Clevis

Clevis is a pluggable framework designed for automated decryption of data and LUKS volumes. The framework operates through a pin-based system where each pin functions as a plugin that implements specific decryption logic. The tool provides command-line functionality for both encryption and decryption operations. For encryption, users can execute commands to encrypt plaintext data into JWE (JSON Web Encryption) format. The decryption process reverses this operation, converting encrypted JWE files back to plaintext. Clevis utilizes a configuration system where JSON objects are passed to pins to establish the necessary parameters for encryption and decryption processes. This approach allows for flexible automation of decryption workflows without requiring manual intervention. The framework supports LUKS volume unlocking, enabling automated access to encrypted storage volumes. This capability is particularly useful in scenarios where automated system boot processes or service initialization requires access to encrypted data without user interaction.