The tag has no wiki summary.

learn more… | top users | synonyms

1
vote
1answer
13 views

Linux Volume Encryption: Possible to specify your own Encryption Tool?

I want to use Volume Encryption on my Debian machine. Linux does have such a tool for that. But I want to use my own encryption tool to encrypt a partition. Now, is it somehow possible to specify it ...
0
votes
1answer
63 views

boot fails with “cryptsetup: lvm fs found but no lvm configured” [dual boot(2xlinux LVM, dm-crypt+luks)]

I have a dual-boot(xubuntu/#!) setup LVM with dm-crypt+luks as follows /dev/sda1 = /boot (xubuntu) /dev/sda2 = /boot (#!) /dev/sda3 = encrypted LVM /dev/mapper/volgroup-xroot = / (xubuntu) ...
3
votes
0answers
66 views

remap read-only LUKS partition to read-write

cryptsetup can be invoked with --readonly or -r option, which will set up a read-only mapping: cryptsetup --readonly luksOpen /dev/sdb1 sdb1 Once I have opened a device as read-only, can I later ...
2
votes
1answer
86 views

RHEL Error message mounting luks crypted filesystem at boot

I am configuring a luks crypted file system to be mounted at boot time using RHEL 6.5 I did all the configuration from command line and tt worked but printed an error message after asking for ...
0
votes
0answers
101 views

Archlinux dm-crypt setup problem

I'm trying to setup dm-crypt to have complete encrypted volume and flash drive, that contains all the /boot partition.(i.e. in terms of archwiki I want to achieve #Plain dm-crypt(bit.ly/VNLKw0) ...
0
votes
2answers
99 views

Encrypting drive which has content

I have 2 hard drives 3TB each. The first of these drives is full with very important content. I have encrypted the second 3TB drive using the following technique: ...
2
votes
2answers
60 views

Backed up over wrong hard drive

I've just written over the wrong hard drive using the command: sudo sh -c 'pv /dev/sdb >/dev/sdc' How do I go about undoing this? I was creating the first even backup of the drive, and I backed ...
1
vote
1answer
268 views

mount luks volume through pam with gdm

I'm on debian testing. I encrypted my /home with dm-crypt (luks). Following various tutorials I setup pam_mount to open it at login time. However when I try to login using gdm, it fails. The login ...
2
votes
1answer
92 views

Filesystem types for encrypted partitions

I wish to encrypt two external hard drives using dm-crypt/LUKS for whole-disk encryption. I want one hard drive to have an ext4 filesystem for Linux use only, and the other to have an NTFS filesystem, ...
3
votes
0answers
580 views

Full disk encryption with dm-crypt (without LUKS)

I am currently trying to achieve full disk encryption using dm-crypt in plain mode without LUKS header with a separate /boot on USB stick. My main goal is to achive plausible deniability on a ...
1
vote
3answers
326 views

How much storage overhead comes along with cryptsetup and ext4?

I want to encrypt the content of a directory in a container with an ext4 filesystem using cryptsetup. The size of the container should be as small as possible and as big as necessary, because I only ...
1
vote
1answer
113 views

Cryptsetup: pre-fill the partition with random data

It says it is an optional step, but it is recommended to do this, it improves encryption to pre-fill the partition with random data. What brings security filled with random data? Is it more difficult ...
3
votes
1answer
414 views

How to open multiple LUKS volumes with key entered in initramfs?

I have a Debian 7.4 (stable) based server configured to use an encrypted (RAID1 + LVM) root partition (/boot is un-encrypted regular partition) to which I installed dropbear SSH server so I can ...
5
votes
1answer
437 views

Trying to understand LUKS encryption

I decided to encrypt my root partition with LUKS+LVM. My ThinkPad setup: Samsung 830 128GB SSD 750GB HDD Core 2 Duo 2,5 GHz P9500 8GB RAM But the more I read, the less I understand about those ...
1
vote
2answers
214 views

Does DM-Crypt partition look like random noise?

If I format partition with dm-crypt does its entry in partition table suggest somehow that this partition is encrypted or for someone from outside it looks like regular partition with random noise ...
0
votes
0answers
396 views

Problem installing ArchLinux on LVM on a LUKS setup via archboot

I've used archlinux before, and I've decided to have it enccrypted. I use BIOS. I used the latest vesion of archboot. I made an LUKS setup, then made lvm volume group and two ext4 partition in it for ...
3
votes
2answers
504 views

Why does LUKS need to generate hash values?

If you create a new LUKS device, you can specify the option -hash and -iter-time. For example like this: sudo cryptsetup luksFormat --cipher aes-cbc-essiv:sha256 --key-size 256 --iter-time 2100 ...
0
votes
2answers
497 views

How can I extract the hash value of a LUKS device?

For LUKS devices I know that hashes are stored somehow in the partition header (I don't really know what this means). But I don't know how to print the hash value in this case. For example in a ...
1
vote
1answer
332 views

How to change the hash-spec and iter-time of an existing dm-crypt LUKS device?

How can I change the hash-spec and iter-time of an existing dm-crypt LUKS device? Clearly I can pass the options if I create a new device, for example something like this: sudo cryptsetup ...
1
vote
0answers
277 views

Why is the AESni flag missing for my i5 CPU

My CPU is reported by Intel to support the AES-NI native instructions. http://ark.intel.com/products/65707 However, /proc/cpuinfo does not list the aes flag (which is what I guess is preventing me ...
4
votes
2answers
397 views

How to get a usable full disk encryption with different encryptions for different users

I want to have a full system encryption on my laptop. But I have two users, one for home and one for work and want a separate encryption for both. Sure I could do a full disk encryption with dm-crypt ...
6
votes
1answer
734 views

Security of an encrypted (dm-crypt & LUKS) Ubuntu 12.04 installed by somebody else?

Suppose I want an Ubuntu setup (let it be 12.04) with full disk encryption. Ubuntu offers this as an option during installation. Suppose also that I have somebody (e.g. my vendor) else set this up ...
1
vote
0answers
146 views

How to blacklist bad blocks from a MD-raid + dm-crypt + ext4?

I have a ext4 partition, on top of a dm-crypt, on top of a MD-RAID 10. One partition (/dev/sdc1) dropped out of the array with a ton of read errors. I ran the manufacturer provided diagnostic tool ...
10
votes
3answers
2k views

Trim with LVM and dm-crypt

I tried to setup TRIM with LVM and dm-crypt on ubuntu 13.04 following this tutorial: http://blog.neutrino.es/2013/howto-properly-activate-trim-for-your-ssd-on-linux-fstrim-lvm-and-dmcrypt/ See the ...
5
votes
1answer
254 views

How to change the name an encrypted full-system partition is mapped to

My system is fully encrypted with dm-crypt and LVM. I recently moved the encrypted partition from /dev/sda5 to /dev/sda2. My question is: how can I change the name the encrypted partition is mapped ...
2
votes
2answers
210 views

Detecting the device of a crypto mount

I have an external eSATA-hdd on an OpenSUSE 12.2 system. The external hdd has an LVM on a dm-crypt partition. I mount it by powering it up and then doing rescan-scsi-bus.sh cryptsetup -v luksOpen ...
3
votes
2answers
387 views

How to encrypt my system such that suspend to RAM works and is also encrypted

How can I encrypt my system (at best using lvm + dm-crypt/luks) such that suspend to RAM works and that everything is in an encrypted state when suspended to RAM?
1
vote
1answer
272 views

Dm-Crypt system encryption with different keys per user

I have found the following example configuration for a system encryption: Example 5: paranoid system encryption • whole hard drive encrypted with dm-crypt+LUKS └──> unlocked before boot, ...
2
votes
2answers
255 views

Is there any utility or procedure available to dm-crypt my existing live data in place to make a full disk encryption

Once I already have a running Linux system installed with live unencrypted data on my HDD. Is there any reasonable way to dm-crypt that entire HDD right in place? (Without backing up then restoring ...
1
vote
0answers
163 views

DBUS interface to decrypt a LUKS device?

In modern DEs, like KDE or XFCE, you can mount a LUKS device after entering the password. Now I want to do this without the file manager, with two steps, Decrypt the device Mount the disk with ...
2
votes
1answer
407 views

Will using a compressed filesystem over an encrypted volume improve performance?

Encryption/decryption is often the main bottleneck when accessing an encrypted volume. Would using a filesystem with a fast transparent compression (such as BTRFS + LZO) help? The idea is that there ...
2
votes
0answers
291 views

How can I mount a dm_crypt device during boot, it fails all the time

EDIT: Problem solved, i updated from Debian 6.0.6 to 7.0.0, everything works now! I have a complex problem at booting. Basically, I have a debian apache box, as a music server in my home network. The ...
1
vote
2answers
282 views

How to debug/audit which devices cache writes?

I store documents on btrfs partition built upon sparse dm-crypt device located on ext4 main partition on physical harddrive. When kernel panics (and this happens on daily basis on my ASUS P53E with ...
1
vote
0answers
181 views

How to create mandos server-client pair?

I needed something like this post and found a post by Mandos developer. I read all literature and also tried to post, but it seems they have negligible activity in their mailinglist. So I am asking ...
2
votes
1answer
770 views

Fast encryption for home directory with Scientific Linux (ala' RedHat)

I have a T61 with C2D T7300 CPU/4 GByte RAM. I has SL 6.3 on it, and I ticked the encrypt VG during install. If I start a "normal" windows xp on it, its ~slow.. so.. I need a little performance boost ...
8
votes
2answers
4k views

How to mount a cryptsetup container just with `mount`?

I created an encrypted container via #!/bin/bash dd if=/dev/zero of=$1 bs=1 count=0 seek=$2 MAPPER=$(mktemp -up /dev/mapper) LOOPDEV=$(losetup --find --show $1) cryptsetup luksFormat $LOOPDEV ...
4
votes
1answer
561 views

How to decrypt an encrypted container via ssh without entering a passphrase while requiring some client authentication?

I log in to a server via public key authentication and then mount a container (using e.g. LUKS/dm-crypt or truecrypt). At the moment, I have to enter the container password manually. Is there a way to ...
1
vote
0answers
308 views

Multiple distros in VM with encrypted disk

I want to have a GNU/Linux setup on my computer, where I could use different distributions and isolated environments inside an operating system-level virtual machine. Then I also want to share my ...
6
votes
2answers
934 views

Optimize performance for encrypted disk

Recently I tried to copy 200GB to a 1TB external / USB2 / encrypted disk and it took 36 hours. The same copy when the disk was not encrypted took no longer than 1 hour. I am using dm-crypt (LUKS) ...
3
votes
1answer
465 views

Followed SSD-optimization advice, now root partition won't mount rw

Tonight I decided I wanted to tweak the configuration of my Debian install on my netbook (Ideapad S10-2) to work better with the SSD I put in it. I have done this before and never had any issues but ...
3
votes
1answer
1k views

How to salvage a lvm/luks install from custom install

I was battling with setting up a Mint install on an encrypted hard-drive, and I think I partially succeeded. But I cannot boot the system because some configuration is not correct, and since I'm a ...
0
votes
1answer
2k views

Grub2 unable to boot encrypted root

I'm using ArchLinux, I followed their tutorial on encrypting your root filesystem: https://wiki.archlinux.org/index.php/Using_DM-Crypt But I cannot get grub to boot the encrypted partition. My ...
1
vote
1answer
680 views

Resize LV's in a LUKS encrypted VG - Ubuntu 11.04

I wanted to resize the FS on a machine but i ran into problems: Purpose: the LV of /home is too big, the LV of / is too small (they're on 1 VG.) - I need to put 10 GByte from /home to /!! Problem: ...
1
vote
1answer
926 views

cryptsetup luksOpen only accepts password via ssh

while installing my Gentoo system I encoutered a strange error. One of my disk is encrypted, I have done all the installation via ssh, so did I enter the encryption passphrase via ssh. Now I entered ...
1
vote
1answer
504 views

mounting an encrypted dm-raid partition on login

I have a dm-raid1 with a LUKS encrypted partition md0 on it and I would like it to be mounted automatically when I login, using pam_mount. So far I have configured the pam_mount.conf.xml as follows: ...
5
votes
1answer
386 views

Why doesn't dm-crypt handle write barriers properly?

One of the well-known properties of dm-crypt is that it does not handle write barriers properly and hence it requires turning off on-drive write cache to prevent corruption of filesystems. As far as I ...