---
title: "Confirm Luks Rotation"
method: POST
path: "/servers/{vm_name}/luks/confirm"
tags: ["Servers"]
---

# Confirm Luks Rotation

`POST /servers/{vm_name}/luks/confirm`

Confirm or discard pending LUKS passphrase rotation results.

DEPRECATED for the storage-rotation flow: new VMs use POST /provision/confirm (same
shared logic). Kept for legacy in-field VMs; note the boot-phase root-passphrase confirm
still uses this route until /luks/* is fully retired.

The VM reports per-volume success/failure. require_confirm_nonce validates
and consumes the nonce before the handler runs. Volumes with rotated=True
have pending passphrases promoted to current; rotated=False discards pending.

## Path parameters

- `vm_name` string, required

## Headers

- `X-Chutes-Hotkey` string, nullable
- `X-Confirm-Nonce` string, nullable

## Request body

- LuksConfirmRequest — Request model for POST /luks/confirm.
  - `volumes` object, required — Per-volume rotation result reported by the VM

## Response `200`

Successful Response

- LuksConfirmResponse — Response model for POST /luks/confirm.
  - `status` string, required
  - `volumes` object, required

## Other responses

- `422` — Validation Error

---

[API](https://skmtc.net/chutes/apis/fastapi.md) · [All operations](https://skmtc.net/chutes/apis/fastapi/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/chutes/fastapi/versions/352418d4e3a2/schema)