add cryptsetup(8), add crypt command doc to fs(3)

2 files changed, 62 insertions, 0 deletions

diff --git a/sys/man/3/fs b/sys/man/3/fs
index 8a2367390..05b141ad0 100644
--- a/sys/man/3/fs
+++ b/sys/man/3/fs
@@ -157,6 +157,15 @@ specifies the default unit (sector) size in bytes and the default source
 for further partition devices.
 Default values are restored when the control file is closed.
 .TP
+.BI crypt " new file key"
+The device
+.I new
+corresponds to a AES-encrypted partition
+.I file
+encrypted with
+.I key (see
+.IR cryptsetup (8)).
+.TP
 .B clear
 Discard all
 .I fs
diff --git a/sys/man/8/cryptsetup b/sys/man/8/cryptsetup
new file mode 100644
index 000000000..513cea296
--- /dev/null
+++ b/sys/man/8/cryptsetup
@@ -0,0 +1,53 @@
+.TH CRYPTSETUP 8
+.SH NAME
+cryptsetup \- setup encrypted partition
+.SH SYNOPSIS
+.B cryptsetup
+.B -f
+.I files ...
+.br
+.B cryptsetup
+.B -o
+.I files ...
+.br
+.B cryptsetup
+.B -i
+.I files ...
+.SH DESCRIPTION
+.I Cryptsetup
+prepares a AES-encrypted partition to be used with the
+.IR fs (3)
+device.
+.PP
+The
+.B -f
+flag formats the partitions
+.I files,
+generating a new encryption key. The encryption key is
+protected by a password that
+.I cryptsetup
+will prompt for confirmation.
+.PP
+The flags
+.B -i
+and
+.B -o
+activate a previously formated encrypted partition. The
+.B -o
+flag outputs the
+.IR fs (3)
+ctl activation commands to standard output where
+.B -i
+directly writes them to the
+.B '/dev/fs/ctl'
+file.
+.PP
+Once activated, the new partition appears under
+.BI /dev/fs/ name
+where
+.I name
+is the last path element of the
+.I files
+argument.
+.SH SEE ALSO
+.IR fs (3)