From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <gmazyland@gmail.com>
Received: from mail-wm0-x243.google.com (mail-wm0-x243.google.com
 [IPv6:2a00:1450:400c:c09::243])
 (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits))
 (No client certificate requested)
 by mail.server123.net (Postfix) with ESMTPS
 for <dm-crypt@saout.de>; Wed,  6 Apr 2016 07:38:18 +0200 (CEST)
Received: by mail-wm0-x243.google.com with SMTP id n3so9961670wmn.1
 for <dm-crypt@saout.de>; Tue, 05 Apr 2016 22:38:18 -0700 (PDT)
References: <57048FA2.7090008@holgerdanske.com>
From: Milan Broz <gmazyland@gmail.com>
Message-ID: <5704A0C7.2040707@gmail.com>
Date: Wed, 6 Apr 2016 07:38:15 +0200
MIME-Version: 1.0
In-Reply-To: <57048FA2.7090008@holgerdanske.com>
Content-Type: text/plain; charset=windows-1252
Content-Transfer-Encoding: 7bit
Subject: Re: [dm-crypt] Debian 7.10 random key swap Device /dev/sda2 is not
 a valid LUKS device.
List-Id: <dm-crypt.saout.de>
List-Unsubscribe: <http://www.saout.de/mailman/options/dm-crypt>,
 <mailto:dm-crypt-request@saout.de?subject=unsubscribe>
List-Archive: <http://www.saout.de/pipermail/dm-crypt/>
List-Post: <mailto:dm-crypt@saout.de>
List-Help: <mailto:dm-crypt-request@saout.de?subject=help>
List-Subscribe: <http://www.saout.de/mailman/listinfo/dm-crypt>,
 <mailto:dm-crypt-request@saout.de?subject=subscribe>
To: David Christensen <dpchrist@holgerdanske.com>, dm-crypt@saout.de

On 04/06/2016 06:25 AM, David Christensen wrote:
> dm-crypt:
> 
> I have a Debian 7.10 (Wheezy) computer with a random-key swap device. 
> The disk and swap are working.
> 
> 
> When I try to backup the LUKS header:
> 
>      # cryptsetup luksHeaderBackup /dev/sda2 --header-backup-file 
> luksheaderbackup-sda2.bin
>      Device /dev/sda2 is not a valid LUKS device.
> 
> 
> Is this expected/ normal behavior for a dm-crypt/ LUKS random-key swap 
> partition?

LUKS device cannot be used with random volume key, so I guess you use
just plain device without header. (So obviously header backup fails because
there is no header.)

You can verify it by checking entry in /etc/crypttab - no luks keyword:

> # grep sda2 /etc/fstab
> /dev/mapper/sda2_crypt                    none                    swap 

or running "cryptsetup status sda2_crypt" over unlocked device
(type is LUKS1 for LUKS devices)

Milan