LUKS (Linux Unified Key Setup) is a disk-encryption specification.

learn more… | top users | synonyms

1
vote
0answers
4 views

Encrypted boot drops to shell, how to set LVM crypttab consistently? 'ALERT! {logical volume path} does not exist'

I used Luks to encrypt my whole hard drive, and created that sda drive as a physical volume. Under that volume, I create a volume group vg00 with my 3 logical volumes lv00_root, lv01_home, and ...
1
vote
0answers
13 views

Is there a way to enter a password with onscreen keyboard to unlock a LUKS crypto device during bootup?

I just installed Linux (Ubuntu, but it does not really matter) on an x86-based tablet. I also encrypted a partition which is mounted during bootup. Of course, one usually needs to enter the password ...
0
votes
0answers
12 views

LVM Mapper can't be found

I'm getting the error below. If i write "lvm vgchange -ay", "exit" i can go on and system boots. But why is this happening? I don't want to write this commands EVERY boot. What can i do for this?
0
votes
0answers
7 views

Zenity, how to manage cryptsetup prompt?

With Zenity, I display a progressBar and install/config many stuff on a Linux Mint (Debian) computer. I had to avoid any prompt. But one step prompts Enter a passphrase:, this is cryptsetup ...
0
votes
1answer
15 views

How to automate cryptsetup-luksAddKey with passphrase?

Context: I replaced my passphrase prompted at launch by a keyfile, stored on a USB dongle. My question concerns the step: # cryptsetup luksAddKey /path/to/mykeyfile . I generated my added key ...
1
vote
0answers
24 views

Grub cryptdevice with changing device names?

I feel this is a stupid question. I have an encrypted Arch setup (without LVM) were a single disk (sdc) contains an unencrypted boot partition and the encrypted root partition. Below the output of ...
1
vote
0answers
22 views

/etc/crypttab for anyusb?

On my LUKS-encrypted machine, I have editted my /etc/crypttab to inform a keyfile is on a pendrive. I did this by adding a line in /etc/crypttab, using the UUID of my encrypted HDD, and also the UUID ...
0
votes
0answers
33 views

Install arch linux when lvm on luks keyfile on usb and bootlouder on usb

Im trying to install Arch Linux in the following way: LVM is installed on LUKS when the LUKS key is image stored on USB And the botlaodr is also on additional USB For some reason, even though I did ...
-1
votes
1answer
41 views

Mint, install and LUKS/LVM

I want to make my linux laptopwith LUKS Encryption. OS : Mint 17. Is it better to make the disk LUKS-encrypted: at the installation process ? after it ? Quite a noob question, I need to be sure. ...
1
vote
1answer
34 views

Encrypt existing disk with LUKS?

I have get informed on how prepare a LUKS system & partitions, giving a key/passphrase, etc. But for a new fresh install of linux. How to encrypt an already installed/configured linux system ? ...
0
votes
1answer
45 views

btrfs on LVM on LUKS - one LUKS container performs WAY better than the other

I have 2 LUKS containers, one with default OpenSUSE installer settings, another one with -h sha512 -s 512 -i 5000 and detached header. On top of each of them there is LVM - one with only 1 OS volume ...
0
votes
1answer
94 views

Problem with GRUB for dual-boot installation of LMDE 2 (and Windows) on encrypted luks-lvm (truecrypt)

I'm trying to install LMDE 2 'Betsy' 64-Bit dual-booting with Windows 8.1 and both systems encrypted separately, Windows with truecrypt and LMDE with luks. When booting I want to be asked for the ...
0
votes
1answer
148 views

Arch linux root device problem in '/dev/mapper/MyStorage-rootvol'

I installed Arch x86_64, these are the commands I used during the installation: # parted /dev/sda (parted) mklabel msdos (parted) mkpart primary ext2 2MiB 2GiB (parted) mkpart primary ext4 2GiB 100% ...
3
votes
1answer
29 views

Encrypted filesystems with swap partitions

A common error that happens with Ubuntu, though not Ubuntu in particular is the options of being able to encrypt the file system at installation time which creates an encrypted swap partition with ...
1
vote
1answer
47 views

luks volume disappears after reboot

I created a separate partition on a CentOS install (VirtualBox), and am attempting to encrypt it using cryptsetup and LUKS. I'm using the following commands to get this set up: cryptsetup luksOpen ...
2
votes
1answer
63 views

how to clone images of drives with LUKS+LVM2?

I have 2 Debian boxes which I need to upgrade. In the past, before upgrading any box, I have used Clonezilla to create an image of each of the box's harddrives for use as disaster backup, in case ...
1
vote
0answers
109 views

Difference between cryptopts and crypttab

I'm setting up an encrypted root fs, which I've done before, but this time I'm using a PGP-encrypted keyfile with a symmetric password to familiarize myself with the process. There are two places ...
1
vote
0answers
51 views

How to create separate usr partition during arch install?

How do I modify and add the hooks needed in mkinitcpio to have a separate usr partition? Also, am I mounting the other partitions correctly? http://imgur.com/Rxt6o1g Basically I'm using UEFI with ...
0
votes
1answer
229 views

Mounting failed - invalid argument

I've setup a Kali Linux installation on an SD card and created an encrypted LUKS partition with a LVM logical volume inside of it, then created a BTRFS filesystem inside. Almost everything works, but ...
1
vote
2answers
103 views

Automatically shred LUKS partition upon X failed decryption attempts?

Is it possible to set up a bootloader that automatically begins shredding the header.img file and then the encrypted partition itself upon X failed attempts at decrypting the partition? If this does ...
2
votes
1answer
518 views

Debian error message: “Unable to find LVM volume”, but then boots successfully

I was trying to encrypt all the HDD during the installation process of Debian 8 Jessie using full disk encryption + LVM, and I did it, but, there are a little "problem". Before the system asks me the ...
2
votes
2answers
93 views

How to move the bootloader from a hard drive to a usb stick

I've decided to move my Debian bootloader and /boot from the hard drive to a USB stick. I'm using LUKS to en/decrypt my hard drive and the bootloader is the only unencrypted partition. How can I ...
5
votes
1answer
41 views

Is there an unencrypted but signed filesystems?

I'm curious if there is a filesystem that's unencrypted, making it readable by anyone, but employs a digital signature scheme so as to require that writes be digitally signed. I suspect the answer ...
4
votes
1answer
196 views

Abysmal general dm-crypt (LUKS) write performance

I am investigating a problem where encrypting a block device imposes a huge performance penalty when writing to it. Hours of Internet reading and experiments did not provide me with a proper ...
3
votes
1answer
65 views

Recover LUKS partition after overwriting first few bytes of LUKS container? System still up!

I have a 1.5 TB partition of data, of which I accidentally overwrote some bytes at the beginning, due to a typo like: ssh somewhere command | dd of=/dev/sda3 // should have used quotes here, dd ...
2
votes
1answer
44 views

Does the speed of a USB bootloader matter?

What I am trying to do Create an encrypted arch linux setup using LUKS. Bootloader must be on USB. QUESTION Does the speed of USB-device matter? Does the system contiously use the bootloader to ...
1
vote
0answers
71 views

Unlock LUKS volume without root access - how does that work?

It seems I am trying to do the same as the user who asked this question: Unlock LUKS partition using keyfile without root access? The answer from frostschutz explains that this is impossible. I am ...
2
votes
1answer
66 views

Are encrypted volumes more vulnerable to power loss?

I have some encrypted volumes that I use with my Xubuntu machine. One volume is a container file that is mapped to /dev/loop0 and encrypted using plain dm-crypt; another volume is a USB hard drive ...
0
votes
1answer
343 views

How do I partition my disk to install encrypted Debian installation alongside OSX?

I have a 500gb drive on a recent MBA. I have shrunk the OSX partition to 250gb to allow me to install Debian in the empty space. When I go through the Debian installer, the guided partitioning only ...
0
votes
0answers
33 views

LUKS Encrypt volumes during Pidora install on Raspberry PI

I have a Raspberry PI and I would like to LUKS encrypt all volumes during the Pidora install process, but it seems there are no options in the GUI installer to do so. I would not like to add ...
7
votes
1answer
153 views

Defending against the evil maid, how to handle removal of the /boot partition

When using LUKS full disk encryption, how would you go about protecting against evil maids ? The evil maid attack is when someone gets physical access to your computer while you're away and ...
2
votes
0answers
64 views

Mounting LUKS from the command line

When in nautilus or caja I click on the icon of an encrypted disk and enter my password, the underlying block device gets mapped to /dev/mapper/luks-$UUID and it gets mounted at/media/$USER/$DISK, no ...
0
votes
0answers
81 views

How do I decrypt this hard drive?

In 2011 I installed Ubuntu server edition on an old Dell that I had laying around. During the install process I was using the gui installer and opted to set disk encryption on the disk drive. During ...
1
vote
1answer
191 views

cryptsetup luksFormat - cannot open device for read-only access

I created a new partition that I would like to encrypt with LUKS. The device is a 1GB partition with ID 83 (Linux). I've changed the owner to root, and chmod to 777. The command I'm using is : ...
0
votes
3answers
651 views

Mount encrypted volume in Debian

I was given a HDD that was encrypted using dm-crypt and I'd like to mount it as /disk2 preferably having the decryption password stored in a file, so I won't have to enter the passphrase when booting, ...
3
votes
1answer
244 views

List open dm-crypt LUKS volumes

If I mount a simple loop device, losetup -a give me the devices opened. Is something similar possible with cryptsetup?
3
votes
1answer
156 views

Unlock LUKS partition using keyfile without root access?

Is there any way to unlock LUKS partition using keyfile while not having root priviliges? (using sudo is not an option) I know that udisksctl can open LUKS partition, however it can do it only with a ...
1
vote
1answer
334 views

Booting Gentoo on LVM inside LUKS with gpg encrypted keyfile

I'm trying to install Gentoo on LVM logical volume inside LUKS container encrypted with key file encrypted by GPG with passphrase. Everything was going smoothly until I tried to boot. I'm building the ...
2
votes
2answers
52 views

Kernel panic if LUKS password is bad x times

Q: Is it normal if a RHEL 6.5 machine kernel panics if I type the LUKS password a few times wrong?
1
vote
2answers
146 views

How to recover after removing only LUKS key?

In a stupid attempt to disable LUKS encryption, I have done cryptsetup luksRemoveKey to my only key. So now everytime I try to boot my Fedora-21, it asks for the passphrase but obviously does not ...
0
votes
0answers
44 views

Recover LUKS file/container that was lost during accidental reformat?

I created a LUKS file and was using it to store family pictures as well as backups for my Linux system. It was on a 1TB external HD. I accidentally dd'd the HD with a Debian iso image. I panicked and ...
7
votes
1answer
468 views

Can Grub2 multi-boot LUKS/LVM distros with only one boot partition?

There are many tutorials on the internet for multi-booting unencrypted distros using a single boot partition and chainloading. For example, booting 145 OSes. Likewise, there are tutorials for ...
0
votes
4answers
2k views

How to mount a disk encrypted with cryptsetup(crypto_LUKS) in Ubuntu 14.04?

I have a 4TB Disk formatted as NTFS and some data has been written into it. I then tried to encrypt it and mapped it to /dev/mapper/volume_sde1 like this: $ lsblk -io ...
1
vote
0answers
62 views

Automatically prompt to decrypt external LUKS filesystem in GNOME session?

I have a LUKS filesystem on a USB hard drive and I'd like to have the system generate a GUI prompt whenever the device is connected to the computer to provide the decryption password, then mount the ...
1
vote
1answer
200 views

Recovering a LUKS partition

I have a drive with 2 partitions 1st is plain ext4 2nd is encrypted LUKS. The partition table has been overwritten. I've found the beginning of the second partition, which I need to recover, ...
0
votes
0answers
228 views

Systemd config for later mounted encrypted volume with services working on it

Hi everyone, I am working on a Banana Pi with Arch Linux and i am currently trying to accomplish the following: After someone mounted the encrypted keyfiles for my external storage systemd shall use ...
5
votes
1answer
2k views

Grub-install: embedding is not possible in Bios/GPT

I am struggling with setting up an encrypted NAS for some days now. The basic plan is to have btrfs on lvm on luks on raid1 with lvmcache in writeback mode thrown in for the root partition to reduce ...
6
votes
1answer
183 views

Cannot run cryptsetup throught SSH?

I'm trying to open a LUKS drive through SSH directly. ssh root@XX "cryptsetup luksOpen /dev/sdb3 secure But, no password prompt and it stuck. debug1: Sending command: cryptsetup luksOpen /dev/sdb3 ...
1
vote
1answer
147 views

unable to open luks encrypted device (wrong password)

I'm using CentOS 7 with a luks encrypted root partition. Usually I have to type my password during boot, but sometimes the system doesn't accept it. It reacts as it was wrong, but it isn't. I did not ...
0
votes
1answer
96 views

LUKS partition is unlocked after first use

I just tried to move /usr to a small ssd I recently purchased. The ssd is formatted with LUKS and btrfs. Apparently systemd fails to start the cryptography target before the partitions are first ...