Questions tagged [cryptsetup]

cryptsetup is a command-line utility for managing disk volumes encrypted using the dm-crypt kernel subsystem (Linux versions 2.6 up and DragonFly BSD).

Filter by
Sorted by
Tagged with
1
vote
1answer
16 views

Automatic mount of encrypted external harddrives

I have encrypted my external harddrives using cryptsetup and a key file. My goal is now to automatically decrypt and mount them upon plugin. I used to do so using this blog post (unfortunately in ...
0
votes
0answers
27 views

Can't mount my LUKS drive. Is it lost?

7 days ago I encrypted my 2TB Hard Drive using the gnome-disk-utility (Disks) on Linux Mint Debbie, after that it all worked fine. After that I installed Kali, and when I got to the desktop I couldn't ...
1
vote
0answers
17 views

Adding RAM changed UUID of Luks partition (Linux Mint 20.1)

This is one of the weirdest glitches I've ever encountered. I have (3) partitions encrypted with Luks: /home (on same disk as root) /media/backups (external USB drive) swap (on ...
0
votes
1answer
28 views

Have Cryptsetup Benchmark --cipher run through list of all ciphers

I'm trying to run cryptsetup benchmark --cipher on the entire list of ciphers included in /proc/crypto. I obtained the list from /proc/crypto by doing the following: cd ./Documents/; cat /proc/crypto |...
1
vote
1answer
22 views

Bind-mount and cryptsetup result in truncated root-path in /proc/self/mountinfo

I have an encrypted container containing an ext4 filesystem with a subdirectory which is bind-mounted at a later point in time. If I take look at /proc/self/mountinfo, the root-directory for the mount ...
0
votes
1answer
23 views

Volume group not found after hard shutdown due to beveage spilled on the computer

This afternoon, I made a stupid move and some beverage spilled over my computer. I did not notice it directly, but when I came back the PC was shutdown. The computer was not on battery. I tried to ...
3
votes
1answer
987 views

“cryptsetup: ERROR: Couldn't resolve device” combined with “cryptsetup: WARNING: target 'sda3_crypt' not found in /etc/crypttab”

After setting up hibernation on ubuntu 20.04 and modifying it that it works for encrypted swap partitions, I'm getting several issues: First, after rebooting from hibernation, I got "Gave up ...
1
vote
1answer
118 views

How much do 4K sectors improve LUKS2 performance on SSD storage?

According to the cryptsetup(8) man page, the sector size of a LUKS2 volume may be configured with --sector-size: Set sector size for use with disk encryption. It must be power of two and in range 512 ...
1
vote
1answer
34 views

`cryptsetup reencrypt` seems to cripple digest iteration count

I had a LUKS partition for which cryptsetup luksDump /dev/mydisk gave (excerpt) Digests: 0: pbkdf2 Hash: sha256 Iterations: 176646 Salt: xx xx ... ... Running cryptsetup ...
0
votes
0answers
10 views

Cloned contents of an encrypted drive into a new SSD, with the same OS, it hangs: can't find encrypted drive

Running Pop-os 20.04 on an m.2 drive with full disk encryption. Needed to move to a computer that does not allow an m.2 and I wanted to get rid of encryption. Formatted a new SSD with Pop-os 20.04 (...
1
vote
1answer
80 views

can't open bitlocker encrypted devices with a clear key with cryptsetup but it works with dislocker

I'm trying to open a bitlocker encryptet partition (/dev/nvme0n1p2) with cryptsetup, but it always returns the following error: # cryptsetup -v open --type bitlk /dev/nvme0n1p2 crypt0 Enter passphrase ...
0
votes
0answers
50 views

Close crypto map after a mount stop

Given the following mount unit, which by itself is started via the SYSTEMD_WANTS in /etc/udev/rules.d/...: [Unit] Description=A mount [Mount] What=/dev/disk/by-uuid/BBBBBBBB-BBBB-BBBB-BBBB-...
4
votes
1answer
364 views

Arch Linux Setup with Encryption (LVM on LUKS)

I'd like to setup Arch Linux with encryption. I found the tutorial on the Arch wiki, and think that the second option (LVM on LUKS) is the best option for me. Here's the partitioning I'd like to use (...
0
votes
0answers
17 views

I have no attempts to query a password when using a crypttab

I want to auto-mount my encrypted(veracrypt) partition at system boot time. According to the documentation, I have three attempts, but after the first wrong attempt, the system boots and I get an ...
0
votes
0answers
113 views

Incorrect mount order with ZFS, encrypted filesystems, and Systemd

I have a 'bulletproof' install of Arch Linux that is structured like so: /dev/sda1: FAT32 EFI partition: mounted as /boot/efi /dev/sda2: LUKS encrypted ext4 partition: mounted as /boot (prompt ...
1
vote
0answers
99 views

one encrypted VG on multiple physical devices

I have a problem with my Linux setup under Debian Bullseye. To avoid getting shot in the leg with an unstable distribution, I want to use lvcreate to create COW-snapshots, which I can roll back if ...
2
votes
0answers
50 views

Elementary OS Luks passphrase not working

the past days I installed a lot of software, some of them from KXStudio Repositories, after that a reboot was required, now as the computer boots up and cryptsetup appears, my passphrase is not ...
2
votes
1answer
177 views

cryptsetup luksOpen vs cryptsetup open

Just wanted to confirm whether my suspicion is correct or not, that is to say, are these two identical in function and the context in which they are used? cryptsetup luksOpen cryptsetup open I ...
0
votes
1answer
622 views

cryptsetup “command not found”

Hey guys i am on a Debian following this guide https://www.youtube.com/watch?v=upOqR4HPi60 and when i type in this command cryptsetup luksAddKey /dev/YourDeviceName /keyfile i get cryptsetup: command ...
1
vote
0answers
285 views

cryptsetup: bad password or options?

With a fully encrypted disk, the OS is Ubuntu 20.04, just after powering up the computer, the boot prompts for the disk encryption password in the middle of the screen with one single field. I have ...
0
votes
1answer
182 views

cryptsetup failed with code 22 invalid argument

I have read `cryptsetup luksOpen <device> <name>` fails to set up the specified name mapping https://www.saout.de/pipermail/dm-crypt/2014-August/004272.html And tried cryptsetup open --...
0
votes
1answer
47 views

PV on LVM Partition inside a dm-crypt container

I am trying to set up LVM on LUKS. Here is what I did: head -c 100M /dev/zero > test-file losetup /dev/loop0 test-file cryptsetup luksFormat /dev/loop0 cryptsetup open /dev/loop0 cryptlvm gdisk /...
1
vote
1answer
293 views

Cryptsetup with dm-integrity - weird benchmark results

I'm benchmarking various cryptsetup volumes and I'm getting unexpected results on Debian. I'm using numbers from this talk as a rough reference. One of the slides shows benchmark results for various ...
1
vote
1answer
71 views

How can I verify a LUKS master key? [duplicate]

I have a master key for an encrypted partition on a machine that I have SSH + root access to. I don't have access to any of the passphrases associated with the partition. Is there a way that I can ...
0
votes
1answer
66 views

LUKS: find a deleted key(slot)

I have an external backup hard drive that is encrypted using LUKS. As I was re-organising my backups, I copied the data to another encrypted drive and did a kind of "quick wipe" on the original drive ...
0
votes
1answer
90 views

LUKS: Change --pbkdf arguments without reformat?

I find it cool that you can change the passphrase and even have multiple keyslots with LUKS. But can you change the pbkdf after formatting? When running luksFormat you give --pbkdf and arguments for ...
0
votes
0answers
63 views

Run a script as root to map and then mount a LUKS volume, at user login?

I have a LUKS volume (cryptsetup) which I want to mount each time I boot: not automatically (e.g. with keyfile), but by entering the "passphrase" in a Terminal. My first approach was to try an @...
0
votes
1answer
25 views

Is it practically possible to make an encrypted partition be auto-mounted without entering a passphrase?

I've just discovered the joys of encryptsetup. I'm now wondering about the possibility of auto-mounting a partition which is encryptsetup ("LUKS") formatted. I found this article, which talks about ...
1
vote
0answers
196 views

Reusing LUKS master key file to decrypt partition at boot

I'm reusing a hard drive from a laptop in a small form factor PC. The PC is an occasionally used computer, with nothing but sleeping VMs, that I connect to to over RDP. The computer is powered down ...
0
votes
1answer
389 views

How to force a custom disk encryption on a google cloud compute instance (gcloud)?

Google cloud services (computing instance) offer encryption by default for disk storage, the customer can provide its own key with the feature customer supplied encryption (detailed here also). How ...
0
votes
2answers
345 views

Fedora 31 kernels 5.5.10 and 5.5.11 fail when trying to decrypt luks root filesystem after kernel update, but kernel 5.5.8 works

After updating to kernel 5.5.10-200.fc31, Fedora 31 can't decrypt the root file system on boot. After entering the decryption passphrase, the filesystem fails to decrypt. The same happens with kernel ...
0
votes
0answers
1k views

How to disable LUKS encryption filesystem?

Background I have installed Pop!_OS distro on my local machine, and turned on the full-disk encryption layer, which means on each boot I'll have to enter the password in order to access it, lately, I'...
0
votes
2answers
56 views

Unable to enlarge/resize LUKS partition on virtual disk

I have tried different guides and tutorials to enlarge an encrypted LUKS LVM partition, but I am unable to move forward and finish the process as I don't have complete clarity over the structure of ...
1
vote
1answer
952 views

How to enable discards on encrypted root

I have installed system on ext4 filesystem on lvm (vg name encrypted, root is called encrypted-root) on luks. When I'm trying to run fstrim /, I get fstrim: /: the discard operation is not supported. ...
2
votes
1answer
261 views

LVM + LUKS is this error okay?

I have a encrypted partition, inside it there exist LVM / and /home. When I start PC it says. Volume group "vg" not found Cannot process volume group vg Please unlock disk sdc2_crypt After I type ...
1
vote
1answer
117 views

It is okay to mount 2 encrypted disks with same UUID

I have 2 harddrives. 1 was empty - let's call it hard2 and other had a working Linux OS - lets call it hard1. I use dd to copy hard1 to hard2, but I could not boot with hard2. I had a error: inode ...
1
vote
1answer
733 views

Encrypting user folder after installing Ubuntu, without using 2.5x currently used space?

I've installed a XUnbuntu a few months ago, and did the stupid mistake of not checking "Encrypt Home". I'm now looking for a way to encrypt my user's home directory (I have only one user using this ...
2
votes
0answers
429 views

Can I install Debian with encrypted /boot?

Is there a way to install Debian with full disk encryption, including /boot ? Or the only way is to install Debian and encrypt all without /boot and then encrypt /boot using this guide ?
0
votes
1answer
28 views

Cannot list and access my disk after cryptsetup command

I just tried to encrypt the new 2 TB disk I just received. Unfortunately I unplugged it (external disk on a USB port) just after running a cryptsetup command and now I cannot even list it with fd or ...
0
votes
1answer
30 views

Where to download cryptsetup-luks-devel package?

How to download and install cryptsetup-luks-devel package for Debian? I can't find it. When I google I get this package only for CentOS.
2
votes
1answer
143 views

Possible missing algorithm in systemd-cryptsetup to mount a veracrypt volume

I have been trying to mount a veracrypt volume on boot on a Debian system, however systemd-cryptsetup for my volume fails with these two messages taken from this command: systemctl status systemd-...
1
vote
1answer
98 views

Can't mount encrypted disk from old cryptsetup

I've got a very old USB disk, on which there's a very old encrypted partition. It mounts as /dev/sdb1 On a newish box (with cryptsetup 1.7.3), I can attach to it with: cryptsetup -c aes-plain -s ...
1
vote
0answers
538 views

Slow write speed on encrypted drive, while benchmark shows much higher encryption / raw disk write rates

I currently setup a NAS with Ubuntu 18.04 on a Netgear ReadyNAS 102device. The machine has a Armada Marvell 370/XP SoC with a hardware encryption accelerator called "CESA". The kernel drivers for CESA ...
0
votes
0answers
952 views

how to let the systemd cryptsetup automatically mount the usb key which contain keyfile?

In ubuntu 19.10 I followed the example here. The keyfile is at the root of usb key filesystem. usbkey has uuid yyyy. the /etc/crypttab is like this: encrypted UUID=xxxx /keyfile:UUID=yyyy luks,...
1
vote
2answers
237 views

Mounting a Luks partition

I have backed up a drive with all its partitions using the command dd if=/dev/sda of=/media/oshirowanen/external-drive/backups-2019/full_drive_backup.img /dev/sda is an ssd which has a Linux OS ...
1
vote
1answer
488 views

fstrim does not trim swap

I have set up an encrypted swap partition following this guide. My /etc/crypttab is set up like this (note the discard option on swap): rootfs UUID=<UUID_root> none luks,discard swap UUID=<...
2
votes
1answer
234 views

systemd service on shutdown with disk access [backup]

I'd like to run a little backup script (btrfs snapshot + transfer to usb) on system shutdown. The following service executes perfectly fine on shutdown, but not on reboot as intended: [Unit] ...
0
votes
1answer
308 views

Encrypt multiple partitions with luks cryptsetup

The other day I tried to setup a Full disk encryption on a test system (ArchLinux) within virtualbox. (I want to use this kind of a setup on my main machine so I wanted to test it out first) I ...
1
vote
1answer
683 views

What are the limitations of a detached LUKS header

I'm trying to understand the relationship between LUKS detached headers and their respective block device. From what I understand "formatting" with a detached header doesn't actually change the ...
1
vote
2answers
558 views

cryptsetup resize returns device not active, despite cryptdisk status returning active and in use (resizing LVM-on-LUKS)

I am in the process of resizing LVM-on-LUKS, referring to these two posts as guides. I had done this once before smoothly, but I have run into a strange problem. When I run #cryptsetup -b 377523479 ...