The tag has no wiki summary.

learn more… | top users | synonyms

3
votes
0answers
40 views

remap read-only LUKS partition to read-write

cryptsetup can be invoked with --readonly or -r option, which will set up a read-only mapping: cryptsetup --readonly luksOpen /dev/sdb1 sdb1 Once I have opened a device as read-only, can I later ...
0
votes
1answer
21 views

setting default options for cryptsetup

Is there a way to set default options for cryptsetup? For example, lets say I want to make sure that I only open cryptsetup devices with the -r option. I would like to add it to a config file, so that ...
0
votes
1answer
51 views

Encrypted ArchLinux: unable to find root device

I have a problem with my new installation of ArchLinux with an encrypted partition. I guess I have done the same steps as before and it works on my other machine. The error message I get is: ERROR: ...
0
votes
1answer
19 views

Archlinux ARM Rasperry Pi decryption fail

I have created an encrypted Archlinux partition on my SD card, but currently I am unable to decrypt it. I am using the key "Xö&(4n=%YF3Ü!BN" which includes german letters. So for this I have ...
1
vote
1answer
47 views

Archlinux ARM Rasperry Pi login buffer display and decryption fail

I have put the Archlinux Arm on my SD card and the first time I have done this it was all correct and worked well but I had to "reinstall" everything for several reason. So now I am doing the same ...
0
votes
1answer
57 views

Storing a keyfile in an encrypted LVM

I'm using RHEL 6.5 and I want to encrypt some of my logical volumes (LVM). In order to not have to enter the passphrase multiple times, I want to store a keyfile in an encrypted LV. Example: ...
0
votes
1answer
29 views

How to add a progress bar to cryptsetup luksFormat?

Example command. cryptsetup --hash sha512 -c aes-xts-plain64 --key-size 512 luksFormat /dev/loop0 This can take quite a while for big files / on slow disks. How to add a progress bar?
1
vote
0answers
255 views

Accessed a TrueCrypt container without TrueCrypt. What dangers await?

I've got a TrueCrypt volume. In light of the unexpected demise of TrueCrypt, I've been trying to figure out what to do (reading lots of HOWTO websites). I'd like something that is simple and can work ...
1
vote
1answer
68 views

Backup LUKS (cryptsetup Command) partition or volume

Can you create a file container/volume in LUKS in the same way that you could do with Truecrypt? Otherwise, how can you backup a LUKS partition? Do you have to clone it, for example with dd? or backup ...
1
vote
1answer
83 views

LUKS: Enter passphrase and nothing happens

I've installed gentoo on my new laptop. I've got an LUKS-encrypted root partition (/dev/sda3). Cryptsetup (USE="gcrypt") is installed. Essential cryptographic API is compiled in kernel. Kernel and ...
0
votes
1answer
129 views

How do you encrypt a USB drive partition with the Twofish cipher and SHA-512 hash without using TrueCrypt? [closed]

I've been trying to string together the right flags in cryptsetup: cryptsetup -y -h sha512 -c twofish-xts-plain64 -s 512 luksFormat /dev/sdx But it hasn't been working. When I enter the command ...
1
vote
3answers
260 views

How much storage overhead comes along with cryptsetup and ext4?

I want to encrypt the content of a directory in a container with an ext4 filesystem using cryptsetup. The size of the container should be as small as possible and as big as necessary, because I only ...
1
vote
1answer
87 views

Cryptsetup: pre-fill the partition with random data

It says it is an optional step, but it is recommended to do this, it improves encryption to pre-fill the partition with random data. What brings security filled with random data? Is it more difficult ...
3
votes
1answer
324 views

How to open multiple LUKS volumes with key entered in initramfs?

I have a Debian 7.4 (stable) based server configured to use an encrypted (RAID1 + LVM) root partition (/boot is un-encrypted regular partition) to which I installed dropbear SSH server so I can ...
2
votes
1answer
115 views

How can move a LUKS container from the middle of a partition to the beginning?

For the tl;dr, skip to the bottom. I have a dual-boot setup with Mac OS X at the beginning of my drive and three GNU/Linux partitions at the end of the drive. I don't have the relevant machine on ...
1
vote
0answers
60 views

How to install linux (with crypto /Home + / partition) with enough swap space to hibernate

What are the steps to install Linux (with cryoto /Home + / partition) Mint on a empty hard drive with 1.5x swap space as RAM. I am aware that the CD allows this as a default option but it doesn't ...
1
vote
0answers
16 views

How to ask for a password to mount crypted swap at boot time on Linux Mint 16 with initramfs-tools? [duplicate]

I use encrypted home folders on my notebook, which prevents use of hibernation on standard setup, because - and for a good reason - besides encrypting the home folder with ecryptfs, it reformats the ...
3
votes
0answers
199 views

Unable to close a Luks partition

For backup purposes, I have "snapshotted" a LVM partition. This partition was crypted so I have opened this Luks partition (snapshot) in order to do my backup. The problem is that I have forgotten to ...
0
votes
0answers
84 views

LUKS - changing passphrase with /dev/mapper/fedora-root

I would like to change my passphrase in LUKS, so I started with typing mount | grep 'on / '. The result was /dev/mapper/fedora-root on / type ext4 (rw,relatime,seclabel,data=ordered). So next as usual ...
5
votes
1answer
349 views

Trying to understand LUKS encryption

I decided to encrypt my root partition with LUKS+LVM. My ThinkPad setup: Samsung 830 128GB SSD 750GB HDD Core 2 Duo 2,5 GHz P9500 8GB RAM But the more I read, the less I understand about those ...
5
votes
1answer
5k views

Why my encrypted LVM volume (LUKS device) won't mount at boot time?

I'm trying to setup an encrypted volume following this guide Everything is setup but mounting the encrypted volume fails at boot-time with the error: fsck.ext4: No such file or directory while ...
3
votes
1answer
189 views

cryptdisks_start: precheck failed: the device contains a filesystem type crypto_LUKS

I'm trying to use cryptdisks_start to open a LUKS device that is defined in my /etc/crypttab. Unfortunately, the command fails with the following error message: martin ~ # cryptdisks_start ...
3
votes
1answer
233 views

Open luks-encrypted partition from virtual DomU LVM disk containing another LVM

I've gotten myself in a bit of a bind, here. A while ago I set up an encrypted Unbuntu 13.04 under Xen. It's virtual disk is an LVM LV. This LV was presented to the DomU as a (whole) physical disk ...
1
vote
1answer
536 views

Booting encrypted root partion fails after system update

I have a problem booting my Debian Linux server. After a system update, GRUB loads the initrd and the system should ask for the password, but it doesn't. Instead, I get dropped to BusyBox. After ...
0
votes
1answer
199 views

How to remove LUKS auto-unlock?

Unfortunately my drive unlocks automatically. This makes the whole encryption useless. How do I turn off this annoying feature on a specified drive (e.g. /dev/x) ? The cryptsetup command I've found ...
3
votes
1answer
2k views

LUKS storing keyfile in encrypted usb drive

I already asked once about LUKS unlocking of multiple HDDs in Linux: LUKS and multiple hard drives. Now I would like to know how to secure store the keyfile used for the automatic unlock of the ...
2
votes
2answers
221 views

Automatically suspend luks volume after delay

Anyone have any ideas for how I can automatically do a luksSuspend on a luks volume after it's been unused for a certain amount of time. I was thinking of just scheduling a command with crontab or ...
1
vote
1answer
92 views

Prevent file access from hanging when luks volume is suspended

I've got a luks volume setup and mounted, and when not in use I suspend it with cryptsetup luksSuspend so it cannot be accessed. But if I forget it's suspended and try to do any kind of file access in ...
8
votes
2answers
4k views

How to mount a cryptsetup container just with `mount`?

I created an encrypted container via #!/bin/bash dd if=/dev/zero of=$1 bs=1 count=0 seek=$2 MAPPER=$(mktemp -up /dev/mapper) LOOPDEV=$(losetup --find --show $1) cryptsetup luksFormat $LOOPDEV ...
3
votes
1answer
7k views

How can I shrink a LUKS partition, what does `cryptsetup resize` do?

I am in progress of resizing a LUKS encrypted partition that contains a single ext4 filesystem (no LVM or something). The cryptsetup FAQ recommends to remove the old partition and recreate it, but ...