LUKS (Linux Unified Key Setup) is a disk-encryption specification.

learn more… | top users | synonyms

-1
votes
0answers
21 views

What is the kernel parameter to specify the path to detached luks header?

I'm tyring to setup a encrypted root with the luks header on a usb device. So I have to pass a kernel parameter telling the path to the file containing the header but I can't find it. I know that ...
-1
votes
0answers
10 views

What is the kernel parameter to specify the luks header location?

I know that when your root is encrypted and your passphrase is on a keyfile you can tell the kernel the location of that keyfile using the parameter : cryptkey=/dev/<partition2>:<fstype>:&...
1
vote
1answer
16 views

How to stop cryptsetup luksFormat from creating the luks header on the encrypted device?

I'm trying to setup a partition and I'm trying to put the luks header on a USB device so I use the argument --header /path/to/usb-device, however I am still able to decrypt the device without the usb-...
1
vote
0answers
6 views

How can I tell if a encrypted (LUKS) device is already open?

Is there a way to tell, given a path to a LUKS block device, and not knowing the passphrase, whether the device is already open (decrypted)? What about knowing the path to the decrypted device?
0
votes
1answer
16 views

Arch Linux setup Luks encryption

So I'm trying to encrypt a partition sda2 while installing Arch Linux. root@archiso ~ # cryptsetup luksFormat /dev/sda2 -c aes-xts-plain -y -v -s 512 -h sha512 But it fails: Cannot format device /...
0
votes
0answers
28 views

Booting via grub (Ubuntu) with encrypted LVM

I've been obliged to install Ubuntu with ~everything encrypted (not just the home partition). Machine is a laptop with a single drive (/dev/sda) which I've partitioned thus: /dev/sda1 = FAT32, ...
1
vote
1answer
19 views

Mounted drive disappears and is no longer a valid LUKS device

A few days ago, I formatted and encrypted (LUKS+Ext4) a solid state drive the lazy way (using gnome-disks). The disk was mounted and I moved some data to the disk from another drive that I was going ...
2
votes
0answers
19 views

Reboot without having to decrypt LUKS partitions?

Is there a way to kexec reboot a running kernel without having to decrypt an encrypted LUKS root filesystem? I'd imagine not, but I'm not sure if there's a workaround for this.
1
vote
0answers
11 views

How to configure device mapper name of encrypted root partition with Grub2?

I would like to have my encrypted root partition mapped to the device mapper name system, i.e. it should eventually appear under /dev/mapper/system. My operating system is Fedora 24 Workstation Linux ...
0
votes
1answer
23 views

Restore unencrypted LVM2 logical volumes to LVM on LUKS setup?

I have an unencrypted Ubuntu 16.04 setup using LVM2. I'd like to 'port' this into an encrypted setup on the same computer and disk, which would save me the hassle of reinstalling all the apps and ...
1
vote
1answer
36 views

How to create a LUKS encrypted file in a vboxsf mountpoint?

I am trying to create a LUKS encrypted file in a VirtualBox image. It works fine unless the encrypted file resides in a VirtualBox shared folder. The error output is: 10+0 records in 10+0 records ...
1
vote
0answers
45 views

How to reboot a server with a LUKS encrypted partition

I have a CentOS 6 VM on which I used the following shell script for installing and configuring MongoDB to use a secondary LUKS (dm-crypt) encrypted disk for its database files: #!/bin/bash -e # Set ...
3
votes
0answers
20 views

LUKS: Change master key

I've already read this SE question, but it's somewhat old now. How can I reencrypt a LUKS partition using a different master key? I have a cloned VM image that needs to go into production, but it's ...
3
votes
1answer
37 views

LUKS: 1 master key but multiple passwords and key files?

After reading "man cryptsetup" and many StackExchange questions, I'm confused: Does LUKS use the same master key in each slot? If I execute the commands below, the displayed master key does not ...
2
votes
0answers
33 views

LUKS decryption at boot: using an nfs mount to store the key

I've been through this site for a number of LUKS related questions. I've seen methods for storing the LUKS key in plaintext on the root filesystem or on a USB key. My question is: Is there a way ...
2
votes
1answer
76 views

How to install Arch Linux root file system on LVM thin LVs on LUKS on GUID partitioned device?

I'm not able to boot a freshly installed Arch Linux system with its root file system residing on a LVM thinly provisioned logical volume on a LUKS encrypted partition on a GUID partitioned device. ...
1
vote
1answer
47 views

Are big LUKS file containers a bad idea?

I have 150 GB in files to back-up (on an external HDD). Could I just create a 150 GB LUKS container? Or would it be a better idea to create 5x30 GB, or 10x15 GB? Besides making a backup of the header, ...
2
votes
2answers
224 views

Mount error when automounting a LUKS-encrypted USB flashdrive

UPDATE 1: userone@desktop:~$ sudo umount "/media/userone/New Volume" umount: /media/userone/New Volume: mountpoint not found userone@desktop:~$ sudo cryptsetup luksClose /dev/mapper/luks-04cb4ea7-...
1
vote
0answers
42 views

Encrypt casper-rw file for use with Easy2Boot

I have created an Easy2Boot multiboot USB drive. Currently it contains two ISOs - Kali Linux 2016 and Linux Mint. I have created persistent ext2 filestore for both ISOs and configured them using the ...
2
votes
1answer
113 views

NixOS installation on multi-boot system with GRUB (from Arch installation)

I have one physical disk (/dev/sda) which is divided in /dev/sda1 (which is /boot bootable GRUB2 partition used and setup with Arch) and /dev/sda2 which is my cryptroot that, when unlocked, is a ...
1
vote
0answers
37 views

UUID of LUKS changes when cloned

I am trying to install Centos 7 (under LUKS) on a virtual machine in Fedora 23 using virt-manager and after that to clone that image to multiple USB drives. The problem is that the virtual machine ...
3
votes
1answer
87 views

Accessing Luks-encrypted disc from FreeBSD

I have some data on a ZFS in a machine running FreeBSD that needs evacuation. I have a disc in a USB enclosure with enough space, but it's encrypted using Luks on a machine running Linux. Is there any ...
0
votes
0answers
13 views

Why is EXT4 on LUKS on MD-RAID6 not detected by openSUSE's YaST

For maximum control over the storage configuration I've got two MD-RAID6 devices pre-configured as follows from openSUSE's Rescue system before rebooting the computer into openSUSE's installation ...
1
vote
0answers
50 views

Debian boot with encrypted disks: RAID is not assembled

Situation I am running Debian 8 on my machine. The disk setup is as follows: # lsblk NAME MAJ:MIN RM SIZE RO TYPE MOUNTPOINT sda 8:0 0 55.9G 0 ...
1
vote
0answers
32 views

Dictionary attack GPG symmetric encrypted LUKS keyfile

I remember typing in a long phrase for the password. I wrote all the words I could have possibly used into a plain text file, combining the words I know were used in a certain order. I might have ...
3
votes
1answer
3k views

lvmetad is not active yet, using direct activation during sysinit

I get the following error message at boot, just before being asked for my master password to access to my encrypted hard-drive (using dm-encrypt): lvmetad is not active yet, using direct activation ...
0
votes
0answers
27 views

Changing Debian installer default parameters

I wanna change the default parameters used by the Debian installer, specifically dm-crypt's key size and KDF iterations. "twofish" + "xts-plain64" supports 512bit keys on ArchLinux, so I wanted to ...
0
votes
2answers
87 views

Do I need boot partition on UEFI & Luks?

I'm trying to install Gentoo on LUKS partition (simple layout - single root partition, without underlying LVM). Right now it works, but I doubt if I done it properly. I've got such a partitions: ...
1
vote
2answers
51 views

RHEL: FDE w/o password - boot from key on partition

I'm trying to accomplish encrypting my OS w/ LVM on RHEL 7.2 and have it boot without entering a password by using a key on an unencrypted partition. LV VG Attr LSize Pool Origin Data% ...
1
vote
0answers
99 views

Initramfs in debootstrap chroot of fully encrypted system

I'm working on a script to create a fully encrypted washable system from debootstrap. It's doing some good, but the initramfs image that comes out does not pick up the cryptroot properly. After ...
1
vote
0answers
56 views

Make changes to busybox/initramfs that are persistent?

I am in the process of recovering my 32-bit Debian Jessie box with a lvm+LUKS disk. I am coming back from a system that had a root partition but no boot partition. Grub executes, but either vmlinuz or ...
1
vote
0answers
87 views

Kernel 4.1.18 doesn't support aes-xts-plain64

My root partition is under a luks crypt and when I type in my password it tells me to make sure my kernel supports aes-xts-plain64 and to check syslog for more info. Obviously I can't check syslog ...
2
votes
1answer
485 views

Guide for Gentoo setup with full disk encryption using LUKS+LVM

I'm looking for a way to make the following setup happen in Gentoo: /dev/sda1 -> /boot (ext2) /dev/sda2 -> Luks encrypted | +-lvm-vg1 | +- /dev/mapper/root-fs -> / (ext4) +- /dev/...
0
votes
1answer
35 views

How do can I tell what encryption is being used with signed in luks?

What command tells you what encryption is being used by a luks partition (all the relevant information initialization vector generation scheme, mode of operation and block cipher primitive).
1
vote
1answer
121 views

NFS v4 export encrypted partition. Client mounts empty dir

I have an encrypted hard drive on my Lan Server. It was encrypted using luks/dm-crypt. The server has a NFS v4 running to share files in the Lan. It works, except for the encrypted USB hard drive. If ...
1
vote
0answers
12 views

How can I change the password of a LVM setup in Fedora?

Using CLI, how can I change the password of a LUKS/LVM setup in Fedora (2x), where x can be 1,2, or 3? Note: The physical LVM2 volume spans over two partitions on two drives (/dev/sda3 and /dev/sdb1)....
1
vote
1answer
110 views

Automatic unlock LVM partitions with a Key LUKS dm-crypt

I'm trying to make an automatic unlock of other partitions, I have 9 Logical volumes including root, and I know root LVM will unlock manually true password to have a key decrypted. My goal is unlock ...
0
votes
0answers
86 views

Can I make grub go back to the menu when I get the cryptomount passphrase wrong?

I have GRUB 2 (EFI) booting my system, which is dual-boot between Debian 8.2 and Windows 10. The Debian system is on an encrypted partition, which is unlocked using cryptomount. This all works fine ...
1
vote
0answers
116 views

ArchLinux: Error installing grub on encrypted lvm partition(lvm on luks)

I am trying to install Arch Linux on an encrypted partition (LVM on LUKS). I followed the relevant Arch Wiki guide, but when I do: grub-install --recheck /dev/sda it gives me this output: grub-...
1
vote
1answer
49 views

Is it safe to reencrypt unencrypted mdadm array with LUKS?

I would like to convert my raid6 mdadm into encrypted LUKS. Right now raid6 consists of "/dev/sdX1" which are raid partitions. /dev/md0 doesn't have a partition - it is pure ext4 FS. Is it safe to ...
0
votes
0answers
74 views

Combine grub2 + GPT partition + LUKS + LVM (grub overwrites LUKS header)

I'm trying to configure system to boot from one GPT encrypted LVM partition. But when I set partition type to 8300 grub-install complains on warning : this GPT partition label contains no BIOS boot ...
1
vote
1answer
438 views

howto interpret `cryptsetup benchmark` results?

summary: I can run cryptsetup benchmark and sort the results, but seek guidance in their interpretation. E.g., should I give more weight to encryption speed or decryption speed? Should key-derivation ...
1
vote
2answers
53 views

Renumber encrypted partition - sda3 to sda5

I have an encrypted crypt-luks partition that is currently named sda3, and is the last partition on the disk, that is, there are no sda4 or sda5. The encrypted partition contains three logical volumes ...
0
votes
2answers
76 views

Is plain dm-crypt equal to headerless LUKS?

If I use LUKS encryption provided --header=<file> option, will it be equivalent to using dm-crypt in terms of plausible deniability or will there still be a way to tell that the given partition ...
1
vote
1answer
120 views

Unable to remove stale volume

I have an external hard drive connected to my Ubuntu laptop via USB. The whole hard drive is LUKS encrypted. Next to the encryption layer sits an LVM volume which I mount to /mnt/es. Once opened, ...
1
vote
1answer
167 views

How do I change a LUKS password?

I would like to change a LUKS password. I want to remove my old password, but I would like to try out my new password before removing the original. I obviously know the old password. I would like to ...
1
vote
1answer
59 views

Not able to finish setting up LUKS

I am trying to encrypt a new VM with LVM on LUKS. I formatted and partitioned the HD (1 partition). I ran: # cryptsetup -c aes-xts-plain64 -s 512 luksFormat /dev/sda1 /mnt/dok/31.jpg typing "yes"...
3
votes
1answer
57 views

Decrypt a portion of a corrupted drive

I have a hard drive that got corrupted after a doing an MTP mounting of a cell phone. It was created under Fedora Core 20 using defaults. Originally, I thought I did it as an ext4 partition. I ...
2
votes
1answer
36 views

LUKS on an internal hard drive

I have a hard drive which is encrypted using LUKS. It was originally an external hard drive. Recently I removed the casing and connected it directly (via SATA). However, when I connect it directly, I'...
1
vote
1answer
306 views

Massive disk corruption on Ubuntu 15.10 with dm-crypt + LUKS full disk encryption?

I suspect there's a bug in Ubuntu's default whole disk encryption setup. Here's what happens, repeatably: I make a fresh install, Ubuntu 15.10 with whole disk encryption, overwriting the whole disk ...