https://wiki.archlinux.org/title/dm-crypt/Device_encryption cryptsetup luksFormat /dev/sdb1 cryptsetup luksDump /dev/sdb1 cryptsetup open /dev/sdb1 root mount /dev/mapper/root /mnt/ mkfs.ext4 /dev/mapper/root mount /dev/mapper/root /mnt/ cp secret.txt /mnt/ sync umount /mnt/ cryptsetup close root external-hdd-poweroff /dev/sdb