LUKS (Linux Unified Key Setup) is a disk-encryption specification.

learn more… | top users | synonyms

4
votes
1answer
86 views

Dropbear terminates before LUKS password prompt on Debian Jessie

I'm trying to use dropbear as a ssh server to unlock an encrypted partition which was created during Debian 8.2 setup. It boots to the password prompt (and unlocks if correct password is typed) but ...
2
votes
1answer
164 views

how to clone images of drives with LUKS+LVM2?

I have 2 Debian boxes which I need to upgrade. In the past, before upgrading any box, I have used Clonezilla to create an image of each of the box's harddrives for use as disaster backup, in case ...
2
votes
1answer
205 views

LUKS: encrypted device is much smaller than its host partition

To store personal data, I have encrypted a partition with LUKS but, according to the file manager, the resulting encrypted device is much smaller: 334 GB versus 385 GB. However, the Disk Utility in ...
1
vote
1answer
29 views

Not able to finish setting up LUKS

I am trying to encrypt a new VM with LVM on LUKS. I formatted and partitioned the HD (1 partition). I ran: # cryptsetup -c aes-xts-plain64 -s 512 luksFormat /dev/sda1 /mnt/dok/31.jpg typing ...
1
vote
1answer
124 views

USB key not mounting at boot to unlock LUKS system

I am running Debian Jessie. I have 2 hard drives with my various partitions spread across both (not RAID). Both of them are separately LUKS encrypted, and LVMs sit upon both of those. My /boot ...
1
vote
1answer
373 views

cryptsetup luksFormat - cannot open device for read-only access

I created a new partition that I would like to encrypt with LUKS. The device is a 1GB partition with ID 83 (Linux). I've changed the owner to root, and chmod to 777. The command I'm using is : ...
1
vote
1answer
185 views

Backup LUKS (cryptsetup Command) partition or volume

Can you create a file container/volume in LUKS in the same way that you could do with Truecrypt? Otherwise, how can you backup a LUKS partition? Do you have to clone it, for example with dd? or backup ...
0
votes
1answer
26 views

Automatic unlock LVM partitions with a Key LUKS dm-crypt

I'm trying to make an automatic unlock of other partitions, I have 9 Logical volumes including root, and I know root LVM will unlock manually true password to have a key decrypted. My goal is unlock ...
0
votes
1answer
266 views

Problem with GRUB for dual-boot installation of LMDE 2 (and Windows) on encrypted luks-lvm (truecrypt)

I'm trying to install LMDE 2 'Betsy' 64-Bit dual-booting with Windows 8.1 and both systems encrypted separately, Windows with truecrypt and LMDE with luks. When booting I want to be asked for the ...
0
votes
1answer
187 views

If MBR is broken, how to fix on RAID + LUKS encryption?

Problem: After HDD failure in a Software-Raid Mirror Debian does not boot. Only black screen with blinking _ Debian Setup: Within the raid I have a complete system encryption with luks. I am not ...
4
votes
0answers
244 views

How to use a samba login to mount a luks container?

Our server has an (dm-crypt/LUKS) encrypted project directory which is currently mounted via SSH before its samba share can be accessed - and obviously no one remembers to unmount it afterwards. ...
3
votes
0answers
130 views

adding encrypted /home in LVM/LUKS

I installed a new (debian) system to an SSD device. After standard install I want to mount /home on the internal HDD. To be able to ask the question, some details: On install I (manually) generated ...
3
votes
0answers
132 views

Replicate a complex partition structure with LUKS and LVM volumes

I have two external hard discs on an OpenSUSE 13.1 system. On one I have created a partition structure: An encrypted LVM partition (LUKS) Several volumes (10) on this LVM partition, some formatted ...
3
votes
0answers
498 views

forgot to luksClose usb persistent partition, is this a problem?

Following the Kali Linux documentation for "Adding USB Persistence with LUKS Encryption", I created a persistent partition and encrypted the volume with: cryptsetup --verbose --verify-passphrase ...
2
votes
0answers
94 views

Mounting LUKS from the command line

When in nautilus or caja I click on the icon of an encrypted disk and enter my password, the underlying block device gets mapped to /dev/mapper/luks-$UUID and it gets mounted at/media/$USER/$DISK, no ...
2
votes
0answers
358 views

Unable to boot with dracut and luks: '/dev/resume' : file exists

I am installing gentoo and have performed my first reboot after configuration and installation within my chroot environment. I am using LUKS and LVM to manage encryption of my drives. I am encrypting ...
2
votes
0answers
459 views

Creating an encrypted file container as a non-root user

Linux kernel 3.2.0-64-generic here (Ubuntu LTS if someone is wondering about kernel options / modules). I have some file space on this Linux server (~ 24 GB). I would like to use this space as an ...
2
votes
0answers
177 views

TPM passwordless boot

I'm trying to create device with CentOS6, encrypted disk (with LUKS), TPM module and TrustedGRUB to boot securely and without interaction. I'm following instructions from ...
2
votes
0answers
2k views

Accessed a TrueCrypt container without TrueCrypt. What dangers await?

I've got a TrueCrypt volume. In light of the unexpected demise of TrueCrypt, I've been trying to figure out what to do (reading lots of HOWTO websites). I'd like something that is simple and can work ...
2
votes
0answers
245 views

expanding boot, moving LUKS root

GPT > Partition2 > LUKS > btrfs I need some additional space for my boot volume, so far I did: Shrink my btrfs volume by 250MB. btrfs resize -250M / Shrink the LUKS root volume cryptsetup ...
2
votes
0answers
111 views

luks single signon

I've got LUKS (Linux Unified Key Setup) running on a couple of my Linux boxes. I've looked online but haven't seen anyone document how to make it work in a single signon option, but was hoping ...
1
vote
0answers
25 views

ArchLinux: Error installing grub on encrypted lvm partition(lvm on luks)

I am trying to install Arch Linux on an encrypted partition (LVM on LUKS). I followed the relevant Arch Wiki guide, but when I do: grub-install --recheck /dev/sda it gives me this output: ...
1
vote
0answers
52 views

howto interpret `cryptsetup benchmark` results?

summary: I can run cryptsetup benchmark and sort the results, but seek guidance in their interpretation. E.g., should I give more weight to encryption speed or decryption speed? Should key-derivation ...
1
vote
0answers
34 views

Udisks2, LUKS and btrfs

I just bought a portable USB HDD,on which i put 2 partitions : a LUKS one, which contains a btrfs fs and a fat32 one, in case I'd have to use a system which doesn't support LUKS or btrfs I use ...
1
vote
0answers
48 views

Encrypted boot drops to shell, how to set LVM crypttab consistently? 'ALERT! {logical volume path} does not exist'

I used Luks to encrypt my whole hard drive, and created that sda drive as a physical volume. Under that volume, I create a volume group vg00 with my 3 logical volumes lv00_root, lv01_home, and ...
1
vote
0answers
375 views

Grub cryptdevice with changing device names?

I feel this is a stupid question. I have an encrypted Arch setup (without LVM) were a single disk (sdc) contains an unencrypted boot partition and the encrypted root partition. Below the output of ...
1
vote
0answers
55 views

/etc/crypttab for anyusb?

On my LUKS-encrypted machine, I have edited my /etc/crypttab to inform the system that a keyfile is on a pendrive. I did this by adding a line in /etc/crypttab, using the UUID of my encrypted HDD, and ...
1
vote
0answers
229 views

Difference between cryptopts and crypttab

I'm setting up an encrypted root fs, which I've done before, but this time I'm using a PGP-encrypted keyfile with a symmetric password to familiarize myself with the process. There are two places ...
1
vote
0answers
130 views

How to create separate usr partition during arch install?

How do I modify and add the hooks needed in mkinitcpio to have a separate usr partition? Also, am I mounting the other partitions correctly? http://imgur.com/Rxt6o1g Basically I'm using UEFI with ...
1
vote
0answers
121 views

Unlock LUKS volume without root access - how does that work?

It seems I am trying to do the same as the user who asked this question: Unlock LUKS partition using keyfile without root access? The answer from frostschutz explains that this is impossible. I am ...
1
vote
0answers
76 views

Automatically prompt to decrypt external LUKS filesystem in GNOME session?

I have a LUKS filesystem on a USB hard drive and I'd like to have the system generate a GUI prompt whenever the device is connected to the computer to provide the decryption password, then mount the ...
1
vote
0answers
39 views

opening old external encrypted partition: error

I have an encrypted hard disk with luks encryption. When I try to open it via: cryptsetup luksOpen /dev/sdc1 backup It prompts me for a password, but then errors out on me: device-mapper: ...
1
vote
0answers
24 views

Is there a distribution with an installer that can automatically do LVM over LUKS with everything aligned as needed?

http://www.void.gr/kargig/blog/2012/01/11/linux-ssd-partition-alignment-tips/ talks about aligning SSD partitions and LVM physical volumes. ...
1
vote
0answers
44 views

How do I encrypt the main partition of a SIFT (Ubuntu 9.10 variant) install?

I've got SIFT (based on Ubuntu 9.10) installed on a work laptop. We're trying to encrypt the entire installation (root partition and swap), which is apparently doable using LUKS, but I'm having some ...
0
votes
0answers
5 views

How can I change the password of a LVM setup in Fedora?

Using CLI, how can I change the password of a LUKS/LVM setup in Fedora (2x), where x can be 1,2, or 3? Note: The physical LVM2 volume spans over two partitions on two drives (/dev/sda3 and ...
0
votes
0answers
30 views

Can I make grub go back to the menu when I get the cryptomount passphrase wrong?

I have GRUB 2 (EFI) booting my system, which is dual-boot between Debian 8.2 and Windows 10. The Debian system is on an encrypted partition, which is unlocked using cryptomount. This all works fine ...
0
votes
0answers
29 views

Combine grub2 + GPT partition + LUKS + LVM (grub overwrites LUKS header)

I'm trying to configure system to boot from one GPT encrypted LVM partition. But when I set partition type to 8300 grub-install complains on warning : this GPT partition label contains no BIOS boot ...
0
votes
0answers
20 views

How do I execute a command if a drive is not mounted?

I am trying to create a shell script to mount a LUKS volume if it is not already mounted. The LUKS password will be in the shell script. The shell script is being stored in a encrypted folder so it is ...
0
votes
0answers
59 views

why can't I partition a LUKS mounted partition?

A CentOS 7 server has to have LUKS encryption for everything but /boot and /boot/efi. And the large LUKS encrypted remainder partition (1.8 TB) will then need to be partitioned further. I was able ...
0
votes
0answers
17 views

LVM Mapper can't be found

I'm getting the error below. If i write "lvm vgchange -ay", "exit" i can go on and system boots. But why is this happening? I don't want to write this commands EVERY boot. What can i do for this?
0
votes
0answers
32 views

Zenity, how to manage cryptsetup prompt?

With Zenity, I display a progressBar and install/config many stuff on a Linux Mint (Debian) computer. I had to avoid any prompt. But one step prompts Enter a passphrase:, this is cryptsetup ...
0
votes
0answers
186 views

Install Arch Linux when LVM on LUKS keyfile on USB and bootloader on USB

I am trying to install Arch Linux in the following way: LVM is installed on LUKS when the LUKS key is image stored on USB the bootloader is also on additional USB For some reason, even though I ...
0
votes
0answers
8 views

Linux tries to mount before decrypting

My hard drive has LVM running inside of a LUKS encryption. My LUKS encryption is set to decrypt on boot and my ext4 partition in LVM is set to mount at boot. For whatever reason my system hangs at ...
0
votes
0answers
50 views

LUKS Encrypt volumes during Pidora install on Raspberry PI

I have a Raspberry PI and I would like to LUKS encrypt all volumes during the Pidora install process, but it seems there are no options in the GUI installer to do so. I would not like to add ...
0
votes
0answers
279 views

How do I decrypt this hard drive?

In 2011 I installed Ubuntu server edition on an old Dell that I had laying around. During the install process I was using the gui installer and opted to set disk encryption on the disk drive. During ...
0
votes
0answers
60 views

Recover LUKS file/container that was lost during accidental reformat?

I created a LUKS file and was using it to store family pictures as well as backups for my Linux system. It was on a 1TB external HD. I accidentally dd'd the HD with a Debian iso image. I panicked and ...
0
votes
0answers
323 views

Systemd config for later mounted encrypted volume with services working on it

Hi everyone, I am working on a Banana Pi with Arch Linux and i am currently trying to accomplish the following: After someone mounted the encrypted keyfiles for my external storage systemd shall use ...
0
votes
0answers
219 views

LUKS - changing passphrase with /dev/mapper/fedora-root

I would like to change my passphrase in LUKS, so I started with typing mount | grep 'on / '. The result was /dev/mapper/fedora-root on / type ext4 (rw,relatime,seclabel,data=ordered). So next as usual ...
0
votes
0answers
621 views

Problem installing ArchLinux on LVM on a LUKS setup via archboot

I've used archlinux before, and I've decided to have it enccrypted. I use BIOS. I used the latest vesion of archboot. I made an LUKS setup, then made lvm volume group and two ext4 partition in it for ...
-1
votes
0answers
21 views

Dual-booting two encrypted Linux

I need to install two Linux (Debian and Linux Mint) on a single computer. So far, I know how to do it seamlessly. However, I want FDE to be enabled for both, and so far I haven't been able to ...