From fc5bb399094b0e727d4a774a77a1b48ef90cad42 Mon Sep 17 00:00:00 2001 From: tiyn Date: Tue, 20 Sep 2022 15:44:12 +0200 Subject: [PATCH] dislocker: guide added --- wiki/linux/dislocker.md | 33 +++++++++++++++++++++++++++++++++ 1 file changed, 33 insertions(+) create mode 100644 wiki/linux/dislocker.md diff --git a/wiki/linux/dislocker.md b/wiki/linux/dislocker.md new file mode 100644 index 0000000..3724a26 --- /dev/null +++ b/wiki/linux/dislocker.md @@ -0,0 +1,33 @@ +# Dislocker + +[Dislocker](https://github.com/Aorimn/dislocker) is a driver to read and write +Bitlocker-ed volumes under Linux systems. + +## Setup + +On most of the Linux distributions Dislocker is bundled with the `dislocker` +package. + +## Mounting Bitlocker-ed volume + +For the mounting to work two directories are required. +One to mount the `dislocker-file` (`/mnt/bitlocker`) and one to mount the +windows volume (`/mnt/windows`). +The device which holds the windows partition is assumed to be calles +`/dev/sdc1`. + +The following command mounts the `dislocker` file to `/mnt/bitlocker`. +Make sure to replace the password in the following command. +There is no gap between the `-u` and the password: +`sudo dislocker /dev/sdc1 -u -- /mnt/bitlocker` + +Alternatively a recovery key can be used: +`sudo dislocker /dev/sdc1 -p -- /mnt/bitlocker` + +Afterwards the `dislocker-file` can be mounted to the `/mnt/windows` directory. +`sudo mount -o loop /mnt/bitlocker/dislocker-file /mnt/windows` + +Following these commands the windows partition can be found mounted on +`/mnt/windows`. +It is possible that the partition uses the NTFS which requires the `ntfs-3g` +package to be installed to work with linux.