LUKS (Linux Unified Key Setup) is a disk-encryption specification.

learn more… | top users | synonyms

0
votes
1answer
16 views

How do can I tell what encryption is being used with signed in luks?

What command tells you what encryption is being used by a luks partition (all the relevant information initialization vector generation scheme, mode of operation and block cipher primitive).
1
vote
1answer
23 views

NFS v4 export encrypted partition. Client mounts empty dir

I have an encrypted hard drive on my Lan Server. It was encrypted using luks/dm-crypt. The server has a NFS v4 running to share files in the Lan. It works, except for the encrypted USB hard drive. If ...
0
votes
0answers
6 views

How can I change the password of a LVM setup in Fedora?

Using CLI, how can I change the password of a LUKS/LVM setup in Fedora (2x), where x can be 1,2, or 3? Note: The physical LVM2 volume spans over two partitions on two drives (/dev/sda3 and ...
0
votes
1answer
26 views

Automatic unlock LVM partitions with a Key LUKS dm-crypt

I'm trying to make an automatic unlock of other partitions, I have 9 Logical volumes including root, and I know root LVM will unlock manually true password to have a key decrypted. My goal is unlock ...
0
votes
0answers
30 views

Can I make grub go back to the menu when I get the cryptomount passphrase wrong?

I have GRUB 2 (EFI) booting my system, which is dual-boot between Debian 8.2 and Windows 10. The Debian system is on an encrypted partition, which is unlocked using cryptomount. This all works fine ...
1
vote
0answers
26 views

ArchLinux: Error installing grub on encrypted lvm partition(lvm on luks)

I am trying to install Arch Linux on an encrypted partition (LVM on LUKS). I followed the relevant Arch Wiki guide, but when I do: grub-install --recheck /dev/sda it gives me this output: ...
1
vote
1answer
19 views

Is it safe to reencrypt unencrypted mdadm array with LUKS?

I would like to convert my raid6 mdadm into encrypted LUKS. Right now raid6 consists of "/dev/sdX1" which are raid partitions. /dev/md0 doesn't have a partition - it is pure ext4 FS. Is it safe to ...
0
votes
0answers
29 views

Combine grub2 + GPT partition + LUKS + LVM (grub overwrites LUKS header)

I'm trying to configure system to boot from one GPT encrypted LVM partition. But when I set partition type to 8300 grub-install complains on warning : this GPT partition label contains no BIOS boot ...
1
vote
0answers
57 views

howto interpret `cryptsetup benchmark` results?

summary: I can run cryptsetup benchmark and sort the results, but seek guidance in their interpretation. E.g., should I give more weight to encryption speed or decryption speed? Should key-derivation ...
1
vote
2answers
38 views

Renumber encrypted partition - sda3 to sda5

I have an encrypted crypt-luks partition that is currently named sda3, and is the last partition on the disk, that is, there are no sda4 or sda5. The encrypted partition contains three logical volumes ...
0
votes
1answer
33 views

Is plain dm-crypt equal to headerless LUKS?

If I use LUKS encryption provided --header=<file> option, will it be equivalent to using dm-crypt in terms of plausible deniability or will there still be a way to tell that the given partition ...
1
vote
1answer
38 views

Unable to remove stale volume

I have an external hard drive connected to my Ubuntu laptop via USB. The whole hard drive is LUKS encrypted. Next to the encryption layer sits an LVM volume which I mount to /mnt/es. Once opened, ...
0
votes
0answers
21 views

How do I execute a command if a drive is not mounted?

I am trying to create a shell script to mount a LUKS volume if it is not already mounted. The LUKS password will be in the shell script. The shell script is being stored in a encrypted folder so it is ...
1
vote
1answer
46 views

How do I change a LUKS password?

I would like to change a LUKS password. I want to remove my old password, but I would like to try out my new password before removing the original. I obviously know the old password. I would like to ...
1
vote
1answer
31 views

Not able to finish setting up LUKS

I am trying to encrypt a new VM with LVM on LUKS. I formatted and partitioned the HD (1 partition). I ran: # cryptsetup -c aes-xts-plain64 -s 512 luksFormat /dev/sda1 /mnt/dok/31.jpg typing ...
3
votes
1answer
38 views

Decrypt a portion of a corrupted drive

I have a hard drive that got corrupted after a doing an MTP mounting of a cell phone. It was created under Fedora Core 20 using defaults. Originally, I thought I did it as an ext4 partition. I ...
2
votes
1answer
27 views

LUKS on an internal hard drive

I have a hard drive which is encrypted using LUKS. It was originally an external hard drive. Recently I removed the casing and connected it directly (via SATA). However, when I connect it directly, ...
2
votes
2answers
131 views

Massive disk corruption on Ubuntu 15.10 with dm-crypt + LUKS full disk encryption?

I suspect there's a bug in Ubuntu's default whole disk encryption setup. Here's what happens, repeatably: I make a fresh install, Ubuntu 15.10 with whole disk encryption, overwriting the whole disk ...
3
votes
1answer
39 views

What is the proper way to unlock a root filesystem spanning two LUKS devices by only entering the password once, using systemd?

I have been having a lot of issues getting an encrypted multi-disk root filesystem to boot up reliably under systemd on Debian Jessie while only having to enter the password once. Previously I've ...
1
vote
1answer
127 views

USB key not mounting at boot to unlock LUKS system

I am running Debian Jessie. I have 2 hard drives with my various partitions spread across both (not RAID). Both of them are separately LUKS encrypted, and LVMs sit upon both of those. My /boot ...
4
votes
1answer
87 views

Dropbear terminates before LUKS password prompt on Debian Jessie

I'm trying to use dropbear as a ssh server to unlock an encrypted partition which was created during Debian 8.2 setup. It boots to the password prompt (and unlocks if correct password is typed) but ...
1
vote
0answers
34 views

Udisks2, LUKS and btrfs

I just bought a portable USB HDD,on which i put 2 partitions : a LUKS one, which contains a btrfs fs and a fat32 one, in case I'd have to use a system which doesn't support LUKS or btrfs I use ...
1
vote
1answer
422 views

Cannot format device /dev/sda4 which is still in use

When I try to LUKS encrypt a partition on a CentOS 7 server using the command cryptsetup -y luksFormat /dev/sda4, the attempt fails with the error Cannot format device /dev/sda4 which is still in use. ...
2
votes
1answer
31 views

Secure deletion on BTRFS in LVM

I have a BTRFS filesystem in an LVM logical volume, which exists inside of a LUKS disk. For reference's sake, let's call the LV lvm-root, and the LUKS disk crypt-root, and the BTRFS filesystem ...
0
votes
0answers
59 views

why can't I partition a LUKS mounted partition?

A CentOS 7 server has to have LUKS encryption for everything but /boot and /boot/efi. And the large LUKS encrypted remainder partition (1.8 TB) will then need to be partitioned further. I was able ...
2
votes
1answer
329 views

How can I set a label on a dm-crypt+LUKS container?

I just received a new USB flash drive, and set up 2 encrypted partitions on it. I used dm-crypt (LUKS mode) through cryptsetup. With an additional non-encrypted partition, the drive has the following ...
1
vote
0answers
49 views

Encrypted boot drops to shell, how to set LVM crypttab consistently? 'ALERT! {logical volume path} does not exist'

I used Luks to encrypt my whole hard drive, and created that sda drive as a physical volume. Under that volume, I create a volume group vg00 with my 3 logical volumes lv00_root, lv01_home, and ...
2
votes
1answer
113 views

Is there a way to enter a password with onscreen keyboard to unlock a LUKS crypto device during bootup?

I just installed Linux (Ubuntu, but it does not really matter) on an x86-based tablet. I also encrypted a partition which is mounted during bootup. Of course, one usually needs to enter the password ...
0
votes
0answers
17 views

LVM Mapper can't be found

I'm getting the error below. If i write "lvm vgchange -ay", "exit" i can go on and system boots. But why is this happening? I don't want to write this commands EVERY boot. What can i do for this?
0
votes
0answers
32 views

Zenity, how to manage cryptsetup prompt?

With Zenity, I display a progressBar and install/config many stuff on a Linux Mint (Debian) computer. I had to avoid any prompt. But one step prompts Enter a passphrase:, this is cryptsetup ...
0
votes
1answer
98 views

How to automate cryptsetup-luksAddKey with passphrase?

Context: I replaced my passphrase prompted at launch by a keyfile, stored on a USB dongle. My question concerns the step: # cryptsetup luksAddKey /path/to/mykeyfile . I generated my added key ...
1
vote
0answers
389 views

Grub cryptdevice with changing device names?

I feel this is a stupid question. I have an encrypted Arch setup (without LVM) were a single disk (sdc) contains an unencrypted boot partition and the encrypted root partition. Below the output of ...
1
vote
0answers
55 views

/etc/crypttab for anyusb?

On my LUKS-encrypted machine, I have edited my /etc/crypttab to inform the system that a keyfile is on a pendrive. I did this by adding a line in /etc/crypttab, using the UUID of my encrypted HDD, and ...
0
votes
0answers
186 views

Install Arch Linux when LVM on LUKS keyfile on USB and bootloader on USB

I am trying to install Arch Linux in the following way: LVM is installed on LUKS when the LUKS key is image stored on USB the bootloader is also on additional USB For some reason, even though I ...
0
votes
1answer
286 views

Mint, install and LUKS/LVM

I want to make my linux laptopwith LUKS Encryption. OS : Mint 17. Is it better to make the disk LUKS-encrypted: at the installation process ? after it ? Quite a noob question, I need to be sure. ...
1
vote
1answer
103 views

Encrypt existing disk with LUKS?

I have get informed on how prepare a LUKS system & partitions, giving a key/passphrase, etc. But for a new fresh install of linux. How to encrypt an already installed/configured linux system ? ...
1
vote
1answer
168 views

btrfs on LVM on LUKS - one LUKS container performs WAY better than the other

I have 2 LUKS containers, one with default OpenSUSE installer settings, another one with -h sha512 -s 512 -i 5000 and detached header. On top of each of them there is LVM - one with only 1 OS volume ...
0
votes
1answer
279 views

Problem with GRUB for dual-boot installation of LMDE 2 (and Windows) on encrypted luks-lvm (truecrypt)

I'm trying to install LMDE 2 'Betsy' 64-Bit dual-booting with Windows 8.1 and both systems encrypted separately, Windows with truecrypt and LMDE with luks. When booting I want to be asked for the ...
0
votes
0answers
8 views

Linux tries to mount before decrypting

My hard drive has LVM running inside of a LUKS encryption. My LUKS encryption is set to decrypt on boot and my ext4 partition in LVM is set to mount at boot. For whatever reason my system hangs at ...
0
votes
1answer
620 views

Arch linux root device problem in '/dev/mapper/MyStorage-rootvol'

I installed Arch x86_64, these are the commands I used during the installation: # parted /dev/sda (parted) mklabel msdos (parted) mkpart primary ext2 2MiB 2GiB (parted) mkpart primary ext4 2GiB 100% ...
4
votes
1answer
90 views

Encrypted filesystems with swap partitions

A common error that happens with Ubuntu, though not Ubuntu in particular is the options of being able to encrypt the file system at installation time which creates an encrypted swap partition with ...
1
vote
1answer
143 views

luks volume disappears after reboot

I created a separate partition on a CentOS install (VirtualBox), and am attempting to encrypt it using cryptsetup and LUKS. I'm using the following commands to get this set up: cryptsetup luksOpen ...
2
votes
1answer
167 views

how to clone images of drives with LUKS+LVM2?

I have 2 Debian boxes which I need to upgrade. In the past, before upgrading any box, I have used Clonezilla to create an image of each of the box's harddrives for use as disaster backup, in case ...
1
vote
0answers
233 views

Difference between cryptopts and crypttab

I'm setting up an encrypted root fs, which I've done before, but this time I'm using a PGP-encrypted keyfile with a symmetric password to familiarize myself with the process. There are two places ...
1
vote
0answers
130 views

How to create separate usr partition during arch install?

How do I modify and add the hooks needed in mkinitcpio to have a separate usr partition? Also, am I mounting the other partitions correctly? http://imgur.com/Rxt6o1g Basically I'm using UEFI with ...
0
votes
1answer
563 views

Mounting failed - invalid argument

I've setup a Kali Linux installation on an SD card and created an encrypted LUKS partition with a LVM logical volume inside of it, then created a BTRFS filesystem inside. Almost everything works, but ...
1
vote
2answers
139 views

Automatically shred LUKS partition upon X failed decryption attempts?

Is it possible to set up a bootloader that automatically begins shredding the header.img file and then the encrypted partition itself upon X failed attempts at decrypting the partition? If this does ...
2
votes
1answer
2k views

Debian error message: “Unable to find LVM volume”, but then boots successfully

I was trying to encrypt all the HDD during the installation process of Debian 8 Jessie using full disk encryption + LVM, and I did it, but, there are a little "problem". Before the system asks me the ...
2
votes
2answers
206 views

How to move the bootloader from a hard drive to a usb stick

I've decided to move my Debian bootloader and /boot from the hard drive to a USB stick. I'm using LUKS to en/decrypt my hard drive and the bootloader is the only unencrypted partition. How can I ...
5
votes
1answer
57 views

Is there an unencrypted but signed filesystems?

I'm curious if there is a filesystem that's unencrypted, making it readable by anyone, but employs a digital signature scheme so as to require that writes be digitally signed. I suspect the answer ...