| Both sides previous revisionPrevious revisionNext revision | Previous revision |
| notes:drive_wipe [2021/08/12 14:13] – Sean Rhone | notes:drive_wipe [2024/08/13 18:01] (current) – removed Sean Rhone |
|---|
| ====== Tools ====== | |
| |
| <code>sudo zypper install 'nvme-cli' -y && sync</code> | |
| |
| <code>sudo apt install 'nvme-cli' -y && sync</code> | |
| |
| <code>sudo dnf install nvme-cli hdparm -y && sync</code> | |
| |
| ====== Suspend/Wake ====== | |
| |
| * Some motherboard firmware lock/freeze drives, and prevents some wipe commands from working | |
| * Unlocking drives can be done with a suspend and wake | |
| * :!: This applies to both SATA and NVMe drives | |
| |
| <code>sync && systemctl suspend</code> | |
| |
| ====== lsblk ====== | |
| |
| * :!: **Always** check before running anything | |
| * :!: Assume nothing; all commands below are **immediately destructive** on the block device they're ran on | |
| |
| <code>lsblk</code> | |
| |
| ====== EFI Variables ====== | |
| |
| **** | |
| |
| <code>sudo rm -f '/sys/firmware/efi/efivars/'* || sync && sudo efibootmgr -v</code> | |
| |
| ====== Drive Wipe ====== | |
| |
| ===== nvme0 ===== | |
| |
| <code>sudo blkdiscard --force --verbose '/dev/nvme0n1' && sync && sudo nvme format '/dev/nvme0' --force --namespace-id='1' --reset --ses='1' --pil='0' --pi='0' --ms='0' && sudo rm -f '/sys/firmware/efi/efivars/'* || sync</code> | |
| |
| <code>sudo blkdiscard --force --verbose '/dev/nvme0n1' && sync</code> | |
| |
| <code>sudo nvme format '/dev/nvme0' --force --namespace-id='1' --reset --ses='1' --pil='0' --pi='0' --ms='0' && sync</code> | |
| |
| <code>sudo wipefs --all --force '/dev/nvme0n1'</code> | |
| |
| ===== nvme1 ===== | |
| |
| <code>sudo blkdiscard --force --verbose '/dev/nvme1n1' && sync && sudo nvme format '/dev/nvme1' --force --namespace-id='1' --reset --ses='1' --pil='0' --pi='0' --ms='0' && sudo rm -f '/sys/firmware/efi/efivars/'* || sync</code> | |
| |
| <code>sudo blkdiscard --force --verbose '/dev/nvme1n1' && sync</code> | |
| |
| <code>sudo nvme format '/dev/nvme1' --force --namespace-id='1' --reset --ses='1' --pil='0' --pi='0' --ms='0' && sync</code> | |
| |
| <code>sudo wipefs --all --force '/dev/nvme1n1'</code> | |
| |
| ===== sda ===== | |
| |
| <code>sudo blkdiscard --force --verbose '/dev/sda' && sync && sudo hdparm --user-master u --security-set-pass 'x' '/dev/sda' && sudo hdparm --user-master u --security-erase 'x' '/dev/sda' && sudo hdparm --user-master u --security-set-pass 'x' '/dev/sda' && sudo hdparm --user-master u --security-erase-enhanced 'x' '/dev/sda' && sudo rm -f '/sys/firmware/efi/efivars/'* || sync</code> | |
| |
| <code>sudo blkdiscard --force --verbose '/dev/sda' && sync</code> | |
| |
| <code>sudo hdparm --user-master u --security-set-pass 'x' '/dev/sda' && sudo hdparm --user-master u --security-erase 'x' '/dev/sda' && sync</code> | |
| |
| <code>sudo hdparm --user-master u --security-set-pass 'x' '/dev/sda' && sudo hdparm --user-master u --security-erase-enhanced 'x' '/dev/sda' && sync</code> | |
| |
| <code>sudo wipefs --all --force '/dev/sda'</code> | |
| |
| ===== sdb ===== | |
| |
| <code>sudo blkdiscard --force --verbose '/dev/sdb' && sync && sudo hdparm --user-master u --security-set-pass 'x' '/dev/sdb' && sudo hdparm --user-master u --security-erase 'x' '/dev/sdb' && sudo hdparm --user-master u --security-set-pass 'x' '/dev/sdb' && sudo hdparm --user-master u --security-erase-enhanced 'x' '/dev/sdb' && sudo rm -f '/sys/firmware/efi/efivars/'* || sync</code> | |
| |
| <code>sudo blkdiscard --force --verbose '/dev/sdb' && sync</code> | |
| |
| <code>sudo hdparm --user-master u --security-set-pass 'x' '/dev/sdb' && sudo hdparm --user-master u --security-erase 'x' '/dev/sdb' && sync</code> | |
| |
| <code>sudo hdparm --user-master u --security-set-pass 'x' '/dev/sdb' && sudo hdparm --user-master u --security-erase-enhanced 'x' '/dev/sdb' && sync</code> | |
| |
| <code>sudo wipefs --all --force '/dev/sdb'</code> | |
| |
| ===== sdc ===== | |
| |
| <code>sudo blkdiscard --force --verbose '/dev/sdc' && sync && sudo hdparm --user-master u --security-set-pass 'x' '/dev/sdc' && sudo hdparm --user-master u --security-erase 'x' '/dev/sdc' && sudo hdparm --user-master u --security-set-pass 'x' '/dev/sdc' && sudo hdparm --user-master u --security-erase-enhanced 'x' '/dev/sdc' && sudo rm -f '/sys/firmware/efi/efivars/'* || sync</code> | |
| |
| <code>sudo blkdiscard --force --verbose '/dev/sdc' && sync</code> | |
| |
| <code>sudo hdparm --user-master u --security-set-pass 'x' '/dev/sdc' && sudo hdparm --user-master u --security-erase 'x' '/dev/sdc' && sync</code> | |
| |
| <code>sudo hdparm --user-master u --security-set-pass 'x' '/dev/sdc' && sudo hdparm --user-master u --security-erase-enhanced 'x' '/dev/sdc' && sync</code> | |
| |
| <code>sudo wipefs --all --force '/dev/sdc'</code> | |
| |
| ===== sdd ===== | |
| |
| <code>sudo blkdiscard --force --verbose '/dev/sdd' && sync && sudo hdparm --user-master u --security-set-pass 'x' '/dev/sdd' && sudo hdparm --user-master u --security-erase 'x' '/dev/sdd' && sudo hdparm --user-master u --security-set-pass 'x' '/dev/sdd' && sudo hdparm --user-master u --security-erase-enhanced 'x' '/dev/sdd' && sudo rm -f '/sys/firmware/efi/efivars/'* || sync</code> | |
| |
| <code>sudo blkdiscard --force --verbose '/dev/sdd' && sync</code> | |
| |
| <code>sudo hdparm --user-master u --security-set-pass 'x' '/dev/sdd' && sudo hdparm --user-master u --security-erase 'x' '/dev/sdd' && sync</code> | |
| |
| <code>sudo hdparm --user-master u --security-set-pass 'x' '/dev/sdd' && sudo hdparm --user-master u --security-erase-enhanced 'x' '/dev/sdd' && sync</code> | |
| |
| <code>sudo wipefs --all --force '/dev/sdd'</code> | |
| |
