LUKS (Linux Unified Key Setup) is a disk-encryption specification.

learn more… | top users | synonyms

0
votes
1answer
19 views

How do I partition my disk to install encrypted Debian installation alongside OSX?

I have a 500gb drive on a recent MBA. I have shrunk the OSX partition to 250gb to allow me to install Debian in the empty space. When I go through the Debian installer, the guided partitioning only ...
3
votes
1answer
697 views

BCache and disk encryption

I recently bought a new laptop with a 16Gb mSATA SSD cache drive. I haven't used that one yet. I have, however, opted for Ubuntu 13.04 with "Full Disk Encryption" for the main partition (is that ...
0
votes
0answers
11 views

LUKS Encrypt volumes during Pidora install on Raspberry PI

I have a Raspberry PI and I would like to LUKS encrypt all volumes during the Pidora install process, but it seems there are no options in the GUI installer to do so. I would not like to add ...
7
votes
1answer
106 views

Defending against the evil maid, how to handle removal of the /boot partition

When using LUKS full disk encryption, how would you go about protecting against evil maids ? The evil maid attack is when someone gets physical access to your computer while you're away and ...
6
votes
1answer
107 views

Can Grub2 multi-boot LUKS/LVM distros with only one boot partition?

There are many tutorials on the internet for multi-booting unencrypted distros using a single boot partition and chainloading. For example, booting 145 OSes. Likewise, there are tutorials for ...
2
votes
0answers
19 views

Mounting LUKS from the command line

When in nautilus or caja I click on the icon of an encrypted disk and enter my password, the underlying block device gets mapped to /dev/mapper/luks-$UUID and it gets mounted at/media/$USER/$DISK, no ...
0
votes
1answer
413 views

Linux Mint MATE: Disable encrypted volume password dialog

I'm running the MATE edition of Linux Mint on my laptop. I have an external USB disk with a LUKS container on it. The USB disk is connected to the laptop's docking station. Whenever I connect the ...
0
votes
0answers
33 views

How do I decrypt this hard drive?

In 2011 I installed Ubuntu server edition on an old Dell that I had laying around. During the install process I was using the gui installer and opted to set disk encryption on the disk drive. During ...
0
votes
3answers
146 views

Mount encrypted volume in Debian

I was given a HDD that was encrypted using dm-crypt and I'd like to mount it as /disk2 preferably having the decryption password stored in a file, so I won't have to enter the passphrase when booting, ...
1
vote
1answer
39 views

cryptsetup luksFormat - cannot open device for read-only access

I created a new partition that I would like to encrypt with LUKS. The device is a 1GB partition with ID 83 (Linux). I've changed the owner to root, and chmod to 777. The command I'm using is : ...
3
votes
3answers
108 views

Can I use scrypt to hash for LUKS?

Can scrypt be used as the hashing algorithm for LUKS? Can I tune its parameters? How can I do this?
2
votes
1answer
27 views

List open dm-crypt LUKS volumes

If I mount a simple loop device, losetup -a give me the devices opened. Is something similar possible with cryptsetup?
3
votes
1answer
40 views

Unlock LUKS partition using keyfile without root access?

Is there any way to unlock LUKS partition using keyfile while not having root priviliges? (using sudo is not an option) I know that udisksctl can open LUKS partition, however it can do it only with a ...
1
vote
0answers
95 views

Booting Gentoo on LVM inside LUKS with gpg encrypted keyfile

I'm trying to install Gentoo on LVM logical volume inside LUKS container encrypted with key file encrypted by GPG with passphrase. Everything was going smoothly until I tried to boot. I'm building the ...
2
votes
2answers
34 views

Kernel panic if LUKS password is bad x times

Q: Is it normal if a RHEL 6.5 machine kernel panics if I type the LUKS password a few times wrong?
1
vote
2answers
46 views

How to recover after removing only LUKS key?

In a stupid attempt to disable LUKS encryption, I have done cryptsetup luksRemoveKey to my only key. So now everytime I try to boot my Fedora-21, it asks for the passphrase but obviously does not ...
0
votes
0answers
28 views

Recover LUKS file/container that was lost during accidental reformat?

I created a LUKS file and was using it to store family pictures as well as backups for my Linux system. It was on a 1TB external HD. I accidentally dd'd the HD with a Debian iso image. I panicked and ...
0
votes
4answers
200 views

How to mount a disk encrypted with cryptsetup(crypto_LUKS) in Ubuntu 14.04?

I have a 4TB Disk formatted as NTFS and some data has been written into it. I then tried to encrypt it and mapped it to /dev/mapper/volume_sde1 like this: $ lsblk -io ...
2
votes
1answer
230 views

LUKS: Enter passphrase and nothing happens

I've installed gentoo on my new laptop. I've got an LUKS-encrypted root partition (/dev/sda3). Cryptsetup (USE="gcrypt") is installed. Essential cryptographic API is compiled in kernel. Kernel and ...
1
vote
0answers
27 views

Automatically prompt to decrypt external LUKS filesystem in GNOME session?

I have a LUKS filesystem on a USB hard drive and I'd like to have the system generate a GUI prompt whenever the device is connected to the computer to provide the decryption password, then mount the ...
6
votes
1answer
571 views

Trying to understand LUKS encryption

I decided to encrypt my root partition with LUKS+LVM. My ThinkPad setup: Samsung 830 128GB SSD 750GB HDD Core 2 Duo 2,5 GHz P9500 8GB RAM But the more I read, the less I understand about those ...
4
votes
2answers
526 views

How to change the hash-spec and iter-time of an existing dm-crypt LUKS device?

How can I change the hash-spec and iter-time of an existing dm-crypt LUKS device? Clearly I can pass the options if I create a new device, for example something like this: sudo cryptsetup ...
1
vote
1answer
67 views

Recovering a LUKS partition

I have a drive with 2 partitions 1st is plain ext4 2nd is encrypted LUKS. The partition table has been overwritten. I've found the beginning of the second partition, which I need to recover, ...
0
votes
0answers
73 views

Systemd config for later mounted encrypted volume with services working on it

Hi everyone, I am working on a Banana Pi with Arch Linux and i am currently trying to accomplish the following: After someone mounted the encrypted keyfiles for my external storage systemd shall use ...
2
votes
1answer
138 views

LUKS: encrypted device is much smaller than its host partition

To store personal data, I have encrypted a partition with LUKS but, according to the file manager, the resulting encrypted device is much smaller: 334 GB versus 385 GB. However, the Disk Utility in ...
5
votes
1answer
642 views

Grub-install: embedding is not possible in Bios/GPT

I am struggling with setting up an encrypted NAS for some days now. The basic plan is to have btrfs on lvm on luks on raid1 with lvmcache in writeback mode thrown in for the root partition to reduce ...
6
votes
1answer
142 views

Cannot run cryptsetup throught SSH?

I'm trying to open a LUKS drive through SSH directly. ssh root@XX "cryptsetup luksOpen /dev/sdb3 secure But, no password prompt and it stuck. debug1: Sending command: cryptsetup luksOpen /dev/sdb3 ...
1
vote
1answer
85 views

unable to open luks encrypted device (wrong password)

I'm using CentOS 7 with a luks encrypted root partition. Usually I have to type my password during boot, but sometimes the system doesn't accept it. It reacts as it was wrong, but it isn't. I did not ...
0
votes
1answer
138 views

boot fails with “cryptsetup: lvm fs found but no lvm configured” [dual boot(2xlinux LVM, dm-crypt+luks)]

I have a dual-boot(xubuntu/#!) setup LVM with dm-crypt+luks as follows /dev/sda1 = /boot (xubuntu) /dev/sda2 = /boot (#!) /dev/sda3 = encrypted LVM /dev/mapper/volgroup-xroot = / (xubuntu) ...
0
votes
1answer
57 views

LUKS partition is unlocked after first use

I just tried to move /usr to a small ssd I recently purchased. The ssd is formatted with LUKS and btrfs. Apparently systemd fails to start the cryptography target before the partitions are first ...
1
vote
1answer
159 views

Physical volumes, logical volumes, superblocks gone… how to boot?

A story fairly similar to this one happened to me yesterday. Update: My only hard drive /dev/sda was originally partitioned this way: Device Boot Start End Blocks Id System ...
6
votes
1answer
69 views

LUKS key from known password?

I have a hard drive with Ubuntu 14.04 installation - root partition was encrypted with LUKS. I had some configuration problems and wanted to re-install Ubuntu but keep all my data so I moved all my ...
2
votes
0answers
218 views

Unable to boot with dracut and luks: '/dev/resume' : file exists

I am installing gentoo and have performed my first reboot after configuration and installation within my chroot environment. I am using LUKS and LVM to manage encryption of my drives. I am encrypting ...
2
votes
1answer
341 views

Unlock LUKS encrypted Debian root with key file on boot partition

I'm trying to decrypt the Debian root with a key file stored in the boot partition (decrypted partition). This will break the security, but it doesn't matter now. I have to conclude this successfully ...
1
vote
1answer
74 views

BASH - Command not found - LVM over LUKS Automation Script

I've been working a bash script to automate the process of opening and closing an LVM over LUKS external hard drive. However I continue to receive errors on line 28: $(vgchange -a n ; cryptsetup ...
3
votes
0answers
67 views

adding encrypted /home in LVM/LUKS

I installed a new (debian) system to an SSD device. After standard install I want to mount /home on the internal HDD. To be able to ask the question, some details: On install I (manually) generated ...
2
votes
1answer
78 views

Formatting LUKS encrypted disk

How do I format LUKS encrypted disk if I don't know the passphrase? I recently switched my HDD for a new SSD disk in my laptop and now when I connect the old HDD externally I can't mount disk event ...
1
vote
1answer
18 views

Linux Volume Encryption: Possible to specify your own Encryption Tool?

I want to use Volume Encryption on my Debian machine. Linux does have such a tool for that. But I want to use my own encryption tool to encrypt a partition. Now, is it somehow possible to specify it ...
3
votes
1answer
173 views

Meaning of fsync() in sshfs+LUKS setup

Background: I'm investigating methods for encrypted storage on untrusted machines. My current setup uses sshfs to access a LUKS-encrypted image on the remote machine, which is decrypted locally and ...
0
votes
2answers
76 views

LUKS-encrypted text file is garbled

I have a USB disk encrypted with LUKS. Immediately after mounting the disk today, I find that a recently edited text file contains seemingly random characters. All other files that I have checked, ...
3
votes
0answers
101 views

Replicate a complex partition structure with LUKS and LVM volumes

I have two external hard discs on an OpenSUSE 13.1 system. On one I have created a partition structure: An encrypted LVM partition (LUKS) Several volumes (10) on this LVM partition, some formatted ...
1
vote
0answers
19 views

Is there a distribution with an installer that can automatically do LVM over LUKS with everything aligned as needed?

http://www.void.gr/kargig/blog/2012/01/11/linux-ssd-partition-alignment-tips/ talks about aligning SSD partitions and LVM physical volumes. ...
13
votes
1answer
1k views

Change password on a LUKS filesystem without knowing the password

I have a Debian Wheezy server that's been running for a while with an encrypted drive. The password for the encrypted drive (/dev/sda5) was lost when my encrypted password file was corrupted. I'd ...
5
votes
4answers
915 views

How to identify LVM-over-LUKS or LUKS-over-LVM

I recently installed Fedora 20. I don't recall what exact options I chose for encrypting the disk/LVM during installation. It installed fine and I can log in etc. Here is the situation I have: I ...
2
votes
2answers
579 views

LVM Ontop of LUKS using Grub

What am I trying to do? Install Arch with full system encryption (sans boot and media partition) using LVM on top of LUKS on an external hard drive (sdb) using: ...
11
votes
3answers
1k views

How to open a port early in boot process to unlock LUKS via SSH

I have a fully encrypted server running Debian 7 and have set up dropbear and busybox to unlock the LUKS container via SSH (as described in this tutorial and in this U&L answer). Unfortunately, ...
1
vote
0answers
24 views

opening old external encrypted partition: error

I have an encrypted hard disk with luks encryption. When I try to open it via: cryptsetup luksOpen /dev/sdc1 backup It prompts me for a password, but then errors out on me: device-mapper: ...
2
votes
0answers
176 views

Creating an encrypted file container as a non-root user

Linux kernel 3.2.0-64-generic here (Ubuntu LTS if someone is wondering about kernel options / modules). I have some file space on this Linux server (~ 24 GB). I would like to use this space as an ...
7
votes
1answer
3k views

Linux: LUKS and multiple hard drives

I have a Debian Linux system (amd64) installed on a RAID-1 system encrypted device (LVM on LUKS) and will have a RAID-6 of >=4 disks where I'll put my data (LUKS and maybe LVM). I think the basic ...
3
votes
1answer
135 views

Luks Partition Mounting After Removing From fstab

I have 3 encrypted partitions, one for /, one for /home, and one for swap. It seemed silly to me to type in my password 3 times, so I replaced the swap partition with a swap file on the encrypted ...