Questions tagged [cryptsetup]
cryptsetup is a command-line utility for managing disk volumes encrypted using the dm-crypt kernel subsystem (Linux versions 2.6 up and DragonFly BSD).
181
questions
1
vote
1answer
16 views
Automatic mount of encrypted external harddrives
I have encrypted my external harddrives using cryptsetup and a key file. My goal is now to automatically decrypt and mount them upon plugin. I used to do so using this blog post (unfortunately in ...
0
votes
0answers
27 views
Can't mount my LUKS drive. Is it lost?
7 days ago I encrypted my 2TB Hard Drive using the gnome-disk-utility (Disks) on Linux Mint Debbie, after that it all worked fine. After that I installed Kali, and when I got to the desktop I couldn't ...
1
vote
0answers
17 views
Adding RAM changed UUID of Luks partition (Linux Mint 20.1)
This is one of the weirdest glitches I've ever encountered. I have (3) partitions encrypted with Luks:
/home (on same disk as root)
/media/backups (external USB drive)
swap (on ...
0
votes
1answer
28 views
Have Cryptsetup Benchmark --cipher run through list of all ciphers
I'm trying to run cryptsetup benchmark --cipher on the entire list of ciphers included in /proc/crypto.
I obtained the list from /proc/crypto by doing the following:
cd ./Documents/; cat /proc/crypto |...
1
vote
1answer
22 views
Bind-mount and cryptsetup result in truncated root-path in /proc/self/mountinfo
I have an encrypted container containing an ext4 filesystem with a subdirectory which is bind-mounted at a later point in time. If I take look at /proc/self/mountinfo, the root-directory for the mount ...
0
votes
1answer
23 views
Volume group not found after hard shutdown due to beveage spilled on the computer
This afternoon, I made a stupid move and some beverage spilled over my computer. I did not notice it directly, but when I came back the PC was shutdown. The computer was not on battery.
I tried to ...
3
votes
1answer
987 views
“cryptsetup: ERROR: Couldn't resolve device” combined with “cryptsetup: WARNING: target 'sda3_crypt' not found in /etc/crypttab”
After setting up hibernation on ubuntu 20.04 and modifying it that it works for encrypted swap partitions, I'm getting several issues:
First, after rebooting from hibernation, I got "Gave up ...
1
vote
1answer
118 views
How much do 4K sectors improve LUKS2 performance on SSD storage?
According to the cryptsetup(8) man page, the sector size of a LUKS2 volume may be configured with --sector-size:
Set sector size for use with disk encryption. It must be power of two and in range 512 ...
1
vote
1answer
34 views
`cryptsetup reencrypt` seems to cripple digest iteration count
I had a LUKS partition for which cryptsetup luksDump /dev/mydisk gave (excerpt)
Digests:
0: pbkdf2
Hash: sha256
Iterations: 176646
Salt: xx xx ...
...
Running cryptsetup ...
0
votes
0answers
10 views
Cloned contents of an encrypted drive into a new SSD, with the same OS, it hangs: can't find encrypted drive
Running Pop-os 20.04 on an m.2 drive with full disk encryption. Needed to move to a computer that does not allow an m.2 and I wanted to get rid of encryption. Formatted a new SSD with Pop-os 20.04 (...
1
vote
1answer
80 views
can't open bitlocker encrypted devices with a clear key with cryptsetup but it works with dislocker
I'm trying to open a bitlocker encryptet partition (/dev/nvme0n1p2) with cryptsetup, but it always returns the following error:
# cryptsetup -v open --type bitlk /dev/nvme0n1p2 crypt0
Enter passphrase ...
0
votes
0answers
50 views
Close crypto map after a mount stop
Given the following mount unit, which by itself is started via the SYSTEMD_WANTS in /etc/udev/rules.d/...:
[Unit]
Description=A mount
[Mount]
What=/dev/disk/by-uuid/BBBBBBBB-BBBB-BBBB-BBBB-...
4
votes
1answer
364 views
Arch Linux Setup with Encryption (LVM on LUKS)
I'd like to setup Arch Linux with encryption. I found the tutorial on the Arch wiki, and think that the second option (LVM on LUKS) is the best option for me. Here's the partitioning I'd like to use (...
0
votes
0answers
17 views
I have no attempts to query a password when using a crypttab
I want to auto-mount my encrypted(veracrypt) partition at system boot time.
According to the documentation, I have three attempts, but after the first wrong attempt, the system boots and I get an ...
0
votes
0answers
113 views
Incorrect mount order with ZFS, encrypted filesystems, and Systemd
I have a 'bulletproof' install of Arch Linux that is structured like so:
/dev/sda1: FAT32 EFI partition: mounted as /boot/efi
/dev/sda2: LUKS encrypted ext4 partition: mounted as /boot (prompt
...
1
vote
0answers
99 views
one encrypted VG on multiple physical devices
I have a problem with my Linux setup under Debian Bullseye. To avoid getting shot in the leg with an unstable distribution, I want to use lvcreate to create COW-snapshots, which I can roll back if ...
2
votes
0answers
50 views
Elementary OS Luks passphrase not working
the past days I installed a lot of software, some of them from KXStudio Repositories, after that a reboot was required, now as the computer boots up and cryptsetup appears, my passphrase is not ...
2
votes
1answer
177 views
cryptsetup luksOpen vs cryptsetup open
Just wanted to confirm whether my suspicion is correct or not, that is to say, are these two identical in function and the context in which they are used?
cryptsetup luksOpen
cryptsetup open
I ...
0
votes
1answer
622 views
cryptsetup “command not found”
Hey guys i am on a Debian following this guide
https://www.youtube.com/watch?v=upOqR4HPi60
and when i type in this command
cryptsetup luksAddKey /dev/YourDeviceName /keyfile
i get
cryptsetup: command ...
1
vote
0answers
285 views
cryptsetup: bad password or options?
With a fully encrypted disk, the OS is Ubuntu 20.04, just after powering up the computer, the boot prompts for the disk encryption password in the middle of the screen with one single field.
I have ...
0
votes
1answer
182 views
cryptsetup failed with code 22 invalid argument
I have read
`cryptsetup luksOpen <device> <name>` fails to set up the specified name mapping
https://www.saout.de/pipermail/dm-crypt/2014-August/004272.html
And tried
cryptsetup open --...
0
votes
1answer
47 views
PV on LVM Partition inside a dm-crypt container
I am trying to set up LVM on LUKS.
Here is what I did:
head -c 100M /dev/zero > test-file
losetup /dev/loop0 test-file
cryptsetup luksFormat /dev/loop0
cryptsetup open /dev/loop0 cryptlvm
gdisk /...
1
vote
1answer
293 views
Cryptsetup with dm-integrity - weird benchmark results
I'm benchmarking various cryptsetup volumes and I'm getting unexpected results on Debian.
I'm using numbers from this talk as a rough reference. One of the slides shows benchmark results for various ...
1
vote
1answer
71 views
How can I verify a LUKS master key? [duplicate]
I have a master key for an encrypted partition on a machine that I have SSH + root access to. I don't have access to any of the passphrases associated with the partition. Is there a way that I can ...
0
votes
1answer
66 views
LUKS: find a deleted key(slot)
I have an external backup hard drive that is encrypted using LUKS. As I was re-organising my backups, I copied the data to another encrypted drive and did a kind of "quick wipe" on the original drive ...
0
votes
1answer
90 views
LUKS: Change --pbkdf arguments without reformat?
I find it cool that you can change the passphrase and even have multiple keyslots with LUKS. But can you change the pbkdf after formatting?
When running luksFormat you give --pbkdf and arguments for ...
0
votes
0answers
63 views
Run a script as root to map and then mount a LUKS volume, at user login?
I have a LUKS volume (cryptsetup) which I want to mount each time I boot: not automatically (e.g. with keyfile), but by entering the "passphrase" in a Terminal.
My first approach was to try an @...
0
votes
1answer
25 views
Is it practically possible to make an encrypted partition be auto-mounted without entering a passphrase?
I've just discovered the joys of encryptsetup.
I'm now wondering about the possibility of auto-mounting a partition which is encryptsetup ("LUKS") formatted.
I found this article, which talks about ...
1
vote
0answers
196 views
Reusing LUKS master key file to decrypt partition at boot
I'm reusing a hard drive from a laptop in a small form factor PC. The PC is an occasionally used computer, with nothing but sleeping VMs, that I connect to to over RDP. The computer is powered down ...
0
votes
1answer
389 views
How to force a custom disk encryption on a google cloud compute instance (gcloud)?
Google cloud services (computing instance) offer encryption by default for disk storage, the customer can provide its own key with the feature customer supplied encryption (detailed here also).
How ...
0
votes
2answers
345 views
Fedora 31 kernels 5.5.10 and 5.5.11 fail when trying to decrypt luks root filesystem after kernel update, but kernel 5.5.8 works
After updating to kernel 5.5.10-200.fc31, Fedora 31 can't decrypt the root file system on boot. After entering the decryption passphrase, the filesystem fails to decrypt. The same happens with kernel ...
0
votes
0answers
1k views
How to disable LUKS encryption filesystem?
Background
I have installed Pop!_OS distro on my local machine, and turned on the full-disk encryption layer, which means on each boot I'll have to enter the password in order to access it, lately, I'...
0
votes
2answers
56 views
Unable to enlarge/resize LUKS partition on virtual disk
I have tried different guides and tutorials to enlarge an encrypted LUKS LVM partition, but I am unable to move forward and finish the process as I don't have complete clarity over the structure of ...
1
vote
1answer
952 views
How to enable discards on encrypted root
I have installed system on ext4 filesystem on lvm (vg name encrypted, root is called encrypted-root) on luks. When I'm trying to run fstrim /, I get fstrim: /: the discard operation is not supported.
...
2
votes
1answer
261 views
LVM + LUKS is this error okay?
I have a encrypted partition, inside it there exist LVM / and /home.
When I start PC it says.
Volume group "vg" not found
Cannot process volume group vg
Please unlock disk sdc2_crypt
After I type ...
1
vote
1answer
117 views
It is okay to mount 2 encrypted disks with same UUID
I have 2 harddrives. 1 was empty - let's call it hard2 and other had a working Linux OS - lets call it hard1. I use dd to copy hard1 to hard2, but I could not boot with hard2. I had a error: inode ...
1
vote
1answer
733 views
Encrypting user folder after installing Ubuntu, without using 2.5x currently used space?
I've installed a XUnbuntu a few months ago, and did the stupid mistake of not checking "Encrypt Home".
I'm now looking for a way to encrypt my user's home directory (I have only one user using this ...
2
votes
0answers
429 views
Can I install Debian with encrypted /boot?
Is there a way to install Debian with full disk encryption, including /boot ? Or the only way is to install Debian and encrypt all without /boot and then encrypt /boot using this guide ?
0
votes
1answer
28 views
Cannot list and access my disk after cryptsetup command
I just tried to encrypt the new 2 TB disk I just received.
Unfortunately I unplugged it (external disk on a USB port) just after running a cryptsetup command and now I cannot even list it with fd or ...
0
votes
1answer
30 views
Where to download cryptsetup-luks-devel package?
How to download and install cryptsetup-luks-devel package for Debian? I can't find it. When I google I get this package only for CentOS.
2
votes
1answer
143 views
Possible missing algorithm in systemd-cryptsetup to mount a veracrypt volume
I have been trying to mount a veracrypt volume on boot on a Debian system, however systemd-cryptsetup for my volume fails with these two messages taken from this command:
systemctl status systemd-...
1
vote
1answer
98 views
Can't mount encrypted disk from old cryptsetup
I've got a very old USB disk, on which there's a very old encrypted partition.
It mounts as /dev/sdb1
On a newish box (with cryptsetup 1.7.3), I can attach to it with:
cryptsetup -c aes-plain -s ...
1
vote
0answers
538 views
Slow write speed on encrypted drive, while benchmark shows much higher encryption / raw disk write rates
I currently setup a NAS with Ubuntu 18.04 on a Netgear ReadyNAS 102device. The machine has a Armada Marvell 370/XP SoC with a hardware encryption accelerator called "CESA".
The kernel drivers for CESA ...
0
votes
0answers
952 views
how to let the systemd cryptsetup automatically mount the usb key which contain keyfile?
In ubuntu 19.10 I followed the example here.
The keyfile is at the root of usb key filesystem. usbkey has uuid yyyy.
the /etc/crypttab is like this:
encrypted UUID=xxxx /keyfile:UUID=yyyy luks,...
1
vote
2answers
237 views
Mounting a Luks partition
I have backed up a drive with all its partitions using the command
dd if=/dev/sda of=/media/oshirowanen/external-drive/backups-2019/full_drive_backup.img
/dev/sda is an ssd which has a Linux OS ...
1
vote
1answer
488 views
fstrim does not trim swap
I have set up an encrypted swap partition following this guide. My /etc/crypttab is set up like this (note the discard option on swap):
rootfs UUID=<UUID_root> none luks,discard
swap UUID=<...
2
votes
1answer
234 views
systemd service on shutdown with disk access [backup]
I'd like to run a little backup script (btrfs snapshot + transfer to usb) on system shutdown.
The following service executes perfectly fine on shutdown, but not on reboot as intended:
[Unit]
...
0
votes
1answer
308 views
Encrypt multiple partitions with luks cryptsetup
The other day I tried to setup a Full disk encryption on a test system (ArchLinux) within virtualbox. (I want to use this kind of a setup on my main machine so I wanted to test it out first)
I ...
1
vote
1answer
683 views
What are the limitations of a detached LUKS header
I'm trying to understand the relationship between LUKS detached headers and their respective block device. From what I understand "formatting" with a detached header doesn't actually change the ...
1
vote
2answers
558 views
cryptsetup resize returns device not active, despite cryptdisk status returning active and in use (resizing LVM-on-LUKS)
I am in the process of resizing LVM-on-LUKS, referring to these two posts as guides. I had done this once before smoothly, but I have run into a strange problem. When I run
#cryptsetup -b 377523479 ...
