LUKS (Linux Unified Key Setup) is a disk-encryption specification.

learn more… | top users | synonyms

0
votes
0answers
4 views

LUKS partition is unlocked after first use

I just tried to move /usr to a small ssd I recently purchased. The ssd is formatted with LUKS and btrfs. Apparently systemd fails to start the cryptography target before the partitions are first ...
1
vote
1answer
44 views

Physical volumes, logical volumes, superblocks gone… how to boot?

A story fairly similar to this one happened to me yesterday. Update: My only hard drive /dev/sda was originally partitioned this way: Device Boot Start End Blocks Id System ...
1
vote
0answers
25 views

Unable to boot with dracut and luks: '/dev/resume' : file exists

I am installing gentoo and have performed my first reboot after configuration and installation within my chroot environment. I am using LUKS and LVM to manage encryption of my drives. I am encrypting ...
1
vote
1answer
26 views

BASH - Command not found - LVM over LUKS Automation Script

I've been working a bash script to automate the process of opening and closing an LVM over LUKS external hard drive. However I continue to receive errors on line 28: $(vgchange -a n ; cryptsetup ...
3
votes
0answers
28 views

adding encrypted /home in LVM/LUKS

I installed a new (debian) system to an SSD device. After standard install I want to mount /home on the internal HDD. To be able to ask the question, some details: On install I (manually) generated ...
6
votes
1answer
50 views

LUKS key from known password?

I have a hard drive with Ubuntu 14.04 installation - root partition was encrypted with LUKS. I had some configuration problems and wanted to re-install Ubuntu but keep all my data so I moved all my ...
2
votes
1answer
90 views

Unlock LUKS encrypted Debian root with key file on boot partition

I'm trying to decrypt the Debian root with a key file stored in the boot partition (decrypted partition). This will break the security, but it doesn't matter now. I have to conclude this successfully ...
2
votes
1answer
31 views

Formatting LUKS encrypted disk

How do I format LUKS encrypted disk if I don't know the passphrase? I recently switched my HDD for a new SSD disk in my laptop and now when I connect the old HDD externally I can't mount disk event ...
1
vote
1answer
11 views

Linux Volume Encryption: Possible to specify your own Encryption Tool?

I want to use Volume Encryption on my Debian machine. Linux does have such a tool for that. But I want to use my own encryption tool to encrypt a partition. Now, is it somehow possible to specify it ...
0
votes
0answers
46 views

boot fails with “cryptsetup: lvm fs found but no lvm configured” [dual boot(2xlinux LVM, dm-crypt+luks)]

I have a dual-boot(xubuntu/#!) setup LVM with dm-crypt+luks as follows /dev/sda1 = /boot (xubuntu) /dev/sda2 = /boot (#!) /dev/sda3 = encrypted LVM /dev/mapper/volgroup-xroot = / (xubuntu) ...
3
votes
1answer
151 views

Meaning of fsync() in sshfs+LUKS setup

Background: I'm investigating methods for encrypted storage on untrusted machines. My current setup uses sshfs to access a LUKS-encrypted image on the remote machine, which is decrypted locally and ...
12
votes
1answer
395 views

Change password on a LUKS filesystem without knowing the password

I have a Debian Wheezy server that's been running for a while with an encrypted drive. The password for the encrypted drive (/dev/sda5) was lost when my encrypted password file was corrupted. I'd ...
3
votes
0answers
64 views

Replicate a complex partition structure with LUKS and LVM volumes

I have two external hard discs on an OpenSUSE 13.1 system. On one I have created a partition structure: An encrypted LVM partition (LUKS) Several volumes (10) on this LVM partition, some formatted ...
2
votes
2answers
118 views

LVM Ontop of LUKS using Grub

What am I trying to do? Install Arch with full system encryption (sans boot and media partition) using LVM on top of LUKS on an external hard drive (sdb) using: ...
4
votes
4answers
191 views

How to identify LVM-over-LUKS or LUKS-over-LVM

I recently installed Fedora 20. I don't recall what exact options I chose for encrypting the disk/LVM during installation. It installed fine and I can log in etc. Here is the situation I have: I ...
1
vote
0answers
20 views

opening old external encrypted partition: error

I have an encrypted hard disk with luks encryption. When I try to open it via: cryptsetup luksOpen /dev/sdc1 backup It prompts me for a password, but then errors out on me: device-mapper: ...
2
votes
0answers
52 views

Creating an encrypted file container as a non-root user

Linux kernel 3.2.0-64-generic here (Ubuntu LTS if someone is wondering about kernel options / modules). I have some file space on this Linux server (~ 24 GB). I would like to use this space as an ...
3
votes
1answer
83 views

Luks Partition Mounting After Removing From fstab

I have 3 encrypted partitions, one for /, one for /home, and one for swap. It seemed silly to me to type in my password 3 times, so I replaced the swap partition with a swap file on the encrypted ...
0
votes
1answer
48 views

If MBR is broken, how to fix on RAID + LUKS encryption?

Problem: After HDD failure in a Software-Raid Mirror Debian does not boot. Only black screen with blinking _ Debian Setup: Within the raid I have a complete system encryption with luks. I am not ...
0
votes
2answers
47 views

LUKS-encrypted text file is garbled

I have a USB disk encrypted with LUKS. Immediately after mounting the disk today, I find that a recently edited text file contains seemingly random characters. All other files that I have checked, ...
1
vote
0answers
12 views

Is there a distribution with an installer that can automatically do LVM over LUKS with everything aligned as needed?

http://www.void.gr/kargig/blog/2012/01/11/linux-ssd-partition-alignment-tips/ talks about aligning SSD partitions and LVM physical volumes. ...
1
vote
1answer
29 views

LVM + LUKS partition - Is this architecture dependent or independent?

I've been recently dealing with an LVM + LUKS partition trying to install a new linux (ubuntu in this case). I tried a few different options to make it work, but the pc resisted, the only system I ...
1
vote
1answer
43 views

LUKS change encryption key

To change encryption password I can use command: cryptsetup luksChangeKey /dev/sda2 ... and that works. But how to encrypt /dev/sda2 partition again with new password? If my old password is ...
0
votes
1answer
67 views

Storing a keyfile in an encrypted LVM

I'm using RHEL 6.5 and I want to encrypt some of my logical volumes (LVM). In order to not have to enter the passphrase multiple times, I want to store a keyfile in an encrypted LV. Example: ...
0
votes
1answer
59 views

Upgrading Linux (Fedora) with LUKS encrypted volume

I have FC18 on a LUKS/dm-crypt encrypted hard disk. I'd like to upgrade the system via a FC20 dvd. I looked around a bit and it seems that upgrading the system via the installation procedure from the ...
3
votes
2answers
63 views

Can I use scrypt to hash for LUKS?

Can scrypt be used as the hashing algorithm for LUKS? Can I tune its parameters? How can I do this?
1
vote
0answers
43 views

TPM passwordless boot

I'm trying to create device with CentOS6, encrypted disk (with LUKS), TPM module and TrustedGRUB to boot securely and without interaction. I'm following instructions from ...
3
votes
0answers
213 views

forgot to luksClose usb persistent partition, is this a problem?

Following the Kali Linux documentation for "Adding USB Persistence with LUKS Encryption", I created a persistent partition and encrypted the volume with: cryptsetup --verbose --verify-passphrase ...
1
vote
0answers
379 views

Accessed a TrueCrypt container without TrueCrypt. What dangers await?

I've got a TrueCrypt volume. In light of the unexpected demise of TrueCrypt, I've been trying to figure out what to do (reading lots of HOWTO websites). I'd like something that is simple and can work ...
1
vote
1answer
86 views

Backup LUKS (cryptsetup Command) partition or volume

Can you create a file container/volume in LUKS in the same way that you could do with Truecrypt? Otherwise, how can you backup a LUKS partition? Do you have to clone it, for example with dd? or backup ...
2
votes
1answer
269 views

Boot resolution change in initramfs on laptop monitor and HDMI monitor

I have Linux Mint 17 on my laptop. Also I have 22'' monitor connected to laptop using HDMI cable. My disk if fully encrypted with LUKS and LVM. On boot I get graphical prompt to enter password for ...
1
vote
1answer
112 views

LUKS: Enter passphrase and nothing happens

I've installed gentoo on my new laptop. I've got an LUKS-encrypted root partition (/dev/sda3). Cryptsetup (USE="gcrypt") is installed. Essential cryptographic API is compiled in kernel. Kernel and ...
2
votes
0answers
79 views

LUKS: encrypted device is much smaller than its host partition

To store personal data, I have encrypted a partition with LUKS but, according to the file manager, the resulting encrypted device is much smaller: 334 GB versus 385 GB. However, the Disk Utility in ...
2
votes
1answer
92 views

Filesystem types for encrypted partitions

I wish to encrypt two external hard drives using dm-crypt/LUKS for whole-disk encryption. I want one hard drive to have an ext4 filesystem for Linux use only, and the other to have an NTFS filesystem, ...
0
votes
1answer
137 views

How do you encrypt a USB drive partition with the Twofish cipher and SHA-512 hash without using TrueCrypt? [closed]

I've been trying to string together the right flags in cryptsetup: cryptsetup -y -h sha512 -c twofish-xts-plain64 -s 512 luksFormat /dev/sdx But it hasn't been working. When I enter the command ...
4
votes
3answers
133 views

Can I overwrite LUKS partition with it's decrypted content?

I have HDD with my data (partial backup of most important data available on other HDD), currently it's formatted as Ext4 over LVM over LUKS. I want to remove LUKS layer, but reformatting and data ...
2
votes
0answers
110 views

expanding boot, moving LUKS root

GPT > Partition2 > LUKS > btrfs I need some additional space for my boot volume, so far I did: Shrink my btrfs volume by 250MB. btrfs resize -250M / Shrink the LUKS root volume cryptsetup ...
6
votes
1answer
246 views

How to have Linux wipe/randomize/sanitize RAM at shutdown?

For mysterious reasons I still double boot sometimes into Windows. My problem is that I fear that information may leak because the RAM memory is accessible to Windows. (the Linux partitions are ...
3
votes
1answer
373 views

How to open multiple LUKS volumes with key entered in initramfs?

I have a Debian 7.4 (stable) based server configured to use an encrypted (RAID1 + LVM) root partition (/boot is un-encrypted regular partition) to which I installed dropbear SSH server so I can ...
2
votes
1answer
144 views

How can move a LUKS container from the middle of a partition to the beginning?

For the tl;dr, skip to the bottom. I have a dual-boot setup with Mac OS X at the beginning of my drive and three GNU/Linux partitions at the end of the drive. I don't have the relevant machine on ...
3
votes
3answers
262 views

How can I get a HASH of the LUKS master key?

From: https://code.google.com/p/cryptsetup/wiki/FrequentlyAskedQuestions 6.15 Can I clone a LUKS container? You can, but it breaks security, because the cloned container has the same ...
3
votes
1answer
877 views

How to decrypt LUKS with the known master key?

From: https://code.google.com/p/cryptsetup/wiki/FrequentlyAskedQuestions CLONING/IMAGING: If you clone or image a LUKS container, you make a copy of the LUKS header and the master key will stay the ...
0
votes
2answers
62 views

How to force the change of the LUKS password in every 90 days?

Using an Ubuntu 12.04 or a Red Hat Enterprise Linux Desktop 6 for Desktop, how can we force the users to change their LUKS passwords at every 90 days?
3
votes
1answer
929 views

How to set laptop screen brightness just after boot with full disk encryption

my girlfriend bought Lenovo Essential G500 i5-3230 and I installed Linux Mint 16 on it with full disk encryption. It is standard installation with encryption using dmcrypt and LUKS. But there is a ...
2
votes
1answer
198 views

Auto de-crypt all LUKS partitions in Debian

I use Debian Wheezy and have all partitions encrypted using LUKS, except /boot. I want to decrypt the partitions automatically without having to type the password in each of the 7 encrypted partitions ...
5
votes
3answers
463 views

Poor IO due to LUKS/Software RAID/LVM ordering?

I'm trying to determine if I should re-setup my RAID array due to poor IO performance. First off, the system: i7 920 4 4TB WD 5400 Green drives CentOS 6.3 host Secondly, the disk setup: ...
0
votes
1answer
347 views

Linux Mint MATE: Disable encrypted volume password dialog

I'm running the MATE edition of Linux Mint on my laptop. I have an external USB disk with a LUKS container on it. The USB disk is connected to the laptop's docking station. Whenever I connect the ...
1
vote
1answer
166 views

Auto-delete LUKS Key-slots

After installing Kali with the Nuke feature I'm wondering if there's an easy way to limit failed login attempts by simply erasing the LUKS keys-lots. EDIT: I'm asking with the idea in mind to store ...
2
votes
1answer
500 views

Decrypt second encrypted LVM during headless server boot?

I've followed this question https://unix.stackexchange.com/questions/5017/ssh-to-decrypt-encrypted-lvm-during-headless-server-boot and successfully remotely decrypted my root drive. However, I have a ...
2
votes
1answer
122 views

File containing ext filesystem

Let's suppose I create a file, map it to /dev/loop0, and create a LUKS partition inside dd if=/dev/zero of=myfile bs=1M count=1000 losetup /dev/loop0 myfile cryptsetup -c aes-cbc-essiv:sha256 -s 256 ...