1NWIPE(24) User Commands NWIPE(24)
2
3
4
6 nwipe - securely erase disks
7
9 nwipe [options] [device1] [device2] ...
10
12 nwipe is a command that will securely erase disks using a variety of
13 recognised methods. It is a fork of the dwipe command used by Darik's
14 Boot and Nuke (dban). nwipe is included with partedmagic if you want a
15 quick and easy bootable CD version. nwipe was created out of a need to
16 run the DBAN dwipe command outside of DBAN, in order to allow its use
17 with any host distribution, thus giving better hardware support. It is
18 essentially the same as dwipe, with a few changes:
19
20 - pthreads is used instead of fork
21
22 - The parted library is used to detect drives
23
24 - The code is designed to be compiled with gcc
25
26 - SIGUSR1 can be used to log the stats of the current wipe
27
28
30 -V, --version
31 Prints the version number
32
33 -h, --help
34 Prints a help summary
35
36 --autonuke
37 If no devices have been specified on the command line, starts
38 wiping all devices immediately. If devices have been specified,
39 starts wiping only those specified devices immediately.
40
41 --autopoweroff
42 Power off system on completion of wipe delayed for one minute.
43 During this one minute delay you can abort the shutdown by typ‐
44 ing sudo shutdown -c
45
46 --sync=NUM
47 Will perform a syn after NUM writes (default: 100000)
48
49 0 - fdatasync after the disk is completely written
50 fdatasync errors not detected until completion.
51 0 is not recommended as disk errors may cause nwipe
52 to appear to hang
53
54 1 - fdatasync after every write
55 Warning: Lower values will reduce wipe speeds.
56
57 1000 - fdatasync after 1000 writes
58
59 --noblank
60 Do not perform the final blanking pass after the wipe (default
61 is to blank, except when the method is RCMP TSSIT OPS-II).
62
63 --nowait
64 Do not wait for a key before exiting (default is to wait).
65
66 --nosignals
67 Do not allow signals to interrupt a wipe (default is to allow).
68
69 --nousb
70 Do not show or wipe any USB devices, whether in GUI, --nogui or
71 autonuke mode. (default is to allow USB devices to be shown and
72 wiped).
73
74 --nogui
75 Do not show the GUI interface. Can only be used with the au‐
76 tonuke option. Nowait option is automatically invoked with the
77 nogui option. SIGUSR1 can be used to retrieve the current wip‐
78 ing statistics.
79
80 -v, --verbose
81 Log more messages, useful for debugging.
82
83 --verify=TYPE
84 Whether to perform verification of erasure (default: last)
85
86 off - Do not verify
87
88 last - Verify after the last pass
89
90 all - Verify every pass
91
92 Please mind that HMG IS5 enhanced always verifies the last
93 (PRNG) pass regardless of this option.
94
95 -m, --method=METHOD
96 The wiping method (default: dodshort).
97
98 dod522022m / dod - 7 pass DOD 5220.22-M method
99
100 dodshort / dod3pass - 3 pass DOD method
101
102 gutmann - Peter Gutmann's Algorithm
103
104 ops2 - RCMP TSSIT OPS-II
105
106 random / prng / stream - PRNG Stream
107
108 zero / quick - Overwrite with zeros 0x00
109
110 one - Overwrite with ones 0xFF
111
112 verify_zero - Verifies disk is zero filled
113
114 verify_one - Verifies disk is 0xFF filled
115
116 is5enh - HMG IS5 enhanced
117
118 -l, --logfile=FILE
119 Filename to log to. Default is STDOUT
120
121 -P, --PDFreportpath=DIR
122 Directory to write the PDF nwipe reports/certificates to. De‐
123 faults to ".". If DIR is set to noPDF no report PDF files are
124 written.
125
126 -p, --prng=METHOD
127 PRNG option (mersenne|twister|isaac|isaac64)
128
129 -q, --quiet
130 Anonymize serial numbers, Gui & logs display:
131 XXXXXXXX = S/N obtained & anonymized.
132 ???????? = S/N not available.
133
134 -r, --rounds=NUM
135 Number of times to wipe the device using the selected method
136 (default: 1)
137
138 -e, --exclude=DEVICES
139 Up to ten comma separated devices to be excluded, examples:
140 --exclude=/dev/sdc
141 --exclude=/dev/sdc,/dev/sdd
142
144 Please see the GitHub site for the latest list (https://github.com/mar‐
145 tijnvanbrummelen/nwipe/issues)
146
148 Nwipe is developed by Martijn van Brummelen <github@brumit.nl>
149
151 shred(1), dwipe(1), dd(1), dcfldd(1), dc3dd(1)
152
153
154
155nwipe version 0.35 October 2023 NWIPE(24)