LUKS (Linux Unified Key Setup) is a disk-encryption specification.
0
votes
1answer
48 views
luksOpen: No key available with this passphrase
I've created a encrypted volume with LUKS at home and was looking to use it at work too. Unfortunately, that's not possible. Whyever, I'm unable to access the encrypted data on any other computer than ...
2
votes
2answers
300 views
Are there more advanced LUKS key schemes, e.g. 2 of 3 keys needed?
It seems like the two main LUKS encryption options are:
USB keyfile (see http://superuser.com/questions/149578/how-can-i-use-a-keyfile-on-a-removable-usb-drive-for-my-encrypted-root-in-debian)
...
1
vote
1answer
77 views
Reading encrypted partition with broken LVM2 inside?
I overwrote some LVM2 metadata in much the same way as Recovering overwritten LVM metadata . That is, I attempted to install Debian 6.0.7 on a system with existing encrypted volumes and LVM2 volumes.
...
0
votes
1answer
38 views
How to remove LUKS auto-unlock?
Unfortunately my drive unlocks automatically. This makes the whole encryption useless. How do I turn off this annoying feature on a specified drive (e.g. /dev/x) ?
The cryptsetup command I've found ...
1
vote
1answer
37 views
Dm-Crypt system encryption with different keys per user
I have found the following example configuration for a system encryption:
Example 5: paranoid system encryption
• whole hard drive encrypted with dm-crypt+LUKS
└──> unlocked before boot, ...
1
vote
0answers
22 views
How do I encrypt the main partition of a SIFT (Ubuntu 9.10 variant) install?
I've got SIFT (based on Ubuntu 9.10) installed on a work laptop. We're trying to encrypt the entire installation (root partition and swap), which is apparently doable using LUKS, but I'm having some ...
1
vote
0answers
56 views
Provide passphrase to plymouth ask-for-password from command line
I'm working on booting a headless server (Fedora 16), entering the passphrase to decrypt the root disk (LUKS) over SSH using dropbear. I've got dropbear all working: I can SSH to the server while it's ...
5
votes
2answers
1k views
How to mount a cryptsetup container just with `mount`?
I created an encrypted container via
#!/bin/bash
dd if=/dev/zero of=$1 bs=1 count=0 seek=$2
MAPPER=$(mktemp -up /dev/mapper)
LOOPDEV=$(losetup --find --show $1)
cryptsetup luksFormat $LOOPDEV
...
2
votes
1answer
368 views
LUKS storing keyfile in encrypted usb drive
I already asked once about LUKS unlocking of multiple HDDs in Linux: LUKS and multiple hard drives.
Now I would like to know how to secure store the keyfile used for the automatic unlock of the ...
1
vote
1answer
61 views
Overwriting disk before encryption
I'm going to create encrypted lvm on my disk. As a encryption mechanism I choose dmcrypt with LUKS.
Here's my question - should I overwrite (for security reasons) whole disk before creating encrypted ...
3
votes
1answer
70 views
Why are logical volumes used with LUKS partitions?
All of the instructions I've seen on setting up a LUKS encrypted drive require using logical volumes to create root and swap partitions inside a LUKS device. Why not just put standard partitions ...
1
vote
1answer
31 views
Prevent file access from hanging when luks volume is suspended
I've got a luks volume setup and mounted, and when not in use I suspend it with cryptsetup luksSuspend so it cannot be accessed. But if I forget it's suspended and try to do any kind of file access in ...
1
vote
2answers
65 views
Automatically suspend luks volume after delay
Anyone have any ideas for how I can automatically do a luksSuspend on a luks volume after it's been unused for a certain amount of time. I was thinking of just scheduling a command with crontab or ...
2
votes
1answer
528 views
How to remove LUKS encryption?
I tried removing LUKS encryption on my home directory using the following command:
cryptsetup luksRemoveKey /dev/mapper/luks-3fd5-235-26-2625-2456f-4353fgdgd
But it gives me an error saying:
...
2
votes
2answers
166 views
after adding one more physical volume and enlarging logical volume, grub fails
Several years ago I installed Debian on my 500 GiB hard disk. During installation I chose to have encrypted filesystem. So installer created one small unencrypted boot partition (I guess that grub ...
6
votes
2answers
257 views
How to choose LUKS encryption when installing RHEL 6?
With the default RHEL 6 installer, how can I choose the LUKS encryption?
Afaik if I prepare the disk like
cryptsetup luksFormat -c cast5-cbc-plain -s 128 /dev/$DEVICE
could be the "fastest" ...
4
votes
2answers
723 views
RHEL6 LUKS with TPM support?
I'm surprised that this question is not asked more frequently, but (in RHEL) does LUKS support TPM's the way that Windows BitLocker does? If so, how is this feature implemented, and does it provide ...
3
votes
1answer
338 views
How to decrypt an encrypted container via ssh without entering a passphrase while requiring some client authentication?
I log in to a server via public key authentication and then mount a container (using e.g. LUKS/dm-crypt or truecrypt). At the moment, I have to enter the container password manually. Is there a way to ...
0
votes
1answer
362 views
grub2 and cryptsetup
My root node is LUKS encrypted, and it uses a key file, instead of user input password to unlock it.
I know in Grub2, I can use
insmod cryptodisk
insmod luks
cryptomount -u <uuid>
But I have ...
5
votes
1answer
380 views
Umount all attached usb disks with a single command
Is there a (safe) way to umount all partitions on all attached usb devices (usb-hdds, usb-sticks) with a single commandline command, including several encrypted luks partitions?
Only the partitions ...
3
votes
1answer
719 views
How to salvage a lvm/luks install from custom install
I was battling with setting up a Mint install on an encrypted hard-drive, and I think I partially succeeded. But I cannot boot the system because some configuration is not correct, and since I'm a ...
5
votes
2answers
838 views
Which partitions should I encrypt?
My laptop is currently running Windows and Fedora, but I'm planning to install Arch Linux as my sole OS soon. This current setup is using whole disk encryption through TrueCrypt, but I'm unsure if it ...
1
vote
1answer
2k views
How can I shrink a LUKS partition, what does `cryptsetup resize` do?
I am in progress of resizing a LUKS encrypted partition that contains a single ext4 filesystem (no LVM or something). The cryptsetup FAQ recommends to remove the old partition and recreate it, but ...
8
votes
2answers
739 views
How to open a port early in boot process to unlock LUKS via SSH
I have a fully encrypted server running Debian 6 and have set up dropbear and busybox to unlock the LUKS container via SSH (as described in this tutorial and in this U&L answer).
Unfortunately, ...
1
vote
1answer
2k views
Install Backtrack 5 r2 into running LUKS setup installed with ubuntu
One Harddisk (sda)
Two Partions. With a working ubuntu running.
1) /boot
2) LVM with this virtual volumes/partions/ or whatever they are called inside:
Swap
Ubuntu
Home
Prepared for Backtrack
Of ...
2
votes
1answer
1k views
Linux: LUKS and multiple hard drives
I have a Debian Linux system (amd64) installed on a RAID-1 system encrypted device (LVM on LUKS) and will have a RAID-6 of >=4 disks where I'll put my data (LUKS and maybe LVM).
I think the basic ...
3
votes
2answers
183 views
LUKS encryption for tape media?
I was wondering, if it was possible to use LUKS encryption with tape drives, QIC for instance.
I'm using LUKS for USB drives and internal disks, even DVDs and CDROMs. But I was thinking of maybe ...
