操作が問題ないと確認できたら継続(メタデータのアップグレード)してください。" -#: src/cryptsetup.c:1251 +#: src/cryptsetup.c:1259 msgid "Enter passphrase to protect and upgrade reencryption metadata: " msgstr "再暗号化メタデータの保護とアップグレードのためのパスフレーズを入力してください: " -#: src/cryptsetup.c:1295 +#: src/cryptsetup.c:1303 msgid "Really proceed with LUKS2 reencryption recovery?" msgstr "本当に LUKS2 再暗号化リカバリを行いますか？" -#: src/cryptsetup.c:1304 +#: src/cryptsetup.c:1312 msgid "Enter passphrase to verify reencryption metadata digest: " msgstr "再暗号化メタデータダイジェストを検証するためのパスフレーズを入力してください: " -#: src/cryptsetup.c:1306 +#: src/cryptsetup.c:1314 msgid "Enter passphrase for reencryption recovery: " msgstr "再暗号化のリカバリのためのパスフレーズを入力してください: " -#: src/cryptsetup.c:1366 +#: src/cryptsetup.c:1374 msgid "Really try to repair LUKS device header?" msgstr "本当に LUKS デバイスヘッダの復元を試みていいですか？" -#: src/cryptsetup.c:1390 src/integritysetup.c:89 src/integritysetup.c:247 +#: src/cryptsetup.c:1398 src/integritysetup.c:89 src/integritysetup.c:247 msgid "" "\n" "Wipe interrupted." @@ -2256,7 +2264,7 @@ msgstr "" "\n" "ワイプが中断されました。" -#: src/cryptsetup.c:1395 src/integritysetup.c:94 src/integritysetup.c:284 +#: src/cryptsetup.c:1403 src/integritysetup.c:94 src/integritysetup.c:284 msgid "" "Wiping device to initialize integrity checksum.\n" "You can interrupt this by pressing CTRL+c (rest of not wiped device will contain invalid checksum).\n" @@ -2264,144 +2272,156 @@ msgstr "" "整合性チェックサムの初期化のためにデバイスのデータを消去しています。\n" "CTRL+c で中止できます (初期化されなかったデバイスのチェックサムは正しくなくなります)。\n" -#: src/cryptsetup.c:1417 src/integritysetup.c:116 +#: src/cryptsetup.c:1425 src/integritysetup.c:116 #, c-format msgid "Cannot deactivate temporary device %s." msgstr "一時的デバイス %s を非アクティブにできません。" -#: src/cryptsetup.c:1472 +#: src/cryptsetup.c:1480 msgid "Integrity option can be used only for LUKS2 format." msgstr "整合性オプションは LUKS2 形式でしか使えません。" -#: src/cryptsetup.c:1477 src/cryptsetup.c:1542 +#: src/cryptsetup.c:1485 src/cryptsetup.c:1550 msgid "Unsupported LUKS2 metadata size options." msgstr "サポートされていない LUKS2 メタデータのサイズオプションです。" -#: src/cryptsetup.c:1482 +#: src/cryptsetup.c:1490 msgid "OPAL is supported only for LUKS2 format." msgstr "OPAL は LUKS2 フォーマットでしかサポートされていません。" -#: src/cryptsetup.c:1491 +#: src/cryptsetup.c:1499 msgid "Header file does not exist, do you want to create it?" msgstr "ヘッダファイルがありません。作成しますか？" -#: src/cryptsetup.c:1499 +#: src/cryptsetup.c:1507 #, c-format msgid "Cannot create header file %s." msgstr "ヘッダファイル %s を作成できません。" -#: src/cryptsetup.c:1522 src/integritysetup.c:144 src/integritysetup.c:152 +#: src/cryptsetup.c:1530 src/integritysetup.c:144 src/integritysetup.c:152 #: src/integritysetup.c:161 src/integritysetup.c:324 src/integritysetup.c:332 #: src/integritysetup.c:342 msgid "No known integrity specification pattern detected." msgstr "サポートしている整合性確認方式が検出されませんでした。" -#: src/cryptsetup.c:1535 +#: src/cryptsetup.c:1543 #, c-format msgid "Cannot use %s as on-disk header." msgstr "%s を on-disk ヘッダとして使えません。" -#: src/cryptsetup.c:1564 src/integritysetup.c:181 +#: src/cryptsetup.c:1572 src/integritysetup.c:181 #, c-format msgid "This will overwrite data on %s irrevocably." msgstr "%s のデータを上書きします。戻せません。" -#: src/cryptsetup.c:1601 +#: src/cryptsetup.c:1609 msgid "OPAL Admin password cannot be empty." msgstr "OPAL 管理者パスワードは空ではいけません。" -#: src/cryptsetup.c:1615 src/cryptsetup.c:2097 src/cryptsetup.c:2247 -#: src/cryptsetup.c:2407 src/cryptsetup.c:2473 src/utils_reencrypt_luks1.c:443 +#: src/cryptsetup.c:1623 src/cryptsetup.c:2194 src/cryptsetup.c:2344 +#: src/cryptsetup.c:2504 src/cryptsetup.c:2570 src/utils_reencrypt_luks1.c:443 msgid "Failed to set pbkdf parameters." msgstr "pbkdf パラメータを設定できません。" -#: src/cryptsetup.c:1745 +#: src/cryptsetup.c:1755 msgid "Type specification in --link-vk-to-keyring keyring specification is ignored." msgstr "--link-vk-to-keyring のキーリングスペックへのタイプ指定は無視されました。" -#: src/cryptsetup.c:1765 +#: src/cryptsetup.c:1820 +msgid "Key types have to be the same for both volume keys." +msgstr "双方のボリュームキーのタイプは同じでなければなりません。" + +#: src/cryptsetup.c:1825 +msgid "Both volume keys have to be linked to the same keyring." +msgstr "双方のボリュームキーは同じキーリングにリンクされなければなりません。" + +#: src/cryptsetup.c:1835 +msgid "You need to supply more key names." +msgstr "より多くのキーの名前が必要です。" + +#: src/cryptsetup.c:1839 msgid "Invalid --link-vk-to-keyring value." msgstr "--link-vk-to-keyring の値が不正です。" -#: src/cryptsetup.c:1805 +#: src/cryptsetup.c:1884 msgid "Reduced data offset is allowed only for detached LUKS header." msgstr "分離された LUKS ヘッダでのみ少ないデータオフセットが使えます。" -#: src/cryptsetup.c:1812 +#: src/cryptsetup.c:1891 #, c-format msgid "LUKS file container %s is too small for activation, there is no remaining space for data." msgstr "LUKS ファイルコンテナ %s がアクティベートするには小さすぎます。データ用の領域に空きがありません。" -#: src/cryptsetup.c:1839 src/cryptsetup.c:2253 +#: src/cryptsetup.c:1918 src/cryptsetup.c:2350 msgid "Cannot determine volume key size for LUKS without keyslots, please use --key-size option." msgstr "キースロットのない LUKS のボリュームキーサイズが決定できないので、--key-size を使ってください。" -#: src/cryptsetup.c:1890 +#: src/cryptsetup.c:1985 msgid "Device activated but cannot make flags persistent." msgstr "デバイスはアクティベートされましたが、フラグを恒常的なものにできません。" -#: src/cryptsetup.c:1972 src/cryptsetup.c:2040 +#: src/cryptsetup.c:2069 src/cryptsetup.c:2137 #, c-format msgid "Keyslot %d is selected for deletion." msgstr "キースロット %d は削除対象として選択されました。" -#: src/cryptsetup.c:1984 src/cryptsetup.c:2044 +#: src/cryptsetup.c:2081 src/cryptsetup.c:2141 msgid "This is the last keyslot. Device will become unusable after purging this key." msgstr "これは最後のキースロットです。このキーがなくなるとデバイスは使用不能になります。" -#: src/cryptsetup.c:1985 +#: src/cryptsetup.c:2082 msgid "Enter any remaining passphrase: " msgstr "残っているパスフレーズを入力してください: " -#: src/cryptsetup.c:1986 src/cryptsetup.c:2046 +#: src/cryptsetup.c:2083 src/cryptsetup.c:2143 msgid "Operation aborted, the keyslot was NOT wiped.\n" msgstr "操作は中止されました。キースロットは消去されていません。\n" -#: src/cryptsetup.c:2022 +#: src/cryptsetup.c:2119 msgid "Enter passphrase to be deleted: " msgstr "削除するキーのパスフレーズを入力してください: " -#: src/cryptsetup.c:2072 src/cryptsetup.c:2456 src/cryptsetup.c:3114 -#: src/cryptsetup.c:3281 +#: src/cryptsetup.c:2169 src/cryptsetup.c:2553 src/cryptsetup.c:3211 +#: src/cryptsetup.c:3378 #, c-format msgid "Device %s is not a valid LUKS2 device." msgstr "デバイス %s は有効な LUKS2 デバイスではありません。" -#: src/cryptsetup.c:2111 src/cryptsetup.c:2330 +#: src/cryptsetup.c:2208 src/cryptsetup.c:2427 msgid "Enter new passphrase for key slot: " msgstr "キースロットの新しいパスフレーズを入力してください: " -#: src/cryptsetup.c:2213 +#: src/cryptsetup.c:2310 msgid "WARNING: The --key-slot parameter is used for new keyslot number.\n" msgstr "警告: --key-slot パラメータは新しいキースロット番号に使われます。\n" -#: src/cryptsetup.c:2286 src/utils_reencrypt_luks1.c:1149 +#: src/cryptsetup.c:2383 src/utils_reencrypt_luks1.c:1149 #, c-format msgid "Enter any existing passphrase: " msgstr "有効なパスフレーズをどれか入力してください: " -#: src/cryptsetup.c:2411 +#: src/cryptsetup.c:2508 msgid "Enter passphrase to be changed: " msgstr "変更するキーのパスフレーズを入力してください: " -#: src/cryptsetup.c:2427 src/utils_reencrypt_luks1.c:1135 +#: src/cryptsetup.c:2524 src/utils_reencrypt_luks1.c:1135 msgid "Enter new passphrase: " msgstr "新しいキーのパスフレーズを入力してください: " -#: src/cryptsetup.c:2477 +#: src/cryptsetup.c:2574 msgid "Enter passphrase for keyslot to be converted: " msgstr "変換されるキースロットのパスフレーズを入力してください: " -#: src/cryptsetup.c:2501 +#: src/cryptsetup.c:2598 msgid "Only one device argument for isLuks operation is supported." msgstr "isLuks は一つのデバイス引数しかサポートしていません。" -#: src/cryptsetup.c:2609 +#: src/cryptsetup.c:2706 #, c-format msgid "Keyslot %d does not contain unbound key." msgstr "キースロット %d は unbound キーを含んでいません。" -#: src/cryptsetup.c:2614 +#: src/cryptsetup.c:2711 msgid "" "The header dump with unbound key is sensitive information.\n" "This dump should be stored encrypted in a safe place." @@ -2409,52 +2429,52 @@ msgstr "" "unbound キーを使ったヘッダダンプは取り扱いに注意すべき情報です。\n" "このダンプは暗号化された安全な所に保存してください。" -#: src/cryptsetup.c:2709 src/cryptsetup.c:2746 +#: src/cryptsetup.c:2806 src/cryptsetup.c:2843 #, c-format msgid "%s is not active %s device name." msgstr "%s はアクティブな %s デバイスではありません。" -#: src/cryptsetup.c:2741 +#: src/cryptsetup.c:2838 #, c-format msgid "%s is not active LUKS device name or header is missing." msgstr "%s はアクティブな LUKS デバイス名ではないか、ヘッダがありません。" -#: src/cryptsetup.c:2819 src/cryptsetup.c:2838 +#: src/cryptsetup.c:2916 src/cryptsetup.c:2935 msgid "Option --header-backup-file is required." msgstr "オプション --header-backup-file が必要です。" -#: src/cryptsetup.c:2869 +#: src/cryptsetup.c:2966 #, c-format msgid "%s is not cryptsetup managed device." msgstr "%s は cryptsetup で管理されているデバイスではありません。" -#: src/cryptsetup.c:2880 +#: src/cryptsetup.c:2977 #, c-format msgid "Refresh is not supported for device type %s" msgstr "リフレッシュはデバイスタイプ %s ではサポートされていません。" -#: src/cryptsetup.c:2930 +#: src/cryptsetup.c:3027 #, c-format msgid "Unrecognized metadata device type %s." msgstr "%s は認識できないメタデータデータタイプです。" -#: src/cryptsetup.c:2932 +#: src/cryptsetup.c:3029 msgid "Command requires device and mapped name as arguments." msgstr "コマンドはデバイスとマップされた名前を引数として必要とします。" -#: src/cryptsetup.c:2942 +#: src/cryptsetup.c:3039 msgid "Enter OPAL PSID: " msgstr "OPAL PSID を入力してください: " -#: src/cryptsetup.c:2942 +#: src/cryptsetup.c:3039 msgid "Enter OPAL Admin password: " msgstr "OPAL 管理者パスワードを入力してください: " -#: src/cryptsetup.c:2951 +#: src/cryptsetup.c:3048 msgid "WARNING: WHOLE disk will be factory reset and all data will be lost! Continue?" msgstr "警告: ディスク「全体」が出荷状態にリセットされ、データは全て消失します！続けますか？" -#: src/cryptsetup.c:2994 +#: src/cryptsetup.c:3091 #, c-format msgid "" "This operation will erase all keyslots on device %s.\n" @@ -2463,351 +2483,351 @@ msgstr "" "この処理はデバイス %s の全てのキースロットを消去します。\n" "デバイスのデータは使用できなくなります。" -#: src/cryptsetup.c:3001 +#: src/cryptsetup.c:3098 msgid "Operation aborted, keyslots were NOT wiped.\n" msgstr "処理は中止されました。キースロットは消去されません。\n" -#: src/cryptsetup.c:3040 +#: src/cryptsetup.c:3137 msgid "Invalid LUKS type, only luks1 and luks2 are supported." msgstr "不正な LUKS タイプです。luks1 と luks2 しかサポートしていません。" -#: src/cryptsetup.c:3056 +#: src/cryptsetup.c:3153 #, c-format msgid "Device is already %s type." msgstr "デバイスは既にタイプ %s です。" -#: src/cryptsetup.c:3063 +#: src/cryptsetup.c:3160 #, c-format msgid "This operation will convert %s to %s format.\n" msgstr "この処理は %s から %s フォーマットに変換します。\n" -#: src/cryptsetup.c:3066 +#: src/cryptsetup.c:3163 msgid "Operation aborted, device was NOT converted.\n" msgstr "処理は中止されました。デバイスは変換されませんでした。\n" -#: src/cryptsetup.c:3106 +#: src/cryptsetup.c:3203 msgid "Option --priority, --label or --subsystem is missing." msgstr "オプション --priority, --label か --subsystem がありません。" -#: src/cryptsetup.c:3140 src/cryptsetup.c:3180 src/cryptsetup.c:3200 +#: src/cryptsetup.c:3237 src/cryptsetup.c:3277 src/cryptsetup.c:3297 #, c-format msgid "Token %d is invalid." msgstr "トークン %d は不正です。" -#: src/cryptsetup.c:3143 src/cryptsetup.c:3203 +#: src/cryptsetup.c:3240 src/cryptsetup.c:3300 #, c-format msgid "Token %d in use." msgstr "トークン %d は使用中です。" -#: src/cryptsetup.c:3155 +#: src/cryptsetup.c:3252 #, c-format msgid "Failed to add luks2-keyring token %d." msgstr "luks2-キーリングトークン %d を追加できませんでした。" -#: src/cryptsetup.c:3166 src/cryptsetup.c:3229 +#: src/cryptsetup.c:3263 src/cryptsetup.c:3326 #, c-format msgid "Failed to assign token %d to keyslot %d." msgstr "トークン %d をキースロット %d に割りあてられませんでした。" -#: src/cryptsetup.c:3183 +#: src/cryptsetup.c:3280 #, c-format msgid "Token %d is not in use." msgstr "トークン %d は使われていません。" -#: src/cryptsetup.c:3220 +#: src/cryptsetup.c:3317 msgid "Failed to import token from file." msgstr "ファイルからトークンをインポートできません。" -#: src/cryptsetup.c:3245 +#: src/cryptsetup.c:3342 #, c-format msgid "Failed to get token %d for export." msgstr "トークン %d をエクスポートのために取得できませんでした。" -#: src/cryptsetup.c:3258 +#: src/cryptsetup.c:3355 #, c-format msgid "Token %d is not assigned to keyslot %d." msgstr "トークン %d をキースロット %d に割りあてられませんでした。" -#: src/cryptsetup.c:3260 src/cryptsetup.c:3267 +#: src/cryptsetup.c:3357 src/cryptsetup.c:3364 #, c-format msgid "Failed to unassign token %d from keyslot %d." msgstr "トークン %d をキースロット %d の割り当てから解除できませんでした。" -#: src/cryptsetup.c:3326 +#: src/cryptsetup.c:3423 msgid "Option --tcrypt-hidden, --tcrypt-system or --tcrypt-backup is supported only for TCRYPT device." msgstr "--tcrypt-hidden と --tcrypt-system と --tcrypt-backup は TCRYPT デバイスしか使えません。" -#: src/cryptsetup.c:3329 +#: src/cryptsetup.c:3426 msgid "Option --veracrypt or --disable-veracrypt is supported only for TCRYPT device type." msgstr "--veracrypt や --disable-veracrypt は TCRYPT デバイスでしか使えません。" -#: src/cryptsetup.c:3332 +#: src/cryptsetup.c:3429 msgid "Option --veracrypt-pim is supported only for VeraCrypt compatible devices." msgstr "--veracrypt-pim は VeraCrypt 互換デバイスにしか使えません。" -#: src/cryptsetup.c:3336 +#: src/cryptsetup.c:3433 msgid "Option --veracrypt-query-pim is supported only for VeraCrypt compatible devices." msgstr "--veracrypt-query-pim は VeraCrypt 互換デバイスにしか使えません。" -#: src/cryptsetup.c:3338 +#: src/cryptsetup.c:3435 msgid "The options --veracrypt-pim and --veracrypt-query-pim are mutually exclusive." msgstr "--veracrypt-pim と --veracrypt-query-pim はどちらかしか使えません。" -#: src/cryptsetup.c:3347 +#: src/cryptsetup.c:3444 msgid "Option --persistent is not allowed with --test-passphrase." msgstr "--persistent は --test-passphrase と一緒には使えません。" -#: src/cryptsetup.c:3350 +#: src/cryptsetup.c:3447 msgid "Options --refresh and --test-passphrase are mutually exclusive." msgstr "--refresh と --test-passphrase は同時には使えません。" -#: src/cryptsetup.c:3353 +#: src/cryptsetup.c:3450 msgid "Option --shared is allowed only for open of plain device." msgstr "--shared は plain デバイスの open にしか使えません。" -#: src/cryptsetup.c:3356 +#: src/cryptsetup.c:3453 msgid "Option --skip is supported only for open of plain and loopaes devices." msgstr "--skip は plain か loopaes デバイスの open にしか使えません。" -#: src/cryptsetup.c:3359 +#: src/cryptsetup.c:3456 msgid "Option --offset with open action is only supported for plain and loopaes devices." msgstr "--offset は plain か loopaes デバイスの open にしか使えません。" -#: src/cryptsetup.c:3362 +#: src/cryptsetup.c:3459 msgid "Option --tcrypt-hidden cannot be combined with --allow-discards." msgstr "--tcrypt-hidden は --allow-discards と一緒に使えません。" -#: src/cryptsetup.c:3366 +#: src/cryptsetup.c:3463 msgid "Sector size option with open action is supported only for plain devices." msgstr "オープン時のセクタサイズオプションは plain デバイスでしかサポートされていません。" -#: src/cryptsetup.c:3370 +#: src/cryptsetup.c:3467 msgid "Large IV sectors option is supported only for opening plain type device with sector size larger than 512 bytes." msgstr "大きな IV セクタオプションは plain タイプでセクタサイズが 512 バイトより大きいものをオープンする時しかサポートしていません。" -#: src/cryptsetup.c:3375 +#: src/cryptsetup.c:3472 msgid "Option --test-passphrase is allowed only for open of LUKS, TCRYPT, BITLK and FVAULT2 devices." msgstr "--test-passphrase は LUKS か TCRYPT か BITLK か FVAULT2 デバイスの open にしか使えません。." -#: src/cryptsetup.c:3378 src/cryptsetup.c:3401 +#: src/cryptsetup.c:3475 src/cryptsetup.c:3498 msgid "Options --device-size and --size cannot be combined." msgstr "--device-size と --size は一緒に使えません。" -#: src/cryptsetup.c:3381 +#: src/cryptsetup.c:3478 msgid "Option --unbound is allowed only for open of luks device." msgstr "オプション --unbound は luks デバイスの open にしか使えません。" -#: src/cryptsetup.c:3384 +#: src/cryptsetup.c:3481 msgid "Option --unbound cannot be used without --test-passphrase." msgstr "オプション --unbound は --test-passphrase がないと使えません。" -#: src/cryptsetup.c:3393 src/veritysetup.c:671 src/integritysetup.c:767 +#: src/cryptsetup.c:3490 src/veritysetup.c:671 src/integritysetup.c:767 msgid "Options --cancel-deferred and --deferred cannot be used at the same time." msgstr "オプション --cancel-deferred と --deferred は同時に使えません。" -#: src/cryptsetup.c:3409 +#: src/cryptsetup.c:3506 msgid "Options --reduce-device-size and --device-size cannot be combined." msgstr "オプション --reduce-device-size と --device-size は一緒に使えません。" -#: src/cryptsetup.c:3412 +#: src/cryptsetup.c:3509 msgid "Option --active-name can be set only for LUKS2 device." msgstr "オプション --active-nameは LUKS2 デバイスでしか設定できません。" -#: src/cryptsetup.c:3415 +#: src/cryptsetup.c:3512 msgid "Options --active-name and --force-offline-reencrypt cannot be combined." msgstr "オプション --active-name と --force-offline-reencrypt は一緒に使えません。" -#: src/cryptsetup.c:3423 src/cryptsetup.c:3453 +#: src/cryptsetup.c:3520 src/cryptsetup.c:3550 msgid "Keyslot specification is required." msgstr "キースロットの指定が必要です。" -#: src/cryptsetup.c:3431 +#: src/cryptsetup.c:3528 msgid "Options --align-payload and --offset cannot be combined." msgstr "--align-payload と --offset は一緒に使えません。" -#: src/cryptsetup.c:3434 +#: src/cryptsetup.c:3531 msgid "Option --integrity-no-wipe can be used only for format action with integrity extension." msgstr "--integrity-no-wipe は format で integrity extension 付きの時しか使えません。" -#: src/cryptsetup.c:3437 +#: src/cryptsetup.c:3534 msgid "Only one of --use-[u]random options is allowed." msgstr "--use-[u]random は一つしか使えません。" -#: src/cryptsetup.c:3445 +#: src/cryptsetup.c:3542 msgid "Key size is required with --unbound option." msgstr "--unbound にはキーサイズが必要です。" -#: src/cryptsetup.c:3465 +#: src/cryptsetup.c:3562 msgid "Invalid token action." msgstr "不正なトークンアクションです。" -#: src/cryptsetup.c:3468 +#: src/cryptsetup.c:3565 msgid "--key-description parameter is mandatory for token add action." msgstr "--key-description はトークン追加には必須です。" -#: src/cryptsetup.c:3472 src/cryptsetup.c:3485 +#: src/cryptsetup.c:3569 src/cryptsetup.c:3582 msgid "Action requires specific token. Use --token-id parameter." msgstr "トークンを必要としています。--token-id を使用してください。" -#: src/cryptsetup.c:3476 +#: src/cryptsetup.c:3573 msgid "Option --unbound is valid only with token add action." msgstr "オプション --unbound はトークンの追加にしか使えません。" -#: src/cryptsetup.c:3478 +#: src/cryptsetup.c:3575 msgid "Options --key-slot and --unbound cannot be combined." msgstr "--key-slot と --unbound は一緒に使えません。" -#: src/cryptsetup.c:3483 +#: src/cryptsetup.c:3580 msgid "Action requires specific keyslot. Use --key-slot parameter." msgstr "特定のキースロットを必要としています。--key-slot を使用してください。" -#: src/cryptsetup.c:3499 +#: src/cryptsetup.c:3596 msgid "<device> [--type <type>] [<name>]" msgstr "<デバイス> [--type <タイプ>] [<名前>]" -#: src/cryptsetup.c:3499 src/veritysetup.c:491 src/integritysetup.c:544 +#: src/cryptsetup.c:3596 src/veritysetup.c:491 src/integritysetup.c:544 msgid "open device as <name>" msgstr "デバイスを <名前> としてオープン" -#: src/cryptsetup.c:3500 src/cryptsetup.c:3501 src/cryptsetup.c:3502 +#: src/cryptsetup.c:3597 src/cryptsetup.c:3598 src/cryptsetup.c:3599 #: src/veritysetup.c:492 src/veritysetup.c:493 src/integritysetup.c:545 #: src/integritysetup.c:546 src/integritysetup.c:548 msgid "<name>" msgstr "<名前>" -#: src/cryptsetup.c:3500 src/veritysetup.c:492 src/integritysetup.c:545 +#: src/cryptsetup.c:3597 src/veritysetup.c:492 src/integritysetup.c:545 msgid "close device (remove mapping)" msgstr "デバイスをクローズします (マッピングを削除します)" -#: src/cryptsetup.c:3501 src/integritysetup.c:548 +#: src/cryptsetup.c:3598 src/integritysetup.c:548 msgid "resize active device" msgstr "アクティブデバイスをリサイズ" -#: src/cryptsetup.c:3502 +#: src/cryptsetup.c:3599 msgid "show device status" msgstr "デバイスステータスを表示" -#: src/cryptsetup.c:3503 +#: src/cryptsetup.c:3600 msgid "[--cipher <cipher>]" msgstr "[--cipher <暗号>]" -#: src/cryptsetup.c:3503 +#: src/cryptsetup.c:3600 msgid "benchmark cipher" msgstr "暗号ベンチマーク" -#: src/cryptsetup.c:3504 src/cryptsetup.c:3505 src/cryptsetup.c:3506 -#: src/cryptsetup.c:3507 src/cryptsetup.c:3508 src/cryptsetup.c:3515 -#: src/cryptsetup.c:3516 src/cryptsetup.c:3517 src/cryptsetup.c:3518 -#: src/cryptsetup.c:3519 src/cryptsetup.c:3520 src/cryptsetup.c:3521 -#: src/cryptsetup.c:3522 src/cryptsetup.c:3523 src/cryptsetup.c:3524 +#: src/cryptsetup.c:3601 src/cryptsetup.c:3602 src/cryptsetup.c:3603 +#: src/cryptsetup.c:3604 src/cryptsetup.c:3605 src/cryptsetup.c:3612 +#: src/cryptsetup.c:3613 src/cryptsetup.c:3614 src/cryptsetup.c:3615 +#: src/cryptsetup.c:3616 src/cryptsetup.c:3617 src/cryptsetup.c:3618 +#: src/cryptsetup.c:3619 src/cryptsetup.c:3620 src/cryptsetup.c:3621 msgid "<device>" msgstr "<デバイス>" -#: src/cryptsetup.c:3504 +#: src/cryptsetup.c:3601 msgid "try to repair on-disk metadata" msgstr "on-disk メタデータを修復しようとしています" -#: src/cryptsetup.c:3505 +#: src/cryptsetup.c:3602 msgid "reencrypt LUKS2 device" msgstr "LUKS2 デバイスを再暗号化" -#: src/cryptsetup.c:3506 +#: src/cryptsetup.c:3603 msgid "erase all keyslots (remove encryption key)" msgstr "全てのキースロットを消去します (暗号鍵も削除します)" -#: src/cryptsetup.c:3507 +#: src/cryptsetup.c:3604 msgid "convert LUKS from/to LUKS2 format" msgstr "LUKS2 から LUKS もしくは LUKS から LUKS2 形式に変換します" -#: src/cryptsetup.c:3508 +#: src/cryptsetup.c:3605 msgid "set permanent configuration options for LUKS2" msgstr "LUKS2 の permanent configuration オプションを設定します" -#: src/cryptsetup.c:3509 src/cryptsetup.c:3510 +#: src/cryptsetup.c:3606 src/cryptsetup.c:3607 msgid "<device> [<new key file>]" msgstr "<デバイス> [<新しいキーファイル>]" -#: src/cryptsetup.c:3509 +#: src/cryptsetup.c:3606 msgid "formats a LUKS device" msgstr "LUKS デバイスをフォーマットします" -#: src/cryptsetup.c:3510 +#: src/cryptsetup.c:3607 msgid "add key to LUKS device" msgstr "LUKS デバイスにキーを追加します" -#: src/cryptsetup.c:3511 src/cryptsetup.c:3512 src/cryptsetup.c:3513 +#: src/cryptsetup.c:3608 src/cryptsetup.c:3609 src/cryptsetup.c:3610 msgid "<device> [<key file>]" msgstr "<デバイス> [<キーファイル>]" -#: src/cryptsetup.c:3511 +#: src/cryptsetup.c:3608 msgid "removes supplied key or key file from LUKS device" msgstr "与えられたキーかキーファイルを LUKS デバイスから削除します。" -#: src/cryptsetup.c:3512 +#: src/cryptsetup.c:3609 msgid "changes supplied key or key file of LUKS device" msgstr "与えられた LUKS デバイスのキーかキーファイルを変更します" -#: src/cryptsetup.c:3513 +#: src/cryptsetup.c:3610 msgid "converts a key to new pbkdf parameters" msgstr "キーを新しい pbkdf パラメータに変換します" -#: src/cryptsetup.c:3514 +#: src/cryptsetup.c:3611 msgid "<device> <key slot>" msgstr "<デバイス> <キースロット>" -#: src/cryptsetup.c:3514 +#: src/cryptsetup.c:3611 msgid "wipes key with number <key slot> from LUKS device" msgstr "<キースロット>のキーを LUKS デバイスから削除します" -#: src/cryptsetup.c:3515 +#: src/cryptsetup.c:3612 msgid "print UUID of LUKS device" msgstr "LUKS デバイスの UUID を表示" -#: src/cryptsetup.c:3516 +#: src/cryptsetup.c:3613 msgid "tests <device> for LUKS partition header" msgstr "<デバイス> の LUKS パーティションヘッダをテストします" -#: src/cryptsetup.c:3517 +#: src/cryptsetup.c:3614 msgid "dump LUKS partition information" msgstr "LUKS パーティション情報をダンプします" -#: src/cryptsetup.c:3518 +#: src/cryptsetup.c:3615 msgid "dump TCRYPT device information" msgstr "TCRYPT デバイス情報をダンプします" -#: src/cryptsetup.c:3519 +#: src/cryptsetup.c:3616 msgid "dump BITLK device information" msgstr "BITLK デバイス情報をダンプします" -#: src/cryptsetup.c:3520 +#: src/cryptsetup.c:3617 msgid "dump FVAULT2 device information" msgstr "FVAULT2 デバイス情報をダンプします" -#: src/cryptsetup.c:3521 +#: src/cryptsetup.c:3618 msgid "Suspend LUKS device and wipe key (all IOs are frozen)" msgstr "LUKS デバイスを停止してキーを削除します (全てのI/Oは停止します)" -#: src/cryptsetup.c:3522 +#: src/cryptsetup.c:3619 msgid "Resume suspended LUKS device" msgstr "停止していた LUKS デバイスを再開します" -#: src/cryptsetup.c:3523 +#: src/cryptsetup.c:3620 msgid "Backup LUKS device header and keyslots" msgstr "LUKS デバイスヘッダとキースロットをバックアップします" -#: src/cryptsetup.c:3524 +#: src/cryptsetup.c:3621 msgid "Restore LUKS device header and keyslots" msgstr "LUKS デバイスヘッダとキースロットをリストアします" -#: src/cryptsetup.c:3525 +#: src/cryptsetup.c:3622 msgid "<add|remove|import|export> <device>" msgstr "<add|remove|import|export> <デバイス>" -#: src/cryptsetup.c:3525 +#: src/cryptsetup.c:3622 msgid "Manipulate LUKS2 tokens" msgstr "LUKS2 トークンを操作します" -#: src/cryptsetup.c:3544 src/veritysetup.c:509 src/integritysetup.c:563 +#: src/cryptsetup.c:3641 src/veritysetup.c:509 src/integritysetup.c:563 msgid "" "\n" "<action> is one of:\n" @@ -2815,7 +2835,7 @@ msgstr "" "\n" "<action> は以下のうちの一つです:\n" -#: src/cryptsetup.c:3550 +#: src/cryptsetup.c:3647 msgid "" "\n" "You can also use old <action> syntax aliases:\n" @@ -2827,7 +2847,7 @@ msgstr "" "\topen: create (plainOpen), luksOpen, loopaesOpen, tcryptOpen, bitlkOpen, fvault2Open\n" "\tclose: remove (plainClose), luksClose, loopaesClose, tcryptClose, bitlkClose, fvault2Close\n" -#: src/cryptsetup.c:3554 +#: src/cryptsetup.c:3651 #, c-format msgid "" "\n" @@ -2842,7 +2862,7 @@ msgstr "" "<キースロット> は変更する LUKS キースロット番号\n" "<キーファイル> は luskAddKey でオプションで与えられる新しいキーのキーファイル\n" -#: src/cryptsetup.c:3561 +#: src/cryptsetup.c:3658 #, c-format msgid "" "\n" @@ -2851,7 +2871,7 @@ msgstr "" "\n" "デフォルトのコンパイル時に決められたメタデータ形式は %s です(luksFormat で使われます)。\n" -#: src/cryptsetup.c:3566 +#: src/cryptsetup.c:3663 msgid "" "\n" "LUKS2 external token plugin support is enabled.\n" @@ -2859,12 +2879,12 @@ msgstr "" "\n" "LUKS2 外部トークンプラグインサポートは有効です。\n" -#: src/cryptsetup.c:3567 +#: src/cryptsetup.c:3664 #, c-format msgid "LUKS2 external token plugin path: %s.\n" msgstr "LUKS2 外部トークンプラグインパス: %s.\n" -#: src/cryptsetup.c:3569 +#: src/cryptsetup.c:3666 msgid "" "\n" "LUKS2 external token plugin support is disabled.\n" @@ -2872,7 +2892,7 @@ msgstr "" "\n" "LUKS2 外部トークンプラグインサポートは無効です。\n" -#: src/cryptsetup.c:3573 +#: src/cryptsetup.c:3670 #, c-format msgid "" "\n" @@ -2889,7 +2909,7 @@ msgstr "" "デフォルト LUKS2 向け PBKDF: %s\n" "\t繰り返す時間: %d, 使うメモリ: %dkB, 並列スレッド: %d\n" -#: src/cryptsetup.c:3584 +#: src/cryptsetup.c:3681 #, c-format msgid "" "\n" @@ -2904,100 +2924,110 @@ msgstr "" "\tplain: %s, キー: %d ビット, パスワードハッシュ: %s\n" "\tLUKS: %s, キー: %d ビット, LUKS ヘッダハッシュ: %s, 乱数生成: %s\n" -#: src/cryptsetup.c:3593 +#: src/cryptsetup.c:3690 msgid "\tLUKS: Default keysize with XTS mode (two internal keys) will be doubled.\n" msgstr "\tLUKS: XTS モードのデフォルトキーサイズは (2つの内部キーがあるため) 倍になります。\n" -#: src/cryptsetup.c:3611 src/veritysetup.c:651 src/integritysetup.c:723 +#: src/cryptsetup.c:3708 src/veritysetup.c:651 src/integritysetup.c:723 #, c-format msgid "%s: requires %s as arguments" msgstr "%s: は %s を引数で与える必要があります" -#: src/cryptsetup.c:3651 src/utils_reencrypt_luks1.c:1198 +#: src/cryptsetup.c:3748 src/utils_reencrypt_luks1.c:1198 msgid "Key slot is invalid." msgstr "キースロットは不正です。" -#: src/cryptsetup.c:3678 +#: src/cryptsetup.c:3776 msgid "Device size must be multiple of 512 bytes sector." msgstr "デバイスサイズは 512 バイトセクタの倍数である必要があります。" -#: src/cryptsetup.c:3683 +#: src/cryptsetup.c:3781 msgid "Invalid max reencryption hotzone size specification." msgstr "再暗号化ホットゾーン最大サイズの指定が不正です。" -#: src/cryptsetup.c:3697 src/cryptsetup.c:3709 +#: src/cryptsetup.c:3795 src/cryptsetup.c:3807 msgid "Key size must be a multiple of 8 bits" msgstr "キーサイズは 8bit の倍数でなければなりません" -#: src/cryptsetup.c:3714 +#: src/cryptsetup.c:3814 +#, c-format +msgid "At most %d volume key specifications can be supplied." +msgstr "多くても %d 個のボリュームキーしか指定できません。" + +#: src/cryptsetup.c:3826 +#, c-format +msgid "At most %d keyring link specifications can be supplied." +msgstr "多くても %d 個のキーリングリンクしか指定できません。" + +#: src/cryptsetup.c:3835 msgid "Maximum device reduce size is 1 GiB." msgstr "デバイスを減らせる最大値は 1 GiB です。" -#: src/cryptsetup.c:3717 +#: src/cryptsetup.c:3838 msgid "Reduce size must be multiple of 512 bytes sector." msgstr "減らすサイズは 512 バイトセクタの倍数である必要があります。" -#: src/cryptsetup.c:3734 +#: src/cryptsetup.c:3855 msgid "Option --priority can be only ignore/normal/prefer." msgstr "--priority の引数は ignore/normal/prefer のいずれかのみです。" -#: src/cryptsetup.c:3753 src/veritysetup.c:572 src/integritysetup.c:643 +#: src/cryptsetup.c:3874 src/veritysetup.c:572 src/integritysetup.c:643 msgid "Show this help message" msgstr "このヘルプを表示します" -#: src/cryptsetup.c:3754 src/veritysetup.c:573 src/integritysetup.c:644 +#: src/cryptsetup.c:3875 src/veritysetup.c:573 src/integritysetup.c:644 msgid "Display brief usage" msgstr "コンパクトな使用法表示をします" -#: src/cryptsetup.c:3755 src/veritysetup.c:574 src/integritysetup.c:645 +#: src/cryptsetup.c:3876 src/veritysetup.c:574 src/integritysetup.c:645 msgid "Print package version" msgstr "パッケージのバージョンを表示" -#: src/cryptsetup.c:3766 src/veritysetup.c:585 src/integritysetup.c:656 +#: src/cryptsetup.c:3887 src/veritysetup.c:585 src/integritysetup.c:656 msgid "Help options:" msgstr "ヘルプオプション:" -#: src/cryptsetup.c:3789 src/veritysetup.c:606 src/integritysetup.c:676 +#: src/cryptsetup.c:3910 src/veritysetup.c:606 src/integritysetup.c:676 msgid "[OPTION...] <action> <action-specific>" msgstr "[オプション...] <アクション> <アクション特有>" -#: src/cryptsetup.c:3798 src/veritysetup.c:615 src/integritysetup.c:687 +#: src/cryptsetup.c:3919 src/veritysetup.c:615 src/integritysetup.c:687 msgid "Argument <action> missing." msgstr "<アクション> がありません。" -#: src/cryptsetup.c:3877 src/veritysetup.c:646 src/integritysetup.c:718 +#: src/cryptsetup.c:3998 src/veritysetup.c:646 src/integritysetup.c:718 msgid "Unknown action." msgstr "未知のアクションです。" -#: src/cryptsetup.c:3895 +#: src/cryptsetup.c:4016 msgid "Option --key-file takes precedence over specified key file argument." msgstr "--key-file は他で指定されたキーファイルを上書きします。" -#: src/cryptsetup.c:3901 +#: src/cryptsetup.c:4022 msgid "Only one --key-file argument is allowed." msgstr "--key-file は一つしか使えません。" -#: src/cryptsetup.c:3906 +#: src/cryptsetup.c:4027 msgid "Password-based key derivation function (PBKDF) can be only pbkdf2 or argon2i/argon2id." msgstr "パスワードからキーを作る関数 (PBKDF) は pbkdf2 argon2i argon2id のいずれかのみです。" -#: src/cryptsetup.c:3911 +#: src/cryptsetup.c:4032 msgid "PBKDF forced iterations cannot be combined with iteration time option." msgstr "PBKDF の繰り返し回数の強制と繰り返し時間指定オプションは共存できません。" -#: src/cryptsetup.c:3916 +#: src/cryptsetup.c:4037 msgid "Cannot link volume key to a keyring when keyring is disabled." msgstr "キーリングが無効化されているためボリュームキーをキーリングにリンクできません。" -#: src/cryptsetup.c:3927 +#: src/cryptsetup.c:4048 msgid "Options --keyslot-cipher and --keyslot-key-size must be used together." msgstr "--keyslot-cipher と --keyslot-key-size は同時に使う必要があります。" -#: src/cryptsetup.c:3935 +#: src/cryptsetup.c:4056 msgid "No action taken. Invoked with --test-args option.\n" msgstr "--test-args オプションつきだったため、何もしません。\n" -#: src/cryptsetup.c:3948 +#: src/cryptsetup.c:4069 msgid "Cannot disable metadata locking." msgstr "メタデータロックを禁止できません。" @@ -3462,20 +3492,20 @@ msgstr "使用可能なキースロットがありません。" msgid "Can't do passphrase verification on non-tty inputs." msgstr "tty 入力以外ではパスフレーズ認証できません。" -#: src/utils_luks.c:183 +#: src/utils_luks.c:186 #, c-format msgid "Failed to open file %s in read-only mode." msgstr "ファイル %s を読み込み専用モードでオープンできません。" -#: src/utils_luks.c:196 +#: src/utils_luks.c:199 msgid "Provide valid LUKS2 token JSON:\n" msgstr "妥当な LUKS2 トークンを JSON で与えてください:\n" -#: src/utils_luks.c:203 +#: src/utils_luks.c:206 msgid "Failed to read JSON file." msgstr "JSON ファイルを読み込めません。" -#: src/utils_luks.c:208 +#: src/utils_luks.c:211 msgid "" "\n" "Read interrupted." @@ -3483,12 +3513,12 @@ msgstr "" "\n" "読み込みが中断されました。" -#: src/utils_luks.c:249 +#: src/utils_luks.c:252 #, c-format msgid "Failed to open file %s in write mode." msgstr "ファイル %s を書き込みモードでオープンできません。" -#: src/utils_luks.c:258 +#: src/utils_luks.c:261 msgid "" "\n" "Write interrupted." @@ -3496,7 +3526,7 @@ msgstr "" "\n" "書き込みが中断されました。" -#: src/utils_luks.c:262 +#: src/utils_luks.c:265 msgid "Failed to write JSON file." msgstr "JSON ファイルに書き込めません。" @@ -3584,7 +3614,7 @@ msgstr "" "要求された --sector-size %<PRIu32> は %s superblock\n" "(ブロックサイズ: %<PRIu32> バイト、デバイス %s)と互換性がありません。" -#: src/utils_reencrypt.c:533 src/utils_reencrypt.c:1412 +#: src/utils_reencrypt.c:533 src/utils_reencrypt.c:1421 msgid "Encryption without detached header (--header) is not possible without data device size reduction (--reduce-device-size)." msgstr "データデバイスサイズの縮小(--reduce-device-size)なしに分離ヘッダ(--header)による暗号化はできません。" @@ -3634,53 +3664,53 @@ msgstr "オリジナルの LUKS2 ヘッダを復元しています。" msgid "Original LUKS2 header restore failed." msgstr "オリジナルの LUKS ヘッダの復元に失敗しました。" -#: src/utils_reencrypt.c:759 +#: src/utils_reencrypt.c:765 #, c-format msgid "Header file %s does not exist. Do you want to initialize LUKS2 decryption of device %s and export LUKS2 header to file %s?" msgstr "ヘッダファイル %s が存在しません。デバイス %s の復号化をして LUKS2 ヘッダをファイル %s に出力しますか？" -#: src/utils_reencrypt.c:807 +#: src/utils_reencrypt.c:815 msgid "Failed to add read/write permissions to exported header file." msgstr "エクスポートされたヘッダファイルに読み書き権限を付与できません。" -#: src/utils_reencrypt.c:860 +#: src/utils_reencrypt.c:869 #, c-format msgid "Reencryption initialization failed. Header backup is available in %s." msgstr "再暗号化の初期化に失敗しました。ヘッダのバックアップは %s にあります。" -#: src/utils_reencrypt.c:888 +#: src/utils_reencrypt.c:897 msgid "LUKS2 decryption is supported with detached header device only (with data offset set to 0)." msgstr "LUKS2 復号は分離(detached)ヘッダデバイスしかサポートしていません(データへのオフセットが0)。" -#: src/utils_reencrypt.c:1023 src/utils_reencrypt.c:1032 +#: src/utils_reencrypt.c:1032 src/utils_reencrypt.c:1041 msgid "Not enough free keyslots for reencryption." msgstr "再暗号化に必要な空きキースロットがありません。" -#: src/utils_reencrypt.c:1053 src/utils_reencrypt_luks1.c:1100 +#: src/utils_reencrypt.c:1062 src/utils_reencrypt_luks1.c:1100 msgid "Key file can be used only with --key-slot or with exactly one key slot active." msgstr "キーファイルは --key-slot と使うか、1 つのキースロットだけアクティブの時にしか使えません。" -#: src/utils_reencrypt.c:1062 src/utils_reencrypt_luks1.c:1147 +#: src/utils_reencrypt.c:1071 src/utils_reencrypt_luks1.c:1147 #: src/utils_reencrypt_luks1.c:1158 #, c-format msgid "Enter passphrase for key slot %d: " msgstr "キースロット %d のパスフレーズを入力してください: " -#: src/utils_reencrypt.c:1074 +#: src/utils_reencrypt.c:1083 #, c-format msgid "Enter passphrase for key slot %u: " msgstr "キースロット %u のパスフレーズを入力してください: " -#: src/utils_reencrypt.c:1126 +#: src/utils_reencrypt.c:1135 #, c-format msgid "Switching data encryption cipher to %s.\n" msgstr "データの暗号化用の暗号アルゴリズムを %s にします。\n" -#: src/utils_reencrypt.c:1180 +#: src/utils_reencrypt.c:1189 msgid "No data segment parameters changed. Reencryption aborted." msgstr "データセグメントのパラメータが変わっていません。再暗号化を中止します。" -#: src/utils_reencrypt.c:1282 +#: src/utils_reencrypt.c:1291 msgid "" "Encryption sector size increase on offline device is not supported.\n" "Activate the device first or use --force-offline-reencrypt option (dangerous!)." @@ -3688,7 +3718,7 @@ msgstr "" "オフラインデバイスの暗号化セクタサイズの増加はサポートしていません。\n" "まずデバイスをアクティベートするか、--force-offline-reencrypt オプションを使ってください (ただし危険です！)。" -#: src/utils_reencrypt.c:1322 src/utils_reencrypt_luks1.c:726 +#: src/utils_reencrypt.c:1331 src/utils_reencrypt_luks1.c:726 #: src/utils_reencrypt_luks1.c:798 msgid "" "\n" @@ -3697,58 +3727,58 @@ msgstr "" "\n" "再暗号化が中断されました。" -#: src/utils_reencrypt.c:1327 +#: src/utils_reencrypt.c:1336 msgid "Resuming LUKS reencryption in forced offline mode.\n" msgstr "LUKS 再暗号化を強制オフラインモードで再開します。\n" -#: src/utils_reencrypt.c:1350 +#: src/utils_reencrypt.c:1359 #, c-format msgid "Device %s contains broken LUKS metadata. Aborting operation." msgstr "デバイス %s は壊れた LUKS メタデータを含んでいます。処理を中止します。" -#: src/utils_reencrypt.c:1366 src/utils_reencrypt.c:1388 +#: src/utils_reencrypt.c:1375 src/utils_reencrypt.c:1397 #, c-format msgid "Device %s is already LUKS device. Aborting operation." msgstr "デバイス %s は既に LUKS デバイスです。処理を中止します。" -#: src/utils_reencrypt.c:1394 +#: src/utils_reencrypt.c:1403 #, c-format msgid "Device %s is already in LUKS reencryption. Aborting operation." msgstr "デバイス %s は既に LUKS 再暗号化状態にあります。処理を中止します。" -#: src/utils_reencrypt.c:1476 +#: src/utils_reencrypt.c:1485 msgid "LUKS2 decryption requires --header option." msgstr "LUKS2 復号には --header オプションが必要です。" -#: src/utils_reencrypt.c:1524 +#: src/utils_reencrypt.c:1533 msgid "Command requires device as argument." msgstr "コマンドはデバイスを引数として必要とします。" -#: src/utils_reencrypt.c:1537 +#: src/utils_reencrypt.c:1546 #, c-format msgid "Conflicting versions. Device %s is LUKS1." msgstr "バージョンが衝突しています。デバイス %s は LUKS1 です。" -#: src/utils_reencrypt.c:1543 +#: src/utils_reencrypt.c:1552 #, c-format msgid "Conflicting versions. Device %s is in LUKS1 reencryption." msgstr "バージョンが衝突しています。デバイス %s は LUKS1 再暗号化状態にあります。" -#: src/utils_reencrypt.c:1549 +#: src/utils_reencrypt.c:1558 #, c-format msgid "Conflicting versions. Device %s is LUKS2." msgstr "バージョンが衝突しています。デバイス %s は LUKS2 です。" -#: src/utils_reencrypt.c:1555 +#: src/utils_reencrypt.c:1564 #, c-format msgid "Conflicting versions. Device %s is in LUKS2 reencryption." msgstr "バージョンが衝突しています。デバイス %s は LUKS2 再暗号化状態にあります。" -#: src/utils_reencrypt.c:1561 +#: src/utils_reencrypt.c:1570 msgid "LUKS2 reencryption already initialized. Aborting operation." msgstr "LUKS2 再暗号化が既に初期化済なので操作を中止します。" -#: src/utils_reencrypt.c:1568 +#: src/utils_reencrypt.c:1577 msgid "Device reencryption not in progress." msgstr "再暗号化処理を実行中ではありません。" @@ -1,14 +1,14 @@ # Polish translation for cryptsetup. # Copyright (C) 2010 Free Software Foundation, Inc. # This file is put in the public domain. -# Jakub Bogusz <qboosh@pld-linux.org>, 2010-2023. +# Jakub Bogusz <qboosh@pld-linux.org>, 2010-2024. # msgid "" msgstr "" -"Project-Id-Version: cryptsetup 2.7.0-rc1\n" +"Project-Id-Version: cryptsetup 2.7.1-rc0\n" "Report-Msgid-Bugs-To: cryptsetup@lists.linux.dev\n" -"POT-Creation-Date: 2023-12-20 15:16+0100\n" -"PO-Revision-Date: 2023-12-22 20:05+0100\n" +"POT-Creation-Date: 2024-02-29 20:38+0100\n" +"PO-Revision-Date: 2024-03-01 18:09+0100\n" "Last-Translator: Jakub Bogusz <qboosh@pld-linux.org>\n" "Language-Team: Polish <translation-team-pl@lists.sourceforge.net>\n" "Language: pl\n" @@ -115,632 +115,640 @@ msgstr "Nieznane żądanie jakości RNG." msgid "Error reading from RNG." msgstr "Błąd odczytu z RNG." -#: lib/setup.c:261 +#: lib/setup.c:262 msgid "OPAL support is disabled in libcryptsetup." msgstr "Obsługa OPAL jest wyłączona w libcryptsetup." -#: lib/setup.c:263 +#: lib/setup.c:264 #, c-format msgid "Device %s or kernel does not support OPAL encryption." msgstr "Urządzenie %s lub jądro nie obsługuje szyfrowania OPAL." -#: lib/setup.c:279 +#: lib/setup.c:280 msgid "Cannot initialize crypto RNG backend." msgstr "Nie można zainicjować backendu kryptograficznego RNG." -#: lib/setup.c:285 +#: lib/setup.c:286 msgid "Cannot initialize crypto backend." msgstr "Nie można zainicjować backendu kryptograficznego." -#: lib/setup.c:317 lib/setup.c:2777 lib/verity/verity.c:122 +#: lib/setup.c:318 lib/setup.c:2778 lib/verity/verity.c:122 #, c-format msgid "Hash algorithm %s not supported." msgstr "Algorytm skrótu %s nie jest obsługiwany." -#: lib/setup.c:320 lib/loopaes/loopaes.c:90 +#: lib/setup.c:321 lib/loopaes/loopaes.c:90 #, c-format msgid "Key processing error (using hash %s)." msgstr "Błąd przetwarzania klucza (użyto algorytmu skrótu %s)." -#: lib/setup.c:391 lib/setup.c:428 +#: lib/setup.c:392 lib/setup.c:429 msgid "Cannot determine device type. Incompatible activation of device?" msgstr "Nie można określić rodzaju urządzenia. Niezgodny sposób uaktywniania urządzenia?" -#: lib/setup.c:397 lib/setup.c:3971 +#: lib/setup.c:398 lib/setup.c:3973 msgid "This operation is supported only for LUKS device." msgstr "Ta operacja jest obsługiwana tylko dla urządzeń LUKS." -#: lib/setup.c:434 +#: lib/setup.c:435 msgid "This operation is supported only for LUKS2 device." msgstr "Ta operacja jest obsługiwana tylko dla urządzeń LUKS2." -#: lib/setup.c:491 lib/luks2/luks2_reencrypt.c:3056 +#: lib/setup.c:492 lib/luks2/luks2_reencrypt.c:3071 msgid "All key slots full." msgstr "Wszyskie miejsca na klucze są pełne." -#: lib/setup.c:502 +#: lib/setup.c:503 #, c-format msgid "Key slot %d is invalid, please select between 0 and %d." msgstr "Numer klucza %d jest błędny, proszę wybrać wartość między 0 a %d." -#: lib/setup.c:508 +#: lib/setup.c:509 #, c-format msgid "Key slot %d is full, please select another one." msgstr "Miejsce na klucz %d jest pełne, proszę wybrać inne." -#: lib/setup.c:619 lib/setup.c:3672 +#: lib/setup.c:620 lib/setup.c:3673 msgid "Device size is not aligned to device logical block size." msgstr "Rozmiar urządzenia nie jest wyrównany do rozmiaru bloku logicznego urządzenia." -#: lib/setup.c:717 +#: lib/setup.c:718 #, c-format msgid "Header detected but device %s is too small." msgstr "Wykryto nagłówek, ale urządzenie %s jest zbyt małe." -#: lib/setup.c:758 lib/setup.c:3563 lib/setup.c:5163 -#: lib/luks2/luks2_reencrypt.c:3848 lib/luks2/luks2_reencrypt.c:4305 +#: lib/setup.c:759 lib/setup.c:3564 lib/setup.c:5351 lib/setup.c:5371 +#: lib/luks2/luks2_reencrypt.c:3863 lib/luks2/luks2_reencrypt.c:4320 msgid "This operation is not supported for this device type." msgstr "Ta operacja nie jest obsługiwana dla tego rodzaju urządzenia." -#: lib/setup.c:763 +#: lib/setup.c:764 msgid "Illegal operation with reencryption in-progress." msgstr "Niedozwolona operacja w trakcie ponownego szyfrowania." -#: lib/setup.c:895 +#: lib/setup.c:896 msgid "Failed to rollback LUKS2 metadata in memory." msgstr "Nie udało się wycofać zmian w metadanych LUKS2 w pamięci." -#: lib/setup.c:982 lib/luks1/keymanage.c:249 lib/luks1/keymanage.c:527 -#: lib/luks2/luks2_json_metadata.c:1374 src/cryptsetup.c:1799 -#: src/cryptsetup.c:1962 src/cryptsetup.c:2017 src/cryptsetup.c:2222 -#: src/cryptsetup.c:2392 src/cryptsetup.c:2673 src/cryptsetup.c:2981 -#: src/cryptsetup.c:3049 src/utils_reencrypt.c:1488 +#: lib/setup.c:983 lib/luks1/keymanage.c:249 lib/luks1/keymanage.c:527 +#: lib/luks2/luks2_json_metadata.c:1374 src/cryptsetup.c:1878 +#: src/cryptsetup.c:2059 src/cryptsetup.c:2114 src/cryptsetup.c:2319 +#: src/cryptsetup.c:2489 src/cryptsetup.c:2770 src/cryptsetup.c:3078 +#: src/cryptsetup.c:3146 src/utils_reencrypt.c:1497 #: src/utils_reencrypt_luks1.c:1192 tokens/ssh/cryptsetup-ssh.c:85 #, c-format msgid "Device %s is not a valid LUKS device." msgstr "Urządzenie %s nie jest prawidłowym urządzeniem LUKS." -#: lib/setup.c:985 lib/luks1/keymanage.c:530 +#: lib/setup.c:986 lib/luks1/keymanage.c:530 #, c-format msgid "Unsupported LUKS version %d." msgstr "Nieobsługiwana wersja LUKS %d." -#: lib/setup.c:1358 +#: lib/setup.c:1359 #, c-format msgid "No known cipher specification pattern detected for active device %s." msgstr "Nie wykryto znanego wzorca określającego szyfr dla aktywnego urządzenia %s." -#: lib/setup.c:1604 lib/setup.c:3317 lib/setup.c:3399 lib/setup.c:3411 -#: lib/setup.c:3581 lib/setup.c:5755 +#: lib/setup.c:1605 lib/setup.c:3318 lib/setup.c:3400 lib/setup.c:3412 +#: lib/setup.c:3582 lib/setup.c:5995 #, c-format msgid "Device %s is not active." msgstr "Urządzenie %s nie jest aktywne." -#: lib/setup.c:1621 +#: lib/setup.c:1622 #, c-format msgid "Underlying device for crypt device %s disappeared." msgstr "Urządzenie stojące za urządzeniem szyfrowanym %s zniknęło." -#: lib/setup.c:1703 +#: lib/setup.c:1704 msgid "Invalid plain crypt parameters." msgstr "Błędne parametry szyfru plain." -#: lib/setup.c:1708 lib/setup.c:2680 +#: lib/setup.c:1709 lib/setup.c:2681 msgid "Invalid key size." msgstr "Błędny rozmiar klucza." -#: lib/setup.c:1713 lib/setup.c:2685 lib/setup.c:2888 +#: lib/setup.c:1714 lib/setup.c:2686 lib/setup.c:2889 msgid "UUID is not supported for this crypt type." msgstr "UUID nie jest obsługiwany dla tego rodzaju szyfrowania." -#: lib/setup.c:1718 lib/setup.c:2690 +#: lib/setup.c:1719 lib/setup.c:2691 msgid "Detached metadata device is not supported for this crypt type." msgstr "Osobne urządzenie metadanych nie jest obsługiwane dla tego rodzaju szyfrowania." -#: lib/setup.c:1728 lib/setup.c:1963 lib/luks2/luks2_reencrypt.c:3012 -#: src/cryptsetup.c:1467 src/cryptsetup.c:3726 +#: lib/setup.c:1729 lib/setup.c:1964 lib/luks2/luks2_reencrypt.c:3027 +#: src/cryptsetup.c:1475 src/cryptsetup.c:3847 msgid "Unsupported encryption sector size." msgstr "Nieobsługiwany rozmiar sektora szyfrowania." -#: lib/setup.c:1736 lib/setup.c:1992 lib/setup.c:3666 +#: lib/setup.c:1737 lib/setup.c:1993 lib/setup.c:3667 msgid "Device size is not aligned to requested sector size." msgstr "Rozmiar urządzenia nie jest wyrównany do żądanego rozmiaru sektura." -#: lib/setup.c:1788 lib/setup.c:2025 lib/setup.c:2357 +#: lib/setup.c:1789 lib/setup.c:2026 lib/setup.c:2358 msgid "Can't format LUKS without device." msgstr "Nie można sformatować LUKS-a bez urządzenia." -#: lib/setup.c:1794 lib/setup.c:2031 lib/setup.c:2363 +#: lib/setup.c:1795 lib/setup.c:2032 lib/setup.c:2364 msgid "Requested data alignment is not compatible with data offset." msgstr "Żądane wyrównanie metadanych nie jest zgodne z offsetem danych." -#: lib/setup.c:1834 lib/setup.c:2049 +#: lib/setup.c:1835 lib/setup.c:2050 msgid "WARNING: DAX device can corrupt data as it does not guarantee atomic sector updates.\n" msgstr "UWAGA: urządzenie DAX może uszkodzić dane, ponieważ nie gwarantuje atomowych uaktualnień sektorów.\n" -#: lib/setup.c:1872 lib/setup.c:2144 lib/setup.c:2165 lib/setup.c:2541 -#: lib/setup.c:2587 lib/setup.c:2900 +#: lib/setup.c:1873 lib/setup.c:2145 lib/setup.c:2166 lib/setup.c:2542 +#: lib/setup.c:2588 lib/setup.c:2901 #, c-format msgid "Cannot wipe header on device %s." msgstr "Nie można wymazać nagłówka na urządzeniu %s." -#: lib/setup.c:1885 lib/setup.c:2204 +#: lib/setup.c:1886 lib/setup.c:2205 #, c-format msgid "Device %s is too small for activation, there is no remaining space for data.\n" msgstr "Urządzenie %s jest zbyt małe do uaktywnienia, nie ma miejsca pozostałego na dane.\n" -#: lib/setup.c:1925 +#: lib/setup.c:1926 msgid "Volume key is too small for encryption with integrity extensions." msgstr "Klucz wolumenu jest zbyt mały do szyfrowania z rozszerzeniami integralności." -#: lib/setup.c:1934 +#: lib/setup.c:1935 #, c-format msgid "Cipher %s-%s (key size %zd bits) is not available." msgstr "Szyfr %s-%s (rozmiar klucza w bitach: %zd) nie jest dostępny." -#: lib/setup.c:1973 +#: lib/setup.c:1974 msgid "WARNING: The device activation will fail, dm-crypt is missing support for requested encryption sector size.\n" msgstr "UWAGA: uaktywnienie urządzenia się nie powiedzie, dm-crypt nie ma obsługi żądanego rozmiaru sektora szyfrowania.\n" -#: lib/setup.c:2147 lib/setup.c:2484 lib/setup.c:2544 lib/utils_device.c:917 -#: lib/luks1/keyencryption.c:255 lib/luks2/luks2_reencrypt.c:3080 -#: lib/luks2/luks2_reencrypt.c:4364 +#: lib/setup.c:2148 lib/setup.c:2485 lib/setup.c:2545 lib/utils_device.c:917 +#: lib/luks1/keyencryption.c:255 lib/luks2/luks2_reencrypt.c:3095 +#: lib/luks2/luks2_reencrypt.c:4380 #, c-format msgid "Device %s is too small." msgstr "Urządzenie %s jest zbyt małe." -#: lib/setup.c:2158 lib/setup.c:2184 lib/setup.c:2580 lib/setup.c:2626 +#: lib/setup.c:2159 lib/setup.c:2185 lib/setup.c:2581 lib/setup.c:2627 #, c-format msgid "Cannot format device %s in use." msgstr "Nie można sformatować urządzenia %s, które jest w użyciu." -#: lib/setup.c:2161 lib/setup.c:2187 lib/setup.c:2583 lib/setup.c:2629 +#: lib/setup.c:2162 lib/setup.c:2188 lib/setup.c:2584 lib/setup.c:2630 #, c-format msgid "Cannot format device %s, permission denied." msgstr "Nie można sformatować urządzenia %s, brak uprawnień." -#: lib/setup.c:2173 lib/setup.c:2600 lib/setup.c:2960 +#: lib/setup.c:2174 lib/setup.c:2601 lib/setup.c:2961 #, c-format msgid "Cannot format integrity for device %s." msgstr "Nie można sformatować integralności dla urządzenia %s." -#: lib/setup.c:2191 lib/setup.c:2637 +#: lib/setup.c:2192 lib/setup.c:2638 #, c-format msgid "Cannot format device %s." msgstr "Nie można sformatować urządzenia %s." -#: lib/setup.c:2234 +#: lib/setup.c:2235 msgid "Cannot get OPAL alignment parameters." msgstr "Nie można pobrać parametrów wyrównania OPAL." -#: lib/setup.c:2243 +#: lib/setup.c:2244 msgid "Bogus OPAL logical block size." msgstr "Błędny rozmiar bloku logicznego OPAL." -#: lib/setup.c:2249 +#: lib/setup.c:2250 msgid "Requested data offset is not compatible with OPAL block size." msgstr "Żądana pozycja danych nie jest zgodna z rozmiarem bloku OPAL." -#: lib/setup.c:2256 +#: lib/setup.c:2257 msgid "Requested data alignment is not compatible with OPAL alignment." msgstr "Żądane wyrównanie danych nie jest zgodne z wyrównaniem OPAL." -#: lib/setup.c:2276 +#: lib/setup.c:2277 msgid "Data offset does not satisfy OPAL alignment requirements." msgstr "Pozycja danych nie jest zgodna z wymaganiami wyrównania OPAL." -#: lib/setup.c:2289 +#: lib/setup.c:2290 msgid "Requested data alignment does not satisfy locking range alignment requirements." msgstr "Żądane wyrównanie danych nie jest zgodne z wymaganiami wyrównania zakresu blokowania." -#: lib/setup.c:2494 +#: lib/setup.c:2495 #, c-format msgid "Compensating device size by %<PRIu64> sectors to align it with OPAL alignment granularity." msgstr "Kompensacja rozmiaru urządzenia o %<PRIu64> sektorów, aby wyrównać do rozdzielczości wyrównania OPAL." -#: lib/setup.c:2552 lib/setup.c:4068 lib/setup.c:4223 lib/utils_wipe.c:368 +#: lib/setup.c:2553 lib/setup.c:4070 lib/setup.c:4253 lib/utils_wipe.c:368 #: lib/luks2/luks2_json_metadata.c:2703 lib/luks2/luks2_json_metadata.c:2955 #, c-format msgid "Failed to acquire OPAL lock on device %s." msgstr "Nie udało się uzyskać blokady OPAL na urządzeniu %s." -#: lib/setup.c:2561 +#: lib/setup.c:2562 msgid "Incorrect OPAL Admin key." msgstr "Niepoprawny klucz administratora OPAL." -#: lib/setup.c:2563 +#: lib/setup.c:2564 msgid "Cannot setup OPAL segment." msgstr "Nie można ustawić segmentu OPAL." -#: lib/setup.c:2633 +#: lib/setup.c:2634 #, c-format msgid "Cannot format device %s, OPAL device seems to be fully write-protected now." msgstr "Nie można sformatować urządzenia %s, urządzenie OPAL obecnie wygląda na w pełni zabezpieczone przed zapisem." -#: lib/setup.c:2635 +#: lib/setup.c:2636 msgid "This is perhaps a bug in firmware. Run OPAL PSID reset and reconnect for recovery." msgstr "To prawdopodobnie błąd w oprogramowaniu sprzętowym. W celu odtworzenia można zresetować PSID OPAL i połączyć ponownie." -#: lib/setup.c:2655 +#: lib/setup.c:2656 #, c-format msgid "Locking range %d reset on device %s failed." msgstr "Reset zakresu blokowania %d na urządzeniu %s nie powiódł się." -#: lib/setup.c:2675 +#: lib/setup.c:2676 msgid "Can't format LOOPAES without device." msgstr "Nie można sformatować urządzenia LUKSAES bez urządzenia." -#: lib/setup.c:2720 +#: lib/setup.c:2721 msgid "Can't format VERITY without device." msgstr "Nie można sformatować VERITY bez urządzenia." -#: lib/setup.c:2731 lib/verity/verity.c:101 +#: lib/setup.c:2732 lib/verity/verity.c:101 #, c-format msgid "Unsupported VERITY hash type %d." msgstr "Nieobsługiwany typ hasza VERITY %d." -#: lib/setup.c:2737 lib/verity/verity.c:109 +#: lib/setup.c:2738 lib/verity/verity.c:109 msgid "Unsupported VERITY block size." msgstr "Nieobsługiwany rozmiar bloku VERITY." -#: lib/setup.c:2742 lib/verity/verity.c:74 +#: lib/setup.c:2743 lib/verity/verity.c:74 msgid "Unsupported VERITY hash offset." msgstr "Nieobsługiwany offset hasza VERITY." -#: lib/setup.c:2747 +#: lib/setup.c:2748 msgid "Unsupported VERITY FEC offset." msgstr "Nieobsługiwany offset FEC VERITY." -#: lib/setup.c:2771 +#: lib/setup.c:2772 msgid "Data area overlaps with hash area." msgstr "Obszar danych zachodzi na obszar skrótów." -#: lib/setup.c:2796 +#: lib/setup.c:2797 msgid "Hash area overlaps with FEC area." msgstr "Obszar skrótu zachodzi na obszar FEC." -#: lib/setup.c:2803 +#: lib/setup.c:2804 msgid "Data area overlaps with FEC area." msgstr "Obszar danych zachodzi na obszar FEC." -#: lib/setup.c:2939 +#: lib/setup.c:2940 #, c-format msgid "WARNING: Requested tag size %d bytes differs from %s size output (%d bytes).\n" msgstr "UWAGA: żądany rozmiar znacznika %d B różni się od rozmiaru wyjścia %s (%d B).\n" -#: lib/setup.c:3018 +#: lib/setup.c:3019 #, c-format msgid "Unknown crypt device type %s requested." msgstr "Nieznany typ żądanego urządzenia szyfrującego %s." -#: lib/setup.c:3325 lib/setup.c:3404 lib/setup.c:3417 +#: lib/setup.c:3326 lib/setup.c:3405 lib/setup.c:3418 #, c-format msgid "Unsupported parameters on device %s." msgstr "Nieobsługiwane parametry urządzenia %s." -#: lib/setup.c:3331 lib/setup.c:3424 lib/luks2/luks2_reencrypt.c:2908 -#: lib/luks2/luks2_reencrypt.c:3145 lib/luks2/luks2_reencrypt.c:3540 +#: lib/setup.c:3332 lib/setup.c:3425 lib/luks2/luks2_reencrypt.c:2923 +#: lib/luks2/luks2_reencrypt.c:3160 lib/luks2/luks2_reencrypt.c:3555 #, c-format msgid "Mismatching parameters on device %s." msgstr "Niezgodne parametry dla urządzenia %s." -#: lib/setup.c:3448 +#: lib/setup.c:3449 msgid "Crypt devices mismatch." msgstr "Urządzenia szyfrowane nie zgadzają się." -#: lib/setup.c:3485 lib/setup.c:3490 lib/luks2/luks2_reencrypt.c:2390 -#: lib/luks2/luks2_reencrypt.c:2924 lib/luks2/luks2_reencrypt.c:4109 +#: lib/setup.c:3486 lib/setup.c:3491 lib/luks2/luks2_reencrypt.c:2405 +#: lib/luks2/luks2_reencrypt.c:2939 lib/luks2/luks2_reencrypt.c:4124 #, c-format msgid "Failed to reload device %s." msgstr "Nie udało się przeładować urządzenia %s." -#: lib/setup.c:3496 lib/setup.c:3502 lib/luks2/luks2_reencrypt.c:2361 -#: lib/luks2/luks2_reencrypt.c:2368 lib/luks2/luks2_reencrypt.c:2938 +#: lib/setup.c:3497 lib/setup.c:3503 lib/luks2/luks2_reencrypt.c:2376 +#: lib/luks2/luks2_reencrypt.c:2383 lib/luks2/luks2_reencrypt.c:2953 #, c-format msgid "Failed to suspend device %s." msgstr "Nie udało się wstrzymać urządzenia %s." -#: lib/setup.c:3508 lib/luks2/luks2_reencrypt.c:2375 -#: lib/luks2/luks2_reencrypt.c:2959 lib/luks2/luks2_reencrypt.c:4022 -#: lib/luks2/luks2_reencrypt.c:4113 +#: lib/setup.c:3509 lib/luks2/luks2_reencrypt.c:2390 +#: lib/luks2/luks2_reencrypt.c:2974 lib/luks2/luks2_reencrypt.c:4037 +#: lib/luks2/luks2_reencrypt.c:4128 #, c-format msgid "Failed to resume device %s." msgstr "Nie udało wznowić urządzenia %s." -#: lib/setup.c:3523 +#: lib/setup.c:3524 #, c-format msgid "Fatal error while reloading device %s (on top of device %s)." msgstr "Błąd krytyczny przy przeładowywaniu urządzenia %s (w oparciu o urządzenie %s)." -#: lib/setup.c:3526 lib/setup.c:3528 +#: lib/setup.c:3527 lib/setup.c:3529 #, c-format msgid "Failed to switch device %s to dm-error." msgstr "Nie udało się przełączyć urządzenia %s na dm-error." -#: lib/setup.c:3568 +#: lib/setup.c:3569 msgid "Can not resize LUKS2 device with static size." msgstr "Nie można zmienić rozmiaru urządzenia LUKS2 o rozmiarze statycznym." -#: lib/setup.c:3613 +#: lib/setup.c:3614 msgid "Cannot resize loop device." msgstr "Nie można zmienić rozmiaru urządzenia loopback." -#: lib/setup.c:3657 +#: lib/setup.c:3658 msgid "WARNING: Maximum size already set or kernel doesn't support resize.\n" msgstr "UWAGA: maksymalny rozmiar jest już ustawiony lub jądro nie obsługuje zmiany rozmiaru.\n" -#: lib/setup.c:3723 +#: lib/setup.c:3724 msgid "Resize failed, the kernel doesn't support it." msgstr "Zmiana rozmiaru nie powiodła się, jądro tego nie obsługuje." -#: lib/setup.c:3755 +#: lib/setup.c:3756 msgid "Do you really want to change UUID of device?" msgstr "Czy na pewno zmienić UUID urządzenia?" -#: lib/setup.c:3847 +#: lib/setup.c:3848 msgid "Header backup file does not contain compatible LUKS header." msgstr "Plik nagłówka kopii zapasowej nie zawiera zgodnego nagłówka LUKS." -#: lib/setup.c:3956 +#: lib/setup.c:3958 #, c-format msgid "Volume %s is not active." msgstr "Wolumen %s nie jest aktywny." -#: lib/setup.c:4022 +#: lib/setup.c:4024 #, c-format msgid "Volume %s is already suspended." msgstr "Wolumen %s już został wstrzymany." -#: lib/setup.c:4050 +#: lib/setup.c:4052 #, c-format msgid "Suspend is not supported for device %s." msgstr "Wstrzymywanie nie jest obsługiwane dla urządzenia %s." -#: lib/setup.c:4052 lib/setup.c:4060 +#: lib/setup.c:4054 lib/setup.c:4062 #, c-format msgid "Error during suspending device %s." msgstr "Błąd podczas wstrzymywania urządzenia %s." -#: lib/setup.c:4074 +#: lib/setup.c:4076 #, c-format msgid "Device %s was suspended but hardware OPAL device cannot be locked." msgstr "Urządzenie %s zostało wstrzymane, ale sprzętowe urządzenie OPAL nie może być zablokowane." -#: lib/setup.c:4106 lib/setup.c:4250 +#: lib/setup.c:4108 lib/setup.c:4280 #, c-format msgid "Resume is not supported for device %s." msgstr "Wznawianie nie jest obsługiwane dla urządzenia %s." -#: lib/setup.c:4108 lib/setup.c:4241 lib/setup.c:4252 +#: lib/setup.c:4110 lib/setup.c:4271 lib/setup.c:4282 #, c-format msgid "Error during resuming device %s." msgstr "Błąd podczas wznawiania urządzenia %s." -#: lib/setup.c:4131 -msgid "Failed to link key to the specified keyring." -msgstr "Nie udało się dołączyć klucza do określonego pęku kluczy." - -#: lib/setup.c:4150 +#: lib/setup.c:4129 msgid "Failed to unlink volume key from user specified keyring." msgstr "Nie udało się odłączyć klucza wolumenu z pęku kluczy podanego przez użytkownika." -#: lib/setup.c:4213 lib/setup.c:4934 lib/setup.c:5549 +#: lib/setup.c:4244 lib/setup.c:4966 lib/setup.c:5787 msgid "Failed to link volume key in user defined keyring." msgstr "Nie udało się dołączuć klucza wolumenu do pęku kluczy zdefiniowanego przez użytkownika." -#: lib/setup.c:4313 src/cryptsetup.c:2755 +#: lib/setup.c:4345 src/cryptsetup.c:2852 #, c-format msgid "Volume %s is not suspended." msgstr "Wolumen %s nie jest wstrzymany." -#: lib/setup.c:4414 lib/setup.c:5310 lib/setup.c:5317 lib/setup.c:7176 -#: lib/setup.c:7198 lib/setup.c:7247 src/cryptsetup.c:2265 +#: lib/setup.c:4446 lib/setup.c:5106 lib/setup.c:5523 lib/setup.c:5542 +#: lib/setup.c:7416 lib/setup.c:7438 lib/setup.c:7487 src/cryptsetup.c:2362 msgid "Volume key does not match the volume." msgstr "Klucz wolumenu nie pasuje do wolumenu." -#: lib/setup.c:4568 +#: lib/setup.c:4600 msgid "Failed to swap new key slot." msgstr "Nie udało się podstawić nowego klucza." -#: lib/setup.c:4666 +#: lib/setup.c:4698 #, c-format msgid "Key slot %d is invalid." msgstr "Numer klucza %d jest nieprawidłowy." -#: lib/setup.c:4672 src/cryptsetup.c:1975 src/cryptsetup.c:2467 -#: src/cryptsetup.c:3149 src/cryptsetup.c:3209 +#: lib/setup.c:4704 src/cryptsetup.c:2072 src/cryptsetup.c:2564 +#: src/cryptsetup.c:3246 src/cryptsetup.c:3306 #, c-format msgid "Keyslot %d is not active." msgstr "Klucz %d nie jest aktywny." -#: lib/setup.c:4691 +#: lib/setup.c:4723 msgid "Device header overlaps with data area." msgstr "Nagłówek urządzenia zachodzi na obszar danych." -#: lib/setup.c:5041 +#: lib/setup.c:5076 lib/setup.c:5176 msgid "Reencryption in-progress. Cannot activate device." msgstr "Ponowne szyfrowanie trwa. Nie można uaktywnić urządzenia." -#: lib/setup.c:5043 lib/luks2/luks2_json_metadata.c:2861 -#: lib/luks2/luks2_reencrypt.c:3646 +#: lib/setup.c:5078 lib/setup.c:5178 lib/luks2/luks2_json_metadata.c:2861 +#: lib/luks2/luks2_reencrypt.c:3661 msgid "Failed to get reencryption lock." msgstr "Nie udało się uzyskać blokady ponownego szyfrowania." -#: lib/setup.c:5056 lib/luks2/luks2_reencrypt.c:3665 +#: lib/setup.c:5090 +msgid "LUKS2 reencryption recovery using volume key(s) failed." +msgstr "Odtwarzanie ponownego szyfrowania LUKS2 przy użyciu kluczy wolumenu nie powiodło się." + +#: lib/setup.c:5142 lib/setup.c:5232 +msgid "Failed to link volume keys in user defined keyring." +msgstr "Nie udało się dołączyć kluczy wolumenu do pęku kluczy zdefiniowanego przez użytkownika." + +#: lib/setup.c:5191 lib/luks2/luks2_reencrypt.c:3680 msgid "LUKS2 reencryption recovery failed." msgstr "Odtwarzanie ponownego szyfrowania LUKS2 nie powiodło się." -#: lib/setup.c:5228 lib/setup.c:5328 lib/setup.c:5386 +#: lib/setup.c:5439 lib/setup.c:5553 lib/setup.c:5610 msgid "Device type is not properly initialized." msgstr "Typ urządzenia nie został właściwie zainicjalizowany." -#: lib/setup.c:5283 +#: lib/setup.c:5494 #, c-format msgid "Device %s already exists." msgstr "Urządzenie %s już istnieje." -#: lib/setup.c:5290 +#: lib/setup.c:5501 #, c-format msgid "Cannot use device %s, name is invalid or still in use." msgstr "Nie można użyć urządzenia %s, nazwa jest nieprawidłowa lub nadal w użyciu." -#: lib/setup.c:5306 +#: lib/setup.c:5519 msgid "Incorrect volume key specified for plain device." msgstr "Podano niewłaściwy klucz wolumenu dla zwykłego urządzenia." -#: lib/setup.c:5424 +#: lib/setup.c:5533 +msgid "Reencryption volume keys do not match the volume." +msgstr "Klucze ponownego szyfrowania wolumenu nie pasują do wolumenu." + +#: lib/setup.c:5646 msgid "Kernel keyring is not supported by the kernel." msgstr "Pęk kluczy w jądrze nie jest obsługiwany przez jądro." -#: lib/setup.c:5428 +#: lib/setup.c:5650 msgid "Kernel keyring missing: required for passing signature to kernel." msgstr "Brak pęku kluczy w jądrze: wymagany do przekazania podpisu do jądra." -#: lib/setup.c:5668 +#: lib/setup.c:5908 msgid "Incorrect root hash specified for verity device." msgstr "Podano niewłaściwy hasz główny dla urządzenia VERITY." -#: lib/setup.c:5711 +#: lib/setup.c:5951 msgid "OPAL does not support deferred deactivation." msgstr "OPAL nie obsługuje odroczonej dezaktywacji." -#: lib/setup.c:5727 +#: lib/setup.c:5967 #, c-format msgid "Could not cancel deferred remove from device %s." msgstr "Nie udało się anulować opóźnionego usuwania z urządzenia %s." -#: lib/setup.c:5734 lib/setup.c:5750 lib/luks2/luks2_json_metadata.c:2915 +#: lib/setup.c:5974 lib/setup.c:5990 lib/luks2/luks2_json_metadata.c:2915 #: src/utils_reencrypt.c:116 #, c-format msgid "Device %s is still in use." msgstr "Urządzenie %s jest nadal w użyciu." -#: lib/setup.c:5759 +#: lib/setup.c:5999 #, c-format msgid "Invalid device %s." msgstr "Błędne urządzenie %s." -#: lib/setup.c:5899 +#: lib/setup.c:6139 msgid "Volume key buffer too small." msgstr "Bufor klucza wolumenu zbyt mały." -#: lib/setup.c:5916 +#: lib/setup.c:6156 msgid "Cannot retrieve volume key for LUKS2 device." msgstr "Nie można odtworzyć klucza wolumenu dla urządzenia LUKS2." -#: lib/setup.c:5925 +#: lib/setup.c:6165 msgid "Cannot retrieve volume key for LUKS1 device." msgstr "Nie można odtworzyć klucza wolumenu dla urządzenia LUKS1." -#: lib/setup.c:5935 +#: lib/setup.c:6175 msgid "Cannot retrieve volume key for plain device." msgstr "Nie można odtworzyć klucza wolumenu dla zwykłego urządzenia." -#: lib/setup.c:5943 +#: lib/setup.c:6183 msgid "Cannot retrieve root hash for verity device." msgstr "Nie można odtworzyć hasza głównego dla urządzenia VERITY." -#: lib/setup.c:5950 +#: lib/setup.c:6190 msgid "Cannot retrieve volume key for BITLK device." msgstr "Nie można odtworzyć klucza wolumenu dla urządzenia BITLK." -#: lib/setup.c:5955 +#: lib/setup.c:6195 msgid "Cannot retrieve volume key for FVAULT2 device." msgstr "Nie można odtworzyć klucza wolumenu dla urządzenia FVAULT2." -#: lib/setup.c:5957 +#: lib/setup.c:6197 #, c-format msgid "This operation is not supported for %s crypt device." msgstr "Ta operacja nie jest obsługiwana dla urządzenia szyfrującego %s." -#: lib/setup.c:6141 lib/setup.c:6152 +#: lib/setup.c:6381 lib/setup.c:6392 msgid "Dump operation is not supported for this device type." msgstr "Operacja zrzutu nie jest obsługiwana dla tego rodzaju urządzenia." -#: lib/setup.c:6511 +#: lib/setup.c:6751 #, c-format msgid "Data offset is not multiple of %u bytes." msgstr "Offset danych nie jest wielokrotnością liczby bajtów %u." -#: lib/setup.c:6819 +#: lib/setup.c:7059 #, c-format msgid "Cannot convert device %s which is still in use." msgstr "Nie można przekonwertować urządzenia %s, które jest nadal w użyciu." -#: lib/setup.c:7117 lib/setup.c:7256 +#: lib/setup.c:7357 lib/setup.c:7496 #, c-format msgid "Failed to assign keyslot %u as the new volume key." msgstr "Nie udało się przypisać klucza %u jako nowego klucza wolumenu." -#: lib/setup.c:7141 +#: lib/setup.c:7381 msgid "Failed to initialize default LUKS2 keyslot parameters." msgstr "Nie udało się zainicjować domyślnych parametrów klucza LUKS2." -#: lib/setup.c:7147 +#: lib/setup.c:7387 #, c-format msgid "Failed to assign keyslot %d to digest." msgstr "Nie udało się przypisać klucza %d do skrótu." -#: lib/setup.c:7372 +#: lib/setup.c:7612 msgid "Cannot add key slot, all slots disabled and no volume key provided." msgstr "Nie można dodać klucza, wszystkie miejsca na klucze wyłączone i nie podano klucza wolumenu." -#: lib/setup.c:7441 lib/verity/verity.c:343 +#: lib/setup.c:7681 lib/verity/verity.c:343 msgid "Failed to load key in kernel keyring." msgstr "Nie udało się załadować klucza do pęku kluczy w jądrze." -#: lib/setup.c:7559 +#: lib/setup.c:7799 msgid "Failed to unlink volume key from thread keyring." msgstr "Nie udało się odłączyć klucza wolumenu z pęku klucza wątku." -#: lib/setup.c:7586 +#: lib/setup.c:7843 #, c-format msgid "Could not find keyring described by \"%s\"." msgstr "Nie udało się odnaleźć pęku kluczy opisanego przez \"%s\"." -#: lib/setup.c:7645 +#: lib/setup.c:7908 msgid "Failed to acquire global memory-hard access serialization lock." msgstr "Nie udało się uzyskać globalnej blokady serializacji dostępu ciężkiego pamięciowo." -#: lib/utils.c:205 lib/tcrypt/tcrypt.c:503 +#: lib/utils.c:215 lib/tcrypt/tcrypt.c:503 msgid "Failed to open key file." msgstr "Nie udało się otworzyć pliku klucza." -#: lib/utils.c:210 +#: lib/utils.c:220 msgid "Cannot read keyfile from a terminal." msgstr "Nie można odczytać pliku klucza z terminala." -#: lib/utils.c:226 +#: lib/utils.c:236 msgid "Failed to stat key file." msgstr "Nie udało się wykonać stat na pliku klucza." -#: lib/utils.c:234 lib/utils.c:255 +#: lib/utils.c:244 lib/utils.c:265 msgid "Cannot seek to requested keyfile offset." msgstr "Nie można przemieścić się do żądanego położenia pliku klucza." -#: lib/utils.c:249 lib/utils.c:264 src/utils_password.c:226 +#: lib/utils.c:259 lib/utils.c:274 src/utils_password.c:226 #: src/utils_password.c:238 msgid "Out of memory while reading passphrase." msgstr "Brak pamięci podczas odczytu hasła." -#: lib/utils.c:284 +#: lib/utils.c:294 msgid "Error reading passphrase." msgstr "Błąd podczas odczytu hasła." -#: lib/utils.c:301 +#: lib/utils.c:311 msgid "Nothing to read on input." msgstr "Na wejściu nie ma nic do odczytu." -#: lib/utils.c:308 +#: lib/utils.c:318 msgid "Maximum keyfile size exceeded." msgstr "Przekroczono maksymalny rozmiar pliku klucza." -#: lib/utils.c:313 +#: lib/utils.c:323 msgid "Cannot read requested amount of data." msgstr "Nie można odczytać żądanej ilości danych." #: lib/utils_device.c:213 lib/utils_storage_wrappers.c:110 -#: lib/luks1/keyencryption.c:91 src/utils_reencrypt.c:1461 +#: lib/luks1/keyencryption.c:91 src/utils_reencrypt.c:1470 #, c-format msgid "Device %s does not exist or access denied." msgstr "Urządzenie %s nie istnieje lub dostęp jest zabroniony." @@ -1069,7 +1077,7 @@ msgstr "Tryb szyfru LUKS %s jest nieprawidłowy." msgid "LUKS hash %s is invalid." msgstr "Skrót LUKS %s jest nieprawidłowy." -#: lib/luks1/keymanage.c:574 src/cryptsetup.c:1352 +#: lib/luks1/keymanage.c:574 src/cryptsetup.c:1360 msgid "No known problems detected for LUKS header." msgstr "W nagłówku LUKS nie wykryto żadnych znanych problemów." @@ -1162,11 +1170,11 @@ msgstr "Przekroczono maksymalną długość hasła TCRYPT (%zu)." msgid "PBKDF2 hash algorithm %s not available, skipping." msgstr "Algorytm skrótu PBKDF2 %s nie jest dostępny, pominięto." -#: lib/tcrypt/tcrypt.c:621 src/cryptsetup.c:1227 +#: lib/tcrypt/tcrypt.c:621 src/cryptsetup.c:1235 msgid "Required kernel crypto interface not available." msgstr "Wymagany interfejs kryptograficzny jądra nie jest dostępny." -#: lib/tcrypt/tcrypt.c:623 src/cryptsetup.c:1229 +#: lib/tcrypt/tcrypt.c:623 src/cryptsetup.c:1237 msgid "Ensure you have algif_skcipher kernel module loaded." msgstr "Proszę upewnić się, że moduł jądra algif_skcipher został załadowany." @@ -1483,17 +1491,17 @@ msgstr "Jądro nie obsługuje stałego wyrównania metadanych dm-integrity." msgid "Kernel refuses to activate insecure recalculate option (see legacy activation options to override)." msgstr "Jądro odmawia uaktywnienia niebezpiecznej opcji przeliczenia (p. stare opcje aktywacji, aby wymusić)." -#: lib/luks2/luks2_disk_metadata.c:391 lib/luks2/luks2_json_metadata.c:1197 +#: lib/luks2/luks2_disk_metadata.c:392 lib/luks2/luks2_json_metadata.c:1197 #: lib/luks2/luks2_json_metadata.c:1520 #, c-format msgid "Failed to acquire write lock on device %s." msgstr "Nie udało się uzyskać blokady dla zapisu na urządzeniu %s." -#: lib/luks2/luks2_disk_metadata.c:400 +#: lib/luks2/luks2_disk_metadata.c:401 msgid "Detected attempt for concurrent LUKS2 metadata update. Aborting operation." msgstr "Wykryto próbę jednoczesnego uaktualnienia metadanych LUKS2. Przerywanie operacji." -#: lib/luks2/luks2_disk_metadata.c:699 lib/luks2/luks2_disk_metadata.c:720 +#: lib/luks2/luks2_disk_metadata.c:710 lib/luks2/luks2_disk_metadata.c:731 msgid "" "Device contains ambiguous signatures, cannot auto-recover LUKS2.\n" "Please run \"cryptsetup repair\" for recovery." @@ -1578,16 +1586,16 @@ msgstr "" msgid "Ignored unknown flag %s." msgstr "Zignorowano nieznaną flagę %s." -#: lib/luks2/luks2_json_metadata.c:2525 lib/luks2/luks2_reencrypt.c:2090 +#: lib/luks2/luks2_json_metadata.c:2525 lib/luks2/luks2_reencrypt.c:2105 #, c-format msgid "Missing key for dm-crypt segment %u" msgstr "Brak klucza dla segmentu dm-crypt %u" -#: lib/luks2/luks2_json_metadata.c:2537 lib/luks2/luks2_reencrypt.c:2104 +#: lib/luks2/luks2_json_metadata.c:2537 lib/luks2/luks2_reencrypt.c:2119 msgid "Failed to set dm-crypt segment." msgstr "Nie udało się ustawić segmentu dm-crypt." -#: lib/luks2/luks2_json_metadata.c:2543 lib/luks2/luks2_reencrypt.c:2110 +#: lib/luks2/luks2_json_metadata.c:2543 lib/luks2/luks2_reencrypt.c:2125 msgid "Failed to set dm-linear segment." msgstr "Nie udało się ustawić segmentu dm-linear." @@ -1624,7 +1632,7 @@ msgstr "Urządzenie dm-integrity stojące poniżej o nieoczekiwanych sektorach d msgid "Reencryption in-progress. Cannot deactivate device." msgstr "Podobne szyfrowanie trwa. Nie można dezaktywować urządzenia." -#: lib/luks2/luks2_json_metadata.c:2870 lib/luks2/luks2_reencrypt.c:4159 +#: lib/luks2/luks2_json_metadata.c:2870 lib/luks2/luks2_reencrypt.c:4174 #, c-format msgid "Failed to replace suspended device %s with dm-error target." msgstr "Nie udało się zastąpić wstrzymanego urządzenia %s celem dm-error." @@ -1668,7 +1676,7 @@ msgid "Cannot use %s-%s cipher for keyslot encryption." msgstr "Nie można użyć szyfru %s-%s do szyfrowania kluczy." #: lib/luks2/luks2_keyslot_luks2.c:285 lib/luks2/luks2_keyslot_luks2.c:404 -#: lib/luks2/luks2_keyslot_reenc.c:447 lib/luks2/luks2_reencrypt.c:2714 +#: lib/luks2/luks2_keyslot_reenc.c:447 lib/luks2/luks2_reencrypt.c:2729 #, c-format msgid "Hash algorithm %s is not available." msgstr "Algorytm skrótu %s nie jest dostępny." @@ -1703,7 +1711,7 @@ msgstr "Nie można sprawdzić stanu urządzenia mającego UUID: %s." msgid "Unable to convert header with LUKSMETA additional metadata." msgstr "Nie można przekonwertować nagłówka z dodatkowymi metadanymi LUKSMETA." -#: lib/luks2/luks2_luks1_convert.c:602 lib/luks2/luks2_reencrypt.c:3795 +#: lib/luks2/luks2_luks1_convert.c:602 lib/luks2/luks2_reencrypt.c:3810 #, c-format msgid "Unable to use cipher specification %s-%s for LUKS2." msgstr "Nie można użyć określenia szyfru %s-%s dla LUKS2." @@ -1761,252 +1769,252 @@ msgstr "Nie można przekonwertować do formatu LUKS1 - klucz %u (powyzej maksimu msgid "Cannot convert to LUKS1 format - keyslot %u is not LUKS1 compatible." msgstr "Nie można przekonwertować do formatu LUKS1 - klucz %u nie jest zgodny z LUKS1." -#: lib/luks2/luks2_reencrypt.c:1181 +#: lib/luks2/luks2_reencrypt.c:1196 #, c-format msgid "Hotzone size must be multiple of calculated zone alignment (%zu bytes)." msgstr "Rozmiar strefy hotzone musi być wielokrotnością wyliczonego wyrównania strefy (bajtów: %zu)." -#: lib/luks2/luks2_reencrypt.c:1186 +#: lib/luks2/luks2_reencrypt.c:1201 #, c-format msgid "Device size must be multiple of calculated zone alignment (%zu bytes)." msgstr "Rozmiar urządzenia musi być wielokrotnością wyliczonego wyrównania strefy (bajtów: %zu)." -#: lib/luks2/luks2_reencrypt.c:1393 lib/luks2/luks2_reencrypt.c:1580 -#: lib/luks2/luks2_reencrypt.c:1663 lib/luks2/luks2_reencrypt.c:1705 -#: lib/luks2/luks2_reencrypt.c:3954 +#: lib/luks2/luks2_reencrypt.c:1408 lib/luks2/luks2_reencrypt.c:1595 +#: lib/luks2/luks2_reencrypt.c:1678 lib/luks2/luks2_reencrypt.c:1720 +#: lib/luks2/luks2_reencrypt.c:3969 msgid "Failed to initialize old segment storage wrapper." msgstr "Nie udało się zainicjować obudowania przestrzeni starego segmentu." -#: lib/luks2/luks2_reencrypt.c:1407 lib/luks2/luks2_reencrypt.c:1558 +#: lib/luks2/luks2_reencrypt.c:1422 lib/luks2/luks2_reencrypt.c:1573 msgid "Failed to initialize new segment storage wrapper." msgstr "Nie udało się zainicjować obudowania przestrzeni nowego segmentu." -#: lib/luks2/luks2_reencrypt.c:1534 lib/luks2/luks2_reencrypt.c:3966 +#: lib/luks2/luks2_reencrypt.c:1549 lib/luks2/luks2_reencrypt.c:3981 msgid "Failed to initialize hotzone protection." msgstr "Nie udało się zainicjować ochrony strefy hotzone." -#: lib/luks2/luks2_reencrypt.c:1607 +#: lib/luks2/luks2_reencrypt.c:1622 msgid "Failed to read checksums for current hotzone." msgstr "Nie udało się odczytać sum kontrolnych dla aktualnej strefy hotzone." -#: lib/luks2/luks2_reencrypt.c:1614 lib/luks2/luks2_reencrypt.c:3980 +#: lib/luks2/luks2_reencrypt.c:1629 lib/luks2/luks2_reencrypt.c:3995 #, c-format msgid "Failed to read hotzone area starting at %<PRIu64>." msgstr "Nie udało się odczytać obszaru hotzone zaczynającego się od %<PRIu64>." -#: lib/luks2/luks2_reencrypt.c:1633 +#: lib/luks2/luks2_reencrypt.c:1648 #, c-format msgid "Failed to decrypt sector %zu." msgstr "Nie udało się odszyfrować sektora %zu." -#: lib/luks2/luks2_reencrypt.c:1639 +#: lib/luks2/luks2_reencrypt.c:1654 #, c-format msgid "Failed to recover sector %zu." msgstr "Nie udało się odtworzyć sektora %zu." -#: lib/luks2/luks2_reencrypt.c:2203 +#: lib/luks2/luks2_reencrypt.c:2218 #, c-format msgid "Source and target device sizes don't match. Source %<PRIu64>, target: %<PRIu64>." msgstr "Rozmiary urządzenia źródłowego i docelowego różnią się. Źródłowe %<PRIu64>, docelowe: %<PRIu64>." -#: lib/luks2/luks2_reencrypt.c:2301 +#: lib/luks2/luks2_reencrypt.c:2316 #, c-format msgid "Failed to activate hotzone device %s." msgstr "Nie udało się uaktywnić urządzenia hotzone %s." -#: lib/luks2/luks2_reencrypt.c:2318 +#: lib/luks2/luks2_reencrypt.c:2333 #, c-format msgid "Failed to activate overlay device %s with actual origin table." msgstr "Nie udało się uaktywnić urządzenia nakładkowego %s z aktualną tablicą źródła." -#: lib/luks2/luks2_reencrypt.c:2325 +#: lib/luks2/luks2_reencrypt.c:2340 #, c-format msgid "Failed to load new mapping for device %s." msgstr "Nie udało się załadować nowego odwzorowania dla urządzenia %s." -#: lib/luks2/luks2_reencrypt.c:2396 +#: lib/luks2/luks2_reencrypt.c:2411 msgid "Failed to refresh reencryption devices stack." msgstr "Nie udało się odświeżyć stosu urządzenia ponownego szyfrowania." -#: lib/luks2/luks2_reencrypt.c:2596 +#: lib/luks2/luks2_reencrypt.c:2611 msgid "Failed to set new keyslots area size." msgstr "Nie udało się ustawić nowego rozmiaru obszaru kluczy." -#: lib/luks2/luks2_reencrypt.c:2732 +#: lib/luks2/luks2_reencrypt.c:2747 #, c-format msgid "Data shift value is not aligned to encryption sector size (%<PRIu32> bytes)." msgstr "Wartość przesunięcia danych nie jest wyrównana do rozmiaru sektora szyfrowania (%<PRIu32> B)." -#: lib/luks2/luks2_reencrypt.c:2769 src/utils_reencrypt.c:189 +#: lib/luks2/luks2_reencrypt.c:2784 src/utils_reencrypt.c:189 #, c-format msgid "Unsupported resilience mode %s" msgstr "Nieobsługiwany tryb odporności %s" -#: lib/luks2/luks2_reencrypt.c:2806 +#: lib/luks2/luks2_reencrypt.c:2821 msgid "Moved segment size can not be greater than data shift value." msgstr "Rozmiar przenoszonego segmentu nie może być większy niż wartość przesunięcia danych." -#: lib/luks2/luks2_reencrypt.c:2848 +#: lib/luks2/luks2_reencrypt.c:2863 msgid "Invalid reencryption resilience parameters." msgstr "Błędne parametry odporności przy ponownym szyfrowaniu." -#: lib/luks2/luks2_reencrypt.c:2870 +#: lib/luks2/luks2_reencrypt.c:2885 #, c-format msgid "Moved segment too large. Requested size %<PRIu64>, available space for: %<PRIu64>." msgstr "Przenoszony segment zbyt duży. Żądany rozmiar %<PRIu64>, dostępne miejsce: %<PRIu64>." -#: lib/luks2/luks2_reencrypt.c:2957 +#: lib/luks2/luks2_reencrypt.c:2972 msgid "Failed to clear table." msgstr "Nie udało się wyczyścić tablicy." -#: lib/luks2/luks2_reencrypt.c:3043 +#: lib/luks2/luks2_reencrypt.c:3058 msgid "Reduced data size is larger than real device size." msgstr "Zmniejszony rozmiar danych jest większy niż rzeczywisty rozmiar urządzenia." -#: lib/luks2/luks2_reencrypt.c:3050 +#: lib/luks2/luks2_reencrypt.c:3065 #, c-format msgid "Data device is not aligned to encryption sector size (%<PRIu32> bytes)." msgstr "Urzędzenie danych nie jest wyrównane do rozmiaru sektora szyfrowania (%<PRIu32> B)." -#: lib/luks2/luks2_reencrypt.c:3084 +#: lib/luks2/luks2_reencrypt.c:3099 #, c-format msgid "Data shift (%<PRIu64> sectors) is less than future data offset (%<PRIu64> sectors)." msgstr "Przesunięcie danych (sektorów: %<PRIu64>) jest mniejsze niż przyszły offset danych (sektorów: %<PRIu64>)." -#: lib/luks2/luks2_reencrypt.c:3091 lib/luks2/luks2_reencrypt.c:3589 -#: lib/luks2/luks2_reencrypt.c:3610 +#: lib/luks2/luks2_reencrypt.c:3106 lib/luks2/luks2_reencrypt.c:3604 +#: lib/luks2/luks2_reencrypt.c:3625 #, c-format msgid "Failed to open %s in exclusive mode (already mapped or mounted)." msgstr "Nie udało się otworzyć %s w trybie wyłączności (już odwzorowano lub zamontowano)." -#: lib/luks2/luks2_reencrypt.c:3280 +#: lib/luks2/luks2_reencrypt.c:3295 msgid "Device not marked for LUKS2 reencryption." msgstr "Urządzenie nie jest oznaczone do ponownego szyfrowania LUKS2." -#: lib/luks2/luks2_reencrypt.c:3297 lib/luks2/luks2_reencrypt.c:4271 +#: lib/luks2/luks2_reencrypt.c:3312 lib/luks2/luks2_reencrypt.c:4286 msgid "Failed to load LUKS2 reencryption context." msgstr "Nie udało się załadować kontekstu ponownego szyfrowania LUKS2." -#: lib/luks2/luks2_reencrypt.c:3387 +#: lib/luks2/luks2_reencrypt.c:3402 msgid "Failed to get reencryption state." msgstr "Nie udało się pobrać stanu ponownego szyfrowania." -#: lib/luks2/luks2_reencrypt.c:3391 lib/luks2/luks2_reencrypt.c:3705 +#: lib/luks2/luks2_reencrypt.c:3406 lib/luks2/luks2_reencrypt.c:3720 msgid "Device is not in reencryption." msgstr "Urządzenie nie jest w trakcie ponownego szyfrowania." -#: lib/luks2/luks2_reencrypt.c:3398 lib/luks2/luks2_reencrypt.c:3712 +#: lib/luks2/luks2_reencrypt.c:3413 lib/luks2/luks2_reencrypt.c:3727 msgid "Reencryption process is already running." msgstr "Proces ponownego szyfrowania już trwa." -#: lib/luks2/luks2_reencrypt.c:3400 lib/luks2/luks2_reencrypt.c:3714 +#: lib/luks2/luks2_reencrypt.c:3415 lib/luks2/luks2_reencrypt.c:3729 msgid "Failed to acquire reencryption lock." msgstr "Nie udało się uzyskać blokady dla ponownego szyfrowania." -#: lib/luks2/luks2_reencrypt.c:3418 +#: lib/luks2/luks2_reencrypt.c:3433 msgid "Cannot proceed with reencryption. Run reencryption recovery first." msgstr "Nie można kontynuować ponownego szyfrowania. Należy najpierw uruchomić odtworzenie ponownego szyfrowania." -#: lib/luks2/luks2_reencrypt.c:3553 +#: lib/luks2/luks2_reencrypt.c:3568 msgid "Active device size and requested reencryption size don't match." msgstr "Rozmiar urządzenia aktywnego oraz żądany rozmiar ponownego szyfrowania różnią się." -#: lib/luks2/luks2_reencrypt.c:3567 +#: lib/luks2/luks2_reencrypt.c:3582 msgid "Illegal device size requested in reencryption parameters." msgstr "W parametrach ponownego szyfrowania zażądano niedozwolonego rozmiaru urządzenia." -#: lib/luks2/luks2_reencrypt.c:3644 +#: lib/luks2/luks2_reencrypt.c:3659 msgid "Reencryption in-progress. Cannot perform recovery." msgstr "Ponowne szyfrowanie trwa. Nie można wykonać odzyskiwania." -#: lib/luks2/luks2_reencrypt.c:3812 +#: lib/luks2/luks2_reencrypt.c:3827 msgid "LUKS2 reencryption already initialized in metadata." msgstr "Ponowne szyfrowanie LUKS2 jest już zainicjowane w metadanych." -#: lib/luks2/luks2_reencrypt.c:3819 +#: lib/luks2/luks2_reencrypt.c:3834 msgid "Failed to initialize LUKS2 reencryption in metadata." msgstr "Nie udało się zainicjować ponownego szyfrowania LUKS2 w metadanych." -#: lib/luks2/luks2_reencrypt.c:3872 lib/luks2/luks2_reencrypt.c:3907 +#: lib/luks2/luks2_reencrypt.c:3887 lib/luks2/luks2_reencrypt.c:3922 msgid "Reencryption is not supported for DAX (persistent memory) devices." msgstr "Ponowne szyfrowanie nie jest obsługiwane dla urządzeń DAX (pamięci trwałej)." -#: lib/luks2/luks2_reencrypt.c:3879 +#: lib/luks2/luks2_reencrypt.c:3894 msgid "Failed to read passphrase from keyring." msgstr "Nie udało się odczytać hasła z pęku kluczy." -#: lib/luks2/luks2_reencrypt.c:3936 +#: lib/luks2/luks2_reencrypt.c:3951 msgid "Failed to set device segments for next reencryption hotzone." msgstr "Nie udało się ustawić segmentów urządzeń dla następnej strefy hotzone ponownego szyfrowania." -#: lib/luks2/luks2_reencrypt.c:3988 +#: lib/luks2/luks2_reencrypt.c:4003 msgid "Failed to write reencryption resilience metadata." msgstr "Nie udało się zapisać metadanych odporności ponownego szyfrowania." -#: lib/luks2/luks2_reencrypt.c:3995 +#: lib/luks2/luks2_reencrypt.c:4010 msgid "Decryption failed." msgstr "Odszyfrowanie nie powiodło się." -#: lib/luks2/luks2_reencrypt.c:4000 +#: lib/luks2/luks2_reencrypt.c:4015 #, c-format msgid "Failed to write hotzone area starting at %<PRIu64>." msgstr "Nie udało się zapisać obszaru hotzone zaczynającego się od %<PRIu64>." -#: lib/luks2/luks2_reencrypt.c:4005 +#: lib/luks2/luks2_reencrypt.c:4020 msgid "Failed to sync data." msgstr "Nie udało się zsynchronizować danych." -#: lib/luks2/luks2_reencrypt.c:4013 +#: lib/luks2/luks2_reencrypt.c:4028 msgid "Failed to update metadata after current reencryption hotzone completed." msgstr "Nie udało się uaktualnić metadanych po zakończeniu aktualnej strefy hotzone ponownego szyfrowania." -#: lib/luks2/luks2_reencrypt.c:4102 +#: lib/luks2/luks2_reencrypt.c:4117 msgid "Failed to write LUKS2 metadata." msgstr "Nie udało się zapisać metadanych LUKS2." -#: lib/luks2/luks2_reencrypt.c:4125 +#: lib/luks2/luks2_reencrypt.c:4140 msgid "Failed to wipe unused data device area." msgstr "Nie udało się wymazać nie używanego obszaru urządzenia danych." -#: lib/luks2/luks2_reencrypt.c:4131 +#: lib/luks2/luks2_reencrypt.c:4146 #, c-format msgid "Failed to remove unused (unbound) keyslot %d." msgstr "Nie udało się usunąć nie używanego (nie przypisanego) obszaru klucza %d." -#: lib/luks2/luks2_reencrypt.c:4141 +#: lib/luks2/luks2_reencrypt.c:4156 msgid "Failed to remove reencryption keyslot." msgstr "Nie udało się usunąć obszaru klucza ponownego szyfrowania." -#: lib/luks2/luks2_reencrypt.c:4151 +#: lib/luks2/luks2_reencrypt.c:4166 #, c-format msgid "Fatal error while reencrypting chunk starting at %<PRIu64>, %<PRIu64> sectors long." msgstr "Błąd krytyczny podczas ponownego szyfrowania fragmentu zaczynającego się od %<PRIu64> o długości w sektorach %<PRIu64>." -#: lib/luks2/luks2_reencrypt.c:4155 +#: lib/luks2/luks2_reencrypt.c:4170 msgid "Online reencryption failed." msgstr "Ponowne szyfrowanie online nie powiodło się." -#: lib/luks2/luks2_reencrypt.c:4160 +#: lib/luks2/luks2_reencrypt.c:4175 msgid "Do not resume the device unless replaced with error target manually." msgstr "Proszę nie wznawiać urządzenia dopóki nie zostanie zastąpione celem błędnym ręcznie." -#: lib/luks2/luks2_reencrypt.c:4212 +#: lib/luks2/luks2_reencrypt.c:4227 msgid "Cannot proceed with reencryption. Unexpected reencryption status." msgstr "Nie można kontynuować ponownego szyfrowania. Nieoczekiwany stan ponownego szyfrowania." -#: lib/luks2/luks2_reencrypt.c:4218 +#: lib/luks2/luks2_reencrypt.c:4233 msgid "Missing or invalid reencrypt context." msgstr "Brak lub błędny kontekst ponownego szyfrowania." -#: lib/luks2/luks2_reencrypt.c:4225 +#: lib/luks2/luks2_reencrypt.c:4240 msgid "Failed to initialize reencryption device stack." msgstr "Nie udało się zainicjować stosu urządzenia ponownego szyfrowania." -#: lib/luks2/luks2_reencrypt.c:4247 lib/luks2/luks2_reencrypt.c:4284 +#: lib/luks2/luks2_reencrypt.c:4262 lib/luks2/luks2_reencrypt.c:4299 msgid "Failed to update reencryption context." msgstr "Nie udało się uaktualnić kontekstu ponownego szyfrowania." -#: lib/luks2/luks2_reencrypt_digest.c:405 +#: lib/luks2/luks2_reencrypt_digest.c:421 msgid "Reencryption metadata is invalid." msgstr "Metadane ponownego szyfrowania są błędne." @@ -2030,101 +2038,101 @@ msgstr "Blokowanie zakresu OPAL %d wyłączone." msgid "Unexpected OPAL range %d lock state." msgstr "Nieoczekiwany stan blokowania zakresu OPAL %d." -#: src/cryptsetup.c:85 +#: src/cryptsetup.c:93 msgid "Keyslot encryption parameters can be set only for LUKS2 device." msgstr "Parametry szyfrowania kluczy mogą być ustawione tylko dla urządzeń LUKS2." -#: src/cryptsetup.c:128 src/cryptsetup.c:2145 +#: src/cryptsetup.c:136 src/cryptsetup.c:2242 #, c-format msgid "Enter token PIN: " msgstr "Proszę wprowadzić PIN: " -#: src/cryptsetup.c:130 src/cryptsetup.c:2147 +#: src/cryptsetup.c:138 src/cryptsetup.c:2244 #, c-format msgid "Enter token %d PIN: " msgstr "Proszę wprowadzić PIN tokenu %d: " -#: src/cryptsetup.c:188 src/cryptsetup.c:1174 src/cryptsetup.c:1515 -#: src/utils_reencrypt.c:1137 src/utils_reencrypt_luks1.c:517 +#: src/cryptsetup.c:196 src/cryptsetup.c:1182 src/cryptsetup.c:1523 +#: src/utils_reencrypt.c:1146 src/utils_reencrypt_luks1.c:517 #: src/utils_reencrypt_luks1.c:580 msgid "No known cipher specification pattern detected." msgstr "Nie wykryto znanego wzorca określającego szyfr." -#: src/cryptsetup.c:198 +#: src/cryptsetup.c:206 #, c-format msgid "WARNING: Using default options for cipher (%s-%s, key size %u bits) that could be incompatible with older versions." msgstr "UWAGA: użycie domyślnych opcji szyfru (%s-%s, rozmiar klucza w bitach %u) może być niezgodne ze starszymi wersjami." -#: src/cryptsetup.c:203 +#: src/cryptsetup.c:211 #, c-format msgid "WARNING: Using default options for hash (%s) that could be incompatible with older versions." msgstr "UWAGA: użycie domyślnych opcji skrótu (%s) może być niezgodne ze starszymi wersjami." -#: src/cryptsetup.c:207 +#: src/cryptsetup.c:215 msgid "For plain mode, always use options --cipher, --key-size and if no keyfile is used, then also --hash." msgstr "W trybie zwykłym bez podania klucza zawsze należy użyć opcji --cipher, --key-size, a następnie --hash." -#: src/cryptsetup.c:213 +#: src/cryptsetup.c:221 msgid "WARNING: The --hash parameter is being ignored in plain mode with keyfile specified.\n" msgstr "UWAGA: Parametr --hash jest ignorowany w trybie zwykłym z podanym plikiem klucza.\n" -#: src/cryptsetup.c:221 +#: src/cryptsetup.c:229 msgid "WARNING: The --keyfile-size option is being ignored, the read size is the same as the encryption key size.\n" msgstr "UWAGA: Opcja --keyfile-size jest ignorowana, rozmiar odczytu jest taki sam, jak rozmiar klucza szyfrującego.\n" -#: src/cryptsetup.c:258 src/cryptsetup.c:1360 src/cryptsetup.c:1558 -#: src/integritysetup.c:197 src/utils_reencrypt.c:1346 +#: src/cryptsetup.c:266 src/cryptsetup.c:1368 src/cryptsetup.c:1566 +#: src/integritysetup.c:197 src/utils_reencrypt.c:1355 #, c-format msgid "Blkid scan failed for %s." msgstr "Skanowanie blkid dla %s nie powiodło się." -#: src/cryptsetup.c:264 +#: src/cryptsetup.c:272 #, c-format msgid "Detected device signature(s) on %s. Proceeding further may damage existing data." msgstr "Wykryto sygnatury urządzeń na %s. Dalsze operacje mogą uszkodzić istniejące dane." -#: src/cryptsetup.c:270 src/cryptsetup.c:1248 src/cryptsetup.c:1296 -#: src/cryptsetup.c:1367 src/cryptsetup.c:1492 src/cryptsetup.c:1570 -#: src/cryptsetup.c:2525 src/cryptsetup.c:2952 src/integritysetup.c:187 +#: src/cryptsetup.c:278 src/cryptsetup.c:1256 src/cryptsetup.c:1304 +#: src/cryptsetup.c:1375 src/cryptsetup.c:1500 src/cryptsetup.c:1578 +#: src/cryptsetup.c:2622 src/cryptsetup.c:3049 src/integritysetup.c:187 #: src/utils_reencrypt.c:138 src/utils_reencrypt.c:314 -#: src/utils_reencrypt.c:764 +#: src/utils_reencrypt.c:772 msgid "Operation aborted.\n" msgstr "Operacja przerwana.\n" -#: src/cryptsetup.c:343 +#: src/cryptsetup.c:351 msgid "Option --key-file is required." msgstr "Wymagana jest opcja --key-file." -#: src/cryptsetup.c:394 +#: src/cryptsetup.c:402 msgid "Enter VeraCrypt PIM: " msgstr "Proszę wprowadzić PIM VeraCrypt: " -#: src/cryptsetup.c:403 +#: src/cryptsetup.c:411 msgid "Invalid PIM value: parse error." msgstr "Błędna wartość PIM: błąd składni." -#: src/cryptsetup.c:406 +#: src/cryptsetup.c:414 msgid "Invalid PIM value: 0." msgstr "Błędna wartość PIM: 0." -#: src/cryptsetup.c:409 +#: src/cryptsetup.c:417 msgid "Invalid PIM value: outside of range." msgstr "Błędna wartość PIM: poza zakresem." -#: src/cryptsetup.c:432 +#: src/cryptsetup.c:440 msgid "No device header detected with this passphrase." msgstr "Nie wykryto nagłówka urządzenia z tym hasłem." -#: src/cryptsetup.c:505 src/cryptsetup.c:681 +#: src/cryptsetup.c:513 src/cryptsetup.c:689 #, c-format msgid "Device %s is not a valid BITLK device." msgstr "Urządzenie %s nie jest prawidłowym urządzeniem BITLK." -#: src/cryptsetup.c:513 +#: src/cryptsetup.c:521 msgid "Cannot determine volume key size for BITLK, please use --key-size option." msgstr "Nie można określić rozmiaru klucza wolumenu dla BITLK, proszę użyć opcji --key-size." -#: src/cryptsetup.c:555 +#: src/cryptsetup.c:563 msgid "" "Header dump with volume key is sensitive information\n" "which allows access to encrypted partition without passphrase.\n" @@ -2135,7 +2143,7 @@ msgstr "" "Zrzut ten powinien być zawsze zapisywany w postaci zaszyfrowanej\n" "w bezpiecznym miejscu." -#: src/cryptsetup.c:622 src/cryptsetup.c:703 src/cryptsetup.c:2550 +#: src/cryptsetup.c:630 src/cryptsetup.c:711 src/cryptsetup.c:2647 msgid "" "The header dump with volume key is sensitive information\n" "that allows access to encrypted partition without a passphrase.\n" @@ -2146,84 +2154,84 @@ msgstr "" "Zrzut ten powinien być zawsze zapisywany w postaci zaszyfrowanej\n" "w bezpiecznym miejscu." -#: src/cryptsetup.c:758 src/cryptsetup.c:788 +#: src/cryptsetup.c:766 src/cryptsetup.c:796 #, c-format msgid "Device %s is not a valid FVAULT2 device." msgstr "Urządzenie %s nie jest prawidłowym urządzeniem FVAULT2." -#: src/cryptsetup.c:796 +#: src/cryptsetup.c:804 msgid "Cannot determine volume key size for FVAULT2, please use --key-size option." msgstr "Nie można określić rozmiaru klucza wolumenu dla FVAULT2, proszę użyć opcji --key-size." -#: src/cryptsetup.c:850 src/veritysetup.c:323 src/integritysetup.c:409 +#: src/cryptsetup.c:858 src/veritysetup.c:323 src/integritysetup.c:409 #, c-format msgid "Device %s is still active and scheduled for deferred removal.\n" msgstr "Urządzenie %s jest nadal aktywne i zaplanowane do odroczonego usunięcia.\n" -#: src/cryptsetup.c:884 src/cryptsetup.c:1824 src/cryptsetup.c:2080 -#: src/cryptsetup.c:2234 src/cryptsetup.c:2681 src/cryptsetup.c:2763 -#: src/cryptsetup.c:3290 +#: src/cryptsetup.c:892 src/cryptsetup.c:1903 src/cryptsetup.c:2177 +#: src/cryptsetup.c:2331 src/cryptsetup.c:2778 src/cryptsetup.c:2860 +#: src/cryptsetup.c:3387 #, c-format msgid "Failed to set external tokens path %s." msgstr "Nie udało się ustawić ścieżki tokenów zewnętrznych %s." -#: src/cryptsetup.c:893 +#: src/cryptsetup.c:901 msgid "Resize of active device requires volume key in keyring but --disable-keyring option is set." msgstr "Zmiana rozmiaru aktywnego urządzenia wymaga klucza wolumenu w pęku, ale ustawiono opcję --disable-keyring." -#: src/cryptsetup.c:1053 +#: src/cryptsetup.c:1061 msgid "Benchmark interrupted." msgstr "Test szybkości przerwany." -#: src/cryptsetup.c:1074 +#: src/cryptsetup.c:1082 #, c-format msgid "PBKDF2-%-9s N/A\n" msgstr "PBKDF2-%-9s N/D\n" -#: src/cryptsetup.c:1076 +#: src/cryptsetup.c:1084 #, c-format msgid "PBKDF2-%-9s %7u iterations per second for %zu-bit key\n" msgstr "PBKDF2-%-9s %7u iteracji/sekundę dla klucza %zu-bitowego\n" -#: src/cryptsetup.c:1090 +#: src/cryptsetup.c:1098 #, c-format msgid "%-10s N/A\n" msgstr "%-10s N/D\n" -#: src/cryptsetup.c:1092 +#: src/cryptsetup.c:1100 #, c-format msgid "%-10s %4u iterations, %5u memory, %1u parallel threads (CPUs) for %zu-bit key (requested %u ms time)\n" msgstr "%-10s %4u iteracji, pamięć: %5u, równoległe wątki (CPU): %1u dla klucza %zu-bitowego (żądany czas %u ms)\n" -#: src/cryptsetup.c:1116 +#: src/cryptsetup.c:1124 msgid "Result of benchmark is not reliable." msgstr "Wynik testu wydajności nie jest wiarygodny." -#: src/cryptsetup.c:1166 +#: src/cryptsetup.c:1174 msgid "# Tests are approximate using memory only (no storage IO).\n" msgstr "# Testy są przybliżone tylko z użyciem pamięci (bez we/wy na dysk).\n" #. TRANSLATORS: The string is header of a table and must be exactly (right side) aligned. -#: src/cryptsetup.c:1186 +#: src/cryptsetup.c:1194 #, c-format msgid "#%*s Algorithm | Key | Encryption | Decryption\n" msgstr "#%*s Algorytm | Klucz | Szyfrowanie | Odszyfrowywanie\n" -#: src/cryptsetup.c:1190 +#: src/cryptsetup.c:1198 #, c-format msgid "Cipher %s (with %i bits key) is not available." msgstr "Szyfr %s (rozmiar klucza w bitach: %i) nie jest dostępny." #. TRANSLATORS: The string is header of a table and must be exactly (right side) aligned. -#: src/cryptsetup.c:1209 +#: src/cryptsetup.c:1217 msgid "# Algorithm | Key | Encryption | Decryption\n" msgstr "# Algorytm | Klucz | Szyfrowanie | Odszyfrowywanie\n" -#: src/cryptsetup.c:1220 +#: src/cryptsetup.c:1228 msgid "N/A" msgstr "N/D" -#: src/cryptsetup.c:1245 +#: src/cryptsetup.c:1253 msgid "" "Unprotected LUKS2 reencryption metadata detected. Please verify the reencryption operation is desirable (see luksDump output)\n" "and continue (upgrade metadata) only if you acknowledge the operation as genuine." @@ -2231,27 +2239,27 @@ msgstr "" "Wybryto nie zabezpieczone metadane ponownego szyfrowania LUKS2. Proszę sprawdzić, czy operacja ponownego szyfrowania jest pożądana (p. wyjście luksDump)\n" "i kontynuować (uaktualnić metadane) tylko jeśli ta operacja ma być faktycznie wykonana." -#: src/cryptsetup.c:1251 +#: src/cryptsetup.c:1259 msgid "Enter passphrase to protect and upgrade reencryption metadata: " msgstr "Hasło do zabezpieczenia i uaktualnienia metadanych ponownego szyfrowania: " -#: src/cryptsetup.c:1295 +#: src/cryptsetup.c:1303 msgid "Really proceed with LUKS2 reencryption recovery?" msgstr "Naprawdę kontynuować odtwarzanie ponownego szyfrowania LUKS2?" -#: src/cryptsetup.c:1304 +#: src/cryptsetup.c:1312 msgid "Enter passphrase to verify reencryption metadata digest: " msgstr "Hasło do weryfikacji skrótu metadanych ponownego szyfrowania: " -#: src/cryptsetup.c:1306 +#: src/cryptsetup.c:1314 msgid "Enter passphrase for reencryption recovery: " msgstr "Hasło do odtwarzania ponownego szyfrowania: " -#: src/cryptsetup.c:1366 +#: src/cryptsetup.c:1374 msgid "Really try to repair LUKS device header?" msgstr "Naprawdę próbować naprawić nagłówek urządzenia LUKS?" -#: src/cryptsetup.c:1390 src/integritysetup.c:89 src/integritysetup.c:247 +#: src/cryptsetup.c:1398 src/integritysetup.c:89 src/integritysetup.c:247 msgid "" "\n" "Wipe interrupted." @@ -2259,7 +2267,7 @@ msgstr "" "\n" "Wymazywanie przerwane." -#: src/cryptsetup.c:1395 src/integritysetup.c:94 src/integritysetup.c:284 +#: src/cryptsetup.c:1403 src/integritysetup.c:94 src/integritysetup.c:284 msgid "" "Wiping device to initialize integrity checksum.\n" "You can interrupt this by pressing CTRL+c (rest of not wiped device will contain invalid checksum).\n" @@ -2267,144 +2275,156 @@ msgstr "" "Czyszczenie urządzenia w celu zainicjowania sumy kontrolnej integralności.\n" "Można przerwać ten proces wciskając Ctrl+C (reszta nie wymazanego urządzenia będzie zawierać błędną sumę kontrolną).\n" -#: src/cryptsetup.c:1417 src/integritysetup.c:116 +#: src/cryptsetup.c:1425 src/integritysetup.c:116 #, c-format msgid "Cannot deactivate temporary device %s." msgstr "Nie można dezaktywować urządzenia tymczasowego %s." -#: src/cryptsetup.c:1472 +#: src/cryptsetup.c:1480 msgid "Integrity option can be used only for LUKS2 format." msgstr "Opcja integralności może być używana tylko dla formatu LUKS2." -#: src/cryptsetup.c:1477 src/cryptsetup.c:1542 +#: src/cryptsetup.c:1485 src/cryptsetup.c:1550 msgid "Unsupported LUKS2 metadata size options." msgstr "Nieobsługiwane opcje rozmiaru metadanych LUKS2." -#: src/cryptsetup.c:1482 +#: src/cryptsetup.c:1490 msgid "OPAL is supported only for LUKS2 format." msgstr "OPAL jest obsługiwany tylko dla formatu LUKS2." -#: src/cryptsetup.c:1491 +#: src/cryptsetup.c:1499 msgid "Header file does not exist, do you want to create it?" msgstr "Plik nagłówka nie istnieje, czy utworzyć go?" -#: src/cryptsetup.c:1499 +#: src/cryptsetup.c:1507 #, c-format msgid "Cannot create header file %s." msgstr "Nie można utworzyć pliku nagłówka %s." -#: src/cryptsetup.c:1522 src/integritysetup.c:144 src/integritysetup.c:152 +#: src/cryptsetup.c:1530 src/integritysetup.c:144 src/integritysetup.c:152 #: src/integritysetup.c:161 src/integritysetup.c:324 src/integritysetup.c:332 #: src/integritysetup.c:342 msgid "No known integrity specification pattern detected." msgstr "Nie wykryto znanego wzorca określającego integralność." -#: src/cryptsetup.c:1535 +#: src/cryptsetup.c:1543 #, c-format msgid "Cannot use %s as on-disk header." msgstr "Nie można użyć %s jako nagłówka na dysku." -#: src/cryptsetup.c:1564 src/integritysetup.c:181 +#: src/cryptsetup.c:1572 src/integritysetup.c:181 #, c-format msgid "This will overwrite data on %s irrevocably." msgstr "To nieodwołalnie nadpisze dane na %s." -#: src/cryptsetup.c:1601 +#: src/cryptsetup.c:1609 msgid "OPAL Admin password cannot be empty." msgstr "Hasło administratora OPAL nie może być puste." -#: src/cryptsetup.c:1615 src/cryptsetup.c:2097 src/cryptsetup.c:2247 -#: src/cryptsetup.c:2407 src/cryptsetup.c:2473 src/utils_reencrypt_luks1.c:443 +#: src/cryptsetup.c:1623 src/cryptsetup.c:2194 src/cryptsetup.c:2344 +#: src/cryptsetup.c:2504 src/cryptsetup.c:2570 src/utils_reencrypt_luks1.c:443 msgid "Failed to set pbkdf parameters." msgstr "Nie udało się ustawić parametrów PBKDF." -#: src/cryptsetup.c:1745 +#: src/cryptsetup.c:1755 msgid "Type specification in --link-vk-to-keyring keyring specification is ignored." msgstr "Opis typu w opisie pęku kluczy --link-vk-to-keyring jest ignorowany." -#: src/cryptsetup.c:1765 +#: src/cryptsetup.c:1820 +msgid "Key types have to be the same for both volume keys." +msgstr "Typy kluczy muszą być takie same dla obu kluczy wolumenu." + +#: src/cryptsetup.c:1825 +msgid "Both volume keys have to be linked to the same keyring." +msgstr "Oba klucze wolumenu muszą być dołączone do tego samego pęku kluczy." + +#: src/cryptsetup.c:1835 +msgid "You need to supply more key names." +msgstr "Trzeba podać więcej nazw kluczy." + +#: src/cryptsetup.c:1839 msgid "Invalid --link-vk-to-keyring value." msgstr "Błędna wartość --link-vk-to-keyring." -#: src/cryptsetup.c:1805 +#: src/cryptsetup.c:1884 msgid "Reduced data offset is allowed only for detached LUKS header." msgstr "Offset zmniejszonych danych jest dozwolony tylko dla odłączonego nagłówka LUKS." -#: src/cryptsetup.c:1812 +#: src/cryptsetup.c:1891 #, c-format msgid "LUKS file container %s is too small for activation, there is no remaining space for data." msgstr "Kontener plikowy LUKS %s jest zbyt mały do uaktywnienia, nie ma miejsca pozostałego na dane." -#: src/cryptsetup.c:1839 src/cryptsetup.c:2253 +#: src/cryptsetup.c:1918 src/cryptsetup.c:2350 msgid "Cannot determine volume key size for LUKS without keyslots, please use --key-size option." msgstr "Nie można określić rozmiaru klucza wolumenu dla LUKS bez kluczy, proszę użyć opcji --key-size." -#: src/cryptsetup.c:1890 +#: src/cryptsetup.c:1985 msgid "Device activated but cannot make flags persistent." msgstr "Urządzenie uaktywnione, ale nie można uczynić flag trwałymi." -#: src/cryptsetup.c:1972 src/cryptsetup.c:2040 +#: src/cryptsetup.c:2069 src/cryptsetup.c:2137 #, c-format msgid "Keyslot %d is selected for deletion." msgstr "Klucz %d jest wybrany do usunięcia." -#: src/cryptsetup.c:1984 src/cryptsetup.c:2044 +#: src/cryptsetup.c:2081 src/cryptsetup.c:2141 msgid "This is the last keyslot. Device will become unusable after purging this key." msgstr "To jest ostatni klucz. Urządzenie stanie się bezużyteczne po usunięciu tego klucza." -#: src/cryptsetup.c:1985 +#: src/cryptsetup.c:2082 msgid "Enter any remaining passphrase: " msgstr "Dowolne pozostałe hasło: " -#: src/cryptsetup.c:1986 src/cryptsetup.c:2046 +#: src/cryptsetup.c:2083 src/cryptsetup.c:2143 msgid "Operation aborted, the keyslot was NOT wiped.\n" msgstr "Operacja przerwana, klucz NIE został wymazany.\n" -#: src/cryptsetup.c:2022 +#: src/cryptsetup.c:2119 msgid "Enter passphrase to be deleted: " msgstr "Hasło do usunięcia: " -#: src/cryptsetup.c:2072 src/cryptsetup.c:2456 src/cryptsetup.c:3114 -#: src/cryptsetup.c:3281 +#: src/cryptsetup.c:2169 src/cryptsetup.c:2553 src/cryptsetup.c:3211 +#: src/cryptsetup.c:3378 #, c-format msgid "Device %s is not a valid LUKS2 device." msgstr "Urządzenie %s nie jest prawidłowym urządzeniem LUKS2." -#: src/cryptsetup.c:2111 src/cryptsetup.c:2330 +#: src/cryptsetup.c:2208 src/cryptsetup.c:2427 msgid "Enter new passphrase for key slot: " msgstr "Nowe hasło dla klucza: " -#: src/cryptsetup.c:2213 +#: src/cryptsetup.c:2310 msgid "WARNING: The --key-slot parameter is used for new keyslot number.\n" msgstr "UWAGA: Parametr --key-slot jest używany do numeru nowego klucza.\n" -#: src/cryptsetup.c:2286 src/utils_reencrypt_luks1.c:1149 +#: src/cryptsetup.c:2383 src/utils_reencrypt_luks1.c:1149 #, c-format msgid "Enter any existing passphrase: " msgstr "Dowolne istniejące hasło: " -#: src/cryptsetup.c:2411 +#: src/cryptsetup.c:2508 msgid "Enter passphrase to be changed: " msgstr "Hasło, które ma być zmienione: " -#: src/cryptsetup.c:2427 src/utils_reencrypt_luks1.c:1135 +#: src/cryptsetup.c:2524 src/utils_reencrypt_luks1.c:1135 msgid "Enter new passphrase: " msgstr "Nowe hasło: " -#: src/cryptsetup.c:2477 +#: src/cryptsetup.c:2574 msgid "Enter passphrase for keyslot to be converted: " msgstr "Hasło dla klucza do konwersji: " -#: src/cryptsetup.c:2501 +#: src/cryptsetup.c:2598 msgid "Only one device argument for isLuks operation is supported." msgstr "Dla operacji isLuks obsługiwany jest tylko jeden argument będący urządzeniem." -#: src/cryptsetup.c:2609 +#: src/cryptsetup.c:2706 #, c-format msgid "Keyslot %d does not contain unbound key." msgstr "Miejsce %d nie zawiera niepowiązanego klucza." -#: src/cryptsetup.c:2614 +#: src/cryptsetup.c:2711 msgid "" "The header dump with unbound key is sensitive information.\n" "This dump should be stored encrypted in a safe place." @@ -2413,52 +2433,52 @@ msgstr "" "Zrzut ten powinien być zawsze zapisywany w postaci zaszyfrowanej\n" "w bezpiecznym miejscu." -#: src/cryptsetup.c:2709 src/cryptsetup.c:2746 +#: src/cryptsetup.c:2806 src/cryptsetup.c:2843 #, c-format msgid "%s is not active %s device name." msgstr "%s nie jest nazwą aktywnego urządzenia %s." -#: src/cryptsetup.c:2741 +#: src/cryptsetup.c:2838 #, c-format msgid "%s is not active LUKS device name or header is missing." msgstr "%s nie jest nazwą aktywnego urządzenia LUKS lub brak nagłówka." -#: src/cryptsetup.c:2819 src/cryptsetup.c:2838 +#: src/cryptsetup.c:2916 src/cryptsetup.c:2935 msgid "Option --header-backup-file is required." msgstr "Wymagana jest opcja --header-backup-file." -#: src/cryptsetup.c:2869 +#: src/cryptsetup.c:2966 #, c-format msgid "%s is not cryptsetup managed device." msgstr "%s nie jest urządzeniem zarządzanym przez cryptsetup." -#: src/cryptsetup.c:2880 +#: src/cryptsetup.c:2977 #, c-format msgid "Refresh is not supported for device type %s" msgstr "Odświeżanie nie jest obsługiwane dla typu urządzenia %s" -#: src/cryptsetup.c:2930 +#: src/cryptsetup.c:3027 #, c-format msgid "Unrecognized metadata device type %s." msgstr "Nie rozpoznany typ urządzenia metadanych %s." -#: src/cryptsetup.c:2932 +#: src/cryptsetup.c:3029 msgid "Command requires device and mapped name as arguments." msgstr "Polecenie wymaga urządzenia i nazwy odwzorowywanej jako argumentów." -#: src/cryptsetup.c:2942 +#: src/cryptsetup.c:3039 msgid "Enter OPAL PSID: " msgstr "Proszę wprowadzić PSID OPAL: " -#: src/cryptsetup.c:2942 +#: src/cryptsetup.c:3039 msgid "Enter OPAL Admin password: " msgstr "Hasło administratora OPAL: " -#: src/cryptsetup.c:2951 +#: src/cryptsetup.c:3048 msgid "WARNING: WHOLE disk will be factory reset and all data will be lost! Continue?" msgstr "UWAGA: CAŁY dysk będzie przywrócony do stanu fabrycznego i wszystkie dane zostaną utracone! Kontynuować?" -#: src/cryptsetup.c:2994 +#: src/cryptsetup.c:3091 #, c-format msgid "" "This operation will erase all keyslots on device %s.\n" @@ -2467,351 +2487,351 @@ msgstr "" "Ta operacja usunię wszystkie klucze na urządzeniu %s.\n" "Urządzenie po tej operacji stanie się bezużyteczne." -#: src/cryptsetup.c:3001 +#: src/cryptsetup.c:3098 msgid "Operation aborted, keyslots were NOT wiped.\n" msgstr "Operacja przerwana, klucze NIE zostały wymazane.\n" -#: src/cryptsetup.c:3040 +#: src/cryptsetup.c:3137 msgid "Invalid LUKS type, only luks1 and luks2 are supported." msgstr "Błędny typ LUKS, obsługiwane są tylko luks1 i luks2." -#: src/cryptsetup.c:3056 +#: src/cryptsetup.c:3153 #, c-format msgid "Device is already %s type." msgstr "Urządzenie już ma typ %s." -#: src/cryptsetup.c:3063 +#: src/cryptsetup.c:3160 #, c-format msgid "This operation will convert %s to %s format.\n" msgstr "Ta operacja przekonwertuje %s do formatu %s.\n" -#: src/cryptsetup.c:3066 +#: src/cryptsetup.c:3163 msgid "Operation aborted, device was NOT converted.\n" msgstr "Operacja przerwana, urządzenie NIE zostało skonwertowane.\n" -#: src/cryptsetup.c:3106 +#: src/cryptsetup.c:3203 msgid "Option --priority, --label or --subsystem is missing." msgstr "Brak opcji --priority, --label lub --subsystem." -#: src/cryptsetup.c:3140 src/cryptsetup.c:3180 src/cryptsetup.c:3200 +#: src/cryptsetup.c:3237 src/cryptsetup.c:3277 src/cryptsetup.c:3297 #, c-format msgid "Token %d is invalid." msgstr "Token %d jest błędny." -#: src/cryptsetup.c:3143 src/cryptsetup.c:3203 +#: src/cryptsetup.c:3240 src/cryptsetup.c:3300 #, c-format msgid "Token %d in use." msgstr "Token %d jest w użyciu." -#: src/cryptsetup.c:3155 +#: src/cryptsetup.c:3252 #, c-format msgid "Failed to add luks2-keyring token %d." msgstr "Nie udało się dodać tokenu %d do pęku kluczy luks2." -#: src/cryptsetup.c:3166 src/cryptsetup.c:3229 +#: src/cryptsetup.c:3263 src/cryptsetup.c:3326 #, c-format msgid "Failed to assign token %d to keyslot %d." msgstr "Nie udało się przypisać tokenu %d do klucza %d." -#: src/cryptsetup.c:3183 +#: src/cryptsetup.c:3280 #, c-format msgid "Token %d is not in use." msgstr "Token %d nie jest w użyciu." -#: src/cryptsetup.c:3220 +#: src/cryptsetup.c:3317 msgid "Failed to import token from file." msgstr "Nie udało się zaimportować tokenu z pliku." -#: src/cryptsetup.c:3245 +#: src/cryptsetup.c:3342 #, c-format msgid "Failed to get token %d for export." msgstr "Nie udało się pobrać tokenu %d do eksportu." -#: src/cryptsetup.c:3258 +#: src/cryptsetup.c:3355 #, c-format msgid "Token %d is not assigned to keyslot %d." msgstr "Token %d nie jest przypisany do klucza %d." -#: src/cryptsetup.c:3260 src/cryptsetup.c:3267 +#: src/cryptsetup.c:3357 src/cryptsetup.c:3364 #, c-format msgid "Failed to unassign token %d from keyslot %d." msgstr "Nie udało się usunąć przypisania tokenu %d do klucza %d." -#: src/cryptsetup.c:3326 +#: src/cryptsetup.c:3423 msgid "Option --tcrypt-hidden, --tcrypt-system or --tcrypt-backup is supported only for TCRYPT device." msgstr "Opcje --tcrypt-hidden, --tcrypt-system i --tcrypt-backup są obsługiwane tylko dla urządzeń TCRYPT." -#: src/cryptsetup.c:3329 +#: src/cryptsetup.c:3426 msgid "Option --veracrypt or --disable-veracrypt is supported only for TCRYPT device type." msgstr "Opcje --veracrypt i --disable-veracrypt są obsługiwane tylko dla typu urządzeń TCRYPT." -#: src/cryptsetup.c:3332 +#: src/cryptsetup.c:3429 msgid "Option --veracrypt-pim is supported only for VeraCrypt compatible devices." msgstr "Opcja --veracrypt-pim jest obsługiwana tylko dla urządzeń zgodnych z VeraCryptem." -#: src/cryptsetup.c:3336 +#: src/cryptsetup.c:3433 msgid "Option --veracrypt-query-pim is supported only for VeraCrypt compatible devices." msgstr "Opcja --veracrypt-query-pim jest obsługiwana tylko dla urządzeń zgodnych z VeraCryptem." -#: src/cryptsetup.c:3338 +#: src/cryptsetup.c:3435 msgid "The options --veracrypt-pim and --veracrypt-query-pim are mutually exclusive." msgstr "Opcje --veracrypt-pim i --veracrypt-query-pim wykluczają się wzajemnie." -#: src/cryptsetup.c:3347 +#: src/cryptsetup.c:3444 msgid "Option --persistent is not allowed with --test-passphrase." msgstr "Opcja --persistent nie jest dozwolona z --test-passphrase." -#: src/cryptsetup.c:3350 +#: src/cryptsetup.c:3447 msgid "Options --refresh and --test-passphrase are mutually exclusive." msgstr "Opcje --refresh i --test-passphrase wykluczają się wzajemnie." -#: src/cryptsetup.c:3353 +#: src/cryptsetup.c:3450 msgid "Option --shared is allowed only for open of plain device." msgstr "Opcja --shared jest dozwolona tylko dla operacji otwarcia zwykłego urządzenia." -#: src/cryptsetup.c:3356 +#: src/cryptsetup.c:3453 msgid "Option --skip is supported only for open of plain and loopaes devices." msgstr "Opcja --skip jest obsługiwana tylko przy otwieraniu urządzeń plain i loopaes." -#: src/cryptsetup.c:3359 +#: src/cryptsetup.c:3456 msgid "Option --offset with open action is only supported for plain and loopaes devices." msgstr "Opcja --offset z akcją open jest obsługiwana tylko dla urządzeń plain i loopaes." -#: src/cryptsetup.c:3362 +#: src/cryptsetup.c:3459 msgid "Option --tcrypt-hidden cannot be combined with --allow-discards." msgstr "Opcji --tcrypt-hidden nie można łączyć z --allow-discards." -#: src/cryptsetup.c:3366 +#: src/cryptsetup.c:3463 msgid "Sector size option with open action is supported only for plain devices." msgstr "Opcja rozmiaru sektora z akcją open jest obsługiwana tylko dla urządzeń plain." -#: src/cryptsetup.c:3370 +#: src/cryptsetup.c:3467 msgid "Large IV sectors option is supported only for opening plain type device with sector size larger than 512 bytes." msgstr "Opcja dużych rozmiarów sektorów IV jest obsługiwana tylko przy otwieraniu urządzeń typu plain z sektorem większym niż 512 bajtów." -#: src/cryptsetup.c:3375 +#: src/cryptsetup.c:3472 msgid "Option --test-passphrase is allowed only for open of LUKS, TCRYPT, BITLK and FVAULT2 devices." msgstr "Opcja --test-passphrase jest dozwolona tylko przy otwieraniu urządzeń LUKS, TRCYPT, BITLK i FVAULT2." -#: src/cryptsetup.c:3378 src/cryptsetup.c:3401 +#: src/cryptsetup.c:3475 src/cryptsetup.c:3498 msgid "Options --device-size and --size cannot be combined." msgstr "Opcji --device-size i --size nie można łączyć." -#: src/cryptsetup.c:3381 +#: src/cryptsetup.c:3478 msgid "Option --unbound is allowed only for open of luks device." msgstr "Opcja --unbound jest dozwolona tylko dla operacji otwarcia urządzenia LUKS." -#: src/cryptsetup.c:3384 +#: src/cryptsetup.c:3481 msgid "Option --unbound cannot be used without --test-passphrase." msgstr "Opcja --unbound nie może być użyta bez --test-passphrase." -#: src/cryptsetup.c:3393 src/veritysetup.c:671 src/integritysetup.c:767 +#: src/cryptsetup.c:3490 src/veritysetup.c:671 src/integritysetup.c:767 msgid "Options --cancel-deferred and --deferred cannot be used at the same time." msgstr "Opcje --cancel-deferred i --deferred nie mogą być użyte naraz." -#: src/cryptsetup.c:3409 +#: src/cryptsetup.c:3506 msgid "Options --reduce-device-size and --device-size cannot be combined." msgstr "Opcji --reduce-device-size i --device-size nie można łączyć." -#: src/cryptsetup.c:3412 +#: src/cryptsetup.c:3509 msgid "Option --active-name can be set only for LUKS2 device." msgstr "Opcja --active-name może być ustawiona tylko dla urządzenia LUKS2." -#: src/cryptsetup.c:3415 +#: src/cryptsetup.c:3512 msgid "Options --active-name and --force-offline-reencrypt cannot be combined." msgstr "Opcji --active-name i --force-offline-reencrypt nie można łączyć." -#: src/cryptsetup.c:3423 src/cryptsetup.c:3453 +#: src/cryptsetup.c:3520 src/cryptsetup.c:3550 msgid "Keyslot specification is required." msgstr "Wymagane jest określenie klucza." -#: src/cryptsetup.c:3431 +#: src/cryptsetup.c:3528 msgid "Options --align-payload and --offset cannot be combined." msgstr "Opcji --align-payload i --offset nie można łączyć." -#: src/cryptsetup.c:3434 +#: src/cryptsetup.c:3531 msgid "Option --integrity-no-wipe can be used only for format action with integrity extension." msgstr "Opcja --integrity-no-wipe może być użyta tylko do akcji formatowania z rozszerzeniem integralności." -#: src/cryptsetup.c:3437 +#: src/cryptsetup.c:3534 msgid "Only one of --use-[u]random options is allowed." msgstr "Dozwolona jest tylko jedna z opcji --use-[u]random." -#: src/cryptsetup.c:3445 +#: src/cryptsetup.c:3542 msgid "Key size is required with --unbound option." msgstr "Przy opcji --unbound wymagany jest rozmiar klucza." -#: src/cryptsetup.c:3465 +#: src/cryptsetup.c:3562 msgid "Invalid token action." msgstr "Błędna akcja token." -#: src/cryptsetup.c:3468 +#: src/cryptsetup.c:3565 msgid "--key-description parameter is mandatory for token add action." msgstr "Parametr --key-description jest wymagany do akcji dodania tokenu." -#: src/cryptsetup.c:3472 src/cryptsetup.c:3485 +#: src/cryptsetup.c:3569 src/cryptsetup.c:3582 msgid "Action requires specific token. Use --token-id parameter." msgstr "Akcja wymaga określonego tokenu. Należy użyć parametru --token-id." -#: src/cryptsetup.c:3476 +#: src/cryptsetup.c:3573 msgid "Option --unbound is valid only with token add action." msgstr "Opcja --unbound jest dozwolona tylko dla operacji dodania tokenu." -#: src/cryptsetup.c:3478 +#: src/cryptsetup.c:3575 msgid "Options --key-slot and --unbound cannot be combined." msgstr "Opcji --key-slot i --unbound nie można łączyć." -#: src/cryptsetup.c:3483 +#: src/cryptsetup.c:3580 msgid "Action requires specific keyslot. Use --key-slot parameter." msgstr "Akcja wymaga określonego klucza. Należy użyć parametru --key-slot." -#: src/cryptsetup.c:3499 +#: src/cryptsetup.c:3596 msgid "<device> [--type <type>] [<name>]" msgstr "<uządzenie> [--type <typ>] [<nazwa>]" -#: src/cryptsetup.c:3499 src/veritysetup.c:491 src/integritysetup.c:544 +#: src/cryptsetup.c:3596 src/veritysetup.c:491 src/integritysetup.c:544 msgid "open device as <name>" msgstr "otwarcie urządzenia jako <nazwa>" -#: src/cryptsetup.c:3500 src/cryptsetup.c:3501 src/cryptsetup.c:3502 +#: src/cryptsetup.c:3597 src/cryptsetup.c:3598 src/cryptsetup.c:3599 #: src/veritysetup.c:492 src/veritysetup.c:493 src/integritysetup.c:545 #: src/integritysetup.c:546 src/integritysetup.c:548 msgid "<name>" msgstr "<nazwa>" -#: src/cryptsetup.c:3500 src/veritysetup.c:492 src/integritysetup.c:545 +#: src/cryptsetup.c:3597 src/veritysetup.c:492 src/integritysetup.c:545 msgid "close device (remove mapping)" msgstr "zamknięcie urządzenia (usunięcie odwzorowania)" -#: src/cryptsetup.c:3501 src/integritysetup.c:548 +#: src/cryptsetup.c:3598 src/integritysetup.c:548 msgid "resize active device" msgstr "zmiana rozmiaru aktywnego urządzenia" -#: src/cryptsetup.c:3502 +#: src/cryptsetup.c:3599 msgid "show device status" msgstr "pokazanie stanu urządzenia" -#: src/cryptsetup.c:3503 +#: src/cryptsetup.c:3600 msgid "[--cipher <cipher>]" msgstr "[--cipher <szyfr>]" -#: src/cryptsetup.c:3503 +#: src/cryptsetup.c:3600 msgid "benchmark cipher" msgstr "test szybkości szyfru" -#: src/cryptsetup.c:3504 src/cryptsetup.c:3505 src/cryptsetup.c:3506 -#: src/cryptsetup.c:3507 src/cryptsetup.c:3508 src/cryptsetup.c:3515 -#: src/cryptsetup.c:3516 src/cryptsetup.c:3517 src/cryptsetup.c:3518 -#: src/cryptsetup.c:3519 src/cryptsetup.c:3520 src/cryptsetup.c:3521 -#: src/cryptsetup.c:3522 src/cryptsetup.c:3523 src/cryptsetup.c:3524 +#: src/cryptsetup.c:3601 src/cryptsetup.c:3602 src/cryptsetup.c:3603 +#: src/cryptsetup.c:3604 src/cryptsetup.c:3605 src/cryptsetup.c:3612 +#: src/cryptsetup.c:3613 src/cryptsetup.c:3614 src/cryptsetup.c:3615 +#: src/cryptsetup.c:3616 src/cryptsetup.c:3617 src/cryptsetup.c:3618 +#: src/cryptsetup.c:3619 src/cryptsetup.c:3620 src/cryptsetup.c:3621 msgid "<device>" msgstr "<urządzenie>" -#: src/cryptsetup.c:3504 +#: src/cryptsetup.c:3601 msgid "try to repair on-disk metadata" msgstr "próba naprawy metadanych na dysku" -#: src/cryptsetup.c:3505 +#: src/cryptsetup.c:3602 msgid "reencrypt LUKS2 device" msgstr "ponowne szyfrowanie urządzenia LUKS2" -#: src/cryptsetup.c:3506 +#: src/cryptsetup.c:3603 msgid "erase all keyslots (remove encryption key)" msgstr "usunięcie wszystkich kluczy (usunięcie klucza szyfrującego)" -#: src/cryptsetup.c:3507 +#: src/cryptsetup.c:3604 msgid "convert LUKS from/to LUKS2 format" msgstr "przekonwertowanie formatu LUKS z/do LUKS2" -#: src/cryptsetup.c:3508 +#: src/cryptsetup.c:3605 msgid "set permanent configuration options for LUKS2" msgstr "ustawienie opcji trwałej konfiguracji dla LUKS2" -#: src/cryptsetup.c:3509 src/cryptsetup.c:3510 +#: src/cryptsetup.c:3606 src/cryptsetup.c:3607 msgid "<device> [<new key file>]" msgstr "<urządzenie> [<nowy plik klucza>]" -#: src/cryptsetup.c:3509 +#: src/cryptsetup.c:3606 msgid "formats a LUKS device" msgstr "sformatowanie urządzenia LUKS" -#: src/cryptsetup.c:3510 +#: src/cryptsetup.c:3607 msgid "add key to LUKS device" msgstr "dodanie klucza do urządzenia LUKS" -#: src/cryptsetup.c:3511 src/cryptsetup.c:3512 src/cryptsetup.c:3513 +#: src/cryptsetup.c:3608 src/cryptsetup.c:3609 src/cryptsetup.c:3610 msgid "<device> [<key file>]" msgstr "<urządzenie> [<plik klucza>]" -#: src/cryptsetup.c:3511 +#: src/cryptsetup.c:3608 msgid "removes supplied key or key file from LUKS device" msgstr "usunięcie podanego klucza lub pliku klucza z urządzenia LUKS" -#: src/cryptsetup.c:3512 +#: src/cryptsetup.c:3609 msgid "changes supplied key or key file of LUKS device" msgstr "zmiana podanego klucza lub pliku klucza urządzenia LUKS" -#: src/cryptsetup.c:3513 +#: src/cryptsetup.c:3610 msgid "converts a key to new pbkdf parameters" msgstr "konwersja klucza na nowe parametry pbkdf" -#: src/cryptsetup.c:3514 +#: src/cryptsetup.c:3611 msgid "<device> <key slot>" msgstr "<urządzenie> <numer klucza>" -#: src/cryptsetup.c:3514 +#: src/cryptsetup.c:3611 msgid "wipes key with number <key slot> from LUKS device" msgstr "wymazanie klucza o numerze <numer klucza> z urządzenia LUKS" -#: src/cryptsetup.c:3515 +#: src/cryptsetup.c:3612 msgid "print UUID of LUKS device" msgstr "wypisanie UUID-a urządzenia LUKS" -#: src/cryptsetup.c:3516 +#: src/cryptsetup.c:3613 msgid "tests <device> for LUKS partition header" msgstr "sprawdzenie <urządzenia> pod kątem nagłówka partycji LUKS" -#: src/cryptsetup.c:3517 +#: src/cryptsetup.c:3614 msgid "dump LUKS partition information" msgstr "zrzut informacji o partycji LUKS" -#: src/cryptsetup.c:3518 +#: src/cryptsetup.c:3615 msgid "dump TCRYPT device information" msgstr "zrzut informacji o urządzeniu TCRYPT" -#: src/cryptsetup.c:3519 +#: src/cryptsetup.c:3616 msgid "dump BITLK device information" msgstr "zrzut informacji o urządzeniu BITLK" -#: src/cryptsetup.c:3520 +#: src/cryptsetup.c:3617 msgid "dump FVAULT2 device information" msgstr "zrzut informacji o urządzeniu FVAULT2" -#: src/cryptsetup.c:3521 +#: src/cryptsetup.c:3618 msgid "Suspend LUKS device and wipe key (all IOs are frozen)" msgstr "Wstrzymanie urządzenia LUKS i wymazanie klucza (zamraża wszystkie operacje we/wy)" -#: src/cryptsetup.c:3522 +#: src/cryptsetup.c:3619 msgid "Resume suspended LUKS device" msgstr "Wznowienie zatrzymanego urządzenia LUKS" -#: src/cryptsetup.c:3523 +#: src/cryptsetup.c:3620 msgid "Backup LUKS device header and keyslots" msgstr "Kopia zapasowa nagłówka i kluczy urządzenia LUKS" -#: src/cryptsetup.c:3524 +#: src/cryptsetup.c:3621 msgid "Restore LUKS device header and keyslots" msgstr "Odtworzenie nagłówka i kluczy urządzenia LUKS z kopii zapasowej" -#: src/cryptsetup.c:3525 +#: src/cryptsetup.c:3622 msgid "<add|remove|import|export> <device>" msgstr "<add|remove|import|export> <urządzenie>" -#: src/cryptsetup.c:3525 +#: src/cryptsetup.c:3622 msgid "Manipulate LUKS2 tokens" msgstr "Operacja na tokenach LUKS2" -#: src/cryptsetup.c:3544 src/veritysetup.c:509 src/integritysetup.c:563 +#: src/cryptsetup.c:3641 src/veritysetup.c:509 src/integritysetup.c:563 msgid "" "\n" "<action> is one of:\n" @@ -2819,7 +2839,7 @@ msgstr "" "\n" "<akcja> to jedno z:\n" -#: src/cryptsetup.c:3550 +#: src/cryptsetup.c:3647 msgid "" "\n" "You can also use old <action> syntax aliases:\n" @@ -2831,7 +2851,7 @@ msgstr "" "\topen: create (plainOpen), luksOpen, loopaesOpen, tcryptOpen, bitlkOpen, fvault2Open\n" "\tclose: remove (plainClose), luksClose, loopaesClose, tcryptClose, bitlkClose, fvault2Close\n" -#: src/cryptsetup.c:3554 +#: src/cryptsetup.c:3651 #, c-format msgid "" "\n" @@ -2846,7 +2866,7 @@ msgstr "" "<numer klucza> to numer klucza LUKS do zmiany\n" "<plik klucza> to opcjonalny plik nowego klucza dla akcji luksAddKey\n" -#: src/cryptsetup.c:3561 +#: src/cryptsetup.c:3658 #, c-format msgid "" "\n" @@ -2855,7 +2875,7 @@ msgstr "" "\n" "Domyślny wkompilowany format metadanych to %s (dla akcji luksFormat).\n" -#: src/cryptsetup.c:3566 +#: src/cryptsetup.c:3663 msgid "" "\n" "LUKS2 external token plugin support is enabled.\n" @@ -2863,12 +2883,12 @@ msgstr "" "\n" "Obsługa zewnętrznych wtyczek tokenów LUKS2 jest włączona.\n" -#: src/cryptsetup.c:3567 +#: src/cryptsetup.c:3664 #, c-format msgid "LUKS2 external token plugin path: %s.\n" msgstr "Ścieżka zewnętrznych wtyczek tokenów LUKS2: %s.\n" -#: src/cryptsetup.c:3569 +#: src/cryptsetup.c:3666 msgid "" "\n" "LUKS2 external token plugin support is disabled.\n" @@ -2876,7 +2896,7 @@ msgstr "" "\n" "Obsługa zewnętrznych wtyczek tokenów LUKS2 jest wyłączona.\n" -#: src/cryptsetup.c:3573 +#: src/cryptsetup.c:3670 #, c-format msgid "" "\n" @@ -2893,7 +2913,7 @@ msgstr "" "Domyślny PBKDF dla LUKS2: %s\n" "\tCzas iteracji: %d, wymagana pamięć: %dkB, liczba wątków: %d\n" -#: src/cryptsetup.c:3584 +#: src/cryptsetup.c:3681 #, c-format msgid "" "\n" @@ -2908,100 +2928,110 @@ msgstr "" "\tplain: %s, bitów klucza: %d, skrót hasła: %s\n" "\tLUKS: %s, bitów klucza: %d, skrót nagłówka LUKS: %s, RNG: %s\n" -#: src/cryptsetup.c:3593 +#: src/cryptsetup.c:3690 msgid "\tLUKS: Default keysize with XTS mode (two internal keys) will be doubled.\n" msgstr "\tLUKS: Domyślny rozmiar klucza z trybem XTS (dwa klucze wewnętrzne) będzie podwojony.\n" -#: src/cryptsetup.c:3611 src/veritysetup.c:651 src/integritysetup.c:723 +#: src/cryptsetup.c:3708 src/veritysetup.c:651 src/integritysetup.c:723 #, c-format msgid "%s: requires %s as arguments" msgstr "%s: wymaga %s jako argumentów" -#: src/cryptsetup.c:3651 src/utils_reencrypt_luks1.c:1198 +#: src/cryptsetup.c:3748 src/utils_reencrypt_luks1.c:1198 msgid "Key slot is invalid." msgstr "Numer klucza jest nieprawidłowy." -#: src/cryptsetup.c:3678 +#: src/cryptsetup.c:3776 msgid "Device size must be multiple of 512 bytes sector." msgstr "Rozmiar urządzenia musi być wielokrotnością 512-bajtowego sektora." -#: src/cryptsetup.c:3683 +#: src/cryptsetup.c:3781 msgid "Invalid max reencryption hotzone size specification." msgstr "Błędne określenie maksymalnego rozmiaru strefy hotzone ponownego szyfrowania." -#: src/cryptsetup.c:3697 src/cryptsetup.c:3709 +#: src/cryptsetup.c:3795 src/cryptsetup.c:3807 msgid "Key size must be a multiple of 8 bits" msgstr "Rozmiar klucza musi być wielokrotnością 8 bitów" -#: src/cryptsetup.c:3714 +#: src/cryptsetup.c:3814 +#, c-format +msgid "At most %d volume key specifications can be supplied." +msgstr "Określono za dużo kluczy wolumenu, można podać najwyżej %d." + +#: src/cryptsetup.c:3826 +#, c-format +msgid "At most %d keyring link specifications can be supplied." +msgstr "Określono za dużo dołączeń pęków kluczy, można podać najwyżej %d." + +#: src/cryptsetup.c:3835 msgid "Maximum device reduce size is 1 GiB." msgstr "Maksymalna wartość ograniczenia rozmiaru urządzenia to 1GiB." -#: src/cryptsetup.c:3717 +#: src/cryptsetup.c:3838 msgid "Reduce size must be multiple of 512 bytes sector." msgstr "Rozmiar ograniczenia musi być wielokrotnością 512-bajtowego sektora." -#: src/cryptsetup.c:3734 +#: src/cryptsetup.c:3855 msgid "Option --priority can be only ignore/normal/prefer." msgstr "Opcja --priority może mieć wartości tylko ignore/normal/prefer." -#: src/cryptsetup.c:3753 src/veritysetup.c:572 src/integritysetup.c:643 +#: src/cryptsetup.c:3874 src/veritysetup.c:572 src/integritysetup.c:643 msgid "Show this help message" msgstr "Wyświetlenie tego opisu" -#: src/cryptsetup.c:3754 src/veritysetup.c:573 src/integritysetup.c:644 +#: src/cryptsetup.c:3875 src/veritysetup.c:573 src/integritysetup.c:644 msgid "Display brief usage" msgstr "Wyświetlenie krótkiej informacji o składni" -#: src/cryptsetup.c:3755 src/veritysetup.c:574 src/integritysetup.c:645 +#: src/cryptsetup.c:3876 src/veritysetup.c:574 src/integritysetup.c:645 msgid "Print package version" msgstr "Wypisanie wersji pakietu" -#: src/cryptsetup.c:3766 src/veritysetup.c:585 src/integritysetup.c:656 +#: src/cryptsetup.c:3887 src/veritysetup.c:585 src/integritysetup.c:656 msgid "Help options:" msgstr "Opcje pomocnicze:" -#: src/cryptsetup.c:3789 src/veritysetup.c:606 src/integritysetup.c:676 +#: src/cryptsetup.c:3910 src/veritysetup.c:606 src/integritysetup.c:676 msgid "[OPTION...] <action> <action-specific>" msgstr "[OPCJA...] <akcja> <parametry-akcji>" -#: src/cryptsetup.c:3798 src/veritysetup.c:615 src/integritysetup.c:687 +#: src/cryptsetup.c:3919 src/veritysetup.c:615 src/integritysetup.c:687 msgid "Argument <action> missing." msgstr "Brak argumentu <akcja>." -#: src/cryptsetup.c:3877 src/veritysetup.c:646 src/integritysetup.c:718 +#: src/cryptsetup.c:3998 src/veritysetup.c:646 src/integritysetup.c:718 msgid "Unknown action." msgstr "Nieznana akcja." -#: src/cryptsetup.c:3895 +#: src/cryptsetup.c:4016 msgid "Option --key-file takes precedence over specified key file argument." msgstr "Opcja --key-file ma priorytet nad podanym argumentem pliku klucza." -#: src/cryptsetup.c:3901 +#: src/cryptsetup.c:4022 msgid "Only one --key-file argument is allowed." msgstr "Dozwolony jest tylko jeden argument --key-file." -#: src/cryptsetup.c:3906 +#: src/cryptsetup.c:4027 msgid "Password-based key derivation function (PBKDF) can be only pbkdf2 or argon2i/argon2id." msgstr "Funkcja pochodna klucza oparta na haśle (PBKDF) może być tylko pbkdf2 lub argon2i/argon2id." -#: src/cryptsetup.c:3911 +#: src/cryptsetup.c:4032 msgid "PBKDF forced iterations cannot be combined with iteration time option." msgstr "Wymuszonych iteracji PBKDF nie można łączyć z opcją czasu iteracji." -#: src/cryptsetup.c:3916 +#: src/cryptsetup.c:4037 msgid "Cannot link volume key to a keyring when keyring is disabled." msgstr "Nie można dołączyć klucza wolumenu do pęku kluczy, kiedy pęk kluczy jest wyłączony." -#: src/cryptsetup.c:3927 +#: src/cryptsetup.c:4048 msgid "Options --keyslot-cipher and --keyslot-key-size must be used together." msgstr "Opcje --keyslot-cipher i --keyslot-key-size muszą być użyte łącznie." -#: src/cryptsetup.c:3935 +#: src/cryptsetup.c:4056 msgid "No action taken. Invoked with --test-args option.\n" msgstr "Nie wykonano akcji. Wywołano z opcją --test-args.\n" -#: src/cryptsetup.c:3948 +#: src/cryptsetup.c:4069 msgid "Cannot disable metadata locking." msgstr "Nie można wyłączyć blokowania metadanych." @@ -3466,20 +3496,20 @@ msgstr "Brak dostępnego miejsca na klucz." msgid "Can't do passphrase verification on non-tty inputs." msgstr "Nie można wykonać weryfikacji hasła, jeśli wejściem nie jest terminal." -#: src/utils_luks.c:183 +#: src/utils_luks.c:186 #, c-format msgid "Failed to open file %s in read-only mode." msgstr "Nie udało się otworzyć pliku %s tylko do odczytu." -#: src/utils_luks.c:196 +#: src/utils_luks.c:199 msgid "Provide valid LUKS2 token JSON:\n" msgstr "Poprawny token JSON dla LUKS2:\n" -#: src/utils_luks.c:203 +#: src/utils_luks.c:206 msgid "Failed to read JSON file." msgstr "Nie udało się odczytać pliku JSON." -#: src/utils_luks.c:208 +#: src/utils_luks.c:211 msgid "" "\n" "Read interrupted." @@ -3487,12 +3517,12 @@ msgstr "" "\n" "Odczyt przerwany." -#: src/utils_luks.c:249 +#: src/utils_luks.c:252 #, c-format msgid "Failed to open file %s in write mode." msgstr "Nie udało się otworzyć pliku %s do zapisu." -#: src/utils_luks.c:258 +#: src/utils_luks.c:261 msgid "" "\n" "Write interrupted." @@ -3500,7 +3530,7 @@ msgstr "" "\n" "Zapis przerwany." -#: src/utils_luks.c:262 +#: src/utils_luks.c:265 msgid "Failed to write JSON file." msgstr "Nie udało się zapisać pliku JSON." @@ -3589,7 +3619,7 @@ msgstr "" "Żądany --sector-size %<PRIu32> jest niezgodny z superblokiem %s\n" "(rozmiar bloku: %<PRIu32> B), wykrytym na urządzeniu %s." -#: src/utils_reencrypt.c:533 src/utils_reencrypt.c:1412 +#: src/utils_reencrypt.c:533 src/utils_reencrypt.c:1421 msgid "Encryption without detached header (--header) is not possible without data device size reduction (--reduce-device-size)." msgstr "Szyfrowanie bez odłączonego nagłówka (--header) jest niemożliwe bez ograniczenia rozmiaru urządzenia danych (--reduce-device-size)." @@ -3639,53 +3669,53 @@ msgstr "Odtwarzanie oryginalnego nagłówka LUKS2." msgid "Original LUKS2 header restore failed." msgstr "Odtwarzanie oryginalnego nagłówka LUKS2 nie powiodło się." -#: src/utils_reencrypt.c:759 +#: src/utils_reencrypt.c:765 #, c-format msgid "Header file %s does not exist. Do you want to initialize LUKS2 decryption of device %s and export LUKS2 header to file %s?" msgstr "Plik nagłówka %s nie istnieje. Czy zainicjować odszyfrowywanie LUKS2 urządzenia %s i eksport nagłówka LUKS2 do pliku %s?" -#: src/utils_reencrypt.c:807 +#: src/utils_reencrypt.c:815 msgid "Failed to add read/write permissions to exported header file." msgstr "Nie udało się dodać uprawnień odczytu/zapisu do pliku wyeksportowanego nagłówka." -#: src/utils_reencrypt.c:860 +#: src/utils_reencrypt.c:869 #, c-format msgid "Reencryption initialization failed. Header backup is available in %s." msgstr "Inicjowanie ponownego szyfrowania nie powiodło się. Kopia zapasowa nagłówka jest dostępna w %s." -#: src/utils_reencrypt.c:888 +#: src/utils_reencrypt.c:897 msgid "LUKS2 decryption is supported with detached header device only (with data offset set to 0)." msgstr "Odszyfrowanie LUKS2 jest obsługiwane tylko z urządzeniem z odłączonym nagłówkiem (z offsetem danych ustawionym na 0)." -#: src/utils_reencrypt.c:1023 src/utils_reencrypt.c:1032 +#: src/utils_reencrypt.c:1032 src/utils_reencrypt.c:1041 msgid "Not enough free keyslots for reencryption." msgstr "Za mało wolnych kluczy do ponownego szyfrowania." -#: src/utils_reencrypt.c:1053 src/utils_reencrypt_luks1.c:1100 +#: src/utils_reencrypt.c:1062 src/utils_reencrypt_luks1.c:1100 msgid "Key file can be used only with --key-slot or with exactly one key slot active." msgstr "Rozmiaru klucza można użyć tylko z --key-slot albo przy dokładnie jednym aktywnym kluczu." -#: src/utils_reencrypt.c:1062 src/utils_reencrypt_luks1.c:1147 +#: src/utils_reencrypt.c:1071 src/utils_reencrypt_luks1.c:1147 #: src/utils_reencrypt_luks1.c:1158 #, c-format msgid "Enter passphrase for key slot %d: " msgstr "Hasło dla klucza %d: " -#: src/utils_reencrypt.c:1074 +#: src/utils_reencrypt.c:1083 #, c-format msgid "Enter passphrase for key slot %u: " msgstr "Hasło dla klucza %u: " -#: src/utils_reencrypt.c:1126 +#: src/utils_reencrypt.c:1135 #, c-format msgid "Switching data encryption cipher to %s.\n" msgstr "Zmiana szyfru do szyfrowania danych na %s.\n" -#: src/utils_reencrypt.c:1180 +#: src/utils_reencrypt.c:1189 msgid "No data segment parameters changed. Reencryption aborted." msgstr "Nie zmieniono parametrów segmentu danych. Ponowne szyfrowanie przerwane." -#: src/utils_reencrypt.c:1282 +#: src/utils_reencrypt.c:1291 msgid "" "Encryption sector size increase on offline device is not supported.\n" "Activate the device first or use --force-offline-reencrypt option (dangerous!)." @@ -3693,7 +3723,7 @@ msgstr "" "Zwiększanie rozmiaru sektora szyfrowania na urządzeniu offline nie jest obsługiwane.\n" "Należy najpierw uaktywnić urządzenie lub użyć opcji --force-offline-reencrypt (niebezpieczna!)." -#: src/utils_reencrypt.c:1322 src/utils_reencrypt_luks1.c:726 +#: src/utils_reencrypt.c:1331 src/utils_reencrypt_luks1.c:726 #: src/utils_reencrypt_luks1.c:798 msgid "" "\n" @@ -3702,58 +3732,58 @@ msgstr "" "\n" "Ponowne szyfrowanie przerwane." -#: src/utils_reencrypt.c:1327 +#: src/utils_reencrypt.c:1336 msgid "Resuming LUKS reencryption in forced offline mode.\n" msgstr "Wznawianie ponownego szyfrowania LUKS w wymuszonym trybie offline.\n" -#: src/utils_reencrypt.c:1350 +#: src/utils_reencrypt.c:1359 #, c-format msgid "Device %s contains broken LUKS metadata. Aborting operation." msgstr "Urządzenie %s zawiera uszkodzone metadane LUKS. Przerwano operację." -#: src/utils_reencrypt.c:1366 src/utils_reencrypt.c:1388 +#: src/utils_reencrypt.c:1375 src/utils_reencrypt.c:1397 #, c-format msgid "Device %s is already LUKS device. Aborting operation." msgstr "Urządzenie %s jest już urządzeniem LUKS. Przerwano operację." -#: src/utils_reencrypt.c:1394 +#: src/utils_reencrypt.c:1403 #, c-format msgid "Device %s is already in LUKS reencryption. Aborting operation." msgstr "Urządzenie %s jest już w trybie ponownego szyfrowania LUKS. Przerwano operację." -#: src/utils_reencrypt.c:1476 +#: src/utils_reencrypt.c:1485 msgid "LUKS2 decryption requires --header option." msgstr "Odszyfrowanie LUKS2 wymaga opcji --header." -#: src/utils_reencrypt.c:1524 +#: src/utils_reencrypt.c:1533 msgid "Command requires device as argument." msgstr "Polecenie wymaga urządzenia jako argumentu." -#: src/utils_reencrypt.c:1537 +#: src/utils_reencrypt.c:1546 #, c-format msgid "Conflicting versions. Device %s is LUKS1." msgstr "Konflikt wersji. Urządzenie %s jest urządzeniem LUKS1." -#: src/utils_reencrypt.c:1543 +#: src/utils_reencrypt.c:1552 #, c-format msgid "Conflicting versions. Device %s is in LUKS1 reencryption." msgstr "Konflikt wersji. Urządzenie %s jest w trybie ponownego szyfrowania LUKS1." -#: src/utils_reencrypt.c:1549 +#: src/utils_reencrypt.c:1558 #, c-format msgid "Conflicting versions. Device %s is LUKS2." msgstr "Konflikt wersji. Urządzenie %s jest urządzeniem LUKS2." -#: src/utils_reencrypt.c:1555 +#: src/utils_reencrypt.c:1564 #, c-format msgid "Conflicting versions. Device %s is in LUKS2 reencryption." msgstr "Konflikt wersji. Urządzenie %s jest w trybie ponownego szyfrowania LUKS2." -#: src/utils_reencrypt.c:1561 +#: src/utils_reencrypt.c:1570 msgid "LUKS2 reencryption already initialized. Aborting operation." msgstr "Ponowne szyfrowanie LUKS2 jest już zainicjowane. Przerywanie operacji." -#: src/utils_reencrypt.c:1568 +#: src/utils_reencrypt.c:1577 msgid "Device reencryption not in progress." msgstr "Ponowne szyfrowanie urządzenia nie jest w toku." @@ -1,3 +1,4 @@ +# Romanian translation for cryptsetup. # Mesajele în limba română pentru pachetul cryptsetup. # Copyright © 2023 Free Software Foundation, Inc. # This file is put in the public domain. @@ -10,14 +11,15 @@ # Actualizare a traducerii pentru versiunea 2.6.1-rc0, făcută de R-GC, ian-2023. # Actualizare a traducerii pentru versiunea 2.7.0-rc0, făcută de R-GC, noi-2023. # Actualizare a traducerii pentru versiunea 2.7.0-rc1, făcută de R-GC, dec-2023. +# Actualizare a traducerii pentru versiunea 2.7.1-rc0, făcută de R-GC, mar-2024. # Actualizare a traducerii pentru versiunea Y, făcută de X, Y(luna-anul). # msgid "" msgstr "" -"Project-Id-Version: cryptsetup 2.7.0-rc1\n" +"Project-Id-Version: cryptsetup 2.7.1-rc0\n" "Report-Msgid-Bugs-To: cryptsetup@lists.linux.dev\n" -"POT-Creation-Date: 2023-12-20 15:16+0100\n" -"PO-Revision-Date: 2023-12-21 13:41+0100\n" +"POT-Creation-Date: 2024-02-29 20:38+0100\n" +"PO-Revision-Date: 2024-03-01 19:03+0100\n" "Last-Translator: Remus-Gabriel Chelu <remusgabriel.chelu@disroot.org>\n" "Language-Team: Romanian <translation-team-ro@lists.sourceforge.net>\n" "Language: ro\n" @@ -125,632 +127,640 @@ msgstr "Calitatea solicitată pentru generatorul de numere aleatoare(RNG) este n msgid "Error reading from RNG." msgstr "Eroare la citirea din generatorul de numere aleatorii(RNG)." -#: lib/setup.c:261 +#: lib/setup.c:262 msgid "OPAL support is disabled in libcryptsetup." msgstr "Suportul pentru OPAL este dezactivat în libcryptsetup." -#: lib/setup.c:263 +#: lib/setup.c:264 #, c-format msgid "Device %s or kernel does not support OPAL encryption." msgstr "Dispozitivul %s sau nucleul nu acceptă criptarea OPAL." -#: lib/setup.c:279 +#: lib/setup.c:280 msgid "Cannot initialize crypto RNG backend." msgstr "Nu s-a putut inițializa utilitarul de criptare al generatorului de numere aleatorii(RNG)." -#: lib/setup.c:285 +#: lib/setup.c:286 msgid "Cannot initialize crypto backend." msgstr "Nu s-a putut inițializa utilitarul de criptare ." -#: lib/setup.c:317 lib/setup.c:2777 lib/verity/verity.c:122 +#: lib/setup.c:318 lib/setup.c:2778 lib/verity/verity.c:122 #, c-format msgid "Hash algorithm %s not supported." msgstr "Algoritmul sumei de control %s nu este acceptat." -#: lib/setup.c:320 lib/loopaes/loopaes.c:90 +#: lib/setup.c:321 lib/loopaes/loopaes.c:90 #, c-format msgid "Key processing error (using hash %s)." msgstr "Eroare de procesare a cheii (folosind suma de control %s)." -#: lib/setup.c:391 lib/setup.c:428 +#: lib/setup.c:392 lib/setup.c:429 msgid "Cannot determine device type. Incompatible activation of device?" msgstr "Nu se poate determina tipul de dispozitiv. Activare a dispozitivului incompatibilă?" -#: lib/setup.c:397 lib/setup.c:3971 +#: lib/setup.c:398 lib/setup.c:3973 msgid "This operation is supported only for LUKS device." msgstr "Această operație este acceptată doar pentru dispozitive LUKS." -#: lib/setup.c:434 +#: lib/setup.c:435 msgid "This operation is supported only for LUKS2 device." msgstr "Această operație este acceptată doar pentru dispozitive LUKS2." -#: lib/setup.c:491 lib/luks2/luks2_reencrypt.c:3056 +#: lib/setup.c:492 lib/luks2/luks2_reencrypt.c:3071 msgid "All key slots full." msgstr "Toate sloturile pentru chei sunt ocupate." -#: lib/setup.c:502 +#: lib/setup.c:503 #, c-format msgid "Key slot %d is invalid, please select between 0 and %d." msgstr "Slotul de cheie %d este nu este valid, selectați între 0 și %d." -#: lib/setup.c:508 +#: lib/setup.c:509 #, c-format msgid "Key slot %d is full, please select another one." msgstr "Slotul pentru chei %d este ocupat, selectați altul." -#: lib/setup.c:619 lib/setup.c:3672 +#: lib/setup.c:620 lib/setup.c:3673 msgid "Device size is not aligned to device logical block size." msgstr "Dimensiunea dispozitivului nu este aliniată la dimensiunea blocului logic al dispozitivului." -#: lib/setup.c:717 +#: lib/setup.c:718 #, c-format msgid "Header detected but device %s is too small." msgstr "Antet detectat, dar dispozitivul %s este prea mic." -#: lib/setup.c:758 lib/setup.c:3563 lib/setup.c:5163 -#: lib/luks2/luks2_reencrypt.c:3848 lib/luks2/luks2_reencrypt.c:4305 +#: lib/setup.c:759 lib/setup.c:3564 lib/setup.c:5351 lib/setup.c:5371 +#: lib/luks2/luks2_reencrypt.c:3863 lib/luks2/luks2_reencrypt.c:4320 msgid "This operation is not supported for this device type." msgstr "Această operație nu este suportată pentru acest tip de dispozitiv." -#: lib/setup.c:763 +#: lib/setup.c:764 msgid "Illegal operation with reencryption in-progress." msgstr "Operație ilegală cu recriptare în curs." -#: lib/setup.c:895 +#: lib/setup.c:896 msgid "Failed to rollback LUKS2 metadata in memory." msgstr "Nu s-au putut reîncărca metadatele LUKS2 în memorie." -#: lib/setup.c:982 lib/luks1/keymanage.c:249 lib/luks1/keymanage.c:527 -#: lib/luks2/luks2_json_metadata.c:1374 src/cryptsetup.c:1799 -#: src/cryptsetup.c:1962 src/cryptsetup.c:2017 src/cryptsetup.c:2222 -#: src/cryptsetup.c:2392 src/cryptsetup.c:2673 src/cryptsetup.c:2981 -#: src/cryptsetup.c:3049 src/utils_reencrypt.c:1488 +#: lib/setup.c:983 lib/luks1/keymanage.c:249 lib/luks1/keymanage.c:527 +#: lib/luks2/luks2_json_metadata.c:1374 src/cryptsetup.c:1878 +#: src/cryptsetup.c:2059 src/cryptsetup.c:2114 src/cryptsetup.c:2319 +#: src/cryptsetup.c:2489 src/cryptsetup.c:2770 src/cryptsetup.c:3078 +#: src/cryptsetup.c:3146 src/utils_reencrypt.c:1497 #: src/utils_reencrypt_luks1.c:1192 tokens/ssh/cryptsetup-ssh.c:85 #, c-format msgid "Device %s is not a valid LUKS device." msgstr "Dispozitivul %s nu este un dispozitiv LUKS valid." -#: lib/setup.c:985 lib/luks1/keymanage.c:530 +#: lib/setup.c:986 lib/luks1/keymanage.c:530 #, c-format msgid "Unsupported LUKS version %d." msgstr "Versiunea %d de LUKS nu este acceptată." -#: lib/setup.c:1358 +#: lib/setup.c:1359 #, c-format msgid "No known cipher specification pattern detected for active device %s." msgstr "Nu a fost detectat niciun model cunoscut de specificație de cifrare pentru dispozitivul activ %s." -#: lib/setup.c:1604 lib/setup.c:3317 lib/setup.c:3399 lib/setup.c:3411 -#: lib/setup.c:3581 lib/setup.c:5755 +#: lib/setup.c:1605 lib/setup.c:3318 lib/setup.c:3400 lib/setup.c:3412 +#: lib/setup.c:3582 lib/setup.c:5995 #, c-format msgid "Device %s is not active." msgstr "Dispozitivul %s nu este activ." -#: lib/setup.c:1621 +#: lib/setup.c:1622 #, c-format msgid "Underlying device for crypt device %s disappeared." msgstr "Dispozitivul subiacent pentru dispozitivul criptat %s a dispărut." -#: lib/setup.c:1703 +#: lib/setup.c:1704 msgid "Invalid plain crypt parameters." msgstr "Parametrii de criptare simplă sunt incorecți." -#: lib/setup.c:1708 lib/setup.c:2680 +#: lib/setup.c:1709 lib/setup.c:2681 msgid "Invalid key size." msgstr "Dimensiunea cheii este nevalidă." -#: lib/setup.c:1713 lib/setup.c:2685 lib/setup.c:2888 +#: lib/setup.c:1714 lib/setup.c:2686 lib/setup.c:2889 msgid "UUID is not supported for this crypt type." msgstr "UUID-ul nu este acceptat pentru acest tip de criptare." -#: lib/setup.c:1718 lib/setup.c:2690 +#: lib/setup.c:1719 lib/setup.c:2691 msgid "Detached metadata device is not supported for this crypt type." msgstr "Dispozitivul cu metadate detașate nu este acceptat pentru acest tip de criptare." -#: lib/setup.c:1728 lib/setup.c:1963 lib/luks2/luks2_reencrypt.c:3012 -#: src/cryptsetup.c:1467 src/cryptsetup.c:3726 +#: lib/setup.c:1729 lib/setup.c:1964 lib/luks2/luks2_reencrypt.c:3027 +#: src/cryptsetup.c:1475 src/cryptsetup.c:3847 msgid "Unsupported encryption sector size." msgstr "Dimensiunea sectorului de criptare nu este acceptată." -#: lib/setup.c:1736 lib/setup.c:1992 lib/setup.c:3666 +#: lib/setup.c:1737 lib/setup.c:1993 lib/setup.c:3667 msgid "Device size is not aligned to requested sector size." msgstr "Dimensiunea dispozitivului nu este aliniată la dimensiunea sectorului solicitată." -#: lib/setup.c:1788 lib/setup.c:2025 lib/setup.c:2357 +#: lib/setup.c:1789 lib/setup.c:2026 lib/setup.c:2358 msgid "Can't format LUKS without device." msgstr "Formatarea LUKS fără dispozitiv nu este posibilă." -#: lib/setup.c:1794 lib/setup.c:2031 lib/setup.c:2363 +#: lib/setup.c:1795 lib/setup.c:2032 lib/setup.c:2364 msgid "Requested data alignment is not compatible with data offset." msgstr "Alinierea datelor solicitată nu este compatibilă cu poziția datelor." -#: lib/setup.c:1834 lib/setup.c:2049 +#: lib/setup.c:1835 lib/setup.c:2050 msgid "WARNING: DAX device can corrupt data as it does not guarantee atomic sector updates.\n" msgstr "AVERTISMENT: Dispozitivul DAX poate corupe datele, deoarece nu garantează actualizări atomice ale sectoarelor.\n" -#: lib/setup.c:1872 lib/setup.c:2144 lib/setup.c:2165 lib/setup.c:2541 -#: lib/setup.c:2587 lib/setup.c:2900 +#: lib/setup.c:1873 lib/setup.c:2145 lib/setup.c:2166 lib/setup.c:2542 +#: lib/setup.c:2588 lib/setup.c:2901 #, c-format msgid "Cannot wipe header on device %s." msgstr "Nu se poate șterge antetul pe dispozitivul %s." -#: lib/setup.c:1885 lib/setup.c:2204 +#: lib/setup.c:1886 lib/setup.c:2205 #, c-format msgid "Device %s is too small for activation, there is no remaining space for data.\n" msgstr "Dispozitivul %s este prea mic pentru activare, nu a mai rămas spațiu pentru date.\n" -#: lib/setup.c:1925 +#: lib/setup.c:1926 msgid "Volume key is too small for encryption with integrity extensions." msgstr "Cheia de volum este prea mică pentru criptare cu extensii de integritate." -#: lib/setup.c:1934 +#: lib/setup.c:1935 #, c-format msgid "Cipher %s-%s (key size %zd bits) is not available." msgstr "Cifrul %s-%s (dimensiunea cheii %zd biți) nu este disponibil." -#: lib/setup.c:1973 +#: lib/setup.c:1974 msgid "WARNING: The device activation will fail, dm-crypt is missing support for requested encryption sector size.\n" msgstr "AVERTISMENT: Activarea dispozitivului va eșua, dm-crypt nu are suport pentru dimensiunea sectorului de criptare solicitată.\n" -#: lib/setup.c:2147 lib/setup.c:2484 lib/setup.c:2544 lib/utils_device.c:917 -#: lib/luks1/keyencryption.c:255 lib/luks2/luks2_reencrypt.c:3080 -#: lib/luks2/luks2_reencrypt.c:4364 +#: lib/setup.c:2148 lib/setup.c:2485 lib/setup.c:2545 lib/utils_device.c:917 +#: lib/luks1/keyencryption.c:255 lib/luks2/luks2_reencrypt.c:3095 +#: lib/luks2/luks2_reencrypt.c:4380 #, c-format msgid "Device %s is too small." msgstr "Dispozitivul %s este prea mic." -#: lib/setup.c:2158 lib/setup.c:2184 lib/setup.c:2580 lib/setup.c:2626 +#: lib/setup.c:2159 lib/setup.c:2185 lib/setup.c:2581 lib/setup.c:2627 #, c-format msgid "Cannot format device %s in use." msgstr "Nu se poate formata dispozitivul %s, este în uz." -#: lib/setup.c:2161 lib/setup.c:2187 lib/setup.c:2583 lib/setup.c:2629 +#: lib/setup.c:2162 lib/setup.c:2188 lib/setup.c:2584 lib/setup.c:2630 #, c-format msgid "Cannot format device %s, permission denied." msgstr "Nu se poate formata dispozitivul %s; permisiune refuzată." -#: lib/setup.c:2173 lib/setup.c:2600 lib/setup.c:2960 +#: lib/setup.c:2174 lib/setup.c:2601 lib/setup.c:2961 #, c-format msgid "Cannot format integrity for device %s." msgstr "Nu se poate formata integritatea pentru dispozitivul %s." -#: lib/setup.c:2191 lib/setup.c:2637 +#: lib/setup.c:2192 lib/setup.c:2638 #, c-format msgid "Cannot format device %s." msgstr "Nu se poate formata dispozitivul %s." -#: lib/setup.c:2234 +#: lib/setup.c:2235 msgid "Cannot get OPAL alignment parameters." msgstr "Nu se pot obține parametrii de aliniere OPAL." -#: lib/setup.c:2243 +#: lib/setup.c:2244 msgid "Bogus OPAL logical block size." msgstr "Dimensiune falsă a blocului logic OPAL." -#: lib/setup.c:2249 +#: lib/setup.c:2250 msgid "Requested data offset is not compatible with OPAL block size." msgstr "Intervalul(offset) de date solicitat nu este compatibil cu dimensiunea blocului OPAL." -#: lib/setup.c:2256 +#: lib/setup.c:2257 msgid "Requested data alignment is not compatible with OPAL alignment." msgstr "Alinierea datelor solicitată nu este compatibilă cu alinierea OPAL." -#: lib/setup.c:2276 +#: lib/setup.c:2277 msgid "Data offset does not satisfy OPAL alignment requirements." msgstr "Intervalul datelor nu îndeplinește cerințele de aliniere OPAL." -#: lib/setup.c:2289 +#: lib/setup.c:2290 msgid "Requested data alignment does not satisfy locking range alignment requirements." msgstr "Alinierea datelor solicitată nu satisface cerințele de aliniere a intervalului de blocare." -#: lib/setup.c:2494 +#: lib/setup.c:2495 #, c-format msgid "Compensating device size by %<PRIu64> sectors to align it with OPAL alignment granularity." msgstr "Compensarea dimensiunii dispozitivului cu %<PRIu64> sectoare pentru a-l alinia cu gradul de finețe al alinierii OPAL." -#: lib/setup.c:2552 lib/setup.c:4068 lib/setup.c:4223 lib/utils_wipe.c:368 +#: lib/setup.c:2553 lib/setup.c:4070 lib/setup.c:4253 lib/utils_wipe.c:368 #: lib/luks2/luks2_json_metadata.c:2703 lib/luks2/luks2_json_metadata.c:2955 #, c-format msgid "Failed to acquire OPAL lock on device %s." msgstr "Nu s-a putut obține blocarea OPAL pe dispozitivul %s." -#: lib/setup.c:2561 +#: lib/setup.c:2562 msgid "Incorrect OPAL Admin key." msgstr "Cheie de administrare OPAL incorectă." -#: lib/setup.c:2563 +#: lib/setup.c:2564 msgid "Cannot setup OPAL segment." msgstr "Nu se poate configura segmentul OPAL." -#: lib/setup.c:2633 +#: lib/setup.c:2634 #, c-format msgid "Cannot format device %s, OPAL device seems to be fully write-protected now." msgstr "Nu se poate formata dispozitivul %s, dispozitivul OPAL pare a fi complet protejat la scriere acum." -#: lib/setup.c:2635 +#: lib/setup.c:2636 msgid "This is perhaps a bug in firmware. Run OPAL PSID reset and reconnect for recovery." msgstr "Aceasta este probabil o eroare în firmware. Efectuați reinițierea PSID OPAL și reconectați-vă pentru recuperare." -#: lib/setup.c:2655 +#: lib/setup.c:2656 #, c-format msgid "Locking range %d reset on device %s failed." msgstr "Reinițierea intervalului de blocare %d pe dispozitivul %s a eșuat." -#: lib/setup.c:2675 +#: lib/setup.c:2676 msgid "Can't format LOOPAES without device." msgstr "Nu se poate formata LOOPAES fără dispozitiv." -#: lib/setup.c:2720 +#: lib/setup.c:2721 msgid "Can't format VERITY without device." msgstr "Nu se poate formata VERITY fără dispozitiv." -#: lib/setup.c:2731 lib/verity/verity.c:101 +#: lib/setup.c:2732 lib/verity/verity.c:101 #, c-format msgid "Unsupported VERITY hash type %d." msgstr "Tip de sumă de control VERITY neacceptat %d." -#: lib/setup.c:2737 lib/verity/verity.c:109 +#: lib/setup.c:2738 lib/verity/verity.c:109 msgid "Unsupported VERITY block size." msgstr "Dimensiunea blocului VERITY nu este acceptată." -#: lib/setup.c:2742 lib/verity/verity.c:74 +#: lib/setup.c:2743 lib/verity/verity.c:74 msgid "Unsupported VERITY hash offset." msgstr "Decalajul sumei de control VERITY nu este acceptat." -#: lib/setup.c:2747 +#: lib/setup.c:2748 msgid "Unsupported VERITY FEC offset." msgstr "Decalajul FEC VERITY nu este acceptat." -#: lib/setup.c:2771 +#: lib/setup.c:2772 msgid "Data area overlaps with hash area." msgstr "Zona de date se suprapune cu zona de sume de control." -#: lib/setup.c:2796 +#: lib/setup.c:2797 msgid "Hash area overlaps with FEC area." msgstr "Zona sumelor de control se suprapune cu zona FEC." -#: lib/setup.c:2803 +#: lib/setup.c:2804 msgid "Data area overlaps with FEC area." msgstr "Zona de date se suprapune cu zona FEC." -#: lib/setup.c:2939 +#: lib/setup.c:2940 #, c-format msgid "WARNING: Requested tag size %d bytes differs from %s size output (%d bytes).\n" msgstr "AVERTISMENT: Dimensiunea solicitată a etichetei %d octeți diferă de dimensiunea %s de ieșire (%d octeți).\n" -#: lib/setup.c:3018 +#: lib/setup.c:3019 #, c-format msgid "Unknown crypt device type %s requested." msgstr "A fost solicitat un tip de dispozitiv de criptare necunoscut %s." -#: lib/setup.c:3325 lib/setup.c:3404 lib/setup.c:3417 +#: lib/setup.c:3326 lib/setup.c:3405 lib/setup.c:3418 #, c-format msgid "Unsupported parameters on device %s." msgstr "Parametri neacceptați pentru dispozitivul %s." -#: lib/setup.c:3331 lib/setup.c:3424 lib/luks2/luks2_reencrypt.c:2908 -#: lib/luks2/luks2_reencrypt.c:3145 lib/luks2/luks2_reencrypt.c:3540 +#: lib/setup.c:3332 lib/setup.c:3425 lib/luks2/luks2_reencrypt.c:2923 +#: lib/luks2/luks2_reencrypt.c:3160 lib/luks2/luks2_reencrypt.c:3555 #, c-format msgid "Mismatching parameters on device %s." msgstr "Parametrii nepotriviți în dispozitivul %s." -#: lib/setup.c:3448 +#: lib/setup.c:3449 msgid "Crypt devices mismatch." msgstr "Dispozitivele de criptare nu se potrivesc." -#: lib/setup.c:3485 lib/setup.c:3490 lib/luks2/luks2_reencrypt.c:2390 -#: lib/luks2/luks2_reencrypt.c:2924 lib/luks2/luks2_reencrypt.c:4109 +#: lib/setup.c:3486 lib/setup.c:3491 lib/luks2/luks2_reencrypt.c:2405 +#: lib/luks2/luks2_reencrypt.c:2939 lib/luks2/luks2_reencrypt.c:4124 #, c-format msgid "Failed to reload device %s." msgstr "Nu s-a putut reîncărca dispozitivul %s." -#: lib/setup.c:3496 lib/setup.c:3502 lib/luks2/luks2_reencrypt.c:2361 -#: lib/luks2/luks2_reencrypt.c:2368 lib/luks2/luks2_reencrypt.c:2938 +#: lib/setup.c:3497 lib/setup.c:3503 lib/luks2/luks2_reencrypt.c:2376 +#: lib/luks2/luks2_reencrypt.c:2383 lib/luks2/luks2_reencrypt.c:2953 #, c-format msgid "Failed to suspend device %s." msgstr "Nu s-a putut suspenda dispozitivul %s." -#: lib/setup.c:3508 lib/luks2/luks2_reencrypt.c:2375 -#: lib/luks2/luks2_reencrypt.c:2959 lib/luks2/luks2_reencrypt.c:4022 -#: lib/luks2/luks2_reencrypt.c:4113 +#: lib/setup.c:3509 lib/luks2/luks2_reencrypt.c:2390 +#: lib/luks2/luks2_reencrypt.c:2974 lib/luks2/luks2_reencrypt.c:4037 +#: lib/luks2/luks2_reencrypt.c:4128 #, c-format msgid "Failed to resume device %s." msgstr "Nu s-a putut reîncărca dispozitivul %s." -#: lib/setup.c:3523 +#: lib/setup.c:3524 #, c-format msgid "Fatal error while reloading device %s (on top of device %s)." msgstr "Eroare fatală la reîncărcarea dispozitivului %s (în partea superioară a dispozitivului %s)." -#: lib/setup.c:3526 lib/setup.c:3528 +#: lib/setup.c:3527 lib/setup.c:3529 #, c-format msgid "Failed to switch device %s to dm-error." msgstr "Nu s-a putut comuta dispozitivul %s la dm-error." -#: lib/setup.c:3568 +#: lib/setup.c:3569 msgid "Can not resize LUKS2 device with static size." msgstr "Nu se poate redimensiona dispozitivul LUKS2 cu o dimensiune statică." -#: lib/setup.c:3613 +#: lib/setup.c:3614 msgid "Cannot resize loop device." msgstr "Nu se poate redimensiona dispozitivul de buclă." -#: lib/setup.c:3657 +#: lib/setup.c:3658 msgid "WARNING: Maximum size already set or kernel doesn't support resize.\n" msgstr "AVERTISMENT: Dimensiunea maximă a fost deja stabilită sau nucleul nu acceptă redimensionarea.\n" -#: lib/setup.c:3723 +#: lib/setup.c:3724 msgid "Resize failed, the kernel doesn't support it." msgstr "Redimensionarea nu a reușit, nucleul nu acceptă redimensionarea." -#: lib/setup.c:3755 +#: lib/setup.c:3756 msgid "Do you really want to change UUID of device?" msgstr "Chiar doriți să schimbați UUID-ul dispozitivului?" -#: lib/setup.c:3847 +#: lib/setup.c:3848 msgid "Header backup file does not contain compatible LUKS header." msgstr "Fișierul de copie de rezervă pentru antet nu conține un antet LUKS compatibil." -#: lib/setup.c:3956 +#: lib/setup.c:3958 #, c-format msgid "Volume %s is not active." msgstr "Volumul %s nu este activ." -#: lib/setup.c:4022 +#: lib/setup.c:4024 #, c-format msgid "Volume %s is already suspended." msgstr "Volumul %s este deja suspendat." -#: lib/setup.c:4050 +#: lib/setup.c:4052 #, c-format msgid "Suspend is not supported for device %s." msgstr "Suspendarea nu este acceptată pentru dispozitivul %s." -#: lib/setup.c:4052 lib/setup.c:4060 +#: lib/setup.c:4054 lib/setup.c:4062 #, c-format msgid "Error during suspending device %s." msgstr "Eroare la suspendarea dispozitivului %s." -#: lib/setup.c:4074 +#: lib/setup.c:4076 #, c-format msgid "Device %s was suspended but hardware OPAL device cannot be locked." msgstr "Dispozitivul %s a fost suspendat, dar dispozitivul hardware OPAL nu poate fi blocat." -#: lib/setup.c:4106 lib/setup.c:4250 +#: lib/setup.c:4108 lib/setup.c:4280 #, c-format msgid "Resume is not supported for device %s." msgstr "Reluarea activității nu este acceptată pentru dispozitivul %s." -#: lib/setup.c:4108 lib/setup.c:4241 lib/setup.c:4252 +#: lib/setup.c:4110 lib/setup.c:4271 lib/setup.c:4282 #, c-format msgid "Error during resuming device %s." msgstr "Eroare la reluarea activității dispozitivului %s." -#: lib/setup.c:4131 -msgid "Failed to link key to the specified keyring." -msgstr "Nu s-a putut lega cheia la inelul de chei specificat." - -#: lib/setup.c:4150 +#: lib/setup.c:4129 msgid "Failed to unlink volume key from user specified keyring." msgstr "Nu s-a putut dezlega cheia de volum de la inelul de chei specificat de utilizator." -#: lib/setup.c:4213 lib/setup.c:4934 lib/setup.c:5549 +#: lib/setup.c:4244 lib/setup.c:4966 lib/setup.c:5787 msgid "Failed to link volume key in user defined keyring." msgstr "Nu s-a putut leg cheia de volum la inelul de chei specificat de utilizator." -#: lib/setup.c:4313 src/cryptsetup.c:2755 +#: lib/setup.c:4345 src/cryptsetup.c:2852 #, c-format msgid "Volume %s is not suspended." msgstr "Volumul %s nu este suspendat." -#: lib/setup.c:4414 lib/setup.c:5310 lib/setup.c:5317 lib/setup.c:7176 -#: lib/setup.c:7198 lib/setup.c:7247 src/cryptsetup.c:2265 +#: lib/setup.c:4446 lib/setup.c:5106 lib/setup.c:5523 lib/setup.c:5542 +#: lib/setup.c:7416 lib/setup.c:7438 lib/setup.c:7487 src/cryptsetup.c:2362 msgid "Volume key does not match the volume." msgstr "Cheia de volum nu se potrivește cu volumul." -#: lib/setup.c:4568 +#: lib/setup.c:4600 msgid "Failed to swap new key slot." msgstr "Nu s-a putut efectua interschimbarea cu noul slot pentru cheie." -#: lib/setup.c:4666 +#: lib/setup.c:4698 #, c-format msgid "Key slot %d is invalid." msgstr "Slotul de cheie %d nu este valid." -#: lib/setup.c:4672 src/cryptsetup.c:1975 src/cryptsetup.c:2467 -#: src/cryptsetup.c:3149 src/cryptsetup.c:3209 +#: lib/setup.c:4704 src/cryptsetup.c:2072 src/cryptsetup.c:2564 +#: src/cryptsetup.c:3246 src/cryptsetup.c:3306 #, c-format msgid "Keyslot %d is not active." msgstr "Slotul de cheie %d nu este activ." -#: lib/setup.c:4691 +#: lib/setup.c:4723 msgid "Device header overlaps with data area." msgstr "Antetul dispozitivului se suprapune cu zona de date." -#: lib/setup.c:5041 +#: lib/setup.c:5076 lib/setup.c:5176 msgid "Reencryption in-progress. Cannot activate device." msgstr "Recriptare în curs. Nu se poate activa dispozitivul." -#: lib/setup.c:5043 lib/luks2/luks2_json_metadata.c:2861 -#: lib/luks2/luks2_reencrypt.c:3646 +#: lib/setup.c:5078 lib/setup.c:5178 lib/luks2/luks2_json_metadata.c:2861 +#: lib/luks2/luks2_reencrypt.c:3661 msgid "Failed to get reencryption lock." msgstr "Nu s-a putut obține blocarea pentru recriptare." -#: lib/setup.c:5056 lib/luks2/luks2_reencrypt.c:3665 +#: lib/setup.c:5090 +msgid "LUKS2 reencryption recovery using volume key(s) failed." +msgstr "Recuperarea recriptării LUKS2 utilizând cheia (cheile) de volum a eșuat." + +#: lib/setup.c:5142 lib/setup.c:5232 +msgid "Failed to link volume keys in user defined keyring." +msgstr "Nu s-au putut lega cheile de volum la inelul de chei specificat de utilizator." + +#: lib/setup.c:5191 lib/luks2/luks2_reencrypt.c:3680 msgid "LUKS2 reencryption recovery failed." msgstr "Recuperarea recriptării LUKS2 a eșuat." -#: lib/setup.c:5228 lib/setup.c:5328 lib/setup.c:5386 +#: lib/setup.c:5439 lib/setup.c:5553 lib/setup.c:5610 msgid "Device type is not properly initialized." msgstr "Tipul de dispozitiv nu este inițializat corect." -#: lib/setup.c:5283 +#: lib/setup.c:5494 #, c-format msgid "Device %s already exists." msgstr "Dispozitivul %s există deja." -#: lib/setup.c:5290 +#: lib/setup.c:5501 #, c-format msgid "Cannot use device %s, name is invalid or still in use." msgstr "Nu se poate folosi dispozitivul %s, numele este nevalid sau este încă în uz." -#: lib/setup.c:5306 +#: lib/setup.c:5519 msgid "Incorrect volume key specified for plain device." msgstr "Este specificată o cheie de volum incorectă pentru un dispozitiv cu criptare normală." -#: lib/setup.c:5424 +#: lib/setup.c:5533 +msgid "Reencryption volume keys do not match the volume." +msgstr "Cheile de recriptare a volumului nu se potrivesc cu volumul." + +#: lib/setup.c:5646 msgid "Kernel keyring is not supported by the kernel." msgstr "Inelul de chei pentru nucleu nu este acceptat de nucleu actual." -#: lib/setup.c:5428 +#: lib/setup.c:5650 msgid "Kernel keyring missing: required for passing signature to kernel." msgstr "Lipsește inelul de chei pentru nucleu: este necesar pentru transmiterea semnăturii către nucleu." -#: lib/setup.c:5668 +#: lib/setup.c:5908 msgid "Incorrect root hash specified for verity device." msgstr "Sumă de control rădăcină incorectă specificată pentru dispozitivul verity." -#: lib/setup.c:5711 +#: lib/setup.c:5951 msgid "OPAL does not support deferred deactivation." msgstr "OPAL nu acceptă dezactivarea amânată." -#: lib/setup.c:5727 +#: lib/setup.c:5967 #, c-format msgid "Could not cancel deferred remove from device %s." msgstr "Nu s-a putut anula eliminarea întârziată din dispozitivul %s." -#: lib/setup.c:5734 lib/setup.c:5750 lib/luks2/luks2_json_metadata.c:2915 +#: lib/setup.c:5974 lib/setup.c:5990 lib/luks2/luks2_json_metadata.c:2915 #: src/utils_reencrypt.c:116 #, c-format msgid "Device %s is still in use." msgstr "Dispozitivul %s este încă în uz." -#: lib/setup.c:5759 +#: lib/setup.c:5999 #, c-format msgid "Invalid device %s." msgstr "Dispozitiv nevalid %s." -#: lib/setup.c:5899 +#: lib/setup.c:6139 msgid "Volume key buffer too small." msgstr "Memoria tampon a cheii de volum este prea mică." -#: lib/setup.c:5916 +#: lib/setup.c:6156 msgid "Cannot retrieve volume key for LUKS2 device." msgstr "Nu se poate recupera cheia de volum pentru dispozitivul LUKS2." -#: lib/setup.c:5925 +#: lib/setup.c:6165 msgid "Cannot retrieve volume key for LUKS1 device." msgstr "Nu se poate recupera cheia de volum pentru dispozitivul LUKS1." -#: lib/setup.c:5935 +#: lib/setup.c:6175 msgid "Cannot retrieve volume key for plain device." msgstr "Nu se poate recupera tasta de volum pentru dispozitivul normal." -#: lib/setup.c:5943 +#: lib/setup.c:6183 msgid "Cannot retrieve root hash for verity device." msgstr "Nu se poate recupera suma de control rădăcină pentru dispozitivul verity." -#: lib/setup.c:5950 +#: lib/setup.c:6190 msgid "Cannot retrieve volume key for BITLK device." msgstr "Nu se poate recupera cheia de volum pentru dispozitivul BITLK." -#: lib/setup.c:5955 +#: lib/setup.c:6195 msgid "Cannot retrieve volume key for FVAULT2 device." msgstr "Nu se poate recupera cheia de volum pentru dispozitivul FVAULT2." -#: lib/setup.c:5957 +#: lib/setup.c:6197 #, c-format msgid "This operation is not supported for %s crypt device." msgstr "Această operație nu este acceptată pentru dispozitivul criptat %s." -#: lib/setup.c:6141 lib/setup.c:6152 +#: lib/setup.c:6381 lib/setup.c:6392 msgid "Dump operation is not supported for this device type." msgstr "Operația de descărcare nu este acceptată pentru acest tip de dispozitiv." -#: lib/setup.c:6511 +#: lib/setup.c:6751 #, c-format msgid "Data offset is not multiple of %u bytes." msgstr "Decalajul datelor nu este multiplu de %u octeți." -#: lib/setup.c:6819 +#: lib/setup.c:7059 #, c-format msgid "Cannot convert device %s which is still in use." msgstr "Nu se poate converti dispozitivul %s care este încă în uz." -#: lib/setup.c:7117 lib/setup.c:7256 +#: lib/setup.c:7357 lib/setup.c:7496 #, c-format msgid "Failed to assign keyslot %u as the new volume key." msgstr "Nu s-a putut atribui slotul %u ca nouă cheie de volum." -#: lib/setup.c:7141 +#: lib/setup.c:7381 msgid "Failed to initialize default LUKS2 keyslot parameters." msgstr "Nu s-au putut inițializa parametrii impliciți pentru slotul de cheie LUKS2." -#: lib/setup.c:7147 +#: lib/setup.c:7387 #, c-format msgid "Failed to assign keyslot %d to digest." msgstr "Nu s-a putut aloca slotul de cheie %d pentru a digera." -#: lib/setup.c:7372 +#: lib/setup.c:7612 msgid "Cannot add key slot, all slots disabled and no volume key provided." msgstr "Nu se poate adăuga slotul pentru cheie, toate sloturile sunt dezactivate și nu este furnizată nicio cheie pentru volum." -#: lib/setup.c:7441 lib/verity/verity.c:343 +#: lib/setup.c:7681 lib/verity/verity.c:343 msgid "Failed to load key in kernel keyring." msgstr "Nu s-a putut încărca cheia în inelul de chei al nucleului." -#: lib/setup.c:7559 +#: lib/setup.c:7799 msgid "Failed to unlink volume key from thread keyring." msgstr "Nu s-a putut dezlega cheia de la inelul de chei al firului." -#: lib/setup.c:7586 +#: lib/setup.c:7843 #, c-format msgid "Could not find keyring described by \"%s\"." msgstr "Nu s-a putut găsi inelul de chei descris de „%s”." -#: lib/setup.c:7645 +#: lib/setup.c:7908 msgid "Failed to acquire global memory-hard access serialization lock." msgstr "Nu s-a putut obține blocarea de serializare a accesului la memoria-hardwarw globală." -#: lib/utils.c:205 lib/tcrypt/tcrypt.c:503 +#: lib/utils.c:215 lib/tcrypt/tcrypt.c:503 msgid "Failed to open key file." msgstr "Nu s-a putut deschide fișierul cheii." -#: lib/utils.c:210 +#: lib/utils.c:220 msgid "Cannot read keyfile from a terminal." msgstr "Nu se poate citi fișierul de cheie de la un terminal." -#: lib/utils.c:226 +#: lib/utils.c:236 msgid "Failed to stat key file." msgstr "Nu s-a putut obține starea fișierului de cheie." -#: lib/utils.c:234 lib/utils.c:255 +#: lib/utils.c:244 lib/utils.c:265 msgid "Cannot seek to requested keyfile offset." msgstr "Nu se poate căuta poziția fișierului de cheie solicitat." -#: lib/utils.c:249 lib/utils.c:264 src/utils_password.c:226 +#: lib/utils.c:259 lib/utils.c:274 src/utils_password.c:226 #: src/utils_password.c:238 msgid "Out of memory while reading passphrase." msgstr "Memoria epuizată în timpul citirii frazei de acces." -#: lib/utils.c:284 +#: lib/utils.c:294 msgid "Error reading passphrase." msgstr "Eroare la citirea frazei de acces." -#: lib/utils.c:301 +#: lib/utils.c:311 msgid "Nothing to read on input." msgstr "Nimic de citit la intrare." -#: lib/utils.c:308 +#: lib/utils.c:318 msgid "Maximum keyfile size exceeded." msgstr "Dimensiunea maximă a fișierului de cheie a fost depășită." -#: lib/utils.c:313 +#: lib/utils.c:323 msgid "Cannot read requested amount of data." msgstr "Nu se poate citi cantitatea de date solicitată." #: lib/utils_device.c:213 lib/utils_storage_wrappers.c:110 -#: lib/luks1/keyencryption.c:91 src/utils_reencrypt.c:1461 +#: lib/luks1/keyencryption.c:91 src/utils_reencrypt.c:1470 #, c-format msgid "Device %s does not exist or access denied." msgstr "Dispozitivul %s nu există sau accesul a fost refuzat." @@ -1079,7 +1089,7 @@ msgstr "Modul de cifrare LUKS %s este nevalid." msgid "LUKS hash %s is invalid." msgstr "Suma de control(hash) LUKS %s nu este validă." -#: lib/luks1/keymanage.c:574 src/cryptsetup.c:1352 +#: lib/luks1/keymanage.c:574 src/cryptsetup.c:1360 msgid "No known problems detected for LUKS header." msgstr "Nu s-a detectat nicio problemă cunoscută pentru antetul LUKS." @@ -1172,11 +1182,11 @@ msgstr "Lungimea maximă a frazei de acces TCRYPT (%zu) a fost depășită." msgid "PBKDF2 hash algorithm %s not available, skipping." msgstr "Algoritmul sumei de control(hash) PBKDF2 %s nu este disponibil, se omite." -#: lib/tcrypt/tcrypt.c:621 src/cryptsetup.c:1227 +#: lib/tcrypt/tcrypt.c:621 src/cryptsetup.c:1235 msgid "Required kernel crypto interface not available." msgstr "Interfața necesară de criptare a nucleului nu este disponibilă." -#: lib/tcrypt/tcrypt.c:623 src/cryptsetup.c:1229 +#: lib/tcrypt/tcrypt.c:623 src/cryptsetup.c:1237 msgid "Ensure you have algif_skcipher kernel module loaded." msgstr "Asigurați-vă că aveți modulul nucleului «algif_skcipher», încărcat." @@ -1493,17 +1503,17 @@ msgstr "Nucleul nu acceptă alinierea metadatelor fixe dm-integrity." msgid "Kernel refuses to activate insecure recalculate option (see legacy activation options to override)." msgstr "Nucleul refuză să activeze opțiunea de recalculare nesigură (consultați opțiunile de activare vechi pentru a le înlocui)." -#: lib/luks2/luks2_disk_metadata.c:391 lib/luks2/luks2_json_metadata.c:1197 +#: lib/luks2/luks2_disk_metadata.c:392 lib/luks2/luks2_json_metadata.c:1197 #: lib/luks2/luks2_json_metadata.c:1520 #, c-format msgid "Failed to acquire write lock on device %s." msgstr "Nu s-a putut obține blocarea la scriere pe dispozitivul %s." -#: lib/luks2/luks2_disk_metadata.c:400 +#: lib/luks2/luks2_disk_metadata.c:401 msgid "Detected attempt for concurrent LUKS2 metadata update. Aborting operation." msgstr "S-a detectat o încercare de actualizare concomitentă a metadatelor LUKS2. Se abandonează operația." -#: lib/luks2/luks2_disk_metadata.c:699 lib/luks2/luks2_disk_metadata.c:720 +#: lib/luks2/luks2_disk_metadata.c:710 lib/luks2/luks2_disk_metadata.c:731 msgid "" "Device contains ambiguous signatures, cannot auto-recover LUKS2.\n" "Please run \"cryptsetup repair\" for recovery." @@ -1588,16 +1598,16 @@ msgstr "" msgid "Ignored unknown flag %s." msgstr "S-a ignorat fanionul necunoscut %s." -#: lib/luks2/luks2_json_metadata.c:2525 lib/luks2/luks2_reencrypt.c:2090 +#: lib/luks2/luks2_json_metadata.c:2525 lib/luks2/luks2_reencrypt.c:2105 #, c-format msgid "Missing key for dm-crypt segment %u" msgstr "Lipsește cheia pentru segmentul dm-crypt %u" -#: lib/luks2/luks2_json_metadata.c:2537 lib/luks2/luks2_reencrypt.c:2104 +#: lib/luks2/luks2_json_metadata.c:2537 lib/luks2/luks2_reencrypt.c:2119 msgid "Failed to set dm-crypt segment." msgstr "Nu s-a putut definii segmentul dm-crypt." -#: lib/luks2/luks2_json_metadata.c:2543 lib/luks2/luks2_reencrypt.c:2110 +#: lib/luks2/luks2_json_metadata.c:2543 lib/luks2/luks2_reencrypt.c:2125 msgid "Failed to set dm-linear segment." msgstr "Nu s-a putut definii segmentul dm-linear." @@ -1634,7 +1644,7 @@ msgstr "Dispozitiv dm-integrity subiacent cu sectoare de date neașteptate furni msgid "Reencryption in-progress. Cannot deactivate device." msgstr "Recriptare în curs. Nu se poate dezactiva dispozitivul." -#: lib/luks2/luks2_json_metadata.c:2870 lib/luks2/luks2_reencrypt.c:4159 +#: lib/luks2/luks2_json_metadata.c:2870 lib/luks2/luks2_reencrypt.c:4174 #, c-format msgid "Failed to replace suspended device %s with dm-error target." msgstr "Nu s-a putut înlocui dispozitivul suspendat %s cu ținta dm-error." @@ -1678,7 +1688,7 @@ msgid "Cannot use %s-%s cipher for keyslot encryption." msgstr "Nu se poate utiliza cifrul %s-%s pentru criptarea slotului de cheie." #: lib/luks2/luks2_keyslot_luks2.c:285 lib/luks2/luks2_keyslot_luks2.c:404 -#: lib/luks2/luks2_keyslot_reenc.c:447 lib/luks2/luks2_reencrypt.c:2714 +#: lib/luks2/luks2_keyslot_reenc.c:447 lib/luks2/luks2_reencrypt.c:2729 #, c-format msgid "Hash algorithm %s is not available." msgstr "Algoritmul sumei de control(hash) %s nu este disponibil." @@ -1713,7 +1723,7 @@ msgstr "Nu se poate verifica starea dispozitivului cu uuid: %s." msgid "Unable to convert header with LUKSMETA additional metadata." msgstr "Nu s-a putut converti antetul cu metadate suplimentare LUKSMETA." -#: lib/luks2/luks2_luks1_convert.c:602 lib/luks2/luks2_reencrypt.c:3795 +#: lib/luks2/luks2_luks1_convert.c:602 lib/luks2/luks2_reencrypt.c:3810 #, c-format msgid "Unable to use cipher specification %s-%s for LUKS2." msgstr "Nu se poate utiliza specificația de cifrare %s-%s pentru LUKS2." @@ -1771,252 +1781,252 @@ msgstr "Nu se poate converti în formatul LUKS1 - slotul %u (peste sloturile max msgid "Cannot convert to LUKS1 format - keyslot %u is not LUKS1 compatible." msgstr "Nu se poate converti în formatul LUKS1 - slotul de cheie %u nu este compatibil cu LUKS1." -#: lib/luks2/luks2_reencrypt.c:1181 +#: lib/luks2/luks2_reencrypt.c:1196 #, c-format msgid "Hotzone size must be multiple of calculated zone alignment (%zu bytes)." msgstr "Dimensiunea zonei „fierbinți” (active) trebuie să fie multiplu al alinierii zonei calculate (%zu octeți)." -#: lib/luks2/luks2_reencrypt.c:1186 +#: lib/luks2/luks2_reencrypt.c:1201 #, c-format msgid "Device size must be multiple of calculated zone alignment (%zu bytes)." msgstr "Dimensiunea dispozitivului trebuie să fie multiplu al alinierii zonei calculate (%zu octeți)." -#: lib/luks2/luks2_reencrypt.c:1393 lib/luks2/luks2_reencrypt.c:1580 -#: lib/luks2/luks2_reencrypt.c:1663 lib/luks2/luks2_reencrypt.c:1705 -#: lib/luks2/luks2_reencrypt.c:3954 +#: lib/luks2/luks2_reencrypt.c:1408 lib/luks2/luks2_reencrypt.c:1595 +#: lib/luks2/luks2_reencrypt.c:1678 lib/luks2/luks2_reencrypt.c:1720 +#: lib/luks2/luks2_reencrypt.c:3969 msgid "Failed to initialize old segment storage wrapper." msgstr "Nu s-a putut inițializa vechea încapsulare de stocare a segmentului." -#: lib/luks2/luks2_reencrypt.c:1407 lib/luks2/luks2_reencrypt.c:1558 +#: lib/luks2/luks2_reencrypt.c:1422 lib/luks2/luks2_reencrypt.c:1573 msgid "Failed to initialize new segment storage wrapper." msgstr "Nu s-a putut inițializa noua încapsulare de stocare a segmentului." -#: lib/luks2/luks2_reencrypt.c:1534 lib/luks2/luks2_reencrypt.c:3966 +#: lib/luks2/luks2_reencrypt.c:1549 lib/luks2/luks2_reencrypt.c:3981 msgid "Failed to initialize hotzone protection." msgstr "Nu s-a putut inițializa protecția zonei „fierbinți” (active)." -#: lib/luks2/luks2_reencrypt.c:1607 +#: lib/luks2/luks2_reencrypt.c:1622 msgid "Failed to read checksums for current hotzone." msgstr "Nu s-au putut citii sumele de control pentru zona „fierbinte” (activă) actuală." -#: lib/luks2/luks2_reencrypt.c:1614 lib/luks2/luks2_reencrypt.c:3980 +#: lib/luks2/luks2_reencrypt.c:1629 lib/luks2/luks2_reencrypt.c:3995 #, c-format msgid "Failed to read hotzone area starting at %<PRIu64>." msgstr "Nu s-a putut citi zona „fierbinte” (activă) începând cu %<PRIu64>." -#: lib/luks2/luks2_reencrypt.c:1633 +#: lib/luks2/luks2_reencrypt.c:1648 #, c-format msgid "Failed to decrypt sector %zu." msgstr "Nu s-a putut decripta sectorul %zu." -#: lib/luks2/luks2_reencrypt.c:1639 +#: lib/luks2/luks2_reencrypt.c:1654 #, c-format msgid "Failed to recover sector %zu." msgstr "Nu s-a putut recupera sectorul %zu." -#: lib/luks2/luks2_reencrypt.c:2203 +#: lib/luks2/luks2_reencrypt.c:2218 #, c-format msgid "Source and target device sizes don't match. Source %<PRIu64>, target: %<PRIu64>." msgstr "Dimensiunile dispozitivelor sursă și țintă nu se potrivesc. Sursa %<PRIu64>, ținta: %<PRIu64>." -#: lib/luks2/luks2_reencrypt.c:2301 +#: lib/luks2/luks2_reencrypt.c:2316 #, c-format msgid "Failed to activate hotzone device %s." msgstr "Nu s-a putut activa zona „fierbinte” (activă) a dispozitivului %s." -#: lib/luks2/luks2_reencrypt.c:2318 +#: lib/luks2/luks2_reencrypt.c:2333 #, c-format msgid "Failed to activate overlay device %s with actual origin table." msgstr "Nu s-a putut activa dispozitivul de suprapunere %s cu tabelul de origine actual." -#: lib/luks2/luks2_reencrypt.c:2325 +#: lib/luks2/luks2_reencrypt.c:2340 #, c-format msgid "Failed to load new mapping for device %s." msgstr "Nu s-a putut încărca noua asociere pentru dispozitivul %s." -#: lib/luks2/luks2_reencrypt.c:2396 +#: lib/luks2/luks2_reencrypt.c:2411 msgid "Failed to refresh reencryption devices stack." msgstr "Nu s-a putut reîmprospăta stiva de dispozitive de recriptare." -#: lib/luks2/luks2_reencrypt.c:2596 +#: lib/luks2/luks2_reencrypt.c:2611 msgid "Failed to set new keyslots area size." msgstr "Nu s-a putut definii dimensiunea zonei noilor sloturi pentru chei." -#: lib/luks2/luks2_reencrypt.c:2732 +#: lib/luks2/luks2_reencrypt.c:2747 #, c-format msgid "Data shift value is not aligned to encryption sector size (%<PRIu32> bytes)." msgstr "Valoarea deplasării datelor nu este aliniată la dimensiunea sectorului de criptare (%<PRIu32> octeți)." -#: lib/luks2/luks2_reencrypt.c:2769 src/utils_reencrypt.c:189 +#: lib/luks2/luks2_reencrypt.c:2784 src/utils_reencrypt.c:189 #, c-format msgid "Unsupported resilience mode %s" msgstr "Modul de adaptabilitate neacceptat %s" -#: lib/luks2/luks2_reencrypt.c:2806 +#: lib/luks2/luks2_reencrypt.c:2821 msgid "Moved segment size can not be greater than data shift value." msgstr "Dimensiunea segmentului mutat nu poate fi mai mare decât valoarea deplasării de date." -#: lib/luks2/luks2_reencrypt.c:2848 +#: lib/luks2/luks2_reencrypt.c:2863 msgid "Invalid reencryption resilience parameters." msgstr "Parametri de adaptabilitate de recriptare nevalizi." -#: lib/luks2/luks2_reencrypt.c:2870 +#: lib/luks2/luks2_reencrypt.c:2885 #, c-format msgid "Moved segment too large. Requested size %<PRIu64>, available space for: %<PRIu64>." msgstr "Segmentul mutat este prea mare. Dimensiunea solicitată este de %<PRIu64>, iar spațiul disponibil pentru aceasta este de: %<PRIu64>." -#: lib/luks2/luks2_reencrypt.c:2957 +#: lib/luks2/luks2_reencrypt.c:2972 msgid "Failed to clear table." msgstr "Nu s-a putut șterge tabelul." -#: lib/luks2/luks2_reencrypt.c:3043 +#: lib/luks2/luks2_reencrypt.c:3058 msgid "Reduced data size is larger than real device size." msgstr "Dimensiunea redusă a datelor este mai mare decât dimensiunea dispozitivului real." -#: lib/luks2/luks2_reencrypt.c:3050 +#: lib/luks2/luks2_reencrypt.c:3065 #, c-format msgid "Data device is not aligned to encryption sector size (%<PRIu32> bytes)." msgstr "Dispozitivul de date nu este aliniat la dimensiunea sectorului de criptare (%<PRIu32> octeți)." -#: lib/luks2/luks2_reencrypt.c:3084 +#: lib/luks2/luks2_reencrypt.c:3099 #, c-format msgid "Data shift (%<PRIu64> sectors) is less than future data offset (%<PRIu64> sectors)." msgstr "Deplasarea datelor (%<PRIu64> sectoare) este mai mică decât decalajul viitor al datelor (%<PRIu64> sectoare)." -#: lib/luks2/luks2_reencrypt.c:3091 lib/luks2/luks2_reencrypt.c:3589 -#: lib/luks2/luks2_reencrypt.c:3610 +#: lib/luks2/luks2_reencrypt.c:3106 lib/luks2/luks2_reencrypt.c:3604 +#: lib/luks2/luks2_reencrypt.c:3625 #, c-format msgid "Failed to open %s in exclusive mode (already mapped or mounted)." msgstr "Nu s-a putut deschide %s în modul exclusiv (deja cartografiat sau montat)." -#: lib/luks2/luks2_reencrypt.c:3280 +#: lib/luks2/luks2_reencrypt.c:3295 msgid "Device not marked for LUKS2 reencryption." msgstr "Dispozitivul nu este marcat pentru recriptarea LUKS2." -#: lib/luks2/luks2_reencrypt.c:3297 lib/luks2/luks2_reencrypt.c:4271 +#: lib/luks2/luks2_reencrypt.c:3312 lib/luks2/luks2_reencrypt.c:4286 msgid "Failed to load LUKS2 reencryption context." msgstr "Nu s-a putut încărca contextul de recriptare LUKS2." -#: lib/luks2/luks2_reencrypt.c:3387 +#: lib/luks2/luks2_reencrypt.c:3402 msgid "Failed to get reencryption state." msgstr "Nu s-a putut obține stadiul recriptării." -#: lib/luks2/luks2_reencrypt.c:3391 lib/luks2/luks2_reencrypt.c:3705 +#: lib/luks2/luks2_reencrypt.c:3406 lib/luks2/luks2_reencrypt.c:3720 msgid "Device is not in reencryption." msgstr "Dispozitivul nu se află în recriptare." -#: lib/luks2/luks2_reencrypt.c:3398 lib/luks2/luks2_reencrypt.c:3712 +#: lib/luks2/luks2_reencrypt.c:3413 lib/luks2/luks2_reencrypt.c:3727 msgid "Reencryption process is already running." msgstr "Procesul de recriptare rulează deja." -#: lib/luks2/luks2_reencrypt.c:3400 lib/luks2/luks2_reencrypt.c:3714 +#: lib/luks2/luks2_reencrypt.c:3415 lib/luks2/luks2_reencrypt.c:3729 msgid "Failed to acquire reencryption lock." msgstr "Nu s-a putut obține blocarea pentru recriptare." -#: lib/luks2/luks2_reencrypt.c:3418 +#: lib/luks2/luks2_reencrypt.c:3433 msgid "Cannot proceed with reencryption. Run reencryption recovery first." msgstr "Nu se poate continua cu recriptarea. Rulați mai întâi recuperarea recriptării." -#: lib/luks2/luks2_reencrypt.c:3553 +#: lib/luks2/luks2_reencrypt.c:3568 msgid "Active device size and requested reencryption size don't match." msgstr "Dimensiunea dispozitivului activ și dimensiunea de recriptare solicitată nu se potrivesc." -#: lib/luks2/luks2_reencrypt.c:3567 +#: lib/luks2/luks2_reencrypt.c:3582 msgid "Illegal device size requested in reencryption parameters." msgstr "Dimensiunea dispozitivului solicitată în parametrii de recriptare este incorectă." -#: lib/luks2/luks2_reencrypt.c:3644 +#: lib/luks2/luks2_reencrypt.c:3659 msgid "Reencryption in-progress. Cannot perform recovery." msgstr "Recriptare în curs. Nu se poate efectua recuperarea." -#: lib/luks2/luks2_reencrypt.c:3812 +#: lib/luks2/luks2_reencrypt.c:3827 msgid "LUKS2 reencryption already initialized in metadata." msgstr "Recriptare LUKS2 deja inițializată în metadate." -#: lib/luks2/luks2_reencrypt.c:3819 +#: lib/luks2/luks2_reencrypt.c:3834 msgid "Failed to initialize LUKS2 reencryption in metadata." msgstr "Nu s-a putut inițializa recriptarea LUKS2 în metadate." -#: lib/luks2/luks2_reencrypt.c:3872 lib/luks2/luks2_reencrypt.c:3907 +#: lib/luks2/luks2_reencrypt.c:3887 lib/luks2/luks2_reencrypt.c:3922 msgid "Reencryption is not supported for DAX (persistent memory) devices." msgstr "Recriptarea nu este acceptată pentru dispozitivele DAX (memorie persistentă)." -#: lib/luks2/luks2_reencrypt.c:3879 +#: lib/luks2/luks2_reencrypt.c:3894 msgid "Failed to read passphrase from keyring." msgstr "Nu s-a putut citi expresia de acces din inelul de chei." -#: lib/luks2/luks2_reencrypt.c:3936 +#: lib/luks2/luks2_reencrypt.c:3951 msgid "Failed to set device segments for next reencryption hotzone." msgstr "Nu s-au putut definii segmentele dispozitivului pentru următoarea zonă „fierbinte” (activă) de recriptare." -#: lib/luks2/luks2_reencrypt.c:3988 +#: lib/luks2/luks2_reencrypt.c:4003 msgid "Failed to write reencryption resilience metadata." msgstr "Nu s-au putut scrie metadatele adaptabilității recriptării." -#: lib/luks2/luks2_reencrypt.c:3995 +#: lib/luks2/luks2_reencrypt.c:4010 msgid "Decryption failed." msgstr "Decriptarea a eșuat." -#: lib/luks2/luks2_reencrypt.c:4000 +#: lib/luks2/luks2_reencrypt.c:4015 #, c-format msgid "Failed to write hotzone area starting at %<PRIu64>." msgstr "Nu s-a putut scrie zona „fierbinte” (activă) începând de la %<PRIu64>." -#: lib/luks2/luks2_reencrypt.c:4005 +#: lib/luks2/luks2_reencrypt.c:4020 msgid "Failed to sync data." msgstr "Nu s-au putut sincroniza datele." -#: lib/luks2/luks2_reencrypt.c:4013 +#: lib/luks2/luks2_reencrypt.c:4028 msgid "Failed to update metadata after current reencryption hotzone completed." msgstr "Nu s-au putut actualiza metadatele după finalizarea zonei „fierbinți” (active) de recriptare actuală." -#: lib/luks2/luks2_reencrypt.c:4102 +#: lib/luks2/luks2_reencrypt.c:4117 msgid "Failed to write LUKS2 metadata." msgstr "Nu s-au putut scrie metadatele LUKS2." -#: lib/luks2/luks2_reencrypt.c:4125 +#: lib/luks2/luks2_reencrypt.c:4140 msgid "Failed to wipe unused data device area." msgstr "Nu s-a putut șterge zona nefolosită a dispozitivului de date." -#: lib/luks2/luks2_reencrypt.c:4131 +#: lib/luks2/luks2_reencrypt.c:4146 #, c-format msgid "Failed to remove unused (unbound) keyslot %d." msgstr "Nu s-a putut elimina slotul de cheie neutilizat (neasociat) %d." -#: lib/luks2/luks2_reencrypt.c:4141 +#: lib/luks2/luks2_reencrypt.c:4156 msgid "Failed to remove reencryption keyslot." msgstr "Nu s-a putut elimina slotul de cheie de recriptare." -#: lib/luks2/luks2_reencrypt.c:4151 +#: lib/luks2/luks2_reencrypt.c:4166 #, c-format msgid "Fatal error while reencrypting chunk starting at %<PRIu64>, %<PRIu64> sectors long." msgstr "Eroare fatală la recriptarea porțiunii începând de la %<PRIu64>, %<PRIu64> sectoare lungi." -#: lib/luks2/luks2_reencrypt.c:4155 +#: lib/luks2/luks2_reencrypt.c:4170 msgid "Online reencryption failed." msgstr "Recriptarea «online» a eșuat." -#: lib/luks2/luks2_reencrypt.c:4160 +#: lib/luks2/luks2_reencrypt.c:4175 msgid "Do not resume the device unless replaced with error target manually." msgstr "Nu reluați dispozitivul decât dacă este înlocuit manual cu ținta erorii." -#: lib/luks2/luks2_reencrypt.c:4212 +#: lib/luks2/luks2_reencrypt.c:4227 msgid "Cannot proceed with reencryption. Unexpected reencryption status." msgstr "Nu se poate continua cu recriptarea. Stare neașteptată a recriptării." -#: lib/luks2/luks2_reencrypt.c:4218 +#: lib/luks2/luks2_reencrypt.c:4233 msgid "Missing or invalid reencrypt context." msgstr "Context de recriptare lipsă sau nevalid." -#: lib/luks2/luks2_reencrypt.c:4225 +#: lib/luks2/luks2_reencrypt.c:4240 msgid "Failed to initialize reencryption device stack." msgstr "Nu s-a putut inițializa stiva dispozitivului de recriptare." -#: lib/luks2/luks2_reencrypt.c:4247 lib/luks2/luks2_reencrypt.c:4284 +#: lib/luks2/luks2_reencrypt.c:4262 lib/luks2/luks2_reencrypt.c:4299 msgid "Failed to update reencryption context." msgstr "Nu s-a putut actualiza contextul de recriptare." -#: lib/luks2/luks2_reencrypt_digest.c:405 +#: lib/luks2/luks2_reencrypt_digest.c:421 msgid "Reencryption metadata is invalid." msgstr "Metadatele de recriptare sunt nevalide." @@ -2040,101 +2050,101 @@ msgstr "Intervalul OPAL %d de blocare este dezactivat." msgid "Unexpected OPAL range %d lock state." msgstr "Stare de blocare neașteptată a intervalului OPAL %d." -#: src/cryptsetup.c:85 +#: src/cryptsetup.c:93 msgid "Keyslot encryption parameters can be set only for LUKS2 device." msgstr "Parametrii de criptare a slotului de cheie pot fi stabiliți numai pentru dispozitivul LUKS2." -#: src/cryptsetup.c:128 src/cryptsetup.c:2145 +#: src/cryptsetup.c:136 src/cryptsetup.c:2242 #, c-format msgid "Enter token PIN: " msgstr "Introduceți codul PIN al jetonului: " -#: src/cryptsetup.c:130 src/cryptsetup.c:2147 +#: src/cryptsetup.c:138 src/cryptsetup.c:2244 #, c-format msgid "Enter token %d PIN: " msgstr "Introduceți codul PIN al jetonului(token) %d: " -#: src/cryptsetup.c:188 src/cryptsetup.c:1174 src/cryptsetup.c:1515 -#: src/utils_reencrypt.c:1137 src/utils_reencrypt_luks1.c:517 +#: src/cryptsetup.c:196 src/cryptsetup.c:1182 src/cryptsetup.c:1523 +#: src/utils_reencrypt.c:1146 src/utils_reencrypt_luks1.c:517 #: src/utils_reencrypt_luks1.c:580 msgid "No known cipher specification pattern detected." msgstr "Nu s-a detectat niciun model de specificație de cifrare cunoscut." -#: src/cryptsetup.c:198 +#: src/cryptsetup.c:206 #, c-format msgid "WARNING: Using default options for cipher (%s-%s, key size %u bits) that could be incompatible with older versions." msgstr "AVERTISMENT: Se utilizează opțiunile implicite pentru cifrare (%s-%s, dimensiunea cheii %u biți) care ar putea fi incompatibile cu versiunile mai vechi." -#: src/cryptsetup.c:203 +#: src/cryptsetup.c:211 #, c-format msgid "WARNING: Using default options for hash (%s) that could be incompatible with older versions." msgstr "AVERTISMENT: Se utilizează opțiunile implicite pentru suma de control „hash” (%s) care ar putea fi incompatibile cu versiunile mai vechi." -#: src/cryptsetup.c:207 +#: src/cryptsetup.c:215 msgid "For plain mode, always use options --cipher, --key-size and if no keyfile is used, then also --hash." msgstr "Pentru modul simplu, utilizați întotdeauna opțiunile „--cipher”, „--key-size” și dacă nu este folosit fișierul de chei, atunci și opțiunea „--hash”." -#: src/cryptsetup.c:213 +#: src/cryptsetup.c:221 msgid "WARNING: The --hash parameter is being ignored in plain mode with keyfile specified.\n" msgstr "AVERTISMENT: Parametrul „--hash” este ignorat în modul simplu, cu fișierul de cheie specificat.\n" -#: src/cryptsetup.c:221 +#: src/cryptsetup.c:229 msgid "WARNING: The --keyfile-size option is being ignored, the read size is the same as the encryption key size.\n" msgstr "AVERTISMENT: Opțiunea „--keyfile-size” este ignorată, dimensiunea de citire este aceeași cu dimensiunea cheii de criptare.\n" -#: src/cryptsetup.c:258 src/cryptsetup.c:1360 src/cryptsetup.c:1558 -#: src/integritysetup.c:197 src/utils_reencrypt.c:1346 +#: src/cryptsetup.c:266 src/cryptsetup.c:1368 src/cryptsetup.c:1566 +#: src/integritysetup.c:197 src/utils_reencrypt.c:1355 #, c-format msgid "Blkid scan failed for %s." msgstr "Scanarea «blkid» a eșuat pentru %s." -#: src/cryptsetup.c:264 +#: src/cryptsetup.c:272 #, c-format msgid "Detected device signature(s) on %s. Proceeding further may damage existing data." msgstr "S-au detectat semnături de dispozitiv pe %s. Continuarea operației, riscă să deterioreze datele existente." -#: src/cryptsetup.c:270 src/cryptsetup.c:1248 src/cryptsetup.c:1296 -#: src/cryptsetup.c:1367 src/cryptsetup.c:1492 src/cryptsetup.c:1570 -#: src/cryptsetup.c:2525 src/cryptsetup.c:2952 src/integritysetup.c:187 +#: src/cryptsetup.c:278 src/cryptsetup.c:1256 src/cryptsetup.c:1304 +#: src/cryptsetup.c:1375 src/cryptsetup.c:1500 src/cryptsetup.c:1578 +#: src/cryptsetup.c:2622 src/cryptsetup.c:3049 src/integritysetup.c:187 #: src/utils_reencrypt.c:138 src/utils_reencrypt.c:314 -#: src/utils_reencrypt.c:764 +#: src/utils_reencrypt.c:772 msgid "Operation aborted.\n" msgstr "Operația se întrerupe.\n" -#: src/cryptsetup.c:343 +#: src/cryptsetup.c:351 msgid "Option --key-file is required." msgstr "Opțiunea „--key-file” este necesară." -#: src/cryptsetup.c:394 +#: src/cryptsetup.c:402 msgid "Enter VeraCrypt PIM: " msgstr "Introduceți PIM-ul VeraCrypt: " -#: src/cryptsetup.c:403 +#: src/cryptsetup.c:411 msgid "Invalid PIM value: parse error." msgstr "Valoare PIM nevalidă: eroare de analizare." -#: src/cryptsetup.c:406 +#: src/cryptsetup.c:414 msgid "Invalid PIM value: 0." msgstr "Valoare PIM nevalidă: 0." -#: src/cryptsetup.c:409 +#: src/cryptsetup.c:417 msgid "Invalid PIM value: outside of range." msgstr "Valoare PIM nevalidă: în afara intervalului." -#: src/cryptsetup.c:432 +#: src/cryptsetup.c:440 msgid "No device header detected with this passphrase." msgstr "Nu a fost detectat niciun antet de dispozitiv cu această frază de acces." -#: src/cryptsetup.c:505 src/cryptsetup.c:681 +#: src/cryptsetup.c:513 src/cryptsetup.c:689 #, c-format msgid "Device %s is not a valid BITLK device." msgstr "Dispozitivul %s nu este un dispozitiv BITLK valid." -#: src/cryptsetup.c:513 +#: src/cryptsetup.c:521 msgid "Cannot determine volume key size for BITLK, please use --key-size option." msgstr "Nu se poate determina dimensiunea cheii de volum pentru BITLK; utilizați opțiunea „--key-size” pentru a o furniza." -#: src/cryptsetup.c:555 +#: src/cryptsetup.c:563 msgid "" "Header dump with volume key is sensitive information\n" "which allows access to encrypted partition without passphrase.\n" @@ -2144,7 +2154,7 @@ msgstr "" "care permite accesul la partiția criptată fără fraza de acces.\n" "Acest conținut ar trebui să fie întotdeauna stocat criptat într-un loc sigur." -#: src/cryptsetup.c:622 src/cryptsetup.c:703 src/cryptsetup.c:2550 +#: src/cryptsetup.c:630 src/cryptsetup.c:711 src/cryptsetup.c:2647 msgid "" "The header dump with volume key is sensitive information\n" "that allows access to encrypted partition without a passphrase.\n" @@ -2154,110 +2164,110 @@ msgstr "" "care permite accesul la partiția criptată fără fraza de acces.\n" "Acest conținut ar trebui să fie întotdeauna stocat criptat într-un loc sigur." -#: src/cryptsetup.c:758 src/cryptsetup.c:788 +#: src/cryptsetup.c:766 src/cryptsetup.c:796 #, c-format msgid "Device %s is not a valid FVAULT2 device." msgstr "Dispozitivul %s nu este un dispozitiv FVAULT2 valid." -#: src/cryptsetup.c:796 +#: src/cryptsetup.c:804 msgid "Cannot determine volume key size for FVAULT2, please use --key-size option." msgstr "Nu se poate determina dimensiunea cheii de volum pentru FVAULT2; utilizați opțiunea „--key-size” pentru a o furniza." -#: src/cryptsetup.c:850 src/veritysetup.c:323 src/integritysetup.c:409 +#: src/cryptsetup.c:858 src/veritysetup.c:323 src/integritysetup.c:409 #, c-format msgid "Device %s is still active and scheduled for deferred removal.\n" msgstr "Dispozitivul %s este încă activ și programat pentru eliminare temporizată.\n" -#: src/cryptsetup.c:884 src/cryptsetup.c:1824 src/cryptsetup.c:2080 -#: src/cryptsetup.c:2234 src/cryptsetup.c:2681 src/cryptsetup.c:2763 -#: src/cryptsetup.c:3290 +#: src/cryptsetup.c:892 src/cryptsetup.c:1903 src/cryptsetup.c:2177 +#: src/cryptsetup.c:2331 src/cryptsetup.c:2778 src/cryptsetup.c:2860 +#: src/cryptsetup.c:3387 #, c-format msgid "Failed to set external tokens path %s." msgstr "Nu s-a putut definii ruta jetoanelor(tokens) externe %s." -#: src/cryptsetup.c:893 +#: src/cryptsetup.c:901 msgid "Resize of active device requires volume key in keyring but --disable-keyring option is set." msgstr "Redimensionarea dispozitivului activ necesită cheia de volum în inelul de chei, dar opțiunea „--disable-keyring” este furnizată." -#: src/cryptsetup.c:1053 +#: src/cryptsetup.c:1061 msgid "Benchmark interrupted." msgstr "Testarea pentru evaluarea performanței a fost întreruptă." -#: src/cryptsetup.c:1074 +#: src/cryptsetup.c:1082 #, c-format msgid "PBKDF2-%-9s N/A\n" msgstr "PBKDF2-%-9s (neaplicabil)\n" -#: src/cryptsetup.c:1076 +#: src/cryptsetup.c:1084 #, c-format msgid "PBKDF2-%-9s %7u iterations per second for %zu-bit key\n" msgstr "PBKDF2-%-9s %7u iterații pe secundă pentru cheia %zu-bit\n" -#: src/cryptsetup.c:1090 +#: src/cryptsetup.c:1098 #, c-format msgid "%-10s N/A\n" msgstr "%-10s (neaplicabil)\n" -#: src/cryptsetup.c:1092 +#: src/cryptsetup.c:1100 #, c-format msgid "%-10s %4u iterations, %5u memory, %1u parallel threads (CPUs) for %zu-bit key (requested %u ms time)\n" msgstr "%-10s %4u iterații, %5u memorie, %1u fire paralele (CPU-uri) pentru cheia %zu-bit (timpul necesitat %u ms)\n" -#: src/cryptsetup.c:1116 +#: src/cryptsetup.c:1124 msgid "Result of benchmark is not reliable." msgstr "Rezultatul testului de evaluare a performanței nu este fiabil." -#: src/cryptsetup.c:1166 +#: src/cryptsetup.c:1174 msgid "# Tests are approximate using memory only (no storage IO).\n" msgstr "# Testele sunt aproximative folosind doar memoria (fără In/Ieș de stocare).\n" #. TRANSLATORS: The string is header of a table and must be exactly (right side) aligned. -#: src/cryptsetup.c:1186 +#: src/cryptsetup.c:1194 #, c-format msgid "#%*s Algorithm | Key | Encryption | Decryption\n" msgstr "#%*s Algoritm | Cheie | Criptare | Decriptare\n" -#: src/cryptsetup.c:1190 +#: src/cryptsetup.c:1198 #, c-format msgid "Cipher %s (with %i bits key) is not available." msgstr "Cifrarea %s (cu cheie de %i biți) nu este disponibilă." #. TRANSLATORS: The string is header of a table and must be exactly (right side) aligned. -#: src/cryptsetup.c:1209 +#: src/cryptsetup.c:1217 msgid "# Algorithm | Key | Encryption | Decryption\n" msgstr "# Algoritm | Cheie | Criptare | Decriptare\n" -#: src/cryptsetup.c:1220 +#: src/cryptsetup.c:1228 msgid "N/A" msgstr "nedisponibil" -#: src/cryptsetup.c:1245 +#: src/cryptsetup.c:1253 msgid "" "Unprotected LUKS2 reencryption metadata detected. Please verify the reencryption operation is desirable (see luksDump output)\n" "and continue (upgrade metadata) only if you acknowledge the operation as genuine." msgstr "Au fost detectate metadate neprotejate de recriptare LUKS2. Verificați că operațiunea de recriptare este de dorit (consultați ieșirea luksDump) și continuați (să actualizați metadatele) numai dacă recunoașteți operația ca fiind autentică." -#: src/cryptsetup.c:1251 +#: src/cryptsetup.c:1259 msgid "Enter passphrase to protect and upgrade reencryption metadata: " msgstr "Introduceți fraza de acces pentru a proteja și actualiza metadatele de recriptare: " -#: src/cryptsetup.c:1295 +#: src/cryptsetup.c:1303 msgid "Really proceed with LUKS2 reencryption recovery?" msgstr "Continuați cu adevărat cu recuperarea recriptării LUKS2?" -#: src/cryptsetup.c:1304 +#: src/cryptsetup.c:1312 msgid "Enter passphrase to verify reencryption metadata digest: " msgstr "Introduceți fraza de acces pentru a verifica calcularea sumele de control a metadatelor de recriptare: " -#: src/cryptsetup.c:1306 +#: src/cryptsetup.c:1314 msgid "Enter passphrase for reencryption recovery: " msgstr "Introduceți fraza de acces pentru recuperarea recriptării: " -#: src/cryptsetup.c:1366 +#: src/cryptsetup.c:1374 msgid "Really try to repair LUKS device header?" msgstr "Încercați cu adevărat să reparați antetul dispozitivului LUKS?" -#: src/cryptsetup.c:1390 src/integritysetup.c:89 src/integritysetup.c:247 +#: src/cryptsetup.c:1398 src/integritysetup.c:89 src/integritysetup.c:247 msgid "" "\n" "Wipe interrupted." @@ -2265,7 +2275,7 @@ msgstr "" "\n" "Ștergere întreruptă." -#: src/cryptsetup.c:1395 src/integritysetup.c:94 src/integritysetup.c:284 +#: src/cryptsetup.c:1403 src/integritysetup.c:94 src/integritysetup.c:284 msgid "" "Wiping device to initialize integrity checksum.\n" "You can interrupt this by pressing CTRL+c (rest of not wiped device will contain invalid checksum).\n" @@ -2273,144 +2283,156 @@ msgstr "" "Se șterge dispozitivul pentru a inițializa calcularea sumei de control a integrității.\n" "Puteți întrerupe acest lucru apăsând CTRL+c (restul dispozitivului care nu este șters va conține o sumă de control nevalidă).\n" -#: src/cryptsetup.c:1417 src/integritysetup.c:116 +#: src/cryptsetup.c:1425 src/integritysetup.c:116 #, c-format msgid "Cannot deactivate temporary device %s." msgstr "Nu se poate dezactiva dispozitivul temporar %s." -#: src/cryptsetup.c:1472 +#: src/cryptsetup.c:1480 msgid "Integrity option can be used only for LUKS2 format." msgstr "Opțiunea de integritate poate fi utilizată numai pentru formatul LUKS2." -#: src/cryptsetup.c:1477 src/cryptsetup.c:1542 +#: src/cryptsetup.c:1485 src/cryptsetup.c:1550 msgid "Unsupported LUKS2 metadata size options." msgstr "Opțiuni de dimensiune a metadatelor LUKS2 neacceptate." -#: src/cryptsetup.c:1482 +#: src/cryptsetup.c:1490 msgid "OPAL is supported only for LUKS2 format." msgstr "OPAL este acceptat numai pentru formatul LUKS2." -#: src/cryptsetup.c:1491 +#: src/cryptsetup.c:1499 msgid "Header file does not exist, do you want to create it?" msgstr "Fișierul antet nu există, doriți să îl creați?" -#: src/cryptsetup.c:1499 +#: src/cryptsetup.c:1507 #, c-format msgid "Cannot create header file %s." msgstr "Nu se poate crea fișierul antet %s." -#: src/cryptsetup.c:1522 src/integritysetup.c:144 src/integritysetup.c:152 +#: src/cryptsetup.c:1530 src/integritysetup.c:144 src/integritysetup.c:152 #: src/integritysetup.c:161 src/integritysetup.c:324 src/integritysetup.c:332 #: src/integritysetup.c:342 msgid "No known integrity specification pattern detected." msgstr "Nu a fost detectat niciun model de specificație de integritate cunoscut." -#: src/cryptsetup.c:1535 +#: src/cryptsetup.c:1543 #, c-format msgid "Cannot use %s as on-disk header." msgstr "Nu se poate folosi %s ca antet pe disc." -#: src/cryptsetup.c:1564 src/integritysetup.c:181 +#: src/cryptsetup.c:1572 src/integritysetup.c:181 #, c-format msgid "This will overwrite data on %s irrevocably." msgstr "Acest lucru va suprascrie datele de pe %s în mod irevocabil." -#: src/cryptsetup.c:1601 +#: src/cryptsetup.c:1609 msgid "OPAL Admin password cannot be empty." msgstr "Parola de administrator OPAL nu poate fi goală." -#: src/cryptsetup.c:1615 src/cryptsetup.c:2097 src/cryptsetup.c:2247 -#: src/cryptsetup.c:2407 src/cryptsetup.c:2473 src/utils_reencrypt_luks1.c:443 +#: src/cryptsetup.c:1623 src/cryptsetup.c:2194 src/cryptsetup.c:2344 +#: src/cryptsetup.c:2504 src/cryptsetup.c:2570 src/utils_reencrypt_luks1.c:443 msgid "Failed to set pbkdf parameters." msgstr "Nu s-au putut definii parametrii pbkdf." -#: src/cryptsetup.c:1745 +#: src/cryptsetup.c:1755 msgid "Type specification in --link-vk-to-keyring keyring specification is ignored." msgstr "Specificația tipului din specificația pentru inelul de chei „--link-vk-to-keyring” este ignorată." -#: src/cryptsetup.c:1765 +#: src/cryptsetup.c:1820 +msgid "Key types have to be the same for both volume keys." +msgstr "Tipurile de chei trebuie să fie aceleași pentru ambele chei de volum." + +#: src/cryptsetup.c:1825 +msgid "Both volume keys have to be linked to the same keyring." +msgstr "Ambele chei de volum trebuie să fie conectate la același inel de chei." + +#: src/cryptsetup.c:1835 +msgid "You need to supply more key names." +msgstr "Trebuie să furnizați mai multe nume de chei." + +#: src/cryptsetup.c:1839 msgid "Invalid --link-vk-to-keyring value." msgstr "Valoare nevalidă a opțiunii „--link-vk-to-keyring”." -#: src/cryptsetup.c:1805 +#: src/cryptsetup.c:1884 msgid "Reduced data offset is allowed only for detached LUKS header." msgstr "Decalajul redus de date este permis numai pentru antetul LUKS detașat." -#: src/cryptsetup.c:1812 +#: src/cryptsetup.c:1891 #, c-format msgid "LUKS file container %s is too small for activation, there is no remaining space for data." msgstr "Containerul de fișiere LUKS %s este prea mic pentru activare, nu mai rămâne spațiu pentru date." -#: src/cryptsetup.c:1839 src/cryptsetup.c:2253 +#: src/cryptsetup.c:1918 src/cryptsetup.c:2350 msgid "Cannot determine volume key size for LUKS without keyslots, please use --key-size option." msgstr "Nu se poate determina dimensiunea cheii de volum pentru LUKS fără sloturi de chei; folosiți opțiunea „--key-size” pentru a furniza aceste date." -#: src/cryptsetup.c:1890 +#: src/cryptsetup.c:1985 msgid "Device activated but cannot make flags persistent." msgstr "Dispozitivul a fost activat, dar nu se poate face ca fanioanele să fie persistente." -#: src/cryptsetup.c:1972 src/cryptsetup.c:2040 +#: src/cryptsetup.c:2069 src/cryptsetup.c:2137 #, c-format msgid "Keyslot %d is selected for deletion." msgstr "Slotul de cheie %d este selectat pentru ștergere." -#: src/cryptsetup.c:1984 src/cryptsetup.c:2044 +#: src/cryptsetup.c:2081 src/cryptsetup.c:2141 msgid "This is the last keyslot. Device will become unusable after purging this key." msgstr "Acesta este ultimul slot de cheie. Dispozitivul va deveni inutilizabil după eliminarea acestei chei." -#: src/cryptsetup.c:1985 +#: src/cryptsetup.c:2082 msgid "Enter any remaining passphrase: " msgstr "Introduceți orice frază de acces rămasă: " -#: src/cryptsetup.c:1986 src/cryptsetup.c:2046 +#: src/cryptsetup.c:2083 src/cryptsetup.c:2143 msgid "Operation aborted, the keyslot was NOT wiped.\n" msgstr "Operația a fost întreruptă, slotul de cheie NU a fost șters.\n" -#: src/cryptsetup.c:2022 +#: src/cryptsetup.c:2119 msgid "Enter passphrase to be deleted: " msgstr "Introduceți fraza de acces pentru a fi ștearsă: " -#: src/cryptsetup.c:2072 src/cryptsetup.c:2456 src/cryptsetup.c:3114 -#: src/cryptsetup.c:3281 +#: src/cryptsetup.c:2169 src/cryptsetup.c:2553 src/cryptsetup.c:3211 +#: src/cryptsetup.c:3378 #, c-format msgid "Device %s is not a valid LUKS2 device." msgstr "Dispozitivul %s nu este un dispozitiv LUKS2 valid." -#: src/cryptsetup.c:2111 src/cryptsetup.c:2330 +#: src/cryptsetup.c:2208 src/cryptsetup.c:2427 msgid "Enter new passphrase for key slot: " msgstr "Introduceți noua frază de acces pentru slotul de cheie: " -#: src/cryptsetup.c:2213 +#: src/cryptsetup.c:2310 msgid "WARNING: The --key-slot parameter is used for new keyslot number.\n" msgstr "AVERTISMENT: Parametrul „--key-slot” este utilizat pentru noul număr de slot de cheie.\n" -#: src/cryptsetup.c:2286 src/utils_reencrypt_luks1.c:1149 +#: src/cryptsetup.c:2383 src/utils_reencrypt_luks1.c:1149 #, c-format msgid "Enter any existing passphrase: " msgstr "Introduceți orice frază de acces existentă: " -#: src/cryptsetup.c:2411 +#: src/cryptsetup.c:2508 msgid "Enter passphrase to be changed: " msgstr "Introduceți fraza de acces pentru a fi schimbată: " -#: src/cryptsetup.c:2427 src/utils_reencrypt_luks1.c:1135 +#: src/cryptsetup.c:2524 src/utils_reencrypt_luks1.c:1135 msgid "Enter new passphrase: " msgstr "Introduceți nouă frază de acces: " -#: src/cryptsetup.c:2477 +#: src/cryptsetup.c:2574 msgid "Enter passphrase for keyslot to be converted: " msgstr "Introduceți fraza de acces pentru slotul de cheie care urmează să fie convertit: " -#: src/cryptsetup.c:2501 +#: src/cryptsetup.c:2598 msgid "Only one device argument for isLuks operation is supported." msgstr "Doar un singur dispozitiv este admis ca argument pentru operația isLuks." -#: src/cryptsetup.c:2609 +#: src/cryptsetup.c:2706 #, c-format msgid "Keyslot %d does not contain unbound key." msgstr "Slotul de cheie %d nu conține o cheie neasociată." -#: src/cryptsetup.c:2614 +#: src/cryptsetup.c:2711 msgid "" "The header dump with unbound key is sensitive information.\n" "This dump should be stored encrypted in a safe place." @@ -2418,52 +2440,52 @@ msgstr "" "Conținutul antetului cu cheia neasociată este o informație sensibilă.\n" "Acest conținut ar trebui să fie stocat criptat într-un loc sigur." -#: src/cryptsetup.c:2709 src/cryptsetup.c:2746 +#: src/cryptsetup.c:2806 src/cryptsetup.c:2843 #, c-format msgid "%s is not active %s device name." msgstr "%s nu este numele dispozitivului activ %s." -#: src/cryptsetup.c:2741 +#: src/cryptsetup.c:2838 #, c-format msgid "%s is not active LUKS device name or header is missing." msgstr "%s nu este numele unui dispozitiv LUKS activ sau antetul lipsește." -#: src/cryptsetup.c:2819 src/cryptsetup.c:2838 +#: src/cryptsetup.c:2916 src/cryptsetup.c:2935 msgid "Option --header-backup-file is required." msgstr "Este necesară opțiunea „--header-backup-file”." -#: src/cryptsetup.c:2869 +#: src/cryptsetup.c:2966 #, c-format msgid "%s is not cryptsetup managed device." msgstr "%s nu este un dispozitiv gestionat de «cryptsetup»." -#: src/cryptsetup.c:2880 +#: src/cryptsetup.c:2977 #, c-format msgid "Refresh is not supported for device type %s" msgstr "Reîmprospătarea nu este disponibilă pentru tipul de dispozitiv %s" -#: src/cryptsetup.c:2930 +#: src/cryptsetup.c:3027 #, c-format msgid "Unrecognized metadata device type %s." msgstr "Tip de dispozitiv de metadate nerecunoscut %s." -#: src/cryptsetup.c:2932 +#: src/cryptsetup.c:3029 msgid "Command requires device and mapped name as arguments." msgstr "Comanda necesită un dispozitiv și numele asociat acestuia ca argumente." -#: src/cryptsetup.c:2942 +#: src/cryptsetup.c:3039 msgid "Enter OPAL PSID: " msgstr "Introduceți PSID OPAL: " -#: src/cryptsetup.c:2942 +#: src/cryptsetup.c:3039 msgid "Enter OPAL Admin password: " msgstr "Introduceți parola de administrator OPAL: " -#: src/cryptsetup.c:2951 +#: src/cryptsetup.c:3048 msgid "WARNING: WHOLE disk will be factory reset and all data will be lost! Continue?" msgstr "AVERTISMENT: ÎNTREGUL disc va fi reinițializat la valorile din fabrică și toate datele se vor pierde! Continuați?" -#: src/cryptsetup.c:2994 +#: src/cryptsetup.c:3091 #, c-format msgid "" "This operation will erase all keyslots on device %s.\n" @@ -2472,351 +2494,351 @@ msgstr "" "Această operație va șterge toate sloturile de chei de pe dispozitivul %s.\n" "Dispozitivul va deveni inutilizabil după această operație." -#: src/cryptsetup.c:3001 +#: src/cryptsetup.c:3098 msgid "Operation aborted, keyslots were NOT wiped.\n" msgstr "Operația a fost întreruptă, sloturile de chei NU au fost șterse.\n" -#: src/cryptsetup.c:3040 +#: src/cryptsetup.c:3137 msgid "Invalid LUKS type, only luks1 and luks2 are supported." msgstr "Tip LUKS nevalid, numai luks1 și luks2 sunt acceptate." -#: src/cryptsetup.c:3056 +#: src/cryptsetup.c:3153 #, c-format msgid "Device is already %s type." msgstr "Dispozitivul este deja de tip %s." -#: src/cryptsetup.c:3063 +#: src/cryptsetup.c:3160 #, c-format msgid "This operation will convert %s to %s format.\n" msgstr "Această operație va converti %s în formatul %s.\n" -#: src/cryptsetup.c:3066 +#: src/cryptsetup.c:3163 msgid "Operation aborted, device was NOT converted.\n" msgstr "Operația a fost întreruptă, dispozitivul NU a fost convertit.\n" -#: src/cryptsetup.c:3106 +#: src/cryptsetup.c:3203 msgid "Option --priority, --label or --subsystem is missing." msgstr "Opțiunea „--priority”, „--label” sau „--subsystem” lipsește." -#: src/cryptsetup.c:3140 src/cryptsetup.c:3180 src/cryptsetup.c:3200 +#: src/cryptsetup.c:3237 src/cryptsetup.c:3277 src/cryptsetup.c:3297 #, c-format msgid "Token %d is invalid." msgstr "Jetonul(token) %d nu este valid." -#: src/cryptsetup.c:3143 src/cryptsetup.c:3203 +#: src/cryptsetup.c:3240 src/cryptsetup.c:3300 #, c-format msgid "Token %d in use." msgstr "Jetonul(token) %d este în uz." -#: src/cryptsetup.c:3155 +#: src/cryptsetup.c:3252 #, c-format msgid "Failed to add luks2-keyring token %d." msgstr "Nu s-a putut adăuga jetonul(token) %d la inelul de chei luks2." -#: src/cryptsetup.c:3166 src/cryptsetup.c:3229 +#: src/cryptsetup.c:3263 src/cryptsetup.c:3326 #, c-format msgid "Failed to assign token %d to keyslot %d." msgstr "Nu s-a putut atribui jetonul(token) %d slotului pentru cheie %d." -#: src/cryptsetup.c:3183 +#: src/cryptsetup.c:3280 #, c-format msgid "Token %d is not in use." msgstr "Jetonul %d nu este în uz." -#: src/cryptsetup.c:3220 +#: src/cryptsetup.c:3317 msgid "Failed to import token from file." msgstr "Nu s-a putut importa jetonul din fișier." -#: src/cryptsetup.c:3245 +#: src/cryptsetup.c:3342 #, c-format msgid "Failed to get token %d for export." msgstr "Nu s-a putut obține jetonul %d pentru export." -#: src/cryptsetup.c:3258 +#: src/cryptsetup.c:3355 #, c-format msgid "Token %d is not assigned to keyslot %d." msgstr "Jetonul %d nu este alocat slotului de cheie %d." -#: src/cryptsetup.c:3260 src/cryptsetup.c:3267 +#: src/cryptsetup.c:3357 src/cryptsetup.c:3364 #, c-format msgid "Failed to unassign token %d from keyslot %d." msgstr "Nu s-a putut anula atribuirea jetonului %d din slotul de cheie %d." -#: src/cryptsetup.c:3326 +#: src/cryptsetup.c:3423 msgid "Option --tcrypt-hidden, --tcrypt-system or --tcrypt-backup is supported only for TCRYPT device." msgstr "Opțiunea „--tcrypt-hidden”, „--tcrypt-system” sau „--tcrypt-backup” este acceptată doar pentru dispozitivele TCRYPT." -#: src/cryptsetup.c:3329 +#: src/cryptsetup.c:3426 msgid "Option --veracrypt or --disable-veracrypt is supported only for TCRYPT device type." msgstr "Opțiunea „--veracrypt” sau „--disable-veracrypt” este acceptată numai pentru tipul de dispozitiv TCRYPT." -#: src/cryptsetup.c:3332 +#: src/cryptsetup.c:3429 msgid "Option --veracrypt-pim is supported only for VeraCrypt compatible devices." msgstr "Opțiunea „--veracrypt-pim” este acceptată numai pentru dispozitivele compatibile cu VeraCrypt." -#: src/cryptsetup.c:3336 +#: src/cryptsetup.c:3433 msgid "Option --veracrypt-query-pim is supported only for VeraCrypt compatible devices." msgstr "Opțiunea „--veracrypt-query-pim” este acceptată numai pentru dispozitivele compatibile cu VeraCrypt." -#: src/cryptsetup.c:3338 +#: src/cryptsetup.c:3435 msgid "The options --veracrypt-pim and --veracrypt-query-pim are mutually exclusive." msgstr "Opțiunile „--veracrypt-pim” și „--veracrypt-query-pim” se exclud reciproc." -#: src/cryptsetup.c:3347 +#: src/cryptsetup.c:3444 msgid "Option --persistent is not allowed with --test-passphrase." msgstr "Opțiunea „--persistent” nu este permisă cu opțiunea „--test-passphrase”." -#: src/cryptsetup.c:3350 +#: src/cryptsetup.c:3447 msgid "Options --refresh and --test-passphrase are mutually exclusive." msgstr "Opțiunile „--refresh” și „--test-passphrase” se exclud reciproc." -#: src/cryptsetup.c:3353 +#: src/cryptsetup.c:3450 msgid "Option --shared is allowed only for open of plain device." msgstr "Opțiunea „--shared” este permisă numai pentru deschiderea unui dispozitiv simplu." -#: src/cryptsetup.c:3356 +#: src/cryptsetup.c:3453 msgid "Option --skip is supported only for open of plain and loopaes devices." msgstr "Opțiunea „--skip” este acceptată numai pentru deschiderea dispozitivelor simple și a dispozitivelor loopaes." -#: src/cryptsetup.c:3359 +#: src/cryptsetup.c:3456 msgid "Option --offset with open action is only supported for plain and loopaes devices." msgstr "Opțiunea „--offset” cu acțiune de deschidere este acceptată numai pentru dispozitivele simple și dispozitivele loopaes." -#: src/cryptsetup.c:3362 +#: src/cryptsetup.c:3459 msgid "Option --tcrypt-hidden cannot be combined with --allow-discards." msgstr "Opțiunea „--tcrypt-hidden” nu poate fi combinată cu opțiunea „--allow-discards”." -#: src/cryptsetup.c:3366 +#: src/cryptsetup.c:3463 msgid "Sector size option with open action is supported only for plain devices." msgstr "Opțiunea de dimensiune a sectorului cu acțiune de deschidere este acceptată numai pentru dispozitivele simple." -#: src/cryptsetup.c:3370 +#: src/cryptsetup.c:3467 msgid "Large IV sectors option is supported only for opening plain type device with sector size larger than 512 bytes." msgstr "Opțiunea sectoare IV (vector de inițializare) mari este acceptată numai pentru deschiderea dispozitivelor de tip simplu, cu dimensiunea sectorului mai mare de 512 de octeți." -#: src/cryptsetup.c:3375 +#: src/cryptsetup.c:3472 msgid "Option --test-passphrase is allowed only for open of LUKS, TCRYPT, BITLK and FVAULT2 devices." msgstr "Opțiunea „--test-passphrase” este permisă numai pentru deschiderea dispozitivelor LUKS, TCRYPT, BITLK și FVAULT2." -#: src/cryptsetup.c:3378 src/cryptsetup.c:3401 +#: src/cryptsetup.c:3475 src/cryptsetup.c:3498 msgid "Options --device-size and --size cannot be combined." msgstr "Opțiunile „--device-size” și „--size” nu pot fi combinate." -#: src/cryptsetup.c:3381 +#: src/cryptsetup.c:3478 msgid "Option --unbound is allowed only for open of luks device." msgstr "Opțiunea „--unbound” este permisă numai pentru deschiderea dispozitivelor luks." -#: src/cryptsetup.c:3384 +#: src/cryptsetup.c:3481 msgid "Option --unbound cannot be used without --test-passphrase." msgstr "Opțiunea „--unbound” nu poate fi utilizată fără opțiunea „--test-passphrase”." -#: src/cryptsetup.c:3393 src/veritysetup.c:671 src/integritysetup.c:767 +#: src/cryptsetup.c:3490 src/veritysetup.c:671 src/integritysetup.c:767 msgid "Options --cancel-deferred and --deferred cannot be used at the same time." msgstr "Opțiunile „--cancel-deferred” și „--deferred” nu pot fi utilizate în același timp." -#: src/cryptsetup.c:3409 +#: src/cryptsetup.c:3506 msgid "Options --reduce-device-size and --device-size cannot be combined." msgstr "Opțiunile „--reduce-device-size” și „--device-size” nu pot fi combinate." -#: src/cryptsetup.c:3412 +#: src/cryptsetup.c:3509 msgid "Option --active-name can be set only for LUKS2 device." msgstr "Opțiunea „--active-name” poate fi utilizată numai pentru dispozitivele LUKS2." -#: src/cryptsetup.c:3415 +#: src/cryptsetup.c:3512 msgid "Options --active-name and --force-offline-reencrypt cannot be combined." msgstr "Opțiunile „--active-name” și „--force-offline-reencrypt” nu pot fi combinate." -#: src/cryptsetup.c:3423 src/cryptsetup.c:3453 +#: src/cryptsetup.c:3520 src/cryptsetup.c:3550 msgid "Keyslot specification is required." msgstr "Este necesară specificarea slotului de cheie." -#: src/cryptsetup.c:3431 +#: src/cryptsetup.c:3528 msgid "Options --align-payload and --offset cannot be combined." msgstr "Opțiunile „--align-payload” și „--offset” nu pot fi combinate." -#: src/cryptsetup.c:3434 +#: src/cryptsetup.c:3531 msgid "Option --integrity-no-wipe can be used only for format action with integrity extension." msgstr "Opțiunea „--integrity-no-wipe” poate fi utilizată numai pentru acțiuni de formatare cu extensie de integritate." -#: src/cryptsetup.c:3437 +#: src/cryptsetup.c:3534 msgid "Only one of --use-[u]random options is allowed." msgstr "Numai una dintre opțiunile „--use-[u]random” este permisă." -#: src/cryptsetup.c:3445 +#: src/cryptsetup.c:3542 msgid "Key size is required with --unbound option." msgstr "Dimensiunea cheii este necesară cu opțiunea „--unbound”." -#: src/cryptsetup.c:3465 +#: src/cryptsetup.c:3562 msgid "Invalid token action." msgstr "Operație cu jeton(token) nevalidă." -#: src/cryptsetup.c:3468 +#: src/cryptsetup.c:3565 msgid "--key-description parameter is mandatory for token add action." msgstr "Parametrul „--key-description” este obligatoriu pentru acțiunea de adăugare a jetonului." -#: src/cryptsetup.c:3472 src/cryptsetup.c:3485 +#: src/cryptsetup.c:3569 src/cryptsetup.c:3582 msgid "Action requires specific token. Use --token-id parameter." msgstr "Acțiunea necesită un jeton(token)l specific. Utilizați parametrul „--token-id”." -#: src/cryptsetup.c:3476 +#: src/cryptsetup.c:3573 msgid "Option --unbound is valid only with token add action." msgstr "Opțiunea „--unbound” este validă numai cu acțiunea de adăugare a jetonului." -#: src/cryptsetup.c:3478 +#: src/cryptsetup.c:3575 msgid "Options --key-slot and --unbound cannot be combined." msgstr "Opțiunile „--key-slot” și „--unbound” nu pot fi combinate." -#: src/cryptsetup.c:3483 +#: src/cryptsetup.c:3580 msgid "Action requires specific keyslot. Use --key-slot parameter." msgstr "Acțiunea necesită un slot de cheie specific. Utilizați parametrul „--key-slot”." -#: src/cryptsetup.c:3499 +#: src/cryptsetup.c:3596 msgid "<device> [--type <type>] [<name>]" msgstr "<dispozitiv> [--type <tip>] [<nume>]" -#: src/cryptsetup.c:3499 src/veritysetup.c:491 src/integritysetup.c:544 +#: src/cryptsetup.c:3596 src/veritysetup.c:491 src/integritysetup.c:544 msgid "open device as <name>" msgstr "deschide dispozitivul ca <nume>" -#: src/cryptsetup.c:3500 src/cryptsetup.c:3501 src/cryptsetup.c:3502 +#: src/cryptsetup.c:3597 src/cryptsetup.c:3598 src/cryptsetup.c:3599 #: src/veritysetup.c:492 src/veritysetup.c:493 src/integritysetup.c:545 #: src/integritysetup.c:546 src/integritysetup.c:548 msgid "<name>" msgstr "<nume>" -#: src/cryptsetup.c:3500 src/veritysetup.c:492 src/integritysetup.c:545 +#: src/cryptsetup.c:3597 src/veritysetup.c:492 src/integritysetup.c:545 msgid "close device (remove mapping)" msgstr "închide dispozitivul (elimină asocierea)" -#: src/cryptsetup.c:3501 src/integritysetup.c:548 +#: src/cryptsetup.c:3598 src/integritysetup.c:548 msgid "resize active device" msgstr "redimensionează dispozitivul activ" -#: src/cryptsetup.c:3502 +#: src/cryptsetup.c:3599 msgid "show device status" msgstr "afișează starea dispozitivului" -#: src/cryptsetup.c:3503 +#: src/cryptsetup.c:3600 msgid "[--cipher <cipher>]" msgstr "[--cipher <cifrarea>]" -#: src/cryptsetup.c:3503 +#: src/cryptsetup.c:3600 msgid "benchmark cipher" msgstr "evaluează performanța cifrului" -#: src/cryptsetup.c:3504 src/cryptsetup.c:3505 src/cryptsetup.c:3506 -#: src/cryptsetup.c:3507 src/cryptsetup.c:3508 src/cryptsetup.c:3515 -#: src/cryptsetup.c:3516 src/cryptsetup.c:3517 src/cryptsetup.c:3518 -#: src/cryptsetup.c:3519 src/cryptsetup.c:3520 src/cryptsetup.c:3521 -#: src/cryptsetup.c:3522 src/cryptsetup.c:3523 src/cryptsetup.c:3524 +#: src/cryptsetup.c:3601 src/cryptsetup.c:3602 src/cryptsetup.c:3603 +#: src/cryptsetup.c:3604 src/cryptsetup.c:3605 src/cryptsetup.c:3612 +#: src/cryptsetup.c:3613 src/cryptsetup.c:3614 src/cryptsetup.c:3615 +#: src/cryptsetup.c:3616 src/cryptsetup.c:3617 src/cryptsetup.c:3618 +#: src/cryptsetup.c:3619 src/cryptsetup.c:3620 src/cryptsetup.c:3621 msgid "<device>" msgstr "<dispozitiv>" -#: src/cryptsetup.c:3504 +#: src/cryptsetup.c:3601 msgid "try to repair on-disk metadata" msgstr "încearcă să repare metadatele de pe disc" -#: src/cryptsetup.c:3505 +#: src/cryptsetup.c:3602 msgid "reencrypt LUKS2 device" msgstr "recriptează dispozitivul LUKS2" -#: src/cryptsetup.c:3506 +#: src/cryptsetup.c:3603 msgid "erase all keyslots (remove encryption key)" msgstr "șterge toate sloturile de chei (elimină cheia de criptare)" -#: src/cryptsetup.c:3507 +#: src/cryptsetup.c:3604 msgid "convert LUKS from/to LUKS2 format" msgstr "convertește LUKS din/în formatul LUKS2" -#: src/cryptsetup.c:3508 +#: src/cryptsetup.c:3605 msgid "set permanent configuration options for LUKS2" msgstr "definește opțiunile permanente de configurare pentru LUKS2" -#: src/cryptsetup.c:3509 src/cryptsetup.c:3510 +#: src/cryptsetup.c:3606 src/cryptsetup.c:3607 msgid "<device> [<new key file>]" msgstr "<dispozitiv> [<fișier cheie nou>]" -#: src/cryptsetup.c:3509 +#: src/cryptsetup.c:3606 msgid "formats a LUKS device" msgstr "formatează un dispozitiv LUKS" -#: src/cryptsetup.c:3510 +#: src/cryptsetup.c:3607 msgid "add key to LUKS device" msgstr "adaugă o cheie la dispozitivul LUKS" -#: src/cryptsetup.c:3511 src/cryptsetup.c:3512 src/cryptsetup.c:3513 +#: src/cryptsetup.c:3608 src/cryptsetup.c:3609 src/cryptsetup.c:3610 msgid "<device> [<key file>]" msgstr "<dispozitiv> [<fișier cheie>]" -#: src/cryptsetup.c:3511 +#: src/cryptsetup.c:3608 msgid "removes supplied key or key file from LUKS device" msgstr "elimină cheia sau fișierul cheie furnizat de pe dispozitivul LUKS" -#: src/cryptsetup.c:3512 +#: src/cryptsetup.c:3609 msgid "changes supplied key or key file of LUKS device" msgstr "modifică cheia furnizată sau fișierul cheie al dispozitivului LUKS" -#: src/cryptsetup.c:3513 +#: src/cryptsetup.c:3610 msgid "converts a key to new pbkdf parameters" msgstr "convertește o cheie în noii parametri pbkdf" -#: src/cryptsetup.c:3514 +#: src/cryptsetup.c:3611 msgid "<device> <key slot>" msgstr "<dispozitiv> <slot cheie>" -#: src/cryptsetup.c:3514 +#: src/cryptsetup.c:3611 msgid "wipes key with number <key slot> from LUKS device" msgstr "șterge cheia cu numărul <slot cheie> de pe dispozitivul LUKS" -#: src/cryptsetup.c:3515 +#: src/cryptsetup.c:3612 msgid "print UUID of LUKS device" msgstr "afișează UUID-ul dispozitivului LUKS" -#: src/cryptsetup.c:3516 +#: src/cryptsetup.c:3613 msgid "tests <device> for LUKS partition header" msgstr "testează <dispozitivul> pentru antetul partiției LUKS" -#: src/cryptsetup.c:3517 +#: src/cryptsetup.c:3614 msgid "dump LUKS partition information" msgstr "afișează informațiile despre partiția LUKS" -#: src/cryptsetup.c:3518 +#: src/cryptsetup.c:3615 msgid "dump TCRYPT device information" msgstr "afișează informațiile despre dispozitivul TCRYPT" -#: src/cryptsetup.c:3519 +#: src/cryptsetup.c:3616 msgid "dump BITLK device information" msgstr "afișează informațiile despre dispozitivul BITLK" -#: src/cryptsetup.c:3520 +#: src/cryptsetup.c:3617 msgid "dump FVAULT2 device information" msgstr "afișează informațiile despre dispozitivul FVAULT2" -#: src/cryptsetup.c:3521 +#: src/cryptsetup.c:3618 msgid "Suspend LUKS device and wipe key (all IOs are frozen)" msgstr "Suspendă dispozitivul LUKS și șterge cheia (toate In/Ieșirile sunt înghețate)" -#: src/cryptsetup.c:3522 +#: src/cryptsetup.c:3619 msgid "Resume suspended LUKS device" msgstr "Repune în funcțiune dispozitivul LUKS suspendat" -#: src/cryptsetup.c:3523 +#: src/cryptsetup.c:3620 msgid "Backup LUKS device header and keyslots" msgstr "Face copie de rezervă pentru antetul dispozitivului LUKS și pentru sloturile de chei" -#: src/cryptsetup.c:3524 +#: src/cryptsetup.c:3621 msgid "Restore LUKS device header and keyslots" msgstr "Restaurează antetul dispozitivului LUKS și sloturile de chei" -#: src/cryptsetup.c:3525 +#: src/cryptsetup.c:3622 msgid "<add|remove|import|export> <device>" msgstr "<add|remove|import|export> <dispozitiv>" -#: src/cryptsetup.c:3525 +#: src/cryptsetup.c:3622 msgid "Manipulate LUKS2 tokens" msgstr "Manipulează jetoanele LUKS2" -#: src/cryptsetup.c:3544 src/veritysetup.c:509 src/integritysetup.c:563 +#: src/cryptsetup.c:3641 src/veritysetup.c:509 src/integritysetup.c:563 msgid "" "\n" "<action> is one of:\n" @@ -2831,7 +2853,7 @@ msgstr "" # nume, sau alias pentru primele. # A se vedea ieșirea comenzii: # «cryptsetup -?|--help» -#: src/cryptsetup.c:3550 +#: src/cryptsetup.c:3647 msgid "" "\n" "You can also use old <action> syntax aliases:\n" @@ -2843,7 +2865,7 @@ msgstr "" "\topen: create (plainOpen), luksOpen, loopaesOpen, tcryptOpen, bitlkOpen, fvault2Open\n" "\tclose: remove (plainClose), luksClose, loopaesClose, tcryptClose, bitlkClose, fvault2Close\n" -#: src/cryptsetup.c:3554 +#: src/cryptsetup.c:3651 #, c-format msgid "" "\n" @@ -2858,7 +2880,7 @@ msgstr "" "<slot cheie> este numărul slotului de cheie LUKS de modificat\n" "<fișier cheie> fișier cheie opțional pentru noua cheie pentru acțiunea luksAddKey\n" -#: src/cryptsetup.c:3561 +#: src/cryptsetup.c:3658 #, c-format msgid "" "\n" @@ -2867,7 +2889,7 @@ msgstr "" "\n" "Formatul implicit de metadate compilate este %s (pentru acțiunea luksFormat).\n" -#: src/cryptsetup.c:3566 +#: src/cryptsetup.c:3663 msgid "" "\n" "LUKS2 external token plugin support is enabled.\n" @@ -2875,12 +2897,12 @@ msgstr "" "\n" "Suportul pentru modulul de jeton(token) extern LUKS2 este activat.\n" -#: src/cryptsetup.c:3567 +#: src/cryptsetup.c:3664 #, c-format msgid "LUKS2 external token plugin path: %s.\n" msgstr "Ruta modulului pentru jetonul(token) extern LUKS2: %s.\n" -#: src/cryptsetup.c:3569 +#: src/cryptsetup.c:3666 msgid "" "\n" "LUKS2 external token plugin support is disabled.\n" @@ -2888,7 +2910,7 @@ msgstr "" "\n" "Suportul pentru modulul de jeton(token) extern LUKS2 este dezactivat.\n" -#: src/cryptsetup.c:3573 +#: src/cryptsetup.c:3670 #, c-format msgid "" "\n" @@ -2905,7 +2927,7 @@ msgstr "" "PBKDF implicit pentru LUKS2: %s\n" "\tTimp de iterare: %d, Memorie necesară: %dko, Fire de execuție paralele: %d\n" -#: src/cryptsetup.c:3584 +#: src/cryptsetup.c:3681 #, c-format msgid "" "\n" @@ -2920,100 +2942,110 @@ msgstr "" "\tsimplu: %s, Cheie: %d biți, Suma de control a parolei: %s\n" "\tLUKS: %s, Cheie: %d biți, Suma de control a antetului LUKS: %s, RNG: %s\n" -#: src/cryptsetup.c:3593 +#: src/cryptsetup.c:3690 msgid "\tLUKS: Default keysize with XTS mode (two internal keys) will be doubled.\n" msgstr "\tLUKS: Dimensiunea implicită a cheii cu modul XTS (două chei interne) va fi dublată.\n" -#: src/cryptsetup.c:3611 src/veritysetup.c:651 src/integritysetup.c:723 +#: src/cryptsetup.c:3708 src/veritysetup.c:651 src/integritysetup.c:723 #, c-format msgid "%s: requires %s as arguments" msgstr "%s: necesită %s ca argumente" -#: src/cryptsetup.c:3651 src/utils_reencrypt_luks1.c:1198 +#: src/cryptsetup.c:3748 src/utils_reencrypt_luks1.c:1198 msgid "Key slot is invalid." msgstr "Slotul de cheie nu este valid." -#: src/cryptsetup.c:3678 +#: src/cryptsetup.c:3776 msgid "Device size must be multiple of 512 bytes sector." msgstr "Dimensiunea dispozitivului trebuie să fie multiplu al sectorului de 512 octeți." -#: src/cryptsetup.c:3683 +#: src/cryptsetup.c:3781 msgid "Invalid max reencryption hotzone size specification." msgstr "Specificația pentru dimensiunea zonei fierbinți(active) pentru recriptare maximă nu este validă." -#: src/cryptsetup.c:3697 src/cryptsetup.c:3709 +#: src/cryptsetup.c:3795 src/cryptsetup.c:3807 msgid "Key size must be a multiple of 8 bits" msgstr "Dimensiunea cheii trebuie să fie multiplu de 8 biți" -#: src/cryptsetup.c:3714 +#: src/cryptsetup.c:3814 +#, c-format +msgid "At most %d volume key specifications can be supplied." +msgstr "Pot fi furnizate cel mult %d specificații ale cheilor de volum." + +#: src/cryptsetup.c:3826 +#, c-format +msgid "At most %d keyring link specifications can be supplied." +msgstr "Pot fi furnizate cel mult %d specificații de legătură a inelului de chei." + +#: src/cryptsetup.c:3835 msgid "Maximum device reduce size is 1 GiB." msgstr "Dimensiunea maximă de reducere a dispozitivului este de 1 GiB." -#: src/cryptsetup.c:3717 +#: src/cryptsetup.c:3838 msgid "Reduce size must be multiple of 512 bytes sector." msgstr "Dimensiunea redusă trebuie să fie multiplu al sectorului de 512 octeți." -#: src/cryptsetup.c:3734 +#: src/cryptsetup.c:3855 msgid "Option --priority can be only ignore/normal/prefer." msgstr "Argumentul opțiuni „--priority” poate fi doar «ignore/normal/prefer»." -#: src/cryptsetup.c:3753 src/veritysetup.c:572 src/integritysetup.c:643 +#: src/cryptsetup.c:3874 src/veritysetup.c:572 src/integritysetup.c:643 msgid "Show this help message" msgstr "Afișează acest mesaj de ajutor" -#: src/cryptsetup.c:3754 src/veritysetup.c:573 src/integritysetup.c:644 +#: src/cryptsetup.c:3875 src/veritysetup.c:573 src/integritysetup.c:644 msgid "Display brief usage" msgstr "Afișează modul de utilizare pe scurt" -#: src/cryptsetup.c:3755 src/veritysetup.c:574 src/integritysetup.c:645 +#: src/cryptsetup.c:3876 src/veritysetup.c:574 src/integritysetup.c:645 msgid "Print package version" msgstr "Afișează versiunea pachetului" -#: src/cryptsetup.c:3766 src/veritysetup.c:585 src/integritysetup.c:656 +#: src/cryptsetup.c:3887 src/veritysetup.c:585 src/integritysetup.c:656 msgid "Help options:" msgstr "Opțiuni de ajutor:" -#: src/cryptsetup.c:3789 src/veritysetup.c:606 src/integritysetup.c:676 +#: src/cryptsetup.c:3910 src/veritysetup.c:606 src/integritysetup.c:676 msgid "[OPTION...] <action> <action-specific>" msgstr "[OPȚIUNE...] <acțiune> <parametri_acțiune>" -#: src/cryptsetup.c:3798 src/veritysetup.c:615 src/integritysetup.c:687 +#: src/cryptsetup.c:3919 src/veritysetup.c:615 src/integritysetup.c:687 msgid "Argument <action> missing." msgstr "Argumentul <acțiune> lipsește." -#: src/cryptsetup.c:3877 src/veritysetup.c:646 src/integritysetup.c:718 +#: src/cryptsetup.c:3998 src/veritysetup.c:646 src/integritysetup.c:718 msgid "Unknown action." msgstr "Acțiune necunoscută." -#: src/cryptsetup.c:3895 +#: src/cryptsetup.c:4016 msgid "Option --key-file takes precedence over specified key file argument." msgstr "Opțiunea „--key-file” are prioritate față de argumentul specificat pentru fișierul cheie." -#: src/cryptsetup.c:3901 +#: src/cryptsetup.c:4022 msgid "Only one --key-file argument is allowed." msgstr "Numai un argument „--key-file” este permis." -#: src/cryptsetup.c:3906 +#: src/cryptsetup.c:4027 msgid "Password-based key derivation function (PBKDF) can be only pbkdf2 or argon2i/argon2id." msgstr "Funcția de derivare a unei chei bazată pe parolă (PBKDF=Password-Based Key Derivation Function) poate fi doar pbkdf2 sau argon2i/argon2id." -#: src/cryptsetup.c:3911 +#: src/cryptsetup.c:4032 msgid "PBKDF forced iterations cannot be combined with iteration time option." msgstr "Iterațiile forțate PBKDF nu pot fi combinate cu opțiunea de timp de iterație." -#: src/cryptsetup.c:3916 +#: src/cryptsetup.c:4037 msgid "Cannot link volume key to a keyring when keyring is disabled." msgstr "Nu se poate lega cheia de volum la un inel de chei când este dezactivat." -#: src/cryptsetup.c:3927 +#: src/cryptsetup.c:4048 msgid "Options --keyslot-cipher and --keyslot-key-size must be used together." msgstr "Opțiunile „--keyslot-cipher” și „--keyslot-key-size” trebuie să fie folosite împreună." -#: src/cryptsetup.c:3935 +#: src/cryptsetup.c:4056 msgid "No action taken. Invoked with --test-args option.\n" msgstr "Nu s-a executat nicio acțiune. Programul a fost invocat cu opțiunea „--test-args”.\n" -#: src/cryptsetup.c:3948 +#: src/cryptsetup.c:4069 msgid "Cannot disable metadata locking." msgstr "Nu se poate dezactiva blocarea metadatelor." @@ -3479,20 +3511,20 @@ msgstr "Nu este disponibil niciun slot de cheie utilizabil." msgid "Can't do passphrase verification on non-tty inputs." msgstr "Nu se poate face verificarea frazei de acces pe intrări non-tty." -#: src/utils_luks.c:183 +#: src/utils_luks.c:186 #, c-format msgid "Failed to open file %s in read-only mode." msgstr "Nu s-a putut deschide fișierul %s în modul numai-pentru-citire." -#: src/utils_luks.c:196 +#: src/utils_luks.c:199 msgid "Provide valid LUKS2 token JSON:\n" msgstr "Furnizați un jeton(token) JSON LUKS2 valid:\n" -#: src/utils_luks.c:203 +#: src/utils_luks.c:206 msgid "Failed to read JSON file." msgstr "Nu s-a putut citi fișierul JSON." -#: src/utils_luks.c:208 +#: src/utils_luks.c:211 msgid "" "\n" "Read interrupted." @@ -3500,12 +3532,12 @@ msgstr "" "\n" "Citire întreruptă." -#: src/utils_luks.c:249 +#: src/utils_luks.c:252 #, c-format msgid "Failed to open file %s in write mode." msgstr "Nu s-a putut deschide fișierul %s în modul de scriere." -#: src/utils_luks.c:258 +#: src/utils_luks.c:261 msgid "" "\n" "Write interrupted." @@ -3513,7 +3545,7 @@ msgstr "" "\n" "Scriere întreruptă." -#: src/utils_luks.c:262 +#: src/utils_luks.c:265 msgid "Failed to write JSON file." msgstr "Nu s-a putut scrie fișierul JSON." @@ -3610,7 +3642,7 @@ msgstr "" "Solicitarea făcută cu opțiunea „--sector-size %<PRIu32>” este incompatibilă cu superblocul %s\n" "(dimensiunea blocului: %<PRIu32> octeți) detectat pe dispozitivul %s." -#: src/utils_reencrypt.c:533 src/utils_reencrypt.c:1412 +#: src/utils_reencrypt.c:533 src/utils_reencrypt.c:1421 msgid "Encryption without detached header (--header) is not possible without data device size reduction (--reduce-device-size)." msgstr "Criptarea fără antet detașat (--header) nu este posibilă fără reducerea dimensiunii dispozitivului de date (--reduce-device-size)." @@ -3660,53 +3692,53 @@ msgstr "Se restabilește antetul LUKS2 original." msgid "Original LUKS2 header restore failed." msgstr "Restaurarea antetului LUKS2 original a eșuat." -#: src/utils_reencrypt.c:759 +#: src/utils_reencrypt.c:765 #, c-format msgid "Header file %s does not exist. Do you want to initialize LUKS2 decryption of device %s and export LUKS2 header to file %s?" msgstr "Fișierul antet %s nu există. Doriți să inițializați decriptarea LUKS2 a dispozitivului %s și să exportați antetul LUKS2 în fișierul %s?" -#: src/utils_reencrypt.c:807 +#: src/utils_reencrypt.c:815 msgid "Failed to add read/write permissions to exported header file." msgstr "Nu s-au putut adăuga permisiuni de citire/scriere la fișierul antet exportat." -#: src/utils_reencrypt.c:860 +#: src/utils_reencrypt.c:869 #, c-format msgid "Reencryption initialization failed. Header backup is available in %s." msgstr "Inițializarea recriptării a eșuat. Copia de rezervă a antetului este disponibilă în %s." -#: src/utils_reencrypt.c:888 +#: src/utils_reencrypt.c:897 msgid "LUKS2 decryption is supported with detached header device only (with data offset set to 0)." msgstr "Decriptarea LUKS2 este acceptată numai cu dispozitivul antet detașat (cu decalajul de date fixat la 0)." -#: src/utils_reencrypt.c:1023 src/utils_reencrypt.c:1032 +#: src/utils_reencrypt.c:1032 src/utils_reencrypt.c:1041 msgid "Not enough free keyslots for reencryption." msgstr "Nu sunt suficiente sloturi de chei liberee pentru recriptare." -#: src/utils_reencrypt.c:1053 src/utils_reencrypt_luks1.c:1100 +#: src/utils_reencrypt.c:1062 src/utils_reencrypt_luks1.c:1100 msgid "Key file can be used only with --key-slot or with exactly one key slot active." msgstr "Fișierul de cheie poate fi utilizat numai cu opțiunea „--key-slot” sau cu exact un slot de cheie activ." -#: src/utils_reencrypt.c:1062 src/utils_reencrypt_luks1.c:1147 +#: src/utils_reencrypt.c:1071 src/utils_reencrypt_luks1.c:1147 #: src/utils_reencrypt_luks1.c:1158 #, c-format msgid "Enter passphrase for key slot %d: " msgstr "Introduceți fraza de acces pentru slotul de cheie %d: " -#: src/utils_reencrypt.c:1074 +#: src/utils_reencrypt.c:1083 #, c-format msgid "Enter passphrase for key slot %u: " msgstr "Introduceți fraza de acces pentru slotul de cheie %u: " -#: src/utils_reencrypt.c:1126 +#: src/utils_reencrypt.c:1135 #, c-format msgid "Switching data encryption cipher to %s.\n" msgstr "Se comută cifrul de criptare a datelor la %s.\n" -#: src/utils_reencrypt.c:1180 +#: src/utils_reencrypt.c:1189 msgid "No data segment parameters changed. Reencryption aborted." msgstr "Nu s-au modificat parametrii de segment de date. Recriptarea a fost abandonată." -#: src/utils_reencrypt.c:1282 +#: src/utils_reencrypt.c:1291 msgid "" "Encryption sector size increase on offline device is not supported.\n" "Activate the device first or use --force-offline-reencrypt option (dangerous!)." @@ -3714,7 +3746,7 @@ msgstr "" "Creșterea dimensiunii sectorului de criptare pe dispozitivul offline nu este acceptată.\n" "Activați mai întâi dispozitivul sau utilizați opțiunea „--force-offline-reencrypt” (periculos!)." -#: src/utils_reencrypt.c:1322 src/utils_reencrypt_luks1.c:726 +#: src/utils_reencrypt.c:1331 src/utils_reencrypt_luks1.c:726 #: src/utils_reencrypt_luks1.c:798 msgid "" "\n" @@ -3723,58 +3755,58 @@ msgstr "" "\n" "Recriptarea a fost întreruptă." -#: src/utils_reencrypt.c:1327 +#: src/utils_reencrypt.c:1336 msgid "Resuming LUKS reencryption in forced offline mode.\n" msgstr "Reluarea recriptării LUKS în modul offline forțat.\n" -#: src/utils_reencrypt.c:1350 +#: src/utils_reencrypt.c:1359 #, c-format msgid "Device %s contains broken LUKS metadata. Aborting operation." msgstr "Dispozitivul %s conține metadate LUKS deteriorate. Se abandonează operația." -#: src/utils_reencrypt.c:1366 src/utils_reencrypt.c:1388 +#: src/utils_reencrypt.c:1375 src/utils_reencrypt.c:1397 #, c-format msgid "Device %s is already LUKS device. Aborting operation." msgstr "Dispozitivul %s este deja un dispozitiv LUKS. Se abandonează operația." -#: src/utils_reencrypt.c:1394 +#: src/utils_reencrypt.c:1403 #, c-format msgid "Device %s is already in LUKS reencryption. Aborting operation." msgstr "Dispozitivul %s este deja în recriptare LUKS. Se abandonează operația." -#: src/utils_reencrypt.c:1476 +#: src/utils_reencrypt.c:1485 msgid "LUKS2 decryption requires --header option." msgstr "Decriptarea LUKS2 necesită opțiunea „--header”." -#: src/utils_reencrypt.c:1524 +#: src/utils_reencrypt.c:1533 msgid "Command requires device as argument." msgstr "Comanda necesită un dispozitiv ca argument." -#: src/utils_reencrypt.c:1537 +#: src/utils_reencrypt.c:1546 #, c-format msgid "Conflicting versions. Device %s is LUKS1." msgstr "Versiuni în conflict. Dispozitivul %s este LUKS1." -#: src/utils_reencrypt.c:1543 +#: src/utils_reencrypt.c:1552 #, c-format msgid "Conflicting versions. Device %s is in LUKS1 reencryption." msgstr "Versiuni în conflict. Dispozitivul %s este în recriptare LUKS1." -#: src/utils_reencrypt.c:1549 +#: src/utils_reencrypt.c:1558 #, c-format msgid "Conflicting versions. Device %s is LUKS2." msgstr "Versiuni în conflict. Dispozitivul %s este LUKS2." -#: src/utils_reencrypt.c:1555 +#: src/utils_reencrypt.c:1564 #, c-format msgid "Conflicting versions. Device %s is in LUKS2 reencryption." msgstr "Versiuni în conflict. Dispozitivul %s este în recriptare LUKS2." -#: src/utils_reencrypt.c:1561 +#: src/utils_reencrypt.c:1570 msgid "LUKS2 reencryption already initialized. Aborting operation." msgstr "Recriptarea LUKS2 a fost deja inițializată. Se abandonează operația." -#: src/utils_reencrypt.c:1568 +#: src/utils_reencrypt.c:1577 msgid "Device reencryption not in progress." msgstr "Recriptarea dispozitivului nu este în curs de desfășurare." @@ -2,13 +2,13 @@ # Copyright (C) 2012 Free Software Foundation, Inc. # This file is put in the public domain. # -# Yuri Chornoivan <yurchor@ukr.net>, 2012-2023. +# Yuri Chornoivan <yurchor@ukr.net>, 2012-2023, 2024. msgid "" msgstr "" -"Project-Id-Version: cryptsetup 2.7.0-rc1\n" +"Project-Id-Version: cryptsetup 2.7.1-rc0\n" "Report-Msgid-Bugs-To: cryptsetup@lists.linux.dev\n" -"POT-Creation-Date: 2023-12-20 15:16+0100\n" -"PO-Revision-Date: 2023-12-21 12:16+0200\n" +"POT-Creation-Date: 2024-02-29 20:38+0100\n" +"PO-Revision-Date: 2024-03-01 20:13+0200\n" "Last-Translator: Yuri Chornoivan <yurchor@ukr.net>\n" "Language-Team: Ukrainian <trans-uk@lists.fedoraproject.org>\n" "Language: uk\n" @@ -116,632 +116,640 @@ msgstr "Надійшов запит щодо невідомої якості п msgid "Error reading from RNG." msgstr "Помилка читання з генератора псевдовипадкових чисел." -#: lib/setup.c:261 +#: lib/setup.c:262 msgid "OPAL support is disabled in libcryptsetup." msgstr "Підтримку OPAL у libcryptsetup вимкнено." -#: lib/setup.c:263 +#: lib/setup.c:264 #, c-format msgid "Device %s or kernel does not support OPAL encryption." msgstr "Для пристрою %s або ядра не передбачено підтримки шифрування OPAL." -#: lib/setup.c:279 +#: lib/setup.c:280 msgid "Cannot initialize crypto RNG backend." msgstr "Не вдалося ініціалізувати допоміжну програму шифрування генератора псевдовипадкових чисел." -#: lib/setup.c:285 +#: lib/setup.c:286 msgid "Cannot initialize crypto backend." msgstr "Не вдалося ініціалізувати допоміжну програму шифрування." -#: lib/setup.c:317 lib/setup.c:2777 lib/verity/verity.c:122 +#: lib/setup.c:318 lib/setup.c:2778 lib/verity/verity.c:122 #, c-format msgid "Hash algorithm %s not supported." msgstr "Підтримки алгоритму хешування %s не передбачено." -#: lib/setup.c:320 lib/loopaes/loopaes.c:90 +#: lib/setup.c:321 lib/loopaes/loopaes.c:90 #, c-format msgid "Key processing error (using hash %s)." msgstr "Помилка під час обробки ключа (на основі хешу %s)." -#: lib/setup.c:391 lib/setup.c:428 +#: lib/setup.c:392 lib/setup.c:429 msgid "Cannot determine device type. Incompatible activation of device?" msgstr "Не вдалося визначити тип пристрою. Несумісна дія з активації пристрою?" -#: lib/setup.c:397 lib/setup.c:3971 +#: lib/setup.c:398 lib/setup.c:3973 msgid "This operation is supported only for LUKS device." msgstr "Підтримку цієї дії передбачено лише для пристроїв LUKS." -#: lib/setup.c:434 +#: lib/setup.c:435 msgid "This operation is supported only for LUKS2 device." msgstr "Підтримку цієї дії передбачено лише для пристроїв LUKS2." -#: lib/setup.c:491 lib/luks2/luks2_reencrypt.c:3056 +#: lib/setup.c:492 lib/luks2/luks2_reencrypt.c:3071 msgid "All key slots full." msgstr "Заповнено всі слоти ключів." -#: lib/setup.c:502 +#: lib/setup.c:503 #, c-format msgid "Key slot %d is invalid, please select between 0 and %d." msgstr "Слот ключа %d є некоректним, будь ласка, виберіть число від 0 до %d." -#: lib/setup.c:508 +#: lib/setup.c:509 #, c-format msgid "Key slot %d is full, please select another one." msgstr "Слот ключа %d заповнено, будь ласка, виберіть інший." -#: lib/setup.c:619 lib/setup.c:3672 +#: lib/setup.c:620 lib/setup.c:3673 msgid "Device size is not aligned to device logical block size." msgstr "Розмір пристрою не вирівняно за розміром логічного блоку пристрою." -#: lib/setup.c:717 +#: lib/setup.c:718 #, c-format msgid "Header detected but device %s is too small." msgstr "Виявлено заголовок, але об’єм пристрою %s є надто малим." -#: lib/setup.c:758 lib/setup.c:3563 lib/setup.c:5163 -#: lib/luks2/luks2_reencrypt.c:3848 lib/luks2/luks2_reencrypt.c:4305 +#: lib/setup.c:759 lib/setup.c:3564 lib/setup.c:5351 lib/setup.c:5371 +#: lib/luks2/luks2_reencrypt.c:3863 lib/luks2/luks2_reencrypt.c:4320 msgid "This operation is not supported for this device type." msgstr "Підтримки цієї дії для цього типу пристроїв не передбачено." -#: lib/setup.c:763 +#: lib/setup.c:764 msgid "Illegal operation with reencryption in-progress." msgstr "Виконуємо заборонену дію із повторного шифрування." -#: lib/setup.c:895 +#: lib/setup.c:896 msgid "Failed to rollback LUKS2 metadata in memory." msgstr "Не вдалося відкотити метадані LUKS2 у пам'яті." -#: lib/setup.c:982 lib/luks1/keymanage.c:249 lib/luks1/keymanage.c:527 -#: lib/luks2/luks2_json_metadata.c:1374 src/cryptsetup.c:1799 -#: src/cryptsetup.c:1962 src/cryptsetup.c:2017 src/cryptsetup.c:2222 -#: src/cryptsetup.c:2392 src/cryptsetup.c:2673 src/cryptsetup.c:2981 -#: src/cryptsetup.c:3049 src/utils_reencrypt.c:1488 +#: lib/setup.c:983 lib/luks1/keymanage.c:249 lib/luks1/keymanage.c:527 +#: lib/luks2/luks2_json_metadata.c:1374 src/cryptsetup.c:1878 +#: src/cryptsetup.c:2059 src/cryptsetup.c:2114 src/cryptsetup.c:2319 +#: src/cryptsetup.c:2489 src/cryptsetup.c:2770 src/cryptsetup.c:3078 +#: src/cryptsetup.c:3146 src/utils_reencrypt.c:1497 #: src/utils_reencrypt_luks1.c:1192 tokens/ssh/cryptsetup-ssh.c:85 #, c-format msgid "Device %s is not a valid LUKS device." msgstr "Пристрій %s не є коректним пристроєм LUKS." -#: lib/setup.c:985 lib/luks1/keymanage.c:530 +#: lib/setup.c:986 lib/luks1/keymanage.c:530 #, c-format msgid "Unsupported LUKS version %d." msgstr "Непідтримувана версія LUKS, %d." -#: lib/setup.c:1358 +#: lib/setup.c:1359 #, c-format msgid "No known cipher specification pattern detected for active device %s." msgstr "Не виявлено жодного відомого зразка специфікації шифрування для активного пристрою %s." -#: lib/setup.c:1604 lib/setup.c:3317 lib/setup.c:3399 lib/setup.c:3411 -#: lib/setup.c:3581 lib/setup.c:5755 +#: lib/setup.c:1605 lib/setup.c:3318 lib/setup.c:3400 lib/setup.c:3412 +#: lib/setup.c:3582 lib/setup.c:5995 #, c-format msgid "Device %s is not active." msgstr "Пристрій %s є неактивним." -#: lib/setup.c:1621 +#: lib/setup.c:1622 #, c-format msgid "Underlying device for crypt device %s disappeared." msgstr "Зник основний пристрій для пристрою для шифрування %s." -#: lib/setup.c:1703 +#: lib/setup.c:1704 msgid "Invalid plain crypt parameters." msgstr "Некоректні параметри звичайного шифрування." -#: lib/setup.c:1708 lib/setup.c:2680 +#: lib/setup.c:1709 lib/setup.c:2681 msgid "Invalid key size." msgstr "Некоректний розмір ключа." -#: lib/setup.c:1713 lib/setup.c:2685 lib/setup.c:2888 +#: lib/setup.c:1714 lib/setup.c:2686 lib/setup.c:2889 msgid "UUID is not supported for this crypt type." msgstr "Підтримки UUID для цього типу шифрування не передбачено." -#: lib/setup.c:1718 lib/setup.c:2690 +#: lib/setup.c:1719 lib/setup.c:2691 msgid "Detached metadata device is not supported for this crypt type." msgstr "Підтримки пристрою від'єднаних метаданих для цього типу шифрування не передбачено." -#: lib/setup.c:1728 lib/setup.c:1963 lib/luks2/luks2_reencrypt.c:3012 -#: src/cryptsetup.c:1467 src/cryptsetup.c:3726 +#: lib/setup.c:1729 lib/setup.c:1964 lib/luks2/luks2_reencrypt.c:3027 +#: src/cryptsetup.c:1475 src/cryptsetup.c:3847 msgid "Unsupported encryption sector size." msgstr "Непідтримуваний розмір сектора шифрування." -#: lib/setup.c:1736 lib/setup.c:1992 lib/setup.c:3666 +#: lib/setup.c:1737 lib/setup.c:1993 lib/setup.c:3667 msgid "Device size is not aligned to requested sector size." msgstr "Розмір пристрою не вирівняно за вказаним розміром сектора." -#: lib/setup.c:1788 lib/setup.c:2025 lib/setup.c:2357 +#: lib/setup.c:1789 lib/setup.c:2026 lib/setup.c:2358 msgid "Can't format LUKS without device." msgstr "Форматування LUKS без пристрою неможливе." -#: lib/setup.c:1794 lib/setup.c:2031 lib/setup.c:2363 +#: lib/setup.c:1795 lib/setup.c:2032 lib/setup.c:2364 msgid "Requested data alignment is not compatible with data offset." msgstr "Потрібне вам вирівнювання даних є несумісним із відступом у даних." -#: lib/setup.c:1834 lib/setup.c:2049 +#: lib/setup.c:1835 lib/setup.c:2050 msgid "WARNING: DAX device can corrupt data as it does not guarantee atomic sector updates.\n" msgstr "УВАГА: пристрій DAX може пошкодити дані, оскільки для нього не гарантовано атомарні оновлення секторів.\n" -#: lib/setup.c:1872 lib/setup.c:2144 lib/setup.c:2165 lib/setup.c:2541 -#: lib/setup.c:2587 lib/setup.c:2900 +#: lib/setup.c:1873 lib/setup.c:2145 lib/setup.c:2166 lib/setup.c:2542 +#: lib/setup.c:2588 lib/setup.c:2901 #, c-format msgid "Cannot wipe header on device %s." msgstr "Не можна витирати заголовок на пристрої %s." -#: lib/setup.c:1885 lib/setup.c:2204 +#: lib/setup.c:1886 lib/setup.c:2205 #, c-format msgid "Device %s is too small for activation, there is no remaining space for data.\n" msgstr "Пристрій %s є надто малим для активації, на ньому не лишиться місця для даних.\n" -#: lib/setup.c:1925 +#: lib/setup.c:1926 msgid "Volume key is too small for encryption with integrity extensions." msgstr "Ключ тому є надто малим для шифрування із розширеннями цілісності." -#: lib/setup.c:1934 +#: lib/setup.c:1935 #, c-format msgid "Cipher %s-%s (key size %zd bits) is not available." msgstr "Шифрування %s-%s (розмір ключа — %zd бітів) є недоступним." -#: lib/setup.c:1973 +#: lib/setup.c:1974 msgid "WARNING: The device activation will fail, dm-crypt is missing support for requested encryption sector size.\n" msgstr "Увага: спроба активувати пристрій завершиться невдало, у dm-crypt не передбачено підтримки для вказаного розміру сектора шифрування.\n" -#: lib/setup.c:2147 lib/setup.c:2484 lib/setup.c:2544 lib/utils_device.c:917 -#: lib/luks1/keyencryption.c:255 lib/luks2/luks2_reencrypt.c:3080 -#: lib/luks2/luks2_reencrypt.c:4364 +#: lib/setup.c:2148 lib/setup.c:2485 lib/setup.c:2545 lib/utils_device.c:917 +#: lib/luks1/keyencryption.c:255 lib/luks2/luks2_reencrypt.c:3095 +#: lib/luks2/luks2_reencrypt.c:4380 #, c-format msgid "Device %s is too small." msgstr "Об’єм пристрою %s є надто малим." -#: lib/setup.c:2158 lib/setup.c:2184 lib/setup.c:2580 lib/setup.c:2626 +#: lib/setup.c:2159 lib/setup.c:2185 lib/setup.c:2581 lib/setup.c:2627 #, c-format msgid "Cannot format device %s in use." msgstr "Не можна форматувати пристрій %s, який перебуває у користуванні." -#: lib/setup.c:2161 lib/setup.c:2187 lib/setup.c:2583 lib/setup.c:2629 +#: lib/setup.c:2162 lib/setup.c:2188 lib/setup.c:2584 lib/setup.c:2630 #, c-format msgid "Cannot format device %s, permission denied." msgstr "Не можна форматувати пристрій %s, недостатні права доступу." -#: lib/setup.c:2173 lib/setup.c:2600 lib/setup.c:2960 +#: lib/setup.c:2174 lib/setup.c:2601 lib/setup.c:2961 #, c-format msgid "Cannot format integrity for device %s." msgstr "Не вдалося форматувати цілісність для пристрою %s." -#: lib/setup.c:2191 lib/setup.c:2637 +#: lib/setup.c:2192 lib/setup.c:2638 #, c-format msgid "Cannot format device %s." msgstr "Не вдалося форматувати пристрій %s." -#: lib/setup.c:2234 +#: lib/setup.c:2235 msgid "Cannot get OPAL alignment parameters." msgstr "Не вдалося отримати параметри вирівнювання OPAL." -#: lib/setup.c:2243 +#: lib/setup.c:2244 msgid "Bogus OPAL logical block size." msgstr "Фіктивний розмір логічного блоку OPAL." -#: lib/setup.c:2249 +#: lib/setup.c:2250 msgid "Requested data offset is not compatible with OPAL block size." msgstr "Потрібний вам відступ даних є несумісним із розміром блоку OPAL." -#: lib/setup.c:2256 +#: lib/setup.c:2257 msgid "Requested data alignment is not compatible with OPAL alignment." msgstr "Потрібне вам вирівнювання даних є несумісним із вирівнюванням OPAL." -#: lib/setup.c:2276 +#: lib/setup.c:2277 msgid "Data offset does not satisfy OPAL alignment requirements." msgstr "Відступ даних не відповідає вимогам вирівнювання OPAL." -#: lib/setup.c:2289 +#: lib/setup.c:2290 msgid "Requested data alignment does not satisfy locking range alignment requirements." msgstr "Потрібне вам вирівнювання даних не відповідає вимогам щодо вирівнювання заблокованого діапазону." -#: lib/setup.c:2494 +#: lib/setup.c:2495 #, c-format msgid "Compensating device size by %<PRIu64> sectors to align it with OPAL alignment granularity." msgstr "Компенсуємо розмір пристрою на %<PRIu64> секторів для вирівнювання його за рівнем розбиття вирівнювання OPAL." -#: lib/setup.c:2552 lib/setup.c:4068 lib/setup.c:4223 lib/utils_wipe.c:368 +#: lib/setup.c:2553 lib/setup.c:4070 lib/setup.c:4253 lib/utils_wipe.c:368 #: lib/luks2/luks2_json_metadata.c:2703 lib/luks2/luks2_json_metadata.c:2955 #, c-format msgid "Failed to acquire OPAL lock on device %s." msgstr "Не вдалося отримати блокування OPAL на пристрої %s." -#: lib/setup.c:2561 +#: lib/setup.c:2562 msgid "Incorrect OPAL Admin key." msgstr "Неправильний адміністративний ключ OPAL." -#: lib/setup.c:2563 +#: lib/setup.c:2564 msgid "Cannot setup OPAL segment." msgstr "Не вдалося налаштувати сегмент OPAL." -#: lib/setup.c:2633 +#: lib/setup.c:2634 #, c-format msgid "Cannot format device %s, OPAL device seems to be fully write-protected now." msgstr "Не вдалося форматувати пристрій %s, здається, пристрій OPAL тепер повністю захищено від запису." -#: lib/setup.c:2635 +#: lib/setup.c:2636 msgid "This is perhaps a bug in firmware. Run OPAL PSID reset and reconnect for recovery." msgstr "Можливо, це вада у мікропрограмі. Виконайте скидання PSID OPAL і повторно з'єднайте пристрій для відновлення." -#: lib/setup.c:2655 +#: lib/setup.c:2656 #, c-format msgid "Locking range %d reset on device %s failed." msgstr "Помилка під час спроби скидання діапазону блокування %d на пристрої %s." -#: lib/setup.c:2675 +#: lib/setup.c:2676 msgid "Can't format LOOPAES without device." msgstr "Не можна форматувати LOOPAES без пристрою." -#: lib/setup.c:2720 +#: lib/setup.c:2721 msgid "Can't format VERITY without device." msgstr "Форматування VERITY без пристрою неможливе." -#: lib/setup.c:2731 lib/verity/verity.c:101 +#: lib/setup.c:2732 lib/verity/verity.c:101 #, c-format msgid "Unsupported VERITY hash type %d." msgstr "Непідтримуваний тип хешування VERITY, %d." -#: lib/setup.c:2737 lib/verity/verity.c:109 +#: lib/setup.c:2738 lib/verity/verity.c:109 msgid "Unsupported VERITY block size." msgstr "Непідтримуваний розмір блоку VERITY." -#: lib/setup.c:2742 lib/verity/verity.c:74 +#: lib/setup.c:2743 lib/verity/verity.c:74 msgid "Unsupported VERITY hash offset." msgstr "Непідтримуваний відступ хешу VERITY." -#: lib/setup.c:2747 +#: lib/setup.c:2748 msgid "Unsupported VERITY FEC offset." msgstr "Непідтримуваний зсув FEC VERITY." -#: lib/setup.c:2771 +#: lib/setup.c:2772 msgid "Data area overlaps with hash area." msgstr "Область даних перекривається із областю хешу." -#: lib/setup.c:2796 +#: lib/setup.c:2797 msgid "Hash area overlaps with FEC area." msgstr "Область хешування перекриваються з областю FEC." -#: lib/setup.c:2803 +#: lib/setup.c:2804 msgid "Data area overlaps with FEC area." msgstr "Область даних перекривається із областю FEC." -#: lib/setup.c:2939 +#: lib/setup.c:2940 #, c-format msgid "WARNING: Requested tag size %d bytes differs from %s size output (%d bytes).\n" msgstr "Увага: бажаний розмір мітки у %d байтів відрізняється від розміру у результаті %s (%d байтів).\n" -#: lib/setup.c:3018 +#: lib/setup.c:3019 #, c-format msgid "Unknown crypt device type %s requested." msgstr "Надіслано запит щодо невідомого типу пристрою шифрування, %s." -#: lib/setup.c:3325 lib/setup.c:3404 lib/setup.c:3417 +#: lib/setup.c:3326 lib/setup.c:3405 lib/setup.c:3418 #, c-format msgid "Unsupported parameters on device %s." msgstr "Непідтримувані параметри на пристрої %s." -#: lib/setup.c:3331 lib/setup.c:3424 lib/luks2/luks2_reencrypt.c:2908 -#: lib/luks2/luks2_reencrypt.c:3145 lib/luks2/luks2_reencrypt.c:3540 +#: lib/setup.c:3332 lib/setup.c:3425 lib/luks2/luks2_reencrypt.c:2923 +#: lib/luks2/luks2_reencrypt.c:3160 lib/luks2/luks2_reencrypt.c:3555 #, c-format msgid "Mismatching parameters on device %s." msgstr "Невідповідність параметрів на пристрої %s." -#: lib/setup.c:3448 +#: lib/setup.c:3449 msgid "Crypt devices mismatch." msgstr "Невідповідність пристроїв шифрування." -#: lib/setup.c:3485 lib/setup.c:3490 lib/luks2/luks2_reencrypt.c:2390 -#: lib/luks2/luks2_reencrypt.c:2924 lib/luks2/luks2_reencrypt.c:4109 +#: lib/setup.c:3486 lib/setup.c:3491 lib/luks2/luks2_reencrypt.c:2405 +#: lib/luks2/luks2_reencrypt.c:2939 lib/luks2/luks2_reencrypt.c:4124 #, c-format msgid "Failed to reload device %s." msgstr "Не вдалося перезавантажити пристрій %s." -#: lib/setup.c:3496 lib/setup.c:3502 lib/luks2/luks2_reencrypt.c:2361 -#: lib/luks2/luks2_reencrypt.c:2368 lib/luks2/luks2_reencrypt.c:2938 +#: lib/setup.c:3497 lib/setup.c:3503 lib/luks2/luks2_reencrypt.c:2376 +#: lib/luks2/luks2_reencrypt.c:2383 lib/luks2/luks2_reencrypt.c:2953 #, c-format msgid "Failed to suspend device %s." msgstr "Не вдалося приспати пристрій %s." -#: lib/setup.c:3508 lib/luks2/luks2_reencrypt.c:2375 -#: lib/luks2/luks2_reencrypt.c:2959 lib/luks2/luks2_reencrypt.c:4022 -#: lib/luks2/luks2_reencrypt.c:4113 +#: lib/setup.c:3509 lib/luks2/luks2_reencrypt.c:2390 +#: lib/luks2/luks2_reencrypt.c:2974 lib/luks2/luks2_reencrypt.c:4037 +#: lib/luks2/luks2_reencrypt.c:4128 #, c-format msgid "Failed to resume device %s." msgstr "Не вдалося відновити роботу пристрою %s." -#: lib/setup.c:3523 +#: lib/setup.c:3524 #, c-format msgid "Fatal error while reloading device %s (on top of device %s)." msgstr "Критична помилка під час перезавантаження пристрої %s (над пристроєм %s)." -#: lib/setup.c:3526 lib/setup.c:3528 +#: lib/setup.c:3527 lib/setup.c:3529 #, c-format msgid "Failed to switch device %s to dm-error." msgstr "Не вдалося перемкнути пристрій %s у режим dm-error." -#: lib/setup.c:3568 +#: lib/setup.c:3569 msgid "Can not resize LUKS2 device with static size." msgstr "Неможливо змінити розмір пристрою LUKS2 зі статичним розміром." -#: lib/setup.c:3613 +#: lib/setup.c:3614 msgid "Cannot resize loop device." msgstr "Неможливо змінити розмір петльового пристрою." -#: lib/setup.c:3657 +#: lib/setup.c:3658 msgid "WARNING: Maximum size already set or kernel doesn't support resize.\n" msgstr "УВАГА: уже вказано максимальний розмір або у ядрі не передбачено можливості зміни розміру.\n" -#: lib/setup.c:3723 +#: lib/setup.c:3724 msgid "Resize failed, the kernel doesn't support it." msgstr "Не вдалося змінити розмір, у ядрі не передбачено підтримки такої дії." -#: lib/setup.c:3755 +#: lib/setup.c:3756 msgid "Do you really want to change UUID of device?" msgstr "Ви справді хочете змінити UUID пристрою?" -#: lib/setup.c:3847 +#: lib/setup.c:3848 msgid "Header backup file does not contain compatible LUKS header." msgstr "Файл резервної копії заголовка не містить сумісного із LUKS заголовка." -#: lib/setup.c:3956 +#: lib/setup.c:3958 #, c-format msgid "Volume %s is not active." msgstr "Том %s не є активним." -#: lib/setup.c:4022 +#: lib/setup.c:4024 #, c-format msgid "Volume %s is already suspended." msgstr "Том %s вже приспано." -#: lib/setup.c:4050 +#: lib/setup.c:4052 #, c-format msgid "Suspend is not supported for device %s." msgstr "Підтримки присипляння для пристрою %s не передбачено." -#: lib/setup.c:4052 lib/setup.c:4060 +#: lib/setup.c:4054 lib/setup.c:4062 #, c-format msgid "Error during suspending device %s." msgstr "Помилка під час спроби приспати пристрій %s." -#: lib/setup.c:4074 +#: lib/setup.c:4076 #, c-format msgid "Device %s was suspended but hardware OPAL device cannot be locked." msgstr "Роботу пристрою %s було призупинено, але апаратний пристрій OPAL не може бути заблоковано." -#: lib/setup.c:4106 lib/setup.c:4250 +#: lib/setup.c:4108 lib/setup.c:4280 #, c-format msgid "Resume is not supported for device %s." msgstr "Підтримки дії з пробудження для пристрою %s не передбачено." -#: lib/setup.c:4108 lib/setup.c:4241 lib/setup.c:4252 +#: lib/setup.c:4110 lib/setup.c:4271 lib/setup.c:4282 #, c-format msgid "Error during resuming device %s." msgstr "Помилка під час спроби пробудити пристрій %s." -#: lib/setup.c:4131 -msgid "Failed to link key to the specified keyring." -msgstr "Не вдалося пов'язати ключ зі вказаним сховищем ключів." - -#: lib/setup.c:4150 +#: lib/setup.c:4129 msgid "Failed to unlink volume key from user specified keyring." msgstr "Не вдалося скасувати прив'язку ключа тому до вказаного користувачем сховища ключів." -#: lib/setup.c:4213 lib/setup.c:4934 lib/setup.c:5549 +#: lib/setup.c:4244 lib/setup.c:4966 lib/setup.c:5787 msgid "Failed to link volume key in user defined keyring." msgstr "Не вдалося пов'язати ключ тому із визначеним користувачем сховищем ключів." -#: lib/setup.c:4313 src/cryptsetup.c:2755 +#: lib/setup.c:4345 src/cryptsetup.c:2852 #, c-format msgid "Volume %s is not suspended." msgstr "Том %s не приспано." -#: lib/setup.c:4414 lib/setup.c:5310 lib/setup.c:5317 lib/setup.c:7176 -#: lib/setup.c:7198 lib/setup.c:7247 src/cryptsetup.c:2265 +#: lib/setup.c:4446 lib/setup.c:5106 lib/setup.c:5523 lib/setup.c:5542 +#: lib/setup.c:7416 lib/setup.c:7438 lib/setup.c:7487 src/cryptsetup.c:2362 msgid "Volume key does not match the volume." msgstr "Ключ тому не відповідає тому." -#: lib/setup.c:4568 +#: lib/setup.c:4600 msgid "Failed to swap new key slot." msgstr "Не вдалося зарезервувати новий слот ключа." -#: lib/setup.c:4666 +#: lib/setup.c:4698 #, c-format msgid "Key slot %d is invalid." msgstr "Слот ключа %d є некоректним." -#: lib/setup.c:4672 src/cryptsetup.c:1975 src/cryptsetup.c:2467 -#: src/cryptsetup.c:3149 src/cryptsetup.c:3209 +#: lib/setup.c:4704 src/cryptsetup.c:2072 src/cryptsetup.c:2564 +#: src/cryptsetup.c:3246 src/cryptsetup.c:3306 #, c-format msgid "Keyslot %d is not active." msgstr "Слот ключа %d не є активним." -#: lib/setup.c:4691 +#: lib/setup.c:4723 msgid "Device header overlaps with data area." msgstr "Заголовок пристрою перекривається із областю даних." -#: lib/setup.c:5041 +#: lib/setup.c:5076 lib/setup.c:5176 msgid "Reencryption in-progress. Cannot activate device." msgstr "Виконуємо повторне шифрування. Не можна активувати пристрій." -#: lib/setup.c:5043 lib/luks2/luks2_json_metadata.c:2861 -#: lib/luks2/luks2_reencrypt.c:3646 +#: lib/setup.c:5078 lib/setup.c:5178 lib/luks2/luks2_json_metadata.c:2861 +#: lib/luks2/luks2_reencrypt.c:3661 msgid "Failed to get reencryption lock." msgstr "Не вдалося отримати стан блокування для повторного шифрування." -#: lib/setup.c:5056 lib/luks2/luks2_reencrypt.c:3665 +#: lib/setup.c:5090 +msgid "LUKS2 reencryption recovery using volume key(s) failed." +msgstr "Не вдалося виконати відновлення даних повторного шифрування LUKS2 з використанням ключів тому." + +#: lib/setup.c:5142 lib/setup.c:5232 +msgid "Failed to link volume keys in user defined keyring." +msgstr "Не вдалося пов'язати ключі тому із визначеним користувачем сховищем ключів." + +#: lib/setup.c:5191 lib/luks2/luks2_reencrypt.c:3680 msgid "LUKS2 reencryption recovery failed." msgstr "Не вдалося виконати відновлення даних повторного шифрування LUKS2." -#: lib/setup.c:5228 lib/setup.c:5328 lib/setup.c:5386 +#: lib/setup.c:5439 lib/setup.c:5553 lib/setup.c:5610 msgid "Device type is not properly initialized." msgstr "Тип пристрою не ініціалізовано належним чином." -#: lib/setup.c:5283 +#: lib/setup.c:5494 #, c-format msgid "Device %s already exists." msgstr "Пристрій %s вже існує." -#: lib/setup.c:5290 +#: lib/setup.c:5501 #, c-format msgid "Cannot use device %s, name is invalid or still in use." msgstr "Неможливо скористатися пристроєм %s, некоректна назва або пристрій усе ще використовується." -#: lib/setup.c:5306 +#: lib/setup.c:5519 msgid "Incorrect volume key specified for plain device." msgstr "Для пристрою зі звичайним шифруванням вказано помилковий ключ тому." -#: lib/setup.c:5424 +#: lib/setup.c:5533 +msgid "Reencryption volume keys do not match the volume." +msgstr "Ключі повторного шифрування тому не відповідають тому." + +#: lib/setup.c:5646 msgid "Kernel keyring is not supported by the kernel." msgstr "У ядрі не передбачено підтримки сховища ключів ядра." -#: lib/setup.c:5428 +#: lib/setup.c:5650 msgid "Kernel keyring missing: required for passing signature to kernel." msgstr "Немає сховища ключів ядра: це сховище потрібне для передавання підпису ядру." -#: lib/setup.c:5668 +#: lib/setup.c:5908 msgid "Incorrect root hash specified for verity device." msgstr "Для пристрою перевірки вказано помилковий кореневий хеш." -#: lib/setup.c:5711 +#: lib/setup.c:5951 msgid "OPAL does not support deferred deactivation." msgstr "В OPAL не передбачено підтримки відкладеної деактивації." -#: lib/setup.c:5727 +#: lib/setup.c:5967 #, c-format msgid "Could not cancel deferred remove from device %s." msgstr "Не вдалося скасувати відкладене вилучення з пристрою %s." -#: lib/setup.c:5734 lib/setup.c:5750 lib/luks2/luks2_json_metadata.c:2915 +#: lib/setup.c:5974 lib/setup.c:5990 lib/luks2/luks2_json_metadata.c:2915 #: src/utils_reencrypt.c:116 #, c-format msgid "Device %s is still in use." msgstr "Пристрій %s все ще використовується." -#: lib/setup.c:5759 +#: lib/setup.c:5999 #, c-format msgid "Invalid device %s." msgstr "Некоректний пристрій %s." -#: lib/setup.c:5899 +#: lib/setup.c:6139 msgid "Volume key buffer too small." msgstr "Буфер ключів тому є занадто малим." -#: lib/setup.c:5916 +#: lib/setup.c:6156 msgid "Cannot retrieve volume key for LUKS2 device." msgstr "Неможливо отримати ключ тому для пристрою із шифруванням LUKS2." -#: lib/setup.c:5925 +#: lib/setup.c:6165 msgid "Cannot retrieve volume key for LUKS1 device." msgstr "Неможливо отримати ключ тому для пристрою із шифруванням LUKS1." -#: lib/setup.c:5935 +#: lib/setup.c:6175 msgid "Cannot retrieve volume key for plain device." msgstr "Неможливо отримати ключ тому для пристрою зі звичайним шифруванням." -#: lib/setup.c:5943 +#: lib/setup.c:6183 msgid "Cannot retrieve root hash for verity device." msgstr "Не вдалося отримати кореневий хеш для пристрою VERITY." -#: lib/setup.c:5950 +#: lib/setup.c:6190 msgid "Cannot retrieve volume key for BITLK device." msgstr "Неможливо отримати ключ тому для пристрою BITLK." -#: lib/setup.c:5955 +#: lib/setup.c:6195 msgid "Cannot retrieve volume key for FVAULT2 device." msgstr "Неможливо отримати ключ тому для пристрою FVAULT2." -#: lib/setup.c:5957 +#: lib/setup.c:6197 #, c-format msgid "This operation is not supported for %s crypt device." msgstr "Підтримки цієї дії для шифрованого пристрою %s не передбачено." -#: lib/setup.c:6141 lib/setup.c:6152 +#: lib/setup.c:6381 lib/setup.c:6392 msgid "Dump operation is not supported for this device type." msgstr "Підтримки дії зі створення дампу для цього типу пристроїв не передбачено." -#: lib/setup.c:6511 +#: lib/setup.c:6751 #, c-format msgid "Data offset is not multiple of %u bytes." msgstr "Зсув у даних не є кратним до %u байтів." -#: lib/setup.c:6819 +#: lib/setup.c:7059 #, c-format msgid "Cannot convert device %s which is still in use." msgstr "Не можна перетворити пристрій %s, який перебуває у користуванні." -#: lib/setup.c:7117 lib/setup.c:7256 +#: lib/setup.c:7357 lib/setup.c:7496 #, c-format msgid "Failed to assign keyslot %u as the new volume key." msgstr "Не вдалося прив'язати слот ключа %u як новий ключ тому." -#: lib/setup.c:7141 +#: lib/setup.c:7381 msgid "Failed to initialize default LUKS2 keyslot parameters." msgstr "Не вдалося ініціалізувати типові параметри слоту ключів LUKS2." -#: lib/setup.c:7147 +#: lib/setup.c:7387 #, c-format msgid "Failed to assign keyslot %d to digest." msgstr "Не вдалося прив'язати слот ключа %d до контрольної суми." -#: lib/setup.c:7372 +#: lib/setup.c:7612 msgid "Cannot add key slot, all slots disabled and no volume key provided." msgstr "Не вдалося додати слот ключа, всі слоти вимкнено і не вказано ключа тому." -#: lib/setup.c:7441 lib/verity/verity.c:343 +#: lib/setup.c:7681 lib/verity/verity.c:343 msgid "Failed to load key in kernel keyring." msgstr "Не вдалося завантажити ключ до сховища ключів ядра." -#: lib/setup.c:7559 +#: lib/setup.c:7799 msgid "Failed to unlink volume key from thread keyring." msgstr "Не вдалося скасувати прив'язку ключа тому до сховища ключів потоку обробки." -#: lib/setup.c:7586 +#: lib/setup.c:7843 #, c-format msgid "Could not find keyring described by \"%s\"." msgstr "Не вдалося знайти сховище ключів, яке описано «%s»." -#: lib/setup.c:7645 +#: lib/setup.c:7908 msgid "Failed to acquire global memory-hard access serialization lock." msgstr "Не вдалося створити загальне блокування серіалізації доступу до пам'яті." -#: lib/utils.c:205 lib/tcrypt/tcrypt.c:503 +#: lib/utils.c:215 lib/tcrypt/tcrypt.c:503 msgid "Failed to open key file." msgstr "Не вдалося відкрити файл ключа." -#: lib/utils.c:210 +#: lib/utils.c:220 msgid "Cannot read keyfile from a terminal." msgstr "Не вдалося прочитати файл ключа з термінала." -#: lib/utils.c:226 +#: lib/utils.c:236 msgid "Failed to stat key file." msgstr "Не вдалося отримати статистичні дані щодо файла ключа." -#: lib/utils.c:234 lib/utils.c:255 +#: lib/utils.c:244 lib/utils.c:265 msgid "Cannot seek to requested keyfile offset." msgstr "Не вдалося встановити потрібну позицію у файлі ключа." -#: lib/utils.c:249 lib/utils.c:264 src/utils_password.c:226 +#: lib/utils.c:259 lib/utils.c:274 src/utils_password.c:226 #: src/utils_password.c:238 msgid "Out of memory while reading passphrase." msgstr "Під час читання пароля вичерпано пам’ять." -#: lib/utils.c:284 +#: lib/utils.c:294 msgid "Error reading passphrase." msgstr "Помилка під час читання пароля." -#: lib/utils.c:301 +#: lib/utils.c:311 msgid "Nothing to read on input." msgstr "Нічого читати з вхідних даних." -#: lib/utils.c:308 +#: lib/utils.c:318 msgid "Maximum keyfile size exceeded." msgstr "Перевищено максимальний розмір файла ключа." -#: lib/utils.c:313 +#: lib/utils.c:323 msgid "Cannot read requested amount of data." msgstr "Не вдалося прочитати бажаний об’єм даних." #: lib/utils_device.c:213 lib/utils_storage_wrappers.c:110 -#: lib/luks1/keyencryption.c:91 src/utils_reencrypt.c:1461 +#: lib/luks1/keyencryption.c:91 src/utils_reencrypt.c:1470 #, c-format msgid "Device %s does not exist or access denied." msgstr "Пристрою %s не існує або доступ до цього пристрою заборонено." @@ -1070,7 +1078,7 @@ msgstr "Режим шифрування LUKS %s є некоректним." msgid "LUKS hash %s is invalid." msgstr "Хеш-сума LUKS %s є некоректною." -#: lib/luks1/keymanage.c:574 src/cryptsetup.c:1352 +#: lib/luks1/keymanage.c:574 src/cryptsetup.c:1360 msgid "No known problems detected for LUKS header." msgstr "У заголовку LUKS не виявлено жодних проблем." @@ -1163,11 +1171,11 @@ msgstr "Перевищено максимальну можливу довжин msgid "PBKDF2 hash algorithm %s not available, skipping." msgstr "Засіб створення хешів PBKDF2 за алгоритмом %s недоступний, пропускаємо." -#: lib/tcrypt/tcrypt.c:621 src/cryptsetup.c:1227 +#: lib/tcrypt/tcrypt.c:621 src/cryptsetup.c:1235 msgid "Required kernel crypto interface not available." msgstr "Потрібний для роботи інтерфейс ядра для шифрування недоступний." -#: lib/tcrypt/tcrypt.c:623 src/cryptsetup.c:1229 +#: lib/tcrypt/tcrypt.c:623 src/cryptsetup.c:1237 msgid "Ensure you have algif_skcipher kernel module loaded." msgstr "Переконайтеся, що завантажено модуль ядра algif_skcipher." @@ -1484,17 +1492,17 @@ msgstr "У ядрі не передбачено підтримки вирівн msgid "Kernel refuses to activate insecure recalculate option (see legacy activation options to override)." msgstr "Ядром відмовлено у активації небезпечного параметра повторного обчислення (див. застарілі параметри активації, щоб скористатися обчисленням попри це)." -#: lib/luks2/luks2_disk_metadata.c:391 lib/luks2/luks2_json_metadata.c:1197 +#: lib/luks2/luks2_disk_metadata.c:392 lib/luks2/luks2_json_metadata.c:1197 #: lib/luks2/luks2_json_metadata.c:1520 #, c-format msgid "Failed to acquire write lock on device %s." msgstr "Не вдалося отримати блокування запису на пристрої %s." -#: lib/luks2/luks2_disk_metadata.c:400 +#: lib/luks2/luks2_disk_metadata.c:401 msgid "Detected attempt for concurrent LUKS2 metadata update. Aborting operation." msgstr "Виявлено спробу конкурентного оновлення метаданих LUKS2. Перериваємо виконання дії." -#: lib/luks2/luks2_disk_metadata.c:699 lib/luks2/luks2_disk_metadata.c:720 +#: lib/luks2/luks2_disk_metadata.c:710 lib/luks2/luks2_disk_metadata.c:731 msgid "" "Device contains ambiguous signatures, cannot auto-recover LUKS2.\n" "Please run \"cryptsetup repair\" for recovery." @@ -1579,16 +1587,16 @@ msgstr "" msgid "Ignored unknown flag %s." msgstr "Проігноровано невідомий прапорець %s." -#: lib/luks2/luks2_json_metadata.c:2525 lib/luks2/luks2_reencrypt.c:2090 +#: lib/luks2/luks2_json_metadata.c:2525 lib/luks2/luks2_reencrypt.c:2105 #, c-format msgid "Missing key for dm-crypt segment %u" msgstr "Не вистачає ключа для сегмента dm-crypt %u" -#: lib/luks2/luks2_json_metadata.c:2537 lib/luks2/luks2_reencrypt.c:2104 +#: lib/luks2/luks2_json_metadata.c:2537 lib/luks2/luks2_reencrypt.c:2119 msgid "Failed to set dm-crypt segment." msgstr "Не вдалося встановити сегмент dm-crypt." -#: lib/luks2/luks2_json_metadata.c:2543 lib/luks2/luks2_reencrypt.c:2110 +#: lib/luks2/luks2_json_metadata.c:2543 lib/luks2/luks2_reencrypt.c:2125 msgid "Failed to set dm-linear segment." msgstr "Не вдалося встановити сегмент dm-linear." @@ -1625,7 +1633,7 @@ msgstr "Базовий пристрій dm-integrity із неочікувани msgid "Reencryption in-progress. Cannot deactivate device." msgstr "Виконуємо повторне шифрування. Не можна деактивувати пристрій." -#: lib/luks2/luks2_json_metadata.c:2870 lib/luks2/luks2_reencrypt.c:4159 +#: lib/luks2/luks2_json_metadata.c:2870 lib/luks2/luks2_reencrypt.c:4174 #, c-format msgid "Failed to replace suspended device %s with dm-error target." msgstr "Не вдалося замінити пристрій %s, роботу якого призупинено, ціллю dm-error." @@ -1669,7 +1677,7 @@ msgid "Cannot use %s-%s cipher for keyslot encryption." msgstr "Не можна використовувати шифрування %s-%s для слотів ключів." #: lib/luks2/luks2_keyslot_luks2.c:285 lib/luks2/luks2_keyslot_luks2.c:404 -#: lib/luks2/luks2_keyslot_reenc.c:447 lib/luks2/luks2_reencrypt.c:2714 +#: lib/luks2/luks2_keyslot_reenc.c:447 lib/luks2/luks2_reencrypt.c:2729 #, c-format msgid "Hash algorithm %s is not available." msgstr "Алгоритм хешування %s є недоступним." @@ -1704,7 +1712,7 @@ msgstr "Не вдалося перевірити стан пристрою з uu msgid "Unable to convert header with LUKSMETA additional metadata." msgstr "Не вдалося перетворити заголовок з додатковими метаданими LUKSMETA." -#: lib/luks2/luks2_luks1_convert.c:602 lib/luks2/luks2_reencrypt.c:3795 +#: lib/luks2/luks2_luks1_convert.c:602 lib/luks2/luks2_reencrypt.c:3810 #, c-format msgid "Unable to use cipher specification %s-%s for LUKS2." msgstr "Не вдалося використати специфікацію шифрування %s-%s для LUKS2." @@ -1762,252 +1770,252 @@ msgstr "Не вдалося перетворити до формату LUKS1 — msgid "Cannot convert to LUKS1 format - keyslot %u is not LUKS1 compatible." msgstr "не вдалося перетворити до формату LUKS1 — слот ключів %u є несумісним з LUKS1." -#: lib/luks2/luks2_reencrypt.c:1181 +#: lib/luks2/luks2_reencrypt.c:1196 #, c-format msgid "Hotzone size must be multiple of calculated zone alignment (%zu bytes)." msgstr "Розмір «гарячої» ділянки має бути кратним до обчисленого вирівнювання ділянки (%zu байтів)." -#: lib/luks2/luks2_reencrypt.c:1186 +#: lib/luks2/luks2_reencrypt.c:1201 #, c-format msgid "Device size must be multiple of calculated zone alignment (%zu bytes)." msgstr "Розмір пристрою має бути кратним до обчисленого вирівнювання ділянки (%zu байтів)." -#: lib/luks2/luks2_reencrypt.c:1393 lib/luks2/luks2_reencrypt.c:1580 -#: lib/luks2/luks2_reencrypt.c:1663 lib/luks2/luks2_reencrypt.c:1705 -#: lib/luks2/luks2_reencrypt.c:3954 +#: lib/luks2/luks2_reencrypt.c:1408 lib/luks2/luks2_reencrypt.c:1595 +#: lib/luks2/luks2_reencrypt.c:1678 lib/luks2/luks2_reencrypt.c:1720 +#: lib/luks2/luks2_reencrypt.c:3969 msgid "Failed to initialize old segment storage wrapper." msgstr "Не вдалося ініціалізувати обгортку старого сховища сегментів." -#: lib/luks2/luks2_reencrypt.c:1407 lib/luks2/luks2_reencrypt.c:1558 +#: lib/luks2/luks2_reencrypt.c:1422 lib/luks2/luks2_reencrypt.c:1573 msgid "Failed to initialize new segment storage wrapper." msgstr "Не вдалося ініціалізувати обгортку нового сховища сегментів." -#: lib/luks2/luks2_reencrypt.c:1534 lib/luks2/luks2_reencrypt.c:3966 +#: lib/luks2/luks2_reencrypt.c:1549 lib/luks2/luks2_reencrypt.c:3981 msgid "Failed to initialize hotzone protection." msgstr "Не вдалося ініціалізувати захист «гарячої» зони" -#: lib/luks2/luks2_reencrypt.c:1607 +#: lib/luks2/luks2_reencrypt.c:1622 msgid "Failed to read checksums for current hotzone." msgstr "Не вдалося прочитати контрольні суми для поточної «гарячої» ділянки." -#: lib/luks2/luks2_reencrypt.c:1614 lib/luks2/luks2_reencrypt.c:3980 +#: lib/luks2/luks2_reencrypt.c:1629 lib/luks2/luks2_reencrypt.c:3995 #, c-format msgid "Failed to read hotzone area starting at %<PRIu64>." msgstr "Не вдалося прочитати «гарячу» ділянку, починаючи з %<PRIu64>." -#: lib/luks2/luks2_reencrypt.c:1633 +#: lib/luks2/luks2_reencrypt.c:1648 #, c-format msgid "Failed to decrypt sector %zu." msgstr "Не вдалося розшифрувати сектор %zu." -#: lib/luks2/luks2_reencrypt.c:1639 +#: lib/luks2/luks2_reencrypt.c:1654 #, c-format msgid "Failed to recover sector %zu." msgstr "Не вдалося відновити сектор %zu." -#: lib/luks2/luks2_reencrypt.c:2203 +#: lib/luks2/luks2_reencrypt.c:2218 #, c-format msgid "Source and target device sizes don't match. Source %<PRIu64>, target: %<PRIu64>." msgstr "Розміри пристроїв джерела та призначення не збігаються. Розмір джерела — %<PRIu64>, розмір призначення — %<PRIu64>." -#: lib/luks2/luks2_reencrypt.c:2301 +#: lib/luks2/luks2_reencrypt.c:2316 #, c-format msgid "Failed to activate hotzone device %s." msgstr "Не вдалося задіяти пристрій «гарячої» ділянки %s." -#: lib/luks2/luks2_reencrypt.c:2318 +#: lib/luks2/luks2_reencrypt.c:2333 #, c-format msgid "Failed to activate overlay device %s with actual origin table." msgstr "Не вдалося задіяти пристрій-накладку %s зі справжньою таблицею походження." -#: lib/luks2/luks2_reencrypt.c:2325 +#: lib/luks2/luks2_reencrypt.c:2340 #, c-format msgid "Failed to load new mapping for device %s." msgstr "Не вдалося завантажити нову прив'язку для пристрою %s." -#: lib/luks2/luks2_reencrypt.c:2396 +#: lib/luks2/luks2_reencrypt.c:2411 msgid "Failed to refresh reencryption devices stack." msgstr "Не вдалося освіжити тек пристрої для повторного шифрування." -#: lib/luks2/luks2_reencrypt.c:2596 +#: lib/luks2/luks2_reencrypt.c:2611 msgid "Failed to set new keyslots area size." msgstr "Не вдалося встановити розмір області нових слотів ключів." -#: lib/luks2/luks2_reencrypt.c:2732 +#: lib/luks2/luks2_reencrypt.c:2747 #, c-format msgid "Data shift value is not aligned to encryption sector size (%<PRIu32> bytes)." msgstr "Значення зміщення даних не вирівняно до розміру сектора для шифрування (%<PRIu32> байтів)." -#: lib/luks2/luks2_reencrypt.c:2769 src/utils_reencrypt.c:189 +#: lib/luks2/luks2_reencrypt.c:2784 src/utils_reencrypt.c:189 #, c-format msgid "Unsupported resilience mode %s" msgstr "Непідтримуваний режим стійкості %s" -#: lib/luks2/luks2_reencrypt.c:2806 +#: lib/luks2/luks2_reencrypt.c:2821 msgid "Moved segment size can not be greater than data shift value." msgstr "Розмір пересунутого сегмента не може перевищувати значення зсуву даних." -#: lib/luks2/luks2_reencrypt.c:2848 +#: lib/luks2/luks2_reencrypt.c:2863 msgid "Invalid reencryption resilience parameters." msgstr "Некоректні параметри стійкості для повторного шифрування." -#: lib/luks2/luks2_reencrypt.c:2870 +#: lib/luks2/luks2_reencrypt.c:2885 #, c-format msgid "Moved segment too large. Requested size %<PRIu64>, available space for: %<PRIu64>." msgstr "Пересунутий сегмент є надто великим. Потрібний розмір %<PRIu64>, доступне місце: %<PRIu64>." -#: lib/luks2/luks2_reencrypt.c:2957 +#: lib/luks2/luks2_reencrypt.c:2972 msgid "Failed to clear table." msgstr "Не вдалося очистити таблицю." -#: lib/luks2/luks2_reencrypt.c:3043 +#: lib/luks2/luks2_reencrypt.c:3058 msgid "Reduced data size is larger than real device size." msgstr "Зменшений розмір даних перевищує справжній розмір пристрою." -#: lib/luks2/luks2_reencrypt.c:3050 +#: lib/luks2/luks2_reencrypt.c:3065 #, c-format msgid "Data device is not aligned to encryption sector size (%<PRIu32> bytes)." msgstr "Пристрій зберігання даних не вирівняно до розміру сектора для шифрування (%<PRIu32> байтів)." -#: lib/luks2/luks2_reencrypt.c:3084 +#: lib/luks2/luks2_reencrypt.c:3099 #, c-format msgid "Data shift (%<PRIu64> sectors) is less than future data offset (%<PRIu64> sectors)." msgstr "Зміщення даних (%<PRIu64> секторів) є меншим за майбутній зсув даних (%<PRIu64> секторів)." -#: lib/luks2/luks2_reencrypt.c:3091 lib/luks2/luks2_reencrypt.c:3589 -#: lib/luks2/luks2_reencrypt.c:3610 +#: lib/luks2/luks2_reencrypt.c:3106 lib/luks2/luks2_reencrypt.c:3604 +#: lib/luks2/luks2_reencrypt.c:3625 #, c-format msgid "Failed to open %s in exclusive mode (already mapped or mounted)." msgstr "Не вдалося відкрити %s в ексклюзивному режимі (вже пов'язано або змонтовано)." -#: lib/luks2/luks2_reencrypt.c:3280 +#: lib/luks2/luks2_reencrypt.c:3295 msgid "Device not marked for LUKS2 reencryption." msgstr "Пристрій не позначено для повторного шифрування LUKS2." -#: lib/luks2/luks2_reencrypt.c:3297 lib/luks2/luks2_reencrypt.c:4271 +#: lib/luks2/luks2_reencrypt.c:3312 lib/luks2/luks2_reencrypt.c:4286 msgid "Failed to load LUKS2 reencryption context." msgstr "Не вдалося завантажити контекст повторного шифрування LUKS2." -#: lib/luks2/luks2_reencrypt.c:3387 +#: lib/luks2/luks2_reencrypt.c:3402 msgid "Failed to get reencryption state." msgstr "Не вдалося отримати стан повторного шифрування." -#: lib/luks2/luks2_reencrypt.c:3391 lib/luks2/luks2_reencrypt.c:3705 +#: lib/luks2/luks2_reencrypt.c:3406 lib/luks2/luks2_reencrypt.c:3720 msgid "Device is not in reencryption." msgstr "Пристрій не перебуває у повторному шифруванні." -#: lib/luks2/luks2_reencrypt.c:3398 lib/luks2/luks2_reencrypt.c:3712 +#: lib/luks2/luks2_reencrypt.c:3413 lib/luks2/luks2_reencrypt.c:3727 msgid "Reencryption process is already running." msgstr "Процес повторного шифрування вже виконується." -#: lib/luks2/luks2_reencrypt.c:3400 lib/luks2/luks2_reencrypt.c:3714 +#: lib/luks2/luks2_reencrypt.c:3415 lib/luks2/luks2_reencrypt.c:3729 msgid "Failed to acquire reencryption lock." msgstr "Не вдалося створити блокування для повторного шифрування." -#: lib/luks2/luks2_reencrypt.c:3418 +#: lib/luks2/luks2_reencrypt.c:3433 msgid "Cannot proceed with reencryption. Run reencryption recovery first." msgstr "Продовження повторного шифрування неможливе. Спочатку слід виконати відновлення повторного шифрування." -#: lib/luks2/luks2_reencrypt.c:3553 +#: lib/luks2/luks2_reencrypt.c:3568 msgid "Active device size and requested reencryption size don't match." msgstr "Не збігаються розмір активного пристрою і запитаний розмір повторного шифрування." -#: lib/luks2/luks2_reencrypt.c:3567 +#: lib/luks2/luks2_reencrypt.c:3582 msgid "Illegal device size requested in reencryption parameters." msgstr "У параметрах повторного шифрування вказано некоректний розмір пристрою." -#: lib/luks2/luks2_reencrypt.c:3644 +#: lib/luks2/luks2_reencrypt.c:3659 msgid "Reencryption in-progress. Cannot perform recovery." msgstr "Виконується повторне шифрування. Неможливо виконати відновлення." -#: lib/luks2/luks2_reencrypt.c:3812 +#: lib/luks2/luks2_reencrypt.c:3827 msgid "LUKS2 reencryption already initialized in metadata." msgstr "Повторне шифрування LUKS2 вже ініційовано у метаданих." -#: lib/luks2/luks2_reencrypt.c:3819 +#: lib/luks2/luks2_reencrypt.c:3834 msgid "Failed to initialize LUKS2 reencryption in metadata." msgstr "Не вдалося ініціалізувати повторне шифрування LUKS2 лише у метаданих." -#: lib/luks2/luks2_reencrypt.c:3872 lib/luks2/luks2_reencrypt.c:3907 +#: lib/luks2/luks2_reencrypt.c:3887 lib/luks2/luks2_reencrypt.c:3922 msgid "Reencryption is not supported for DAX (persistent memory) devices." msgstr "Для пристроїв DAX (сталої пам'яті) не передбачено підтримки повторного шифрування." -#: lib/luks2/luks2_reencrypt.c:3879 +#: lib/luks2/luks2_reencrypt.c:3894 msgid "Failed to read passphrase from keyring." msgstr "Не вдалося прочитати пароль із ключа зі сховища ключів." -#: lib/luks2/luks2_reencrypt.c:3936 +#: lib/luks2/luks2_reencrypt.c:3951 msgid "Failed to set device segments for next reencryption hotzone." msgstr "Не вдалося встановити сегменти пристрою для наступної «гарячої» ділянки повторного шифрування." -#: lib/luks2/luks2_reencrypt.c:3988 +#: lib/luks2/luks2_reencrypt.c:4003 msgid "Failed to write reencryption resilience metadata." msgstr "Не вдалося записати метадані стійкості для повторного шифрування." -#: lib/luks2/luks2_reencrypt.c:3995 +#: lib/luks2/luks2_reencrypt.c:4010 msgid "Decryption failed." msgstr "Помилка розшифрування." -#: lib/luks2/luks2_reencrypt.c:4000 +#: lib/luks2/luks2_reencrypt.c:4015 #, c-format msgid "Failed to write hotzone area starting at %<PRIu64>." msgstr "Не вдалося записати «гарячу» ділянку, починаючи з %<PRIu64>." -#: lib/luks2/luks2_reencrypt.c:4005 +#: lib/luks2/luks2_reencrypt.c:4020 msgid "Failed to sync data." msgstr "Не вдалося синхронізувати дані." -#: lib/luks2/luks2_reencrypt.c:4013 +#: lib/luks2/luks2_reencrypt.c:4028 msgid "Failed to update metadata after current reencryption hotzone completed." msgstr "Не вдалося оновити метадані після завершення обробки поточної «гарячої» зони повторного шифрування." -#: lib/luks2/luks2_reencrypt.c:4102 +#: lib/luks2/luks2_reencrypt.c:4117 msgid "Failed to write LUKS2 metadata." msgstr "Не вдалося записати метадані LUKS2." -#: lib/luks2/luks2_reencrypt.c:4125 +#: lib/luks2/luks2_reencrypt.c:4140 msgid "Failed to wipe unused data device area." msgstr "Не вдалося витерти область невикористаних даних пристрою." -#: lib/luks2/luks2_reencrypt.c:4131 +#: lib/luks2/luks2_reencrypt.c:4146 #, c-format msgid "Failed to remove unused (unbound) keyslot %d." msgstr "Не вдалося вилучити невикористаний (непов'язаний) слот ключа %d." -#: lib/luks2/luks2_reencrypt.c:4141 +#: lib/luks2/luks2_reencrypt.c:4156 msgid "Failed to remove reencryption keyslot." msgstr "Не вдалося вилучити слот ключа для повторного шифрування." -#: lib/luks2/luks2_reencrypt.c:4151 +#: lib/luks2/luks2_reencrypt.c:4166 #, c-format msgid "Fatal error while reencrypting chunk starting at %<PRIu64>, %<PRIu64> sectors long." msgstr "Критична помилка під час повторного шифрування фрагмента, починаючи з %<PRIu64>, довжиною у %<PRIu64> секторів." -#: lib/luks2/luks2_reencrypt.c:4155 +#: lib/luks2/luks2_reencrypt.c:4170 msgid "Online reencryption failed." msgstr "Не вдалося виконати інтерактивне повторне шифрування." -#: lib/luks2/luks2_reencrypt.c:4160 +#: lib/luks2/luks2_reencrypt.c:4175 msgid "Do not resume the device unless replaced with error target manually." msgstr "Не відновлюйте пристрій, якщо не заміните вручну пристрій призначення для помилок." -#: lib/luks2/luks2_reencrypt.c:4212 +#: lib/luks2/luks2_reencrypt.c:4227 msgid "Cannot proceed with reencryption. Unexpected reencryption status." msgstr "Не вдалося виконати повторне шифрування. Неочікуваний стан засобу повторного шифрування." -#: lib/luks2/luks2_reencrypt.c:4218 +#: lib/luks2/luks2_reencrypt.c:4233 msgid "Missing or invalid reencrypt context." msgstr "Не вказано контекст повторного шифрування або вказано некоректний контекст." -#: lib/luks2/luks2_reencrypt.c:4225 +#: lib/luks2/luks2_reencrypt.c:4240 msgid "Failed to initialize reencryption device stack." msgstr "Не вдалося ініціалізувати стос пристроїв повторного шифрування." -#: lib/luks2/luks2_reencrypt.c:4247 lib/luks2/luks2_reencrypt.c:4284 +#: lib/luks2/luks2_reencrypt.c:4262 lib/luks2/luks2_reencrypt.c:4299 msgid "Failed to update reencryption context." msgstr "Не вдалося оновити контекст повторного шифрування." -#: lib/luks2/luks2_reencrypt_digest.c:405 +#: lib/luks2/luks2_reencrypt_digest.c:421 msgid "Reencryption metadata is invalid." msgstr "Метадані повторного шифрування є некоректними." @@ -2031,101 +2039,101 @@ msgstr "Вимкнено діапазон блокування %d OPAL." msgid "Unexpected OPAL range %d lock state." msgstr "Неочікуваний стан блокування діапазону OPAL %d." -#: src/cryptsetup.c:85 +#: src/cryptsetup.c:93 msgid "Keyslot encryption parameters can be set only for LUKS2 device." msgstr "Параметри шифрування слоту ключів можна встановлювати лише для пристроїв LUKS2." -#: src/cryptsetup.c:128 src/cryptsetup.c:2145 +#: src/cryptsetup.c:136 src/cryptsetup.c:2242 #, c-format msgid "Enter token PIN: " msgstr "Введіть пінкод жетона: " -#: src/cryptsetup.c:130 src/cryptsetup.c:2147 +#: src/cryptsetup.c:138 src/cryptsetup.c:2244 #, c-format msgid "Enter token %d PIN: " msgstr "Введіть пінкод жетона %d: " -#: src/cryptsetup.c:188 src/cryptsetup.c:1174 src/cryptsetup.c:1515 -#: src/utils_reencrypt.c:1137 src/utils_reencrypt_luks1.c:517 +#: src/cryptsetup.c:196 src/cryptsetup.c:1182 src/cryptsetup.c:1523 +#: src/utils_reencrypt.c:1146 src/utils_reencrypt_luks1.c:517 #: src/utils_reencrypt_luks1.c:580 msgid "No known cipher specification pattern detected." msgstr "Не виявлено жодного відомого зразка специфікації шифрування." -#: src/cryptsetup.c:198 +#: src/cryptsetup.c:206 #, c-format msgid "WARNING: Using default options for cipher (%s-%s, key size %u bits) that could be incompatible with older versions." msgstr "УВАГА: використовуємо типові параметри шифрування (%s-%s, розмір ключа — %u бітів), що може бути несумісним із застарілими версіями." -#: src/cryptsetup.c:203 +#: src/cryptsetup.c:211 #, c-format msgid "WARNING: Using default options for hash (%s) that could be incompatible with older versions." msgstr "УВАГА: використовуємо типові параметри хешування (%s), що може бути несумісним із застарілими версіями." -#: src/cryptsetup.c:207 +#: src/cryptsetup.c:215 msgid "For plain mode, always use options --cipher, --key-size and if no keyfile is used, then also --hash." msgstr "Для простого режиму завжди використовувати параметри --cipher, --key-size і, якщо не використано файл ключа, також --hash." -#: src/cryptsetup.c:213 +#: src/cryptsetup.c:221 msgid "WARNING: The --hash parameter is being ignored in plain mode with keyfile specified.\n" msgstr "Попередження: параметр --hash у простому режимі із вказаним файлом ключа ігнорується.\n" -#: src/cryptsetup.c:221 +#: src/cryptsetup.c:229 msgid "WARNING: The --keyfile-size option is being ignored, the read size is the same as the encryption key size.\n" msgstr "Попередження: параметр --keyfile-size проігноровано, розмір прочитаних даних збігається із розміром ключа шифрування.\n" -#: src/cryptsetup.c:258 src/cryptsetup.c:1360 src/cryptsetup.c:1558 -#: src/integritysetup.c:197 src/utils_reencrypt.c:1346 +#: src/cryptsetup.c:266 src/cryptsetup.c:1368 src/cryptsetup.c:1566 +#: src/integritysetup.c:197 src/utils_reencrypt.c:1355 #, c-format msgid "Blkid scan failed for %s." msgstr "Помилка сканування Blkid для %s." -#: src/cryptsetup.c:264 +#: src/cryptsetup.c:272 #, c-format msgid "Detected device signature(s) on %s. Proceeding further may damage existing data." msgstr "На %s виявлено підписи пристроїв. Подальша обробка може пошкодити наявні дані." -#: src/cryptsetup.c:270 src/cryptsetup.c:1248 src/cryptsetup.c:1296 -#: src/cryptsetup.c:1367 src/cryptsetup.c:1492 src/cryptsetup.c:1570 -#: src/cryptsetup.c:2525 src/cryptsetup.c:2952 src/integritysetup.c:187 +#: src/cryptsetup.c:278 src/cryptsetup.c:1256 src/cryptsetup.c:1304 +#: src/cryptsetup.c:1375 src/cryptsetup.c:1500 src/cryptsetup.c:1578 +#: src/cryptsetup.c:2622 src/cryptsetup.c:3049 src/integritysetup.c:187 #: src/utils_reencrypt.c:138 src/utils_reencrypt.c:314 -#: src/utils_reencrypt.c:764 +#: src/utils_reencrypt.c:772 msgid "Operation aborted.\n" msgstr "Дію перервано.\n" -#: src/cryptsetup.c:343 +#: src/cryptsetup.c:351 msgid "Option --key-file is required." msgstr "Слід вказати параметр --key-file." -#: src/cryptsetup.c:394 +#: src/cryptsetup.c:402 msgid "Enter VeraCrypt PIM: " msgstr "Введіть PIM VeraCrypt: " -#: src/cryptsetup.c:403 +#: src/cryptsetup.c:411 msgid "Invalid PIM value: parse error." msgstr "Некоректне значення PIM: помилка обробки." -#: src/cryptsetup.c:406 +#: src/cryptsetup.c:414 msgid "Invalid PIM value: 0." msgstr "Некоректне значення PIM: 0." -#: src/cryptsetup.c:409 +#: src/cryptsetup.c:417 msgid "Invalid PIM value: outside of range." msgstr "Некоректне значення PIM: поза межами діапазону." -#: src/cryptsetup.c:432 +#: src/cryptsetup.c:440 msgid "No device header detected with this passphrase." msgstr "Для цього пароля не виявлено заголовка пристрою." -#: src/cryptsetup.c:505 src/cryptsetup.c:681 +#: src/cryptsetup.c:513 src/cryptsetup.c:689 #, c-format msgid "Device %s is not a valid BITLK device." msgstr "Пристрій %s не є коректним пристроєм BITLK." -#: src/cryptsetup.c:513 +#: src/cryptsetup.c:521 msgid "Cannot determine volume key size for BITLK, please use --key-size option." msgstr "Неможливо визначити розмір ключа тому для BITLK. Будь ласка, скористайтеся параметром --key-size." -#: src/cryptsetup.c:555 +#: src/cryptsetup.c:563 msgid "" "Header dump with volume key is sensitive information\n" "which allows access to encrypted partition without passphrase.\n" @@ -2136,7 +2144,7 @@ msgstr "" "без пароля. Цей дамп слід зберігати у зашифрованому форматі\n" "у безпечному місці." -#: src/cryptsetup.c:622 src/cryptsetup.c:703 src/cryptsetup.c:2550 +#: src/cryptsetup.c:630 src/cryptsetup.c:711 src/cryptsetup.c:2647 msgid "" "The header dump with volume key is sensitive information\n" "that allows access to encrypted partition without a passphrase.\n" @@ -2147,84 +2155,84 @@ msgstr "" "без пароля. Цей дамп слід зберігати у зашифрованому форматі\n" "у безпечному місці." -#: src/cryptsetup.c:758 src/cryptsetup.c:788 +#: src/cryptsetup.c:766 src/cryptsetup.c:796 #, c-format msgid "Device %s is not a valid FVAULT2 device." msgstr "Пристрій %s не є коректним пристроєм FVAULT2." -#: src/cryptsetup.c:796 +#: src/cryptsetup.c:804 msgid "Cannot determine volume key size for FVAULT2, please use --key-size option." msgstr "Неможливо визначити розмір ключа тому для FVAULT2. Будь ласка, скористайтеся параметром --key-size." -#: src/cryptsetup.c:850 src/veritysetup.c:323 src/integritysetup.c:409 +#: src/cryptsetup.c:858 src/veritysetup.c:323 src/integritysetup.c:409 #, c-format msgid "Device %s is still active and scheduled for deferred removal.\n" msgstr "Пристрій %s усе ще є активним, його заплановано для відкладеного вилучення.\n" -#: src/cryptsetup.c:884 src/cryptsetup.c:1824 src/cryptsetup.c:2080 -#: src/cryptsetup.c:2234 src/cryptsetup.c:2681 src/cryptsetup.c:2763 -#: src/cryptsetup.c:3290 +#: src/cryptsetup.c:892 src/cryptsetup.c:1903 src/cryptsetup.c:2177 +#: src/cryptsetup.c:2331 src/cryptsetup.c:2778 src/cryptsetup.c:2860 +#: src/cryptsetup.c:3387 #, c-format msgid "Failed to set external tokens path %s." msgstr "Не вдалося встановити шлях до зовнішніх жетонів %s." -#: src/cryptsetup.c:893 +#: src/cryptsetup.c:901 msgid "Resize of active device requires volume key in keyring but --disable-keyring option is set." msgstr "Зміна розмірів активного пристрою потребує наявності ключа тому у сховищі ключів, але вказано параметр --disable-keyring." -#: src/cryptsetup.c:1053 +#: src/cryptsetup.c:1061 msgid "Benchmark interrupted." msgstr "Тестування перервано." -#: src/cryptsetup.c:1074 +#: src/cryptsetup.c:1082 #, c-format msgid "PBKDF2-%-9s N/A\n" msgstr "PBKDF2-%-9s н/д\n" -#: src/cryptsetup.c:1076 +#: src/cryptsetup.c:1084 #, c-format msgid "PBKDF2-%-9s %7u iterations per second for %zu-bit key\n" msgstr "PBKDF2-%-9s %7u ітерацій за секунду для %zu-бітового ключа\n" -#: src/cryptsetup.c:1090 +#: src/cryptsetup.c:1098 #, c-format msgid "%-10s N/A\n" msgstr "%-10s н/д\n" -#: src/cryptsetup.c:1092 +#: src/cryptsetup.c:1100 #, c-format msgid "%-10s %4u iterations, %5u memory, %1u parallel threads (CPUs) for %zu-bit key (requested %u ms time)\n" msgstr "%-10s %4u ітерацій, пам'ять: %5u, %1u паралельних потоків (процесорів) для %zu-бітового ключа (запит на %u мс часу)\n" -#: src/cryptsetup.c:1116 +#: src/cryptsetup.c:1124 msgid "Result of benchmark is not reliable." msgstr "Результат тестування є ненадійним." -#: src/cryptsetup.c:1166 +#: src/cryptsetup.c:1174 msgid "# Tests are approximate using memory only (no storage IO).\n" msgstr "# Наближені значення під час перевірки визначаються лише за допомогою оперативної пам’яті (без запису на диск).\n" #. TRANSLATORS: The string is header of a table and must be exactly (right side) aligned. -#: src/cryptsetup.c:1186 +#: src/cryptsetup.c:1194 #, c-format msgid "#%*s Algorithm | Key | Encryption | Decryption\n" msgstr "№%*s Алгоритм | Ключ | Шифрування | Розшифрування\n" -#: src/cryptsetup.c:1190 +#: src/cryptsetup.c:1198 #, c-format msgid "Cipher %s (with %i bits key) is not available." msgstr "Шифрування %s (розмір ключа — %i бітів) є недоступним." #. TRANSLATORS: The string is header of a table and must be exactly (right side) aligned. -#: src/cryptsetup.c:1209 +#: src/cryptsetup.c:1217 msgid "# Algorithm | Key | Encryption | Decryption\n" msgstr "№ Алгоритм | Ключ | Шифрування | Розшифрування\n" -#: src/cryptsetup.c:1220 +#: src/cryptsetup.c:1228 msgid "N/A" msgstr "н/д" -#: src/cryptsetup.c:1245 +#: src/cryptsetup.c:1253 msgid "" "Unprotected LUKS2 reencryption metadata detected. Please verify the reencryption operation is desirable (see luksDump output)\n" "and continue (upgrade metadata) only if you acknowledge the operation as genuine." @@ -2232,27 +2240,27 @@ msgstr "" "Виявлено незахищені метадані повторного шифрування LUKS2. Будь ласка, перевірте, чи бажаною є дія з повторного шифрування\n" "(див. виведення luksDump), і продовжуйте (оновлення метаданих), лише якщо впевнені, що дія є бажаною." -#: src/cryptsetup.c:1251 +#: src/cryptsetup.c:1259 msgid "Enter passphrase to protect and upgrade reencryption metadata: " msgstr "Вкажіть пароль для захисту і оновлення метаданих повторного шифрування: " -#: src/cryptsetup.c:1295 +#: src/cryptsetup.c:1303 msgid "Really proceed with LUKS2 reencryption recovery?" msgstr "Ви справді хочете продовжити процедуру відновлення повторного шифрування LUKS2?" -#: src/cryptsetup.c:1304 +#: src/cryptsetup.c:1312 msgid "Enter passphrase to verify reencryption metadata digest: " msgstr "Вкажіть пароль для перевірки контрольної суми метаданих повторного шифрування: " -#: src/cryptsetup.c:1306 +#: src/cryptsetup.c:1314 msgid "Enter passphrase for reencryption recovery: " msgstr "Вкажіть пароль для відновлення повторного шифрування: " -#: src/cryptsetup.c:1366 +#: src/cryptsetup.c:1374 msgid "Really try to repair LUKS device header?" msgstr "Спробувати відновити заголовок пристрою LUKS?" -#: src/cryptsetup.c:1390 src/integritysetup.c:89 src/integritysetup.c:247 +#: src/cryptsetup.c:1398 src/integritysetup.c:89 src/integritysetup.c:247 msgid "" "\n" "Wipe interrupted." @@ -2260,7 +2268,7 @@ msgstr "" "\n" "Витирання перервано." -#: src/cryptsetup.c:1395 src/integritysetup.c:94 src/integritysetup.c:284 +#: src/cryptsetup.c:1403 src/integritysetup.c:94 src/integritysetup.c:284 msgid "" "Wiping device to initialize integrity checksum.\n" "You can interrupt this by pressing CTRL+c (rest of not wiped device will contain invalid checksum).\n" @@ -2268,144 +2276,156 @@ msgstr "" "Витираємо пристрій для ініціалізації контрольних сум для цілісності.\n" "Ви можете перервати цей процес натисканням комбінації клавіш CTRL+C (решта невитертого пристрою міститиме некоректну контрольну суму).\n" -#: src/cryptsetup.c:1417 src/integritysetup.c:116 +#: src/cryptsetup.c:1425 src/integritysetup.c:116 #, c-format msgid "Cannot deactivate temporary device %s." msgstr "Не можна скасувати активацію тимчасового пристрою %s." -#: src/cryptsetup.c:1472 +#: src/cryptsetup.c:1480 msgid "Integrity option can be used only for LUKS2 format." msgstr "Параметр цілісності може бути використано лише для формату LUKS2." -#: src/cryptsetup.c:1477 src/cryptsetup.c:1542 +#: src/cryptsetup.c:1485 src/cryptsetup.c:1550 msgid "Unsupported LUKS2 metadata size options." msgstr "Непідтримувані параметри розміру метаданих LUKS2." -#: src/cryptsetup.c:1482 +#: src/cryptsetup.c:1490 msgid "OPAL is supported only for LUKS2 format." msgstr "Підтримку OPAL передбачено лише для формату LUKS2." -#: src/cryptsetup.c:1491 +#: src/cryptsetup.c:1499 msgid "Header file does not exist, do you want to create it?" msgstr "Файла заголовка не існує. Хочете його створити?" -#: src/cryptsetup.c:1499 +#: src/cryptsetup.c:1507 #, c-format msgid "Cannot create header file %s." msgstr "Не вдалося створити файл заголовка %s." -#: src/cryptsetup.c:1522 src/integritysetup.c:144 src/integritysetup.c:152 +#: src/cryptsetup.c:1530 src/integritysetup.c:144 src/integritysetup.c:152 #: src/integritysetup.c:161 src/integritysetup.c:324 src/integritysetup.c:332 #: src/integritysetup.c:342 msgid "No known integrity specification pattern detected." msgstr "Не виявлено жодного відомого зразка специфікації цілісності." -#: src/cryptsetup.c:1535 +#: src/cryptsetup.c:1543 #, c-format msgid "Cannot use %s as on-disk header." msgstr "Не можна використовувати %s як заголовок на диску." -#: src/cryptsetup.c:1564 src/integritysetup.c:181 +#: src/cryptsetup.c:1572 src/integritysetup.c:181 #, c-format msgid "This will overwrite data on %s irrevocably." msgstr "Дані на %s буде перезаписано без можливості відновлення." -#: src/cryptsetup.c:1601 +#: src/cryptsetup.c:1609 msgid "OPAL Admin password cannot be empty." msgstr "Пароль адміністратора OPAL не може бути порожнім." -#: src/cryptsetup.c:1615 src/cryptsetup.c:2097 src/cryptsetup.c:2247 -#: src/cryptsetup.c:2407 src/cryptsetup.c:2473 src/utils_reencrypt_luks1.c:443 +#: src/cryptsetup.c:1623 src/cryptsetup.c:2194 src/cryptsetup.c:2344 +#: src/cryptsetup.c:2504 src/cryptsetup.c:2570 src/utils_reencrypt_luks1.c:443 msgid "Failed to set pbkdf parameters." msgstr "Не вдалося встановити параметри pbkdf." -#: src/cryptsetup.c:1745 +#: src/cryptsetup.c:1755 msgid "Type specification in --link-vk-to-keyring keyring specification is ignored." msgstr "Специфікацію типу у специфікації сховища ключів --link-vk-to-keyring проігноровано." -#: src/cryptsetup.c:1765 +#: src/cryptsetup.c:1820 +msgid "Key types have to be the same for both volume keys." +msgstr "Типи ключів мають бути однаковими для обох ключів тому." + +#: src/cryptsetup.c:1825 +msgid "Both volume keys have to be linked to the same keyring." +msgstr "Обидва ключі томів мають бути пов'язані із одним сховищем ключів." + +#: src/cryptsetup.c:1835 +msgid "You need to supply more key names." +msgstr "Вам слід вказати більше назв ключів." + +#: src/cryptsetup.c:1839 msgid "Invalid --link-vk-to-keyring value." msgstr "Некоректне значення --link-vk-to-keyring." -#: src/cryptsetup.c:1805 +#: src/cryptsetup.c:1884 msgid "Reduced data offset is allowed only for detached LUKS header." msgstr "Зменшений відступ даних можна використовувати лише для від’єднаних заголовків LUKS." -#: src/cryptsetup.c:1812 +#: src/cryptsetup.c:1891 #, c-format msgid "LUKS file container %s is too small for activation, there is no remaining space for data." msgstr "Контейнер файлів LUKS %s є надто малим для активації, на ньому не лишиться місця для даних." -#: src/cryptsetup.c:1839 src/cryptsetup.c:2253 +#: src/cryptsetup.c:1918 src/cryptsetup.c:2350 msgid "Cannot determine volume key size for LUKS without keyslots, please use --key-size option." msgstr "Неможливо визначити розмір ключа тому для LUKS без слотів ключів. Будь ласка, скористайтеся параметром --key-size." -#: src/cryptsetup.c:1890 +#: src/cryptsetup.c:1985 msgid "Device activated but cannot make flags persistent." msgstr "Пристрій задіяно, але не вдалося зробити прапорці сталими." -#: src/cryptsetup.c:1972 src/cryptsetup.c:2040 +#: src/cryptsetup.c:2069 src/cryptsetup.c:2137 #, c-format msgid "Keyslot %d is selected for deletion." msgstr "Слот ключа %d позначено для вилучення." -#: src/cryptsetup.c:1984 src/cryptsetup.c:2044 +#: src/cryptsetup.c:2081 src/cryptsetup.c:2141 msgid "This is the last keyslot. Device will become unusable after purging this key." msgstr "Це останній слот ключа. Пристрій стане непридатним для використання після спорожнення цього ключа." -#: src/cryptsetup.c:1985 +#: src/cryptsetup.c:2082 msgid "Enter any remaining passphrase: " msgstr "Введіть будь-який інший пароль: " -#: src/cryptsetup.c:1986 src/cryptsetup.c:2046 +#: src/cryptsetup.c:2083 src/cryptsetup.c:2143 msgid "Operation aborted, the keyslot was NOT wiped.\n" msgstr "Дію перервано, слот ключів НЕ витерто.\n" -#: src/cryptsetup.c:2022 +#: src/cryptsetup.c:2119 msgid "Enter passphrase to be deleted: " msgstr "Введіть пароль, який слід вилучити: " -#: src/cryptsetup.c:2072 src/cryptsetup.c:2456 src/cryptsetup.c:3114 -#: src/cryptsetup.c:3281 +#: src/cryptsetup.c:2169 src/cryptsetup.c:2553 src/cryptsetup.c:3211 +#: src/cryptsetup.c:3378 #, c-format msgid "Device %s is not a valid LUKS2 device." msgstr "Пристрій %s не є коректним пристроєм LUKS2." -#: src/cryptsetup.c:2111 src/cryptsetup.c:2330 +#: src/cryptsetup.c:2208 src/cryptsetup.c:2427 msgid "Enter new passphrase for key slot: " msgstr "Введіть новий пароль для слота ключа: " -#: src/cryptsetup.c:2213 +#: src/cryptsetup.c:2310 msgid "WARNING: The --key-slot parameter is used for new keyslot number.\n" msgstr "Попередження: параметр --key-slot використано для нового числа слоту ключа.\n" -#: src/cryptsetup.c:2286 src/utils_reencrypt_luks1.c:1149 +#: src/cryptsetup.c:2383 src/utils_reencrypt_luks1.c:1149 #, c-format msgid "Enter any existing passphrase: " msgstr "Введіть будь-який пароль: " -#: src/cryptsetup.c:2411 +#: src/cryptsetup.c:2508 msgid "Enter passphrase to be changed: " msgstr "Введіть пароль, який слід змінити: " -#: src/cryptsetup.c:2427 src/utils_reencrypt_luks1.c:1135 +#: src/cryptsetup.c:2524 src/utils_reencrypt_luks1.c:1135 msgid "Enter new passphrase: " msgstr "Введіть новий пароль: " -#: src/cryptsetup.c:2477 +#: src/cryptsetup.c:2574 msgid "Enter passphrase for keyslot to be converted: " msgstr "Вкажіть пароль для слоту ключа, який буде перетворено: " -#: src/cryptsetup.c:2501 +#: src/cryptsetup.c:2598 msgid "Only one device argument for isLuks operation is supported." msgstr "У команді isLuks можна використовувати лише один аргумент назви пристрою." -#: src/cryptsetup.c:2609 +#: src/cryptsetup.c:2706 #, c-format msgid "Keyslot %d does not contain unbound key." msgstr "Слот ключа %d не містить непов'язаного ключа." -#: src/cryptsetup.c:2614 +#: src/cryptsetup.c:2711 msgid "" "The header dump with unbound key is sensitive information.\n" "This dump should be stored encrypted in a safe place." @@ -2413,52 +2433,52 @@ msgstr "" "Дамп заголовка з непов'язаним ключем є конфіденційними даними.\n" "Цей дамп слід зберігати у зашифрованому форматі у безпечному місці." -#: src/cryptsetup.c:2709 src/cryptsetup.c:2746 +#: src/cryptsetup.c:2806 src/cryptsetup.c:2843 #, c-format msgid "%s is not active %s device name." msgstr "%s не є назвою активного пристрою %s." -#: src/cryptsetup.c:2741 +#: src/cryptsetup.c:2838 #, c-format msgid "%s is not active LUKS device name or header is missing." msgstr "%s не є назвою активного пристрою LUKS або пропущено заголовок." -#: src/cryptsetup.c:2819 src/cryptsetup.c:2838 +#: src/cryptsetup.c:2916 src/cryptsetup.c:2935 msgid "Option --header-backup-file is required." msgstr "Слід вказати параметр --header-backup-file." -#: src/cryptsetup.c:2869 +#: src/cryptsetup.c:2966 #, c-format msgid "%s is not cryptsetup managed device." msgstr "%s не є керованим cryptsetup пристроєм." -#: src/cryptsetup.c:2880 +#: src/cryptsetup.c:2977 #, c-format msgid "Refresh is not supported for device type %s" msgstr "Підтримки дії з оновлення для пристрою типу %s не передбачено." -#: src/cryptsetup.c:2930 +#: src/cryptsetup.c:3027 #, c-format msgid "Unrecognized metadata device type %s." msgstr "Нерозпізнаний тип пристрою метаданих, %s." -#: src/cryptsetup.c:2932 +#: src/cryptsetup.c:3029 msgid "Command requires device and mapped name as arguments." msgstr "Аргументами команди мають бути назва пристрою та призначена до нього назва." -#: src/cryptsetup.c:2942 +#: src/cryptsetup.c:3039 msgid "Enter OPAL PSID: " msgstr "Введіть PSID OPAL: " -#: src/cryptsetup.c:2942 +#: src/cryptsetup.c:3039 msgid "Enter OPAL Admin password: " msgstr "Введіть пароль адміністратора OPAL: " -#: src/cryptsetup.c:2951 +#: src/cryptsetup.c:3048 msgid "WARNING: WHOLE disk will be factory reset and all data will be lost! Continue?" msgstr "УВАГА: УВЕСЬ диск буде повернуто до початкових параметрів, а усі дані на ньому буде втрачено! Виконати дію?" -#: src/cryptsetup.c:2994 +#: src/cryptsetup.c:3091 #, c-format msgid "" "This operation will erase all keyslots on device %s.\n" @@ -2467,351 +2487,351 @@ msgstr "" "У результаті виконання цієї операції буде витерто усі слоти ключів на пристрої %s.\n" "Після виконання цієї дії пристроєм не можна буде скористатися." -#: src/cryptsetup.c:3001 +#: src/cryptsetup.c:3098 msgid "Operation aborted, keyslots were NOT wiped.\n" msgstr "Дію перервано, слоти ключів НЕ витерто.\n" -#: src/cryptsetup.c:3040 +#: src/cryptsetup.c:3137 msgid "Invalid LUKS type, only luks1 and luks2 are supported." msgstr "Некоректний тип LUKS. Передбачено підтримку лише luks1 і luks2." -#: src/cryptsetup.c:3056 +#: src/cryptsetup.c:3153 #, c-format msgid "Device is already %s type." msgstr "Пристрій вже належить до типу %s." -#: src/cryptsetup.c:3063 +#: src/cryptsetup.c:3160 #, c-format msgid "This operation will convert %s to %s format.\n" msgstr "Ця дія перетворить %s до формату %s.\n" -#: src/cryptsetup.c:3066 +#: src/cryptsetup.c:3163 msgid "Operation aborted, device was NOT converted.\n" msgstr "Дію перервано, дані пристрою НЕ перетворено.\n" -#: src/cryptsetup.c:3106 +#: src/cryptsetup.c:3203 msgid "Option --priority, --label or --subsystem is missing." msgstr "Пропущено параметр --priority, --label або --subsystem." -#: src/cryptsetup.c:3140 src/cryptsetup.c:3180 src/cryptsetup.c:3200 +#: src/cryptsetup.c:3237 src/cryptsetup.c:3277 src/cryptsetup.c:3297 #, c-format msgid "Token %d is invalid." msgstr "Жетон %d є некоректним." -#: src/cryptsetup.c:3143 src/cryptsetup.c:3203 +#: src/cryptsetup.c:3240 src/cryptsetup.c:3300 #, c-format msgid "Token %d in use." msgstr "Жетон %d використовується." -#: src/cryptsetup.c:3155 +#: src/cryptsetup.c:3252 #, c-format msgid "Failed to add luks2-keyring token %d." msgstr "Не вдалося додати жетон %d зі сховища ключів luks2." -#: src/cryptsetup.c:3166 src/cryptsetup.c:3229 +#: src/cryptsetup.c:3263 src/cryptsetup.c:3326 #, c-format msgid "Failed to assign token %d to keyslot %d." msgstr "Не вдалося прив'язати жетон %d до слоту ключа %d." -#: src/cryptsetup.c:3183 +#: src/cryptsetup.c:3280 #, c-format msgid "Token %d is not in use." msgstr "Жетон %d не використовується." -#: src/cryptsetup.c:3220 +#: src/cryptsetup.c:3317 msgid "Failed to import token from file." msgstr "Не вдалося імпортувати жетон з файла." -#: src/cryptsetup.c:3245 +#: src/cryptsetup.c:3342 #, c-format msgid "Failed to get token %d for export." msgstr "Не вдалося отримати жетон %d для експортування." -#: src/cryptsetup.c:3258 +#: src/cryptsetup.c:3355 #, c-format msgid "Token %d is not assigned to keyslot %d." msgstr "Жетон %d не пов'язано зі слотом ключа %d." -#: src/cryptsetup.c:3260 src/cryptsetup.c:3267 +#: src/cryptsetup.c:3357 src/cryptsetup.c:3364 #, c-format msgid "Failed to unassign token %d from keyslot %d." msgstr "Не вдалося відв'язати жетон %d від слоту ключа %d." -#: src/cryptsetup.c:3326 +#: src/cryptsetup.c:3423 msgid "Option --tcrypt-hidden, --tcrypt-system or --tcrypt-backup is supported only for TCRYPT device." msgstr "Підтримку параметрів --tcrypt-hidden, --tcrypt-system і --tcrypt-backup передбачено лише для пристроїв TCRYPT." -#: src/cryptsetup.c:3329 +#: src/cryptsetup.c:3426 msgid "Option --veracrypt or --disable-veracrypt is supported only for TCRYPT device type." msgstr "Підтримку параметра --veracrypt або --disable-veracrypt передбачено лише для пристроїв TCRYPT." -#: src/cryptsetup.c:3332 +#: src/cryptsetup.c:3429 msgid "Option --veracrypt-pim is supported only for VeraCrypt compatible devices." msgstr "Параметр --veracrypt-pim можна використовувати лише для сумісних із VeraCrypt пристроїв." -#: src/cryptsetup.c:3336 +#: src/cryptsetup.c:3433 msgid "Option --veracrypt-query-pim is supported only for VeraCrypt compatible devices." msgstr "Параметр --veracrypt-query-pim можна використовувати лише для сумісних із VeraCrypt пристроїв." -#: src/cryptsetup.c:3338 +#: src/cryptsetup.c:3435 msgid "The options --veracrypt-pim and --veracrypt-query-pim are mutually exclusive." msgstr "Не можна поєднувати параметри --veracrypt-pim і --veracrypt-query-pim." -#: src/cryptsetup.c:3347 +#: src/cryptsetup.c:3444 msgid "Option --persistent is not allowed with --test-passphrase." msgstr "Параметр --persistent не можна використовувати разом із --test-passphrase." -#: src/cryptsetup.c:3350 +#: src/cryptsetup.c:3447 msgid "Options --refresh and --test-passphrase are mutually exclusive." msgstr "Не можна поєднувати параметри --refresh і --test-passphrase." -#: src/cryptsetup.c:3353 +#: src/cryptsetup.c:3450 msgid "Option --shared is allowed only for open of plain device." msgstr "Параметр --shared можна використовувати лише для відкриття незашифрованого пристрою." -#: src/cryptsetup.c:3356 +#: src/cryptsetup.c:3453 msgid "Option --skip is supported only for open of plain and loopaes devices." msgstr "Підтримку параметра --skip передбачено лише для відкриття незашифрованих пристроїв та пристроїв loopaes." -#: src/cryptsetup.c:3359 +#: src/cryptsetup.c:3456 msgid "Option --offset with open action is only supported for plain and loopaes devices." msgstr "Підтримку параметра --offset разом із дією з відкриття передбачено лише для незашифрованих пристроїв та пристроїв loopaes." -#: src/cryptsetup.c:3362 +#: src/cryptsetup.c:3459 msgid "Option --tcrypt-hidden cannot be combined with --allow-discards." msgstr "Параметр --tcrypt-hidden не можна поєднувати з --allow-discards." -#: src/cryptsetup.c:3366 +#: src/cryptsetup.c:3463 msgid "Sector size option with open action is supported only for plain devices." msgstr "Підтримку параметра розміру сектора разом із дією з відкриття передбачено лише для незашифрованих пристроїв." -#: src/cryptsetup.c:3370 +#: src/cryptsetup.c:3467 msgid "Large IV sectors option is supported only for opening plain type device with sector size larger than 512 bytes." msgstr "Підтримку можливості використання великих секторів IV передбачено лише для відкриття пристроїв простого типу з розміром сектора, який перевищує 512 байтів." -#: src/cryptsetup.c:3375 +#: src/cryptsetup.c:3472 msgid "Option --test-passphrase is allowed only for open of LUKS, TCRYPT, BITLK and FVAULT2 devices." msgstr "Параметр --test-passphrase можна використовувати лише для відкриття пристроїв LUKS, TCRYPT, BITLK та FVAULT2." -#: src/cryptsetup.c:3378 src/cryptsetup.c:3401 +#: src/cryptsetup.c:3475 src/cryptsetup.c:3498 msgid "Options --device-size and --size cannot be combined." msgstr "Не можна одночасно використовувати параметри --device-size і --size." -#: src/cryptsetup.c:3381 +#: src/cryptsetup.c:3478 msgid "Option --unbound is allowed only for open of luks device." msgstr "Параметр --sunbound можна використовувати лише для відкриття пристрою LUKS." -#: src/cryptsetup.c:3384 +#: src/cryptsetup.c:3481 msgid "Option --unbound cannot be used without --test-passphrase." msgstr "Параметр --unbound не можна використовувати без --test-passphrase." -#: src/cryptsetup.c:3393 src/veritysetup.c:671 src/integritysetup.c:767 +#: src/cryptsetup.c:3490 src/veritysetup.c:671 src/integritysetup.c:767 msgid "Options --cancel-deferred and --deferred cannot be used at the same time." msgstr "Не можна одночасно використовувати параметр --cancel-deferred і --deferred." -#: src/cryptsetup.c:3409 +#: src/cryptsetup.c:3506 msgid "Options --reduce-device-size and --device-size cannot be combined." msgstr "Не можна одночасно використовувати параметри --reduce-device-size і --device-size." -#: src/cryptsetup.c:3412 +#: src/cryptsetup.c:3509 msgid "Option --active-name can be set only for LUKS2 device." msgstr "Параметр --active-name можна встановлювати лише для пристроїв LUKS2." -#: src/cryptsetup.c:3415 +#: src/cryptsetup.c:3512 msgid "Options --active-name and --force-offline-reencrypt cannot be combined." msgstr "Не можна одночасно використовувати параметри ---active-name і --force-offline-reencrypt." -#: src/cryptsetup.c:3423 src/cryptsetup.c:3453 +#: src/cryptsetup.c:3520 src/cryptsetup.c:3550 msgid "Keyslot specification is required." msgstr "Слід вказати специфікація слотів ключів." -#: src/cryptsetup.c:3431 +#: src/cryptsetup.c:3528 msgid "Options --align-payload and --offset cannot be combined." msgstr "Не можна одночасно використовувати параметри --align-payload і --offset." -#: src/cryptsetup.c:3434 +#: src/cryptsetup.c:3531 msgid "Option --integrity-no-wipe can be used only for format action with integrity extension." msgstr "Параметром --integrity-no-wipe можна користуватися лише для дії з форматування із розширенням забезпечення цілісності." -#: src/cryptsetup.c:3437 +#: src/cryptsetup.c:3534 msgid "Only one of --use-[u]random options is allowed." msgstr "Можна використовувати лише один з параметрів --use-[u]random." -#: src/cryptsetup.c:3445 +#: src/cryptsetup.c:3542 msgid "Key size is required with --unbound option." msgstr "Разом із параметром --unbound слід вказувати розмір ключа." -#: src/cryptsetup.c:3465 +#: src/cryptsetup.c:3562 msgid "Invalid token action." msgstr "Некоректна дія з жетоном." -#: src/cryptsetup.c:3468 +#: src/cryptsetup.c:3565 msgid "--key-description parameter is mandatory for token add action." msgstr "Параметр --key-description є обов'язковим для дій із додавання жетонів." -#: src/cryptsetup.c:3472 src/cryptsetup.c:3485 +#: src/cryptsetup.c:3569 src/cryptsetup.c:3582 msgid "Action requires specific token. Use --token-id parameter." msgstr "Для виконання дії потрібен специфічний жетон. Скористайтеся параметром --token-id." -#: src/cryptsetup.c:3476 +#: src/cryptsetup.c:3573 msgid "Option --unbound is valid only with token add action." msgstr "Параметр --unbound можна використовувати лише разом із дією з додавання жетона." -#: src/cryptsetup.c:3478 +#: src/cryptsetup.c:3575 msgid "Options --key-slot and --unbound cannot be combined." msgstr "Не можна поєднувати параметри --key-slot і --unbound." -#: src/cryptsetup.c:3483 +#: src/cryptsetup.c:3580 msgid "Action requires specific keyslot. Use --key-slot parameter." msgstr "Дія потребує зазначення слоту ключа. Скористайтеся параметром --key-slot." -#: src/cryptsetup.c:3499 +#: src/cryptsetup.c:3596 msgid "<device> [--type <type>] [<name>]" msgstr "<пристрій> [--type <тип>] [<назва>]" -#: src/cryptsetup.c:3499 src/veritysetup.c:491 src/integritysetup.c:544 +#: src/cryptsetup.c:3596 src/veritysetup.c:491 src/integritysetup.c:544 msgid "open device as <name>" msgstr "відкрити пристрій як <назва>" -#: src/cryptsetup.c:3500 src/cryptsetup.c:3501 src/cryptsetup.c:3502 +#: src/cryptsetup.c:3597 src/cryptsetup.c:3598 src/cryptsetup.c:3599 #: src/veritysetup.c:492 src/veritysetup.c:493 src/integritysetup.c:545 #: src/integritysetup.c:546 src/integritysetup.c:548 msgid "<name>" msgstr "<назва>" -#: src/cryptsetup.c:3500 src/veritysetup.c:492 src/integritysetup.c:545 +#: src/cryptsetup.c:3597 src/veritysetup.c:492 src/integritysetup.c:545 msgid "close device (remove mapping)" msgstr "закрити пристрій (вилучити призначення)" -#: src/cryptsetup.c:3501 src/integritysetup.c:548 +#: src/cryptsetup.c:3598 src/integritysetup.c:548 msgid "resize active device" msgstr "змінити розмір активного пристрою" -#: src/cryptsetup.c:3502 +#: src/cryptsetup.c:3599 msgid "show device status" msgstr "показати стан пристрою" -#: src/cryptsetup.c:3503 +#: src/cryptsetup.c:3600 msgid "[--cipher <cipher>]" msgstr "[--cipher <шифр>]" -#: src/cryptsetup.c:3503 +#: src/cryptsetup.c:3600 msgid "benchmark cipher" msgstr "перевірити швидкодію шифрування" -#: src/cryptsetup.c:3504 src/cryptsetup.c:3505 src/cryptsetup.c:3506 -#: src/cryptsetup.c:3507 src/cryptsetup.c:3508 src/cryptsetup.c:3515 -#: src/cryptsetup.c:3516 src/cryptsetup.c:3517 src/cryptsetup.c:3518 -#: src/cryptsetup.c:3519 src/cryptsetup.c:3520 src/cryptsetup.c:3521 -#: src/cryptsetup.c:3522 src/cryptsetup.c:3523 src/cryptsetup.c:3524 +#: src/cryptsetup.c:3601 src/cryptsetup.c:3602 src/cryptsetup.c:3603 +#: src/cryptsetup.c:3604 src/cryptsetup.c:3605 src/cryptsetup.c:3612 +#: src/cryptsetup.c:3613 src/cryptsetup.c:3614 src/cryptsetup.c:3615 +#: src/cryptsetup.c:3616 src/cryptsetup.c:3617 src/cryptsetup.c:3618 +#: src/cryptsetup.c:3619 src/cryptsetup.c:3620 src/cryptsetup.c:3621 msgid "<device>" msgstr "<пристрій>" -#: src/cryptsetup.c:3504 +#: src/cryptsetup.c:3601 msgid "try to repair on-disk metadata" msgstr "спробувати виправити метадані на диску" -#: src/cryptsetup.c:3505 +#: src/cryptsetup.c:3602 msgid "reencrypt LUKS2 device" msgstr "повторно зашифрувати пристрій LUKS2" -#: src/cryptsetup.c:3506 +#: src/cryptsetup.c:3603 msgid "erase all keyslots (remove encryption key)" msgstr "витерти усі слоти ключів (вилучити ключ шифрування)" -#: src/cryptsetup.c:3507 +#: src/cryptsetup.c:3604 msgid "convert LUKS from/to LUKS2 format" msgstr "перетворити LUKS із формату LUKS2 або навпаки" -#: src/cryptsetup.c:3508 +#: src/cryptsetup.c:3605 msgid "set permanent configuration options for LUKS2" msgstr "встановити сталі параметри налаштування для LUKS2" -#: src/cryptsetup.c:3509 src/cryptsetup.c:3510 +#: src/cryptsetup.c:3606 src/cryptsetup.c:3607 msgid "<device> [<new key file>]" msgstr "<пристрій> [<новий файл ключа>]" -#: src/cryptsetup.c:3509 +#: src/cryptsetup.c:3606 msgid "formats a LUKS device" msgstr "форматує пристрій LUKS" -#: src/cryptsetup.c:3510 +#: src/cryptsetup.c:3607 msgid "add key to LUKS device" msgstr "додати ключ до пристрою LUKS" -#: src/cryptsetup.c:3511 src/cryptsetup.c:3512 src/cryptsetup.c:3513 +#: src/cryptsetup.c:3608 src/cryptsetup.c:3609 src/cryptsetup.c:3610 msgid "<device> [<key file>]" msgstr "<пристрій> [<файл ключа>]" -#: src/cryptsetup.c:3511 +#: src/cryptsetup.c:3608 msgid "removes supplied key or key file from LUKS device" msgstr "вилучає наданий ключ або файл ключа з пристрою LUKS" -#: src/cryptsetup.c:3512 +#: src/cryptsetup.c:3609 msgid "changes supplied key or key file of LUKS device" msgstr "змінює наданий ключ або файл ключа пристрою LUKS" -#: src/cryptsetup.c:3513 +#: src/cryptsetup.c:3610 msgid "converts a key to new pbkdf parameters" msgstr "перетворює ключ до нових параметрів pbkdf" -#: src/cryptsetup.c:3514 +#: src/cryptsetup.c:3611 msgid "<device> <key slot>" msgstr "<пристрій> <слот ключа>" -#: src/cryptsetup.c:3514 +#: src/cryptsetup.c:3611 msgid "wipes key with number <key slot> from LUKS device" msgstr "вилучає ключ з номером <слот ключа> з пристрою LUKS" -#: src/cryptsetup.c:3515 +#: src/cryptsetup.c:3612 msgid "print UUID of LUKS device" msgstr "вивести UUID пристрою LUKS" -#: src/cryptsetup.c:3516 +#: src/cryptsetup.c:3613 msgid "tests <device> for LUKS partition header" msgstr "виконати спробу виявлення заголовка розділу LUKS на пристрої <пристрій>" -#: src/cryptsetup.c:3517 +#: src/cryptsetup.c:3614 msgid "dump LUKS partition information" msgstr "створити дамп даних щодо розділу LUKS" -#: src/cryptsetup.c:3518 +#: src/cryptsetup.c:3615 msgid "dump TCRYPT device information" msgstr "створити дамп даних пристрою TCRYPT" -#: src/cryptsetup.c:3519 +#: src/cryptsetup.c:3616 msgid "dump BITLK device information" msgstr "створити дамп даних пристрою BITLK" -#: src/cryptsetup.c:3520 +#: src/cryptsetup.c:3617 msgid "dump FVAULT2 device information" msgstr "створити дамп даних пристрою FVAULT2" -#: src/cryptsetup.c:3521 +#: src/cryptsetup.c:3618 msgid "Suspend LUKS device and wipe key (all IOs are frozen)" msgstr "Приспати пристрій LUKS і витерти ключ (роботу всіх каналів введення-виведення буде заморожено)" -#: src/cryptsetup.c:3522 +#: src/cryptsetup.c:3619 msgid "Resume suspended LUKS device" msgstr "Відновити роботу приспаного пристрою LUKS" -#: src/cryptsetup.c:3523 +#: src/cryptsetup.c:3620 msgid "Backup LUKS device header and keyslots" msgstr "Створити резервну копію заголовка пристрою LUKS і слотів ключів" -#: src/cryptsetup.c:3524 +#: src/cryptsetup.c:3621 msgid "Restore LUKS device header and keyslots" msgstr "Відновити заголовок пристрою LUKS і слоти ключів" -#: src/cryptsetup.c:3525 +#: src/cryptsetup.c:3622 msgid "<add|remove|import|export> <device>" msgstr "<add|remove|import|export> <пристрій>" -#: src/cryptsetup.c:3525 +#: src/cryptsetup.c:3622 msgid "Manipulate LUKS2 tokens" msgstr "Керування жетонами LUKS2" -#: src/cryptsetup.c:3544 src/veritysetup.c:509 src/integritysetup.c:563 +#: src/cryptsetup.c:3641 src/veritysetup.c:509 src/integritysetup.c:563 msgid "" "\n" "<action> is one of:\n" @@ -2819,7 +2839,7 @@ msgstr "" "\n" "<дія> є однією з таких:\n" -#: src/cryptsetup.c:3550 +#: src/cryptsetup.c:3647 msgid "" "\n" "You can also use old <action> syntax aliases:\n" @@ -2832,7 +2852,7 @@ msgstr "" "\tвідкрити: create (plainOpen), luksOpen, loopaesOpen, tcryptOpen, bitlkOpen, fvault2Open\n" "\tзакрити: remove (plainClose), luksClose, loopaesClose, tcryptClose, bitlkClose, fvault2Close\n" -#: src/cryptsetup.c:3554 +#: src/cryptsetup.c:3651 #, c-format msgid "" "\n" @@ -2847,7 +2867,7 @@ msgstr "" "<слот ключа> — номер слота ключа LUKS, який слід змінити\n" "<файл ключа> — необов’язковий файл ключа для нового ключа для дії luksAddKey\n" -#: src/cryptsetup.c:3561 +#: src/cryptsetup.c:3658 #, c-format msgid "" "\n" @@ -2856,7 +2876,7 @@ msgstr "" "\n" "Типовий укомпільований формат метаданих — %s (для дії luksFormat).\n" -#: src/cryptsetup.c:3566 +#: src/cryptsetup.c:3663 msgid "" "\n" "LUKS2 external token plugin support is enabled.\n" @@ -2864,12 +2884,12 @@ msgstr "" "\n" "Підтримку додатків зовнішніх жетонів LUKS2 увімкнено.\n" -#: src/cryptsetup.c:3567 +#: src/cryptsetup.c:3664 #, c-format msgid "LUKS2 external token plugin path: %s.\n" msgstr "Шлях до теки додатків зовнішніх жетонів LUKS2: %s.\n" -#: src/cryptsetup.c:3569 +#: src/cryptsetup.c:3666 msgid "" "\n" "LUKS2 external token plugin support is disabled.\n" @@ -2877,7 +2897,7 @@ msgstr "" "\n" "Підтримку додатків зовнішніх жетонів LUKS2 вимкнено.\n" -#: src/cryptsetup.c:3573 +#: src/cryptsetup.c:3670 #, c-format msgid "" "\n" @@ -2894,7 +2914,7 @@ msgstr "" "Типовий PBKDF для LUKS2: %s\n" "\tЧас ітерації: %d, потрібний обсяг пам'яті: %d кБ, паралельних потоків: %d\n" -#: src/cryptsetup.c:3584 +#: src/cryptsetup.c:3681 #, c-format msgid "" "\n" @@ -2909,100 +2929,110 @@ msgstr "" "\tзвичайне: %s, ключ: %d-бітовий, хешування пароля: %s\n" "\tLUKS: %s, ключ: %d-бітовий, хешування заголовка LUKS: %s, RNG: %s\n" -#: src/cryptsetup.c:3593 +#: src/cryptsetup.c:3690 msgid "\tLUKS: Default keysize with XTS mode (two internal keys) will be doubled.\n" msgstr "\tLUKS: типовий розмір ключа у режимі XTS (два вбудованих ключа) буде подвоєно.\n" -#: src/cryptsetup.c:3611 src/veritysetup.c:651 src/integritysetup.c:723 +#: src/cryptsetup.c:3708 src/veritysetup.c:651 src/integritysetup.c:723 #, c-format msgid "%s: requires %s as arguments" msgstr "%s: слід вказати у параметрах %s" -#: src/cryptsetup.c:3651 src/utils_reencrypt_luks1.c:1198 +#: src/cryptsetup.c:3748 src/utils_reencrypt_luks1.c:1198 msgid "Key slot is invalid." msgstr "Некоректний слот ключа." -#: src/cryptsetup.c:3678 +#: src/cryptsetup.c:3776 msgid "Device size must be multiple of 512 bytes sector." msgstr "Розмір пристрою має бути кратним до 512-байтового сектора." -#: src/cryptsetup.c:3683 +#: src/cryptsetup.c:3781 msgid "Invalid max reencryption hotzone size specification." msgstr "Некоректна специфікація розміру «гарячої» ділянки повторного шифрування." -#: src/cryptsetup.c:3697 src/cryptsetup.c:3709 +#: src/cryptsetup.c:3795 src/cryptsetup.c:3807 msgid "Key size must be a multiple of 8 bits" msgstr "Розмір ключа має бути кратним 8 бітам" -#: src/cryptsetup.c:3714 +#: src/cryptsetup.c:3814 +#, c-format +msgid "At most %d volume key specifications can be supplied." +msgstr "Можна надати не більше %d специфікацій ключів томів." + +#: src/cryptsetup.c:3826 +#, c-format +msgid "At most %d keyring link specifications can be supplied." +msgstr "Можна надати не більше %d специфікацій посилань на сховище ключів." + +#: src/cryptsetup.c:3835 msgid "Maximum device reduce size is 1 GiB." msgstr "Максимальний розмір зменшення розміру пристрою дорівнює 1 ГіБ." -#: src/cryptsetup.c:3717 +#: src/cryptsetup.c:3838 msgid "Reduce size must be multiple of 512 bytes sector." msgstr "Розмір зменшення має бути кратним до 512-байтового сектора." -#: src/cryptsetup.c:3734 +#: src/cryptsetup.c:3855 msgid "Option --priority can be only ignore/normal/prefer." msgstr "Значенням для параметра --priority може бути лише один з таких рядків: ignore, normal або prefer." -#: src/cryptsetup.c:3753 src/veritysetup.c:572 src/integritysetup.c:643 +#: src/cryptsetup.c:3874 src/veritysetup.c:572 src/integritysetup.c:643 msgid "Show this help message" msgstr "Показати цю довідку" -#: src/cryptsetup.c:3754 src/veritysetup.c:573 src/integritysetup.c:644 +#: src/cryptsetup.c:3875 src/veritysetup.c:573 src/integritysetup.c:644 msgid "Display brief usage" msgstr "Показати короткі настанови щодо користування" -#: src/cryptsetup.c:3755 src/veritysetup.c:574 src/integritysetup.c:645 +#: src/cryptsetup.c:3876 src/veritysetup.c:574 src/integritysetup.c:645 msgid "Print package version" msgstr "Вивести дані щодо версії пакунка" -#: src/cryptsetup.c:3766 src/veritysetup.c:585 src/integritysetup.c:656 +#: src/cryptsetup.c:3887 src/veritysetup.c:585 src/integritysetup.c:656 msgid "Help options:" msgstr "Пункти довідки:" -#: src/cryptsetup.c:3789 src/veritysetup.c:606 src/integritysetup.c:676 +#: src/cryptsetup.c:3910 src/veritysetup.c:606 src/integritysetup.c:676 msgid "[OPTION...] <action> <action-specific>" msgstr "[ПАРАМЕТР...] <дія> <параметри_дії>" -#: src/cryptsetup.c:3798 src/veritysetup.c:615 src/integritysetup.c:687 +#: src/cryptsetup.c:3919 src/veritysetup.c:615 src/integritysetup.c:687 msgid "Argument <action> missing." msgstr "Не вказано аргумент <дія>." -#: src/cryptsetup.c:3877 src/veritysetup.c:646 src/integritysetup.c:718 +#: src/cryptsetup.c:3998 src/veritysetup.c:646 src/integritysetup.c:718 msgid "Unknown action." msgstr "Невідома дія." -#: src/cryptsetup.c:3895 +#: src/cryptsetup.c:4016 msgid "Option --key-file takes precedence over specified key file argument." msgstr "Параметр --key-file має пріоритет над вказаним параметром файла ключа." -#: src/cryptsetup.c:3901 +#: src/cryptsetup.c:4022 msgid "Only one --key-file argument is allowed." msgstr "Можна використовувати лише один аргумент --key-file." -#: src/cryptsetup.c:3906 +#: src/cryptsetup.c:4027 msgid "Password-based key derivation function (PBKDF) can be only pbkdf2 or argon2i/argon2id." msgstr "Функцією отримання ключа на основі пароля (PBKDF) може бути лише pbkdf2 або argon2i/argon2id." -#: src/cryptsetup.c:3911 +#: src/cryptsetup.c:4032 msgid "PBKDF forced iterations cannot be combined with iteration time option." msgstr "Примусові ітерації PBKDF не можна поєднувати із параметром тривалості ітерацій." -#: src/cryptsetup.c:3916 +#: src/cryptsetup.c:4037 msgid "Cannot link volume key to a keyring when keyring is disabled." msgstr "Неможливо пов'язати ключ тому зі сховищем ключів, якщо сховище ключів вимкнено." -#: src/cryptsetup.c:3927 +#: src/cryptsetup.c:4048 msgid "Options --keyslot-cipher and --keyslot-key-size must be used together." msgstr "Параметри --keyslot-cipher і --keyslot-key-size має бути використано разом." -#: src/cryptsetup.c:3935 +#: src/cryptsetup.c:4056 msgid "No action taken. Invoked with --test-args option.\n" msgstr "Дій не виконано. Викликано із параметром --test-args.\n" -#: src/cryptsetup.c:3948 +#: src/cryptsetup.c:4069 msgid "Cannot disable metadata locking." msgstr "Не вдалося вимкнути блокування метаданих." @@ -3467,20 +3497,20 @@ msgstr "Немає доступних придатних до користува msgid "Can't do passphrase verification on non-tty inputs." msgstr "Перевірку паролів не можна виконувати на основі вхідних даних, які надходять не з tty." -#: src/utils_luks.c:183 +#: src/utils_luks.c:186 #, c-format msgid "Failed to open file %s in read-only mode." msgstr "Не вдалося відкрити файл %s у режимі лише читання." -#: src/utils_luks.c:196 +#: src/utils_luks.c:199 msgid "Provide valid LUKS2 token JSON:\n" msgstr "Надайте коректний жетон JSON LUKS2:\n" -#: src/utils_luks.c:203 +#: src/utils_luks.c:206 msgid "Failed to read JSON file." msgstr "Не вдалося прочитати файл JSON." -#: src/utils_luks.c:208 +#: src/utils_luks.c:211 msgid "" "\n" "Read interrupted." @@ -3488,12 +3518,12 @@ msgstr "" "\n" "Читання перервано." -#: src/utils_luks.c:249 +#: src/utils_luks.c:252 #, c-format msgid "Failed to open file %s in write mode." msgstr "Не вдалося відкрити файл %s у режимі запису." -#: src/utils_luks.c:258 +#: src/utils_luks.c:261 msgid "" "\n" "Write interrupted." @@ -3501,7 +3531,7 @@ msgstr "" "\n" "Запис перервано." -#: src/utils_luks.c:262 +#: src/utils_luks.c:265 msgid "Failed to write JSON file." msgstr "Не вдалося записати файл JSON." @@ -3589,7 +3619,7 @@ msgstr "" "Вказаний --sector-size %<PRIu32> є несумісним із суперблоком %s\n" "(розмір блоку: %<PRIu32> байтів), який виявлено на пристрої %s." -#: src/utils_reencrypt.c:533 src/utils_reencrypt.c:1412 +#: src/utils_reencrypt.c:533 src/utils_reencrypt.c:1421 msgid "Encryption without detached header (--header) is not possible without data device size reduction (--reduce-device-size)." msgstr "Шифрування без від'єднаного заголовка (--header) є неможливим без зменшення розміру пристрою зберігання даних (--reduce-device-size)." @@ -3639,53 +3669,53 @@ msgstr "Відновлюємо початковий заголовок LUKS2." msgid "Original LUKS2 header restore failed." msgstr "Спроба відновлення початкового заголовка LUKS2 зазнала невдачі." -#: src/utils_reencrypt.c:759 +#: src/utils_reencrypt.c:765 #, c-format msgid "Header file %s does not exist. Do you want to initialize LUKS2 decryption of device %s and export LUKS2 header to file %s?" msgstr "Файла заголовка %s не існує. Хочете ініціалізувати розшифрування LUKS2 пристрою %s і експортувати заголовок LUKS2 до файла %s?" -#: src/utils_reencrypt.c:807 +#: src/utils_reencrypt.c:815 msgid "Failed to add read/write permissions to exported header file." msgstr "Не вдалося додати права доступу для читання-запису до експортованого файла заголовка." -#: src/utils_reencrypt.c:860 +#: src/utils_reencrypt.c:869 #, c-format msgid "Reencryption initialization failed. Header backup is available in %s." msgstr "Не вдалося ініціалізувати повторне шифрування. Резервна копія заголовка перебуває у %s." -#: src/utils_reencrypt.c:888 +#: src/utils_reencrypt.c:897 msgid "LUKS2 decryption is supported with detached header device only (with data offset set to 0)." msgstr "Підтримку розшифровування LUKS2 передбачено лише для пристроїв із від'єднаним заголовком (із встановленим нульовим відступом даних)." -#: src/utils_reencrypt.c:1023 src/utils_reencrypt.c:1032 +#: src/utils_reencrypt.c:1032 src/utils_reencrypt.c:1041 msgid "Not enough free keyslots for reencryption." msgstr "Недостатньо вільних слотів ключів для повторного шифрування." -#: src/utils_reencrypt.c:1053 src/utils_reencrypt_luks1.c:1100 +#: src/utils_reencrypt.c:1062 src/utils_reencrypt_luks1.c:1100 msgid "Key file can be used only with --key-slot or with exactly one key slot active." msgstr "Файлом ключа можна користуватися лише з --key-slot, або якщо активним є лише один слот ключа." -#: src/utils_reencrypt.c:1062 src/utils_reencrypt_luks1.c:1147 +#: src/utils_reencrypt.c:1071 src/utils_reencrypt_luks1.c:1147 #: src/utils_reencrypt_luks1.c:1158 #, c-format msgid "Enter passphrase for key slot %d: " msgstr "Вкажіть пароль для слоту ключа %d: " -#: src/utils_reencrypt.c:1074 +#: src/utils_reencrypt.c:1083 #, c-format msgid "Enter passphrase for key slot %u: " msgstr "Вкажіть пароль для слоту ключа %u: " -#: src/utils_reencrypt.c:1126 +#: src/utils_reencrypt.c:1135 #, c-format msgid "Switching data encryption cipher to %s.\n" msgstr "Перемикаємося на шифрування даних %s.\n" -#: src/utils_reencrypt.c:1180 +#: src/utils_reencrypt.c:1189 msgid "No data segment parameters changed. Reencryption aborted." msgstr "Не змінено параметри сегмента даних. Повторне шифрування перервано." -#: src/utils_reencrypt.c:1282 +#: src/utils_reencrypt.c:1291 msgid "" "Encryption sector size increase on offline device is not supported.\n" "Activate the device first or use --force-offline-reencrypt option (dangerous!)." @@ -3693,7 +3723,7 @@ msgstr "" "Підтримки збільшення розміру сектора шифрування на вимкненому пристрої не передбачено.\n" "Спочатку активуйте пристрій або скористайтеся параметром --force-offline-reencrypt (небезпечно!)." -#: src/utils_reencrypt.c:1322 src/utils_reencrypt_luks1.c:726 +#: src/utils_reencrypt.c:1331 src/utils_reencrypt_luks1.c:726 #: src/utils_reencrypt_luks1.c:798 msgid "" "\n" @@ -3702,58 +3732,58 @@ msgstr "" "\n" "Повторне шифрування перервано." -#: src/utils_reencrypt.c:1327 +#: src/utils_reencrypt.c:1336 msgid "Resuming LUKS reencryption in forced offline mode.\n" msgstr "Відновлюємо повторне шифрування LUKS у примусовому вимкненому режимі.\n" -#: src/utils_reencrypt.c:1350 +#: src/utils_reencrypt.c:1359 #, c-format msgid "Device %s contains broken LUKS metadata. Aborting operation." msgstr "На пристрої %s містяться пошкоджені метадані LUKS. Перериваємо дію." -#: src/utils_reencrypt.c:1366 src/utils_reencrypt.c:1388 +#: src/utils_reencrypt.c:1375 src/utils_reencrypt.c:1397 #, c-format msgid "Device %s is already LUKS device. Aborting operation." msgstr "Пристрій %s вже є пристроєм LUKS. Перериваємо дію." -#: src/utils_reencrypt.c:1394 +#: src/utils_reencrypt.c:1403 #, c-format msgid "Device %s is already in LUKS reencryption. Aborting operation." msgstr "Пристрій %s вже перебуває у стані повторного шифрування LUKS. Перериваємо дію." -#: src/utils_reencrypt.c:1476 +#: src/utils_reencrypt.c:1485 msgid "LUKS2 decryption requires --header option." msgstr "Для розшифровування LUKS2 потрібен параметр --header." -#: src/utils_reencrypt.c:1524 +#: src/utils_reencrypt.c:1533 msgid "Command requires device as argument." msgstr "Комарні слід передати аргумент пристрою." -#: src/utils_reencrypt.c:1537 +#: src/utils_reencrypt.c:1546 #, c-format msgid "Conflicting versions. Device %s is LUKS1." msgstr "Конфлікт версій. Пристрій %s є пристроєм LUKS1." -#: src/utils_reencrypt.c:1543 +#: src/utils_reencrypt.c:1552 #, c-format msgid "Conflicting versions. Device %s is in LUKS1 reencryption." msgstr "Конфлікт версій. Пристрій %s перебуває у стані повторного шифрування LUKS1." -#: src/utils_reencrypt.c:1549 +#: src/utils_reencrypt.c:1558 #, c-format msgid "Conflicting versions. Device %s is LUKS2." msgstr "Конфлікт версій. Пристрій %s є пристроєм LUKS2." -#: src/utils_reencrypt.c:1555 +#: src/utils_reencrypt.c:1564 #, c-format msgid "Conflicting versions. Device %s is in LUKS2 reencryption." msgstr "Конфлікт версій. Пристрій %s перебуває у стані повторного шифрування LUKS2." -#: src/utils_reencrypt.c:1561 +#: src/utils_reencrypt.c:1570 msgid "LUKS2 reencryption already initialized. Aborting operation." msgstr "Вже ініційовано повторне шифрування LUKS2. Перериваємо виконання дії." -#: src/utils_reencrypt.c:1568 +#: src/utils_reencrypt.c:1577 msgid "Device reencryption not in progress." msgstr "Повторне шифрування пристрою не виконується." diff --git a/src/utils_luks.c b/src/utils_luks.c index 5007b3f..5c51a5a 100644 --- a/src/utils_luks.c +++ b/src/utils_luks.c @@ -104,6 +104,9 @@ void set_activation_flags(uint32_t *flags) (ARG_SET(OPT_KEY_SLOT_ID) || ARG_SET(OPT_UNBOUND_ID))) *flags |= CRYPT_ACTIVATE_ALLOW_UNBOUND_KEY; + if (ARG_SET(OPT_LINK_VK_TO_KEYRING_ID)) + *flags |= CRYPT_ACTIVATE_KEYRING_KEY; + if (ARG_SET(OPT_SERIALIZE_MEMORY_HARD_PBKDF_ID)) *flags |= CRYPT_ACTIVATE_SERIALIZE_MEMORY_HARD_PBKDF; diff --git a/src/utils_reencrypt.c b/src/utils_reencrypt.c index 7546811..0d908bc 100644 --- a/src/utils_reencrypt.c +++ b/src/utils_reencrypt.c @@ -736,50 +736,58 @@ static int reencrypt_restore_header(struct crypt_device **cd, } static int decrypt_luks2_datashift_init(struct crypt_device **cd, - const char *data_device, const char *expheader) { int fd, r; size_t passwordLen; struct stat hdr_st; + char *msg, *data_device, *active_name = NULL, *password = NULL; bool remove_header = false; - char *msg, *active_name = NULL, *password = NULL; struct crypt_params_reencrypt params = { .mode = CRYPT_REENCRYPT_DECRYPT, .direction = CRYPT_REENCRYPT_FORWARD, .resilience = "datashift-checksum", .hash = ARG_STR(OPT_RESILIENCE_HASH_ID) ?: "sha256", - .data_shift = crypt_get_data_offset(*cd), .device_size = ARG_UINT64(OPT_DEVICE_SIZE_ID) / SECTOR_SIZE, .max_hotzone_size = ARG_UINT64(OPT_HOTZONE_SIZE_ID) / SECTOR_SIZE, .flags = CRYPT_REENCRYPT_MOVE_FIRST_SEGMENT }; + assert(expheader); + assert(cd && *cd); + + params.data_shift = crypt_get_data_offset(*cd); + + if (!(data_device = strdup(crypt_get_device_name(*cd)))) + return -ENOMEM; + if (!ARG_SET(OPT_BATCH_MODE_ID)) { r = asprintf(&msg, _("Header file %s does not exist. Do you want to initialize LUKS2 " "decryption of device %s and export LUKS2 header to file %s?"), expheader, data_device, expheader); - if (r < 0) - return -ENOMEM; + if (r < 0) { + r = -ENOMEM; + goto out; + } r = yesDialog(msg, _("Operation aborted.\n")) ? 0 : -EINVAL; free(msg); if (r < 0) - return r; + goto out; } if ((r = decrypt_verify_and_set_params(¶ms))) - return r; + goto out; r = reencrypt_hint_force_offline_reencrypt(data_device); if (r < 0) - return r; + goto out; r = tools_get_key(NULL, &password, &passwordLen, ARG_UINT64(OPT_KEYFILE_OFFSET_ID), ARG_UINT32(OPT_KEYFILE_SIZE_ID), ARG_STR(OPT_KEY_FILE_ID), ARG_UINT32(OPT_TIMEOUT_ID), verify_passphrase(0), 0, *cd); if (r < 0) - return r; + goto out; r = reencrypt_check_passphrase(*cd, ARG_INT32(OPT_KEY_SLOT_ID), password, passwordLen); if (r < 0) @@ -854,6 +862,7 @@ static int decrypt_luks2_datashift_init(struct crypt_device **cd, } out: free(active_name); + free(data_device); crypt_safe_free(password); if (r < 0 && !remove_header && !stat(expheader, &hdr_st) && S_ISREG(hdr_st.st_mode)) @@ -1442,7 +1451,8 @@ static int _decrypt(struct crypt_device **cd, enum device_status_info dev_st, co assert(cd); - if (dev_st == DEVICE_LUKS1 || dev_st == DEVICE_LUKS1_UNUSABLE) + if (dev_st == DEVICE_LUKS1 || dev_st == DEVICE_LUKS1_UNUSABLE || + (dev_st == DEVICE_NOT_LUKS && ARG_SET(OPT_UUID_ID) && !ARG_SET(OPT_HEADER_ID))) return reencrypt_luks1(data_device); /* header file does not exist, try loading device type from data device */ @@ -1478,7 +1488,7 @@ static int _decrypt(struct crypt_device **cd, enum device_status_info dev_st, co } if (export_header) - r = decrypt_luks2_datashift_init(cd, data_device, ARG_STR(OPT_HEADER_ID)); + r = decrypt_luks2_datashift_init(cd, ARG_STR(OPT_HEADER_ID)); else r = decrypt_luks2_init(*cd, data_device); diff --git a/tests/LUKS-d238e48a-0ed3-4169-b841-f26b44693134.tar.xz b/tests/LUKS-d238e48a-0ed3-4169-b841-f26b44693134.tar.xz Binary files differnew file mode 100644 index 0000000..4a37d42 --- /dev/null +++ b/tests/LUKS-d238e48a-0ed3-4169-b841-f26b44693134.tar.xz diff --git a/tests/Makefile.am b/tests/Makefile.am index 75c1d3d..6947daa 100644 --- a/tests/Makefile.am +++ b/tests/Makefile.am @@ -55,7 +55,7 @@ EXTRA_DIST = compatimage.img.xz compatv10image.img.xz \ compatimage2.img.xz \ conversion_imgs.tar.xz \ luks2_keyslot_unassigned.img.xz \ - img_fs_ext4.img.xz img_fs_vfat.img.xz img_fs_xfs.img.xz \ + img_fs_ext4.img.xz img_fs_vfat.img.xz img_fs_xfs.img.xz img_fs_xfs5.img.xz \ xfs_512_block_size.img.xz \ valid_header_file.xz \ luks2_valid_hdr.img.xz \ @@ -100,7 +100,8 @@ EXTRA_DIST = compatimage.img.xz compatv10image.img.xz \ run-all-symbols \ fake_systemd_tpm_path.c \ unit-wipe-test \ - systemd-test-plugin + systemd-test-plugin \ + LUKS-d238e48a-0ed3-4169-b841-f26b44693134.tar.xz CLEANFILES = cryptsetup-tst* valglog* *-fail-*.log test-symbols-list.h fake_systemd_tpm_path.so clean-local: diff --git a/tests/align-test b/tests/align-test index d2932ae..0c1e02a 100755 --- a/tests/align-test +++ b/tests/align-test @@ -292,7 +292,7 @@ format_plain_fail 4096 cleanup # skip tests using empty passphrase (LUKS1 cipher_null) -if [ ! fips_mode ]; then +if ! fips_mode; then echo "# Offset check: 512B sector drive" add_device dev_size_mb=16 sector_size=512 num_tgts=1 # |k| expO reqO expected slot offsets @@ -338,12 +338,19 @@ echo "# Create enterprise-class 4K drive with fs and LUKS images." # cryptsetup should properly use 4k block on direct-io add_device dev_size_mb=32 sector_size=4096 physblk_exp=0 num_tgts=1 opt_blks=64 for file in $(ls img_fs_*.img.xz) ; do - echo "Format using fs image $file." + echo -n "Format using fs image $file " xz -d -c $file | dd of=$DEV bs=1M 2>/dev/null || fail "bad image" [ ! -d $MNT_DIR ] && mkdir $MNT_DIR - mount $DEV $MNT_DIR || skip "Mounting image is not available." + mount $DEV $MNT_DIR 2>/dev/null + if [ $? -ne 0 ] ; then + echo "[N/A]" + continue + fi echo $PWD1 | $CRYPTSETUP luksFormat --type luks1 --key-size 256 $FAST_PBKDF $MNT_DIR/luks.img || fail echo $PWD2 | $CRYPTSETUP luksFormat --type luks1 --key-size 256 $FAST_PBKDF $MNT_DIR/luks.img --header $MNT_DIR/luks_header.img || fail - umount $MNT_DIR + umount $MNT_DIR || fail + echo "[OK]" done cleanup + +exit 0 diff --git a/tests/align-test2 b/tests/align-test2 index 23d418a..6ed82bc 100755 --- a/tests/align-test2 +++ b/tests/align-test2 @@ -421,13 +421,18 @@ echo "# Create enterprise-class 4K drive with fs and LUKS images." # cryptsetup should properly use 4k block on direct-io add_device dev_size_mb=32 sector_size=4096 physblk_exp=0 num_tgts=1 opt_blks=64 for file in $(ls img_fs_*.img.xz) ; do - echo "Format using fs image $file." + echo -n "Format using fs image $file. " xz -d -c $file | dd of=$DEV bs=1M 2>/dev/null || fail "bad image" [ ! -d $MNT_DIR ] && mkdir $MNT_DIR - mount $DEV $MNT_DIR || skip "Mounting image is not available." + mount $DEV $MNT_DIR 2>/dev/null + if [ $? -ne 0 ] ; then + echo "[N/A]" + continue + fi echo $PWD1 | $CRYPTSETUP luksFormat $FAST_PBKDF --type luks2 $MNT_DIR/luks.img --offset 8192 || fail echo $PWD2 | $CRYPTSETUP luksFormat $FAST_PBKDF --type luks2 $MNT_DIR/luks.img --header $MNT_DIR/luks_header.img || fail - umount $MNT_DIR + umount $MNT_DIR || fail + echo "[OK]" done cleanup @@ -454,3 +459,5 @@ add_device dev_size_mb=32 sector_size=4096 num_tgts=1 opt_blks=64 auto_sector 4096 $DEV auto_sector 4096 $DEV $HDR cleanup + +exit 0 diff --git a/tests/api-test-2.c b/tests/api-test-2.c index 8a7a60e..9442c63 100644 --- a/tests/api-test-2.c +++ b/tests/api-test-2.c @@ -5304,6 +5304,11 @@ static void KeyslotContextAndKeyringLink(void) pbkdf.iterations = 1000; } + if (!t_dm_crypt_keyring_support()) { + printf("WARNING: dm-crypt does not support keyring, skipping test.\n"); + return; + } + OK_(get_luks2_offsets(0, 0, 0, NULL, &r_payload_offset)); OK_(create_dmdevice_over_loop(L_DEVICE_1S, r_payload_offset + 1)); diff --git a/tests/blockwise-compat-test b/tests/blockwise-compat-test index 8db91c9..0672ca2 100755 --- a/tests/blockwise-compat-test +++ b/tests/blockwise-compat-test @@ -80,12 +80,12 @@ falloc() { run_all_in_fs() { for file in $(ls img_fs_*.img.xz) ; do - echo "Run tests in $file put on top block device." + echo -n "Run tests in $file put on top block device. " xz -d -c $file | dd of=$DEV bs=1M 2>/dev/null || fail "bad image" [ ! -d $MNT_DIR ] && mkdir $MNT_DIR - mount $DEV $MNT_DIR + mount $DEV $MNT_DIR 2>/dev/null if [ $? -ne 0 ]; then - echo "Mounting image $file failed, skipped." + echo "[N/A]" continue; fi rm -rf $MNT_DIR/* 2>/dev/null @@ -97,7 +97,8 @@ run_all_in_fs() { BSIZE=$iobsize run_all $tfile BSIZE=$oldbsize - umount $MNT_DIR + umount $MNT_DIR || fail + echo "[OK]" done } diff --git a/tests/compat-test b/tests/compat-test index 433beb2..2dd39d5 100755 --- a/tests/compat-test +++ b/tests/compat-test @@ -331,7 +331,7 @@ $CRYPTSETUP -q luksClose $DEV_NAME || fail $CRYPTSETUP luksHeaderRestore -q $IMG --header-backup-file $HEADER_IMG || fail # Repeat for V1.0 header - not aligned first keyslot -if [ ! fips_mode ] ; then +if ! fips_mode; then echo $PWD0 | $CRYPTSETUP luksOpen $IMG10 $DEV_NAME || fail check_exists ORG_SHA1=$(sha1sum -b /dev/mapper/$DEV_NAME | cut -f 1 -d' ') @@ -459,7 +459,7 @@ if [ -d /dev/disk/by-uuid ] ; then $CRYPTSETUP -q luksClose $DEV_NAME || fail fi # skip tests using empty passphrase -if [ ! fips_mode ]; then +if ! fips_mode; then # empty keyfile $CRYPTSETUP -q luksFormat --type luks1 $FAST_PBKDF_OPT $LOOPDEV $KEYE || fail $CRYPTSETUP luksOpen -d $KEYE $LOOPDEV $DEV_NAME || fail @@ -740,7 +740,7 @@ echo $PWDW | $CRYPTSETUP luksResume $DEV_NAME 2>/dev/null && fail echo $PWD1 | $CRYPTSETUP luksResume $DEV_NAME || fail $CRYPTSETUP -q luksClose $DEV_NAME || fail # skip tests using empty passphrase -if [ ! fips_mode ]; then +if ! fips_mode; then echo | $CRYPTSETUP -q luksFormat -c null $FAST_PBKDF_OPT --type luks1 $LOOPDEV || fail echo | $CRYPTSETUP -q luksOpen $LOOPDEV $DEV_NAME || fail $CRYPTSETUP luksSuspend $DEV_NAME || fail diff --git a/tests/compat-test-opal b/tests/compat-test-opal index 3d5c07c..09384d9 100755 --- a/tests/compat-test-opal +++ b/tests/compat-test-opal @@ -234,6 +234,30 @@ function setup_luks2_env() { # $1 key name # $2 keyring to link VK to # $3 key type (optional) +test_vk_link_with_passphrase_check() { + KEY_TYPE=${3:-user} + if [ -z "$3" ]; then + KEY_DESC=$1 + else + KEY_DESC="%$3:$1" + fi + + KEYCTL_KEY_NAME="%$KEY_TYPE:$1" + + echo $PWD1 | $CRYPTSETUP open --test-passphrase $OPAL2_DEV --link-vk-to-keyring "$2"::"$KEY_DESC" || fail + keyctl search "$2" $KEY_TYPE $1 > /dev/null 2>&1 || fail "VK is not linked to the specified keyring after --test-passphrase." + if [ $KEY_TYPE = "user" ]; then + $CRYPTSETUP open $OPAL2_DEV --test-passphrase --volume-key-keyring $KEY_DESC <&-|| fail "Failed to check volume passed via kernel keyring." + fi + keyctl unlink "$KEYCTL_KEY_NAME" "$2" || fail + + echo $PWD1 | $CRYPTSETUP open --test-passphrase $OPAL2_DEV || fail + keyctl search "$2" $KEY_TYPE $1 > /dev/null 2>&1 && fail "VK is unexpectedly linked to the specified keyring." +} + +# $1 key name +# $2 keyring to link VK to +# $3 key type (optional) test_vk_link() { KEY_TYPE=${3:-user} if [ -z "$3" ]; then @@ -512,9 +536,9 @@ if [ -d /dev/disk/by-uuid ] ; then $CRYPTSETUP -q luksClose $DEV_NAME || fail fi # skip tests using empty passphrases -if [ ! fips_mode ]; then +if ! fips_mode; then # empty passphrase (OPAL admin pin cannot be empty) -echo -e "\n$OPAL2_ADMIN_PIN" | $CRYPTSETUP -q luksFormat $FAST_PBKDF_OPT --type luks2 --hw-opal $OPAL2_DEV || fail +echo -e "\n$OPAL2_ADMIN_PIN" | $CRYPTSETUP -q luksFormat $FAST_PBKDF_OPT --type luks2 --hw-opal $OPAL2_DEV --force-password || fail $CRYPTSETUP luksOpen -d $KEYE $OPAL2_DEV $DEV_NAME || fail $CRYPTSETUP -q luksClose $DEV_NAME || fail fi @@ -531,9 +555,9 @@ if [ -d /dev/disk/by-uuid ] ; then $CRYPTSETUP -q luksClose $DEV_NAME || fail fi # skip tests using empty passphrases -if [ ! fips_mode ]; then +if ! fips_mode; then # empty passphrase (OPAL admin pin cannot be empty) -echo -e "\n$OPAL2_ADMIN_PIN" | $CRYPTSETUP -q luksFormat $FAST_PBKDF_OPT --type luks2 --hw-opal-only $OPAL2_DEV || fail +echo -e "\n$OPAL2_ADMIN_PIN" | $CRYPTSETUP -q luksFormat $FAST_PBKDF_OPT --type luks2 --hw-opal-only $OPAL2_DEV --force-password || fail $CRYPTSETUP luksOpen -d $KEYE $OPAL2_DEV $DEV_NAME || fail $CRYPTSETUP -q luksClose $DEV_NAME || fail fi @@ -1234,6 +1258,10 @@ if [ $HAVE_KEYRING -gt 0 -a -d /proc/sys/kernel/keys ]; then # explicitly specify keyring key type test_vk_link $KEY_NAME "%keyring:$TEST_KEYRING_NAME" + test_vk_link_with_passphrase_check $KEY_NAME "%:$TEST_KEYRING_NAME" + test_vk_link_with_passphrase_check $KEY_NAME "%:$TEST_KEYRING_NAME" "user" + test_vk_link_with_passphrase_check $KEY_NAME "%:$TEST_KEYRING_NAME" "logon" + test_vk_link_and_reactivate $KEY_NAME "@u" "user" test_vk_link_and_reactivate $KEY_NAME "@u" [[ ! -z "$SESSION_KEYRING_WORKS" ]] && test_vk_link_and_reactivate $KEY_NAME "@s" "user" diff --git a/tests/compat-test2 b/tests/compat-test2 index bc86563..5a5875a 100755 --- a/tests/compat-test2 +++ b/tests/compat-test2 @@ -173,6 +173,20 @@ function valgrind_run() INFOSTRING="$(basename ${BASH_SOURCE[1]})-line-${BASH_LINENO[0]}" ./valg.sh ${CRYPTSETUP_VALGRIND} "$@" } +function dm_crypt_capi_support() +{ + VER_STR=$(dmsetup targets | grep crypt | cut -f2 -dv) + [ -z "$VER_STR" ] && fail "Failed to parse dm-crypt version." + + VER_MAJ=$(echo $VER_STR | cut -f 1 -d.) + VER_MIN=$(echo $VER_STR | cut -f 2 -d.) + + if [ $VER_MIN -ge 16 ]; then + return 0 + fi + return 1 +} + function dm_crypt_keyring_support() { $CRYPTSETUP --version | grep -q KEYRING || return 1 @@ -300,6 +314,30 @@ function add_scsi_device() { # $1 key name # $2 keyring to link VK to # $3 key type (optional) +test_vk_link_with_passphrase_check() { + KEY_TYPE=${3:-user} + if [ -z "$3" ]; then + KEY_DESC=$1 + else + KEY_DESC="%$3:$1" + fi + + KEYCTL_KEY_NAME="%$KEY_TYPE:$1" + + echo $PWD1 | $CRYPTSETUP open --test-passphrase $LOOPDEV --link-vk-to-keyring "$2"::"$KEY_DESC" || fail + keyctl search "$2" $KEY_TYPE $1 > /dev/null 2>&1 || fail "VK is not linked to the specified keyring after --test-passphrase." + if [ $KEY_TYPE = "user" ]; then + $CRYPTSETUP open $LOOPDEV --test-passphrase --volume-key-keyring $KEY_DESC <&-|| fail "Failed to check volume passed via kernel keyring." + fi + keyctl unlink "$KEYCTL_KEY_NAME" "$2" || fail + + echo $PWD1 | $CRYPTSETUP open --test-passphrase $LOOPDEV || fail + keyctl search "$2" $KEY_TYPE $1 > /dev/null 2>&1 && fail "VK is unexpectedly linked to the specified keyring." +} + +# $1 key name +# $2 keyring to link VK to +# $3 key type (optional) test_vk_link() { KEY_TYPE=${3:-user} if [ -z "$3" ]; then @@ -606,7 +644,7 @@ if [ -d /dev/disk/by-uuid ] ; then $CRYPTSETUP -q luksClose $DEV_NAME || fail fi # skip tests using empty passphrases -if [ ! fips_mode ]; then +if ! fips_mode; then # empty keyfile $CRYPTSETUP -q luksFormat $FAST_PBKDF_OPT --type luks2 $LOOPDEV $KEYE || fail $CRYPTSETUP luksOpen -d $KEYE $LOOPDEV $DEV_NAME || fail @@ -1430,17 +1468,19 @@ if [ $HAVE_KEYRING -gt 0 -a -d /proc/sys/kernel/keys ]; then $CRYPTSETUP open -q --test-passphrase --token-only --token-id 0 -q $IMG || fail fi -prepare "[44] LUKS2 invalid cipher (kernel cipher driver name)" wipe -xz -dk $HEADER_LUKS2_INV.xz -dd if=$HEADER_LUKS2_INV of=$IMG conv=notrunc >/dev/null 2>&1 -$CRYPTSETUP -q luksDump $LOOPDEV | grep -q "capi:xts(ecb(aes-generic))-plain64" || fail -echo $PWD1 | $CRYPTSETUP open $LOOPDEV --test-passphrase || fail -echo $PWD1 | $CRYPTSETUP open $LOOPDEV $DEV_NAME 2>&1 | grep -q "No known cipher specification pattern" || fail -echo $PWD1 | $CRYPTSETUP reencrypt $LOOPDEV >/dev/null 2>&1 && fail -dmsetup create $DEV_NAME --uuid CRYPT-LUKS2-3d20686f551748cb89911ad32379821b-test --table \ - "0 8 crypt capi:xts(ecb(aes-generic))-plain64 edaa40709797973715e572bf7d86fcbb9cfe2051083c33c28d58fe4e1e7ff642 0 $LOOPDEV 32768" -$CRYPTSETUP status $DEV_NAME | grep -q "n/a" || fail -$CRYPTSETUP close $DEV_NAME ||fail +if dm_crypt_capi_support; then + prepare "[44] LUKS2 invalid cipher (kernel cipher driver name)" wipe + xz -dk $HEADER_LUKS2_INV.xz + dd if=$HEADER_LUKS2_INV of=$IMG conv=notrunc >/dev/null 2>&1 + $CRYPTSETUP -q luksDump $LOOPDEV | grep -q "capi:xts(ecb(aes-generic))-plain64" || fail + echo $PWD1 | $CRYPTSETUP open $LOOPDEV --test-passphrase || fail + echo $PWD1 | $CRYPTSETUP open $LOOPDEV $DEV_NAME 2>&1 | grep -q "No known cipher specification pattern" || fail + echo $PWD1 | $CRYPTSETUP reencrypt $LOOPDEV >/dev/null 2>&1 && fail + dmsetup create $DEV_NAME --uuid CRYPT-LUKS2-3d20686f551748cb89911ad32379821b-test --table \ + "0 8 crypt capi:xts(ecb(aes-generic))-plain64 edaa40709797973715e572bf7d86fcbb9cfe2051083c33c28d58fe4e1e7ff642 0 $LOOPDEV 32768" + $CRYPTSETUP status $DEV_NAME | grep -q "n/a" || fail + $CRYPTSETUP close $DEV_NAME ||fail +fi if [ $HAVE_KEYRING -gt 0 -a -d /proc/sys/kernel/keys ]; then prepare "[45] Link VK to a keyring and use custom VK type." wipe @@ -1474,6 +1514,10 @@ if [ $HAVE_KEYRING -gt 0 -a -d /proc/sys/kernel/keys ]; then test_vk_link_and_reactivate $KEY_NAME "%keyring:$TEST_KEYRING_NAME" "user" test_vk_link_and_reactivate $KEY_NAME "%keyring:$TEST_KEYRING_NAME" + test_vk_link_with_passphrase_check $KEY_NAME "%:$TEST_KEYRING_NAME" + test_vk_link_with_passphrase_check $KEY_NAME "%:$TEST_KEYRING_NAME" "user" + test_vk_link_with_passphrase_check $KEY_NAME "%:$TEST_KEYRING_NAME" "logon" + # test numeric keyring name -5 is user session (@us) keyring echo $PWD1 | $CRYPTSETUP open $LOOPDEV $DEV_NAME --link-vk-to-keyring -5::%logon:$KEY_NAME || fail keyctl search @us logon $KEY_NAME > /dev/null 2>&1 || fail "VK is not linked to the specified keyring after activation." diff --git a/tests/crypto-vectors.c b/tests/crypto-vectors.c index 02e6be3..58d1309 100644 --- a/tests/crypto-vectors.c +++ b/tests/crypto-vectors.c @@ -1533,10 +1533,12 @@ int main(__attribute__ ((unused)) int argc, __attribute__ ((unused))char *argv[] { setvbuf(stdout, NULL, _IONBF, 0); +#ifndef NO_CRYPTSETUP_PATH if (getenv("CRYPTSETUP_PATH")) { printf("Cannot run this test with CRYPTSETUP_PATH set.\n"); exit(77); } +#endif if (crypt_backend_init(fips_mode())) exit_test("Crypto backend init error.", EXIT_FAILURE); diff --git a/tests/img_fs_xfs5.img.xz b/tests/img_fs_xfs5.img.xz Binary files differnew file mode 100644 index 0000000..26bd54c --- /dev/null +++ b/tests/img_fs_xfs5.img.xz diff --git a/tests/luks2-reencryption-test b/tests/luks2-reencryption-test index 57acae0..a5f020e 100755 --- a/tests/luks2-reencryption-test +++ b/tests/luks2-reencryption-test @@ -858,6 +858,7 @@ function setup_luks2_env() { echo $PWD1 | $CRYPTSETUP open $DEV $DEV_NAME || fail local check_keyring=$($CRYPTSETUP status $DEV_NAME | grep "key location: keyring") if [ -n "$check_keyring" ]; then + bin_check keyctl HAVE_KEYRING=1 prepare_vk_keyring fi @@ -2137,7 +2138,7 @@ rm -f $IMG_HDR echo $PWD1 | $CRYPTSETUP -q luksFormat --type luks2 $FAST_PBKDF_ARGON $DEV --offset 8192 || fail echo $PWD1 | $CRYPTSETUP open $DEV $DEV_NAME || fail wipe_dev /dev/mapper/$DEV_NAME -echo $PWD1 | $CRYPTSETUP reencrypt $DEV -q --decrypt --header $IMG_HDR --active-name $DEV_NAME || fail +echo $PWD1 | $CRYPTSETUP reencrypt -q --decrypt --header $IMG_HDR --active-name $DEV_NAME || fail check_hash_dev_head $DEV 2048 $HASH2 rm -f $IMG_HDR @@ -2145,12 +2146,20 @@ rm -f $IMG_HDR echo $PWD1 | $CRYPTSETUP -q luksFormat --type luks2 $FAST_PBKDF_ARGON $DEV --offset 8192 || fail echo $PWD1 | $CRYPTSETUP open $DEV $DEV_NAME || fail wipe_dev /dev/mapper/$DEV_NAME -echo $PWD1 | $CRYPTSETUP reencrypt $DEV -q --decrypt --header $IMG_HDR --active-name $DEV_NAME --init-only || fail +echo $PWD1 | $CRYPTSETUP reencrypt -q --decrypt --header $IMG_HDR --active-name $DEV_NAME --init-only || fail check_hash_dev /dev/mapper/$DEV_NAME $HASH2 echo $PWD1 | $CRYPTSETUP reencrypt $DEV -q --header $IMG_HDR --active-name $DEV_NAME || fail check_hash_dev_head $DEV 2048 $HASH2 rm -f $IMG_HDR +# run in single command by --active-name parameter +echo $PWD1 | $CRYPTSETUP -q luksFormat --type luks2 $FAST_PBKDF_ARGON $DEV --offset 8192 || fail +echo $PWD1 | $CRYPTSETUP open $DEV $DEV_NAME || fail +wipe_dev /dev/mapper/$DEV_NAME +echo $PWD1 | $CRYPTSETUP reencrypt -q --decrypt --header $IMG_HDR --active-name $DEV_NAME || fail +check_hash_dev_head $DEV 2048 $HASH2 +rm -f $IMG_HDR + echo "[33] Decryption with datashift recovery (error in shift area)." prepare_linear_dev 32 echo "sector size 512" diff --git a/tests/meson.build b/tests/meson.build index 43fff9a..e6341e7 100644 --- a/tests/meson.build +++ b/tests/meson.build @@ -16,6 +16,9 @@ test_files_to_copy = [ 'fvault2-images.tar.xz', 'generators/generate-luks2-area-in-json-hdr-space-json0.img.sh', 'img_fs_ext4.img.xz', + 'img_fs_vfat.img.xz', + 'img_fs_xfs.img.xz', + 'img_fs_xfs5.img.xz', 'luks1-images.tar.xz', 'luks2_header_requirements.tar.xz', 'luks2_keyslot_unassigned.img.xz', @@ -27,6 +30,7 @@ test_files_to_copy = [ 'xfs_512_block_size.img.xz', 'valg.sh', 'cryptsetup-valg-supps', + 'LUKS-d238e48a-0ed3-4169-b841-f26b44693134.tar.xz' ] foreach file : test_files_to_copy diff --git a/tests/mode-test b/tests/mode-test index 81780cd..06daa40 100755 --- a/tests/mode-test +++ b/tests/mode-test @@ -52,6 +52,22 @@ skip() exit 77 } +function dm_crypt_capi_support() +{ + VER_STR=$(dmsetup targets | grep crypt | cut -f2 -dv) + [ -z "$VER_STR" ] && fail "Failed to parse dm-crypt version." + + VER_MAJ=$(echo $VER_STR | cut -f 1 -d.) + VER_MIN=$(echo $VER_STR | cut -f 2 -d.) + VER_PTC=$(echo $VER_STR | cut -f 3 -d.) + + if [ $VER_MIN -ge 16 ]; then + return 0 + fi + + return 1 +} + function valgrind_setup() { command -v valgrind >/dev/null || fail "Cannot find valgrind." @@ -132,7 +148,7 @@ dmcrypt() echo -n -e "PLAIN:" dmcrypt_check "$DEV_NAME"_tstdev $OUT else - echo -n "[n/a]" + echo -n "[N/A]" fi echo $PASSWORD | $CRYPTSETUP luksFormat --type luks1 $FAST_PBKDF2 -c $1 -s 256 /dev/mapper/$DEV_NAME >/dev/null 2>&1 @@ -193,12 +209,17 @@ dmcrypt xchacha12,aes-adiantum-plain64 dmcrypt xchacha20,aes-adiantum-plain64 echo -n "CAPI format:" -echo $PASSWORD | $CRYPTSETUP create -h sha256 -c 'capi:xts(aes)-plain64' -s 256 "$DEV_NAME"_tstdev /dev/mapper/$DEV_NAME || fail -$CRYPTSETUP close "$DEV_NAME"_tstdev || fail -echo $PASSWORD | $CRYPTSETUP create -h sha256 -c 'capi:xts(ecb(aes-generic))-plain64' -s 256 "$DEV_NAME"_tstdev /dev/mapper/$DEV_NAME 2>/dev/null && fail -dmsetup create "$DEV_NAME"_tstdev --table "0 8 crypt capi:xts(ecb(aes-generic))-plain64 $KEY 0 /dev/mapper/$DEV_NAME 0" || fail -$CRYPTSETUP status "$DEV_NAME"_tstdev 2>/dev/null | grep "type:" | grep -q "n/a" || fail -$CRYPTSETUP close "$DEV_NAME"_tstdev 2>/dev/null || fail -echo [OK] +if dm_crypt_capi_support ; then + echo $PASSWORD | $CRYPTSETUP create -h sha256 -c 'capi:xts(aes)-plain64' -s 256 "$DEV_NAME"_tstdev /dev/mapper/$DEV_NAME --debug || fail + $CRYPTSETUP close "$DEV_NAME"_tstdev || fail + echo $PASSWORD | $CRYPTSETUP create -h sha256 -c 'capi:xts(ecb(aes-generic))-plain64' -s 256 "$DEV_NAME"_tstdev /dev/mapper/$DEV_NAME 2>/dev/null && fail + dmsetup create "$DEV_NAME"_tstdev --table "0 8 crypt capi:xts(ecb(aes-generic))-plain64 $KEY 0 /dev/mapper/$DEV_NAME 0" || fail + $CRYPTSETUP status "$DEV_NAME"_tstdev 2>/dev/null | grep "type:" | grep -q "n/a" || fail + $CRYPTSETUP close "$DEV_NAME"_tstdev 2>/dev/null || fail + echo [OK] +else + echo [N/A] +fi cleanup +exit 0 diff --git a/tests/reencryption-compat-test b/tests/reencryption-compat-test index 68a8c1f..7a6301e 100755 --- a/tests/reencryption-compat-test +++ b/tests/reencryption-compat-test @@ -25,6 +25,9 @@ PWD1="93R4P4pIqAH8" PWD2="1cND4319812f" PWD3="1-9Qu5Ejfnqv" +LUKS1_DECRYPT_UUID=d238e48a-0ed3-4169-b841-f26b44693134 +LUKS1_DECRYPT="LUKS-$LUKS1_DECRYPT_UUID" + MNT_DIR=./mnt_luks START_DIR=$(pwd) FIPS_MODE=$(cat /proc/sys/crypto/fips_enabled 2>/dev/null) @@ -45,7 +48,7 @@ function remove_mapping() [ -b /dev/mapper/$DEV_NAME2 ] && dmsetup remove --retry $DEV_NAME2 [ -b /dev/mapper/$DEV_NAME ] && dmsetup remove --retry $DEV_NAME [ ! -z "$LOOPDEV1" ] && losetup -d $LOOPDEV1 >/dev/null 2>&1 - rm -f $IMG $IMG_HDR $ORIG_IMG $KEY1 $HEADER_LUKS2_PV $DEV_LINK >/dev/null 2>&1 + rm -f $IMG $IMG_HDR $ORIG_IMG $KEY1 $HEADER_LUKS2_PV $DEV_LINK $LUKS1_DECRYPT.{org\|new\|log} >/dev/null 2>&1 umount $MNT_DIR > /dev/null 2>&1 rmdir $MNT_DIR > /dev/null 2>&1 LOOPDEV1="" @@ -211,7 +214,7 @@ function simple_scsi_reenc() function mount_and_test() { test -d $MNT_DIR || mkdir -p $MNT_DIR mount $@ $MNT_DIR 2>/dev/null || { - echo -n "failed to mount [SKIP]" + echo -n "[N/A]" return 0 } rm $MNT_DIR/* 2>/dev/null @@ -239,7 +242,7 @@ function test_logging() { echo -n "$1:" for img in $(ls img_fs*img.xz) ; do wipefs -a $SCSI_DEV > /dev/null - echo -n "[${img%.img.xz}]" + echo -n " [${img%.img.xz}]" xz -d -c $img | dd of=$SCSI_DEV bs=4k >/dev/null 2>&1 mount_and_test $SCSI_DEV || return 1 done @@ -325,7 +328,7 @@ ln -s $IMG $DEV_LINK || fail echo $PWD1 | $REENC $IMG --type luks1 --new --header $DEV_LINK -q $FAST_PBKDF_ARGON 2>/dev/null && fail $CRYPTSETUP isLUKS $IMG 2>/dev/null && fail -if [ ! fips_mode ]; then +if ! fips_mode; then # well, movin' zeroes :-) OFFSET=2048 SIZE=$(blockdev --getsz $LOOPDEV1) @@ -425,7 +428,7 @@ add_scsi_device sector_size=512 dev_size_mb=32 physblk_exp=3 test_logging "[4096/512 sector]" || fail test_logging_tmpfs || fail -if [ ! fips_mode ]; then +if ! fips_mode; then echo "[10] Removal of encryption" prepare 8192 echo $PWD1 | $CRYPTSETUP -q luksFormat --type luks1 $FAST_PBKDF $LOOPDEV1 || fail @@ -490,7 +493,16 @@ if [ "$HAVE_BLKID" -gt 0 ]; then echo $PWD1 | $REENC --header $IMG_HDR $HEADER_LUKS2_PV -q $FAST_PBKDF --new --type luks1 2>/dev/null && fail test -f $IMG_HDR && fail fi -fi # if [ ! fips_mode ] + +# Only test if the LUKS1 decryption can be resumed with provided --uuid +echo "[14] Resume LUKS1 decryption" +prepare 8192 +tar xJf $LUKS1_DECRYPT.tar.xz || fail +echo $PWD1 | $REENC $LOOPDEV1 -q --decrypt --uuid $LUKS1_DECRYPT_UUID >/dev/null || fail +test -f $LUKS1_DECRYPT.org && fail +test -f $LUKS1_DECRYPT.new && fail +test -f $LUKS1_DECRYPT.log && fail +fi # if ! fips_mode remove_mapping exit 0 |