Listing 1: LUKS-Volume erstellen

cryptsetup --verify-passphrase -v luksFormat
/dev/nvme0n1p2
cryptsetup luksOpen /dev/nvme0n1p2 luks_data
mkfs.xfs /dev/mapper/luks_data
cryptsetup luksClose /dev/mapper/luks_data


Listing 2: Aktualisierter LUKS-Header für FIDO2

sudo systemd-cryptenroll --fido2-device auto /dev/nvme0n1p2