The tag has no usage guidance.

learn more… | top users | synonyms

2
votes
2answers
29 views

Change encrypted partition UUID

I'm trying to change a partition's UUID, the problem is that I'm trying to change an encrypted volume. So I can't use the usual method described here. Since it throws the following error: tune2fs: ...
0
votes
1answer
29 views

Is plain dm-crypt equal to headerless LUKS?

If I use LUKS encryption provided --header=<file> option, will it be equivalent to using dm-crypt in terms of plausible deniability or will there still be a way to tell that the given partition ...
2
votes
2answers
115 views

Massive disk corruption on Ubuntu 15.10 with dm-crypt + LUKS full disk encryption?

I suspect there's a bug in Ubuntu's default whole disk encryption setup. Here's what happens, repeatably: I make a fresh install, Ubuntu 15.10 with whole disk encryption, overwriting the whole disk ...
1
vote
1answer
50 views

Waiting long (few minutes) during boot for cryptsetup for password prompt

I have LVM on the top cryptsetup on my Debian unstable amd64. A week ago after upgrade my initramfs changed and now I have to wait few minutes at the beginning of the boot before cryptsetup asked for ...
0
votes
0answers
16 views

what do I need to activate in my kernel to get dm-crypt

I am on an armv7, kernel 3.15.0 I have enabled device mapper and crypt target support. but I cannot find anything that specifically references dm-crypt in my kernel menu, would someone please be able ...
1
vote
0answers
34 views

Udisks2, LUKS and btrfs

I just bought a portable USB HDD,on which i put 2 partitions : a LUKS one, which contains a btrfs fs and a fat32 one, in case I'd have to use a system which doesn't support LUKS or btrfs I use ...
1
vote
0answers
21 views

How to NOT mount dm-crypt device on Cinnamon startup

Yeah this is counterclock-wise from anything I've found around. In before anything: I'm running Arch Linux x64, Cinnamon 2.6.13, 4.1.6-1 kernel, no crypt hooks. I've just made a test filesystem ...
2
votes
1answer
299 views

How can I set a label on a dm-crypt+LUKS container?

I just received a new USB flash drive, and set up 2 encrypted partitions on it. I used dm-crypt (LUKS mode) through cryptsetup. With an additional non-encrypted partition, the drive has the following ...
3
votes
1answer
468 views

cryptsetup: dm-crypt plain mode using keyfile AND passphrase

I feel a keyfile and a passphrase provide different benefits. They can not be obtained in the same way (one you need to physically acquire, the other one you need to know). Thus, I think there is ...
0
votes
1answer
727 views

Debian, Apache, 403 Forbidden Errors and Encrypted Drives

I have set up Apache on my local Debian Jessie installation but can not get my VirtualHost to work. Accessing http://localhost works just fine and shows me the It works! page. But when trying to ...
6
votes
1answer
97 views

How to restore an LVM container to a bigger physical partition?

The setup is an encrypted LVM container/PV that holds a few ext4 partitions. I am moving these to a new machine, but there is more room on the disk. So, I have created a bigger encrypted LVM ...
5
votes
1answer
777 views

Abysmal general dm-crypt (LUKS) write performance

I am investigating a problem where encrypting a block device imposes a huge performance penalty when writing to it. Hours of Internet reading and experiments did not provide me with a proper ...
0
votes
0answers
33 views

Optimizing initramfs : Enter dm-crypt password with targeted initramfs?

All my Linux partitions except /boot lie on an encrypted LVM volume, like a typical modern Debian installation. In theory, I could shrink my initrd file by replacing the line MODULES=most in ...
2
votes
1answer
201 views

Cloning a root partition onto a dm-crypt encrypted one

I have Gentoo Linux installed on a 25.93GB/62.43GB partition /dev/sda4. The other partitions on the disk are 150MB /boot on /dev/sda1 and 56,66GB unused space on other two partitions. I am planning ...
2
votes
1answer
93 views

Are encrypted volumes more vulnerable to power loss?

I have some encrypted volumes that I use with my Xubuntu machine. One volume is a container file that is mapped to /dev/loop0 and encrypted using plain dm-crypt; another volume is a USB hard drive ...
0
votes
3answers
2k views

/sbin/cryptsetup not found on boot

I've created an encrypted root partition using LUKS which contains a few LVM partitions. I can't boot and get the following output on startup: Begin mounting root file system ... Begin: Running ...
0
votes
0answers
322 views

Systemd config for later mounted encrypted volume with services working on it

Hi everyone, I am working on a Banana Pi with Arch Linux and i am currently trying to accomplish the following: After someone mounted the encrypted keyfiles for my external storage systemd shall use ...
1
vote
1answer
21 views

Linux Volume Encryption: Possible to specify your own Encryption Tool?

I want to use Volume Encryption on my Debian machine. Linux does have such a tool for that. But I want to use my own encryption tool to encrypt a partition. Now, is it somehow possible to specify it ...
0
votes
1answer
332 views

boot fails with “cryptsetup: lvm fs found but no lvm configured” [dual boot(2xlinux LVM, dm-crypt+luks)]

I have a dual-boot(xubuntu/#!) setup LVM with dm-crypt+luks as follows /dev/sda1 = /boot (xubuntu) /dev/sda2 = /boot (#!) /dev/sda3 = encrypted LVM /dev/mapper/volgroup-xroot = / (xubuntu) ...
3
votes
0answers
372 views

remap read-only LUKS partition to read-write

cryptsetup can be invoked with --readonly or -r option, which will set up a read-only mapping: cryptsetup --readonly luksOpen /dev/sdb1 sdb1 Once I have opened a device as read-only, can I later ...
2
votes
1answer
299 views

RHEL Error message mounting luks crypted filesystem at boot

I am configuring a luks crypted file system to be mounted at boot time using RHEL 6.5 I did all the configuration from command line and tt worked but printed an error message after asking for ...
0
votes
2answers
168 views

Encrypting drive which has content

I have 2 hard drives 3TB each. The first of these drives is full with very important content. I have encrypted the second 3TB drive using the following technique: ...
2
votes
2answers
79 views

Backed up over wrong hard drive

I've just written over the wrong hard drive using the command: sudo sh -c 'pv /dev/sdb >/dev/sdc' How do I go about undoing this? I was creating the first even backup of the drive, and I backed ...
1
vote
1answer
676 views

mount luks volume through pam with gdm

I'm on debian testing. I encrypted my /home with dm-crypt (luks). Following various tutorials I setup pam_mount to open it at login time. However when I try to login using gdm, it fails. The login ...
2
votes
1answer
221 views

Filesystem types for encrypted partitions

I wish to encrypt two external hard drives using dm-crypt/LUKS for whole-disk encryption. I want one hard drive to have an ext4 filesystem for Linux use only, and the other to have an NTFS filesystem, ...
7
votes
1answer
961 views

Full disk encryption with dm-crypt (without LUKS)

I am currently trying to achieve full disk encryption using dm-crypt in plain mode without LUKS header with a separate /boot on USB stick. My main goal is to achive plausible deniability on a ...
3
votes
3answers
1k views

How much storage overhead comes along with cryptsetup and ext4?

I want to encrypt the content of a directory in a container with an ext4 filesystem using cryptsetup. The size of the container should be as small as possible and as big as necessary, because I only ...
1
vote
1answer
273 views

Cryptsetup: pre-fill the partition with random data

It says it is an optional step, but it is recommended to do this, it improves encryption to pre-fill the partition with random data. What brings security filled with random data? Is it more difficult ...
3
votes
1answer
986 views

How to open multiple LUKS volumes with key entered in initramfs?

I have a Debian 7.4 (stable) based server configured to use an encrypted (RAID1 + LVM) root partition (/boot is un-encrypted regular partition) to which I installed dropbear SSH server so I can ...
6
votes
1answer
911 views

Trying to understand LUKS encryption

I decided to encrypt my root partition with LUKS+LVM. My ThinkPad setup: Samsung 830 128GB SSD 750GB HDD Core 2 Duo 2,5 GHz P9500 8GB RAM But the more I read, the less I understand about those ...
1
vote
2answers
434 views

Does DM-Crypt partition look like random noise?

If I format partition with dm-crypt does its entry in partition table suggest somehow that this partition is encrypted or for someone from outside it looks like regular partition with random noise ...
0
votes
0answers
619 views

Problem installing ArchLinux on LVM on a LUKS setup via archboot

I've used archlinux before, and I've decided to have it enccrypted. I use BIOS. I used the latest vesion of archboot. I made an LUKS setup, then made lvm volume group and two ext4 partition in it for ...
4
votes
2answers
1k views

Why does LUKS need to generate hash values?

If you create a new LUKS device, you can specify the option -hash and -iter-time. For example like this: sudo cryptsetup luksFormat --cipher aes-cbc-essiv:sha256 --key-size 256 --iter-time 2100 ...
0
votes
2answers
1k views

How can I extract the hash value of a LUKS device?

For LUKS devices I know that hashes are stored somehow in the partition header (I don't really know what this means). But I don't know how to print the hash value in this case. For example in a ...
5
votes
2answers
1k views

How to change the hash-spec and iter-time of an existing dm-crypt LUKS device?

How can I change the hash-spec and iter-time of an existing dm-crypt LUKS device? Clearly I can pass the options if I create a new device, for example something like this: sudo cryptsetup ...
1
vote
0answers
392 views

Why is the AESni flag missing for my i5 CPU

My CPU is reported by Intel to support the AES-NI native instructions. http://ark.intel.com/products/65707 However, /proc/cpuinfo does not list the aes flag (which is what I guess is preventing me ...
5
votes
2answers
619 views

How to get a usable full disk encryption with different encryptions for different users

I want to have a full system encryption on my laptop. But I have two users, one for home and one for work and want a separate encryption for both. Sure I could do a full disk encryption with dm-crypt ...
6
votes
1answer
973 views

Security of an encrypted (dm-crypt & LUKS) Ubuntu 12.04 installed by somebody else?

Suppose I want an Ubuntu setup (let it be 12.04) with full disk encryption. Ubuntu offers this as an option during installation. Suppose also that I have somebody (e.g. my vendor) else set this up ...
1
vote
0answers
226 views

How to blacklist bad blocks from a MD-raid + dm-crypt + ext4?

I have a ext4 partition, on top of a dm-crypt, on top of a MD-RAID 10. One partition (/dev/sdc1) dropped out of the array with a ton of read errors. I ran the manufacturer provided diagnostic tool ...
12
votes
3answers
4k views

Trim with LVM and dm-crypt

I tried to setup TRIM with LVM and dm-crypt on ubuntu 13.04 following this tutorial: http://blog.neutrino.es/2013/howto-properly-activate-trim-for-your-ssd-on-linux-fstrim-lvm-and-dmcrypt/ See the ...
6
votes
1answer
930 views

How to change the name an encrypted full-system partition is mapped to

My system is fully encrypted with dm-crypt and LVM. I recently moved the encrypted partition from /dev/sda5 to /dev/sda2. My question is: how can I change the name the encrypted partition is mapped ...
2
votes
2answers
293 views

Detecting the device of a crypto mount

I have an external eSATA-hdd on an OpenSUSE 12.2 system. The external hdd has an LVM on a dm-crypt partition. I mount it by powering it up and then doing rescan-scsi-bus.sh cryptsetup -v luksOpen ...
4
votes
2answers
744 views

How to encrypt my system such that suspend to RAM works and is also encrypted

How can I encrypt my system (at best using lvm + dm-crypt/luks) such that suspend to RAM works and that everything is in an encrypted state when suspended to RAM?
2
votes
1answer
374 views

Dm-Crypt system encryption with different keys per user

I have found the following example configuration for a system encryption: Example 5: paranoid system encryption • whole hard drive encrypted with dm-crypt+LUKS └──> unlocked before boot, ...
3
votes
3answers
583 views

Is there any utility or procedure available to dm-crypt my existing live data in place to make a full disk encryption

Once I already have a running Linux system installed with live unencrypted data on my HDD. Is there any reasonable way to dm-crypt that entire HDD right in place? (Without backing up then restoring ...
1
vote
0answers
253 views

DBUS interface to decrypt a LUKS device?

In modern DEs, like KDE or XFCE, you can mount a LUKS device after entering the password. Now I want to do this without the file manager, with two steps, Decrypt the device Mount the disk with ...
3
votes
1answer
731 views

Will using a compressed filesystem over an encrypted volume improve performance?

Encryption/decryption is often the main bottleneck when accessing an encrypted volume. Would using a filesystem with a fast transparent compression (such as BTRFS + LZO) help? The idea is that there ...
2
votes
0answers
381 views

How can I mount a dm_crypt device during boot, it fails all the time

EDIT: Problem solved, i updated from Debian 6.0.6 to 7.0.0, everything works now! I have a complex problem at booting. Basically, I have a debian apache box, as a music server in my home network. The ...
1
vote
2answers
396 views

How to debug/audit which devices cache writes?

I store documents on btrfs partition built upon sparse dm-crypt device located on ext4 main partition on physical harddrive. When kernel panics (and this happens on daily basis on my ASUS P53E with ...
1
vote
0answers
290 views

How to create mandos server-client pair?

I needed something like this post and found a post by Mandos developer. I read all literature and also tried to post, but it seems they have negligible activity in their mailinglist. So I am asking ...