Questions tagged [cryptsetup]

cryptsetup is a command-line utility for managing disk volumes encrypted using the dm-crypt kernel subsystem (Linux versions 2.6 up and DragonFly BSD).

52 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
4
votes
1answer
10k views

`cryptsetup luksOpen <device> <name>` fails to set up the specified name mapping

HardenedArray has a helpful archlinux-installation guide at Efficient Encrypted UEFI-Booting Arch Installation. However, I encountered difficulty early in the installation process -- specifically, at ...
4
votes
0answers
2k views

Cryptsetup hanging after passphrase entered

I am currently looking to recover some data for a friend from an internal HDD removed from a laptop that they had encrypted using LUKS. They can't really tell me much more else as somebody else ...
4
votes
0answers
4k views

Accessed a TrueCrypt container without TrueCrypt. What dangers await?

I've got a TrueCrypt volume. In light of the unexpected demise of TrueCrypt, I've been trying to figure out what to do (reading lots of HOWTO websites). I'd like something that is simple and can work ...
3
votes
1answer
2k views

“cryptsetup: ERROR: Couldn't resolve device” combined with “cryptsetup: WARNING: target 'sda3_crypt' not found in /etc/crypttab”

After setting up hibernation on ubuntu 20.04 and modifying it that it works for encrypted swap partitions, I'm getting several issues: First, after rebooting from hibernation, I got "Gave up ...
3
votes
0answers
936 views

Automount encrypted disk on demand with systemd using interactive passphrase

I try to automount an LUKS encrypted disk with systemd on demand with in interactive passphrase. I am using a plain Debian without any window manager etc. I have configured crypttab and fstab "...
3
votes
0answers
371 views

Earliest I can run xrandr?

Every time I boot my laptop I go blind. I can use xrandr to set the brightness but it becomes a rather impractical. I also use LUKS so when I boot the computer I am always greeted with (from what I ...
3
votes
0answers
399 views

adding encrypted /home in LVM/LUKS

I installed a new (debian) system to an SSD device. After standard install I want to mount /home on the internal HDD. To be able to ask the question, some details: On install I (manually) generated /...
2
votes
0answers
58 views

Elementary OS Luks passphrase not working

the past days I installed a lot of software, some of them from KXStudio Repositories, after that a reboot was required, now as the computer boots up and cryptsetup appears, my passphrase is not ...
2
votes
1answer
227 views

cryptsetup luksOpen vs cryptsetup open

Just wanted to confirm whether my suspicion is correct or not, that is to say, are these two identical in function and the context in which they are used? cryptsetup luksOpen cryptsetup open I ...
2
votes
1answer
300 views

LVM + LUKS is this error okay?

I have a encrypted partition, inside it there exist LVM / and /home. When I start PC it says. Volume group "vg" not found Cannot process volume group vg Please unlock disk sdc2_crypt After I type ...
2
votes
0answers
488 views

Can I install Debian with encrypted /boot?

Is there a way to install Debian with full disk encryption, including /boot ? Or the only way is to install Debian and encrypt all without /boot and then encrypt /boot using this guide ?
2
votes
0answers
901 views

LVM partition not mounting

There was a drive failure on a disk in a RAID1 configuration. I removed the bad disk and reconfigured the RAID1 to only use the good disk. When I reboot the machine there are missing LVM partitions. ...
2
votes
1answer
521 views

Backup LUKS (cryptsetup Command) partition or volume

Can you create a file container/volume in LUKS in the same way that you could do with Truecrypt? Otherwise, how can you backup a LUKS partition? Do you have to clone it, for example with dd? or backup ...
1
vote
0answers
20 views

Linux Mint 20 with LUKS and LVM hangs on boot after upgrade

Solution I've solved the problem by adding the initramfs flag in /etc/crypttab and using keyscript=decrypt_keyctl instead of a keyfile to avoid entering the password two times for the second drive: ...
1
vote
0answers
21 views

Adding RAM changed UUID of Luks partition (Linux Mint 20.1)

This is one of the weirdest glitches I've ever encountered. I have (3) partitions encrypted with Luks: /home (on same disk as root) /media/backups (external USB drive) swap (on ...
1
vote
0answers
108 views

one encrypted VG on multiple physical devices

I have a problem with my Linux setup under Debian Bullseye. To avoid getting shot in the leg with an unstable distribution, I want to use lvcreate to create COW-snapshots, which I can roll back if ...
1
vote
0answers
355 views

cryptsetup: bad password or options?

With a fully encrypted disk, the OS is Ubuntu 20.04, just after powering up the computer, the boot prompts for the disk encryption password in the middle of the screen with one single field. I have ...
1
vote
0answers
229 views

Reusing LUKS master key file to decrypt partition at boot

I'm reusing a hard drive from a laptop in a small form factor PC. The PC is an occasionally used computer, with nothing but sleeping VMs, that I connect to to over RDP. The computer is powered down ...
1
vote
0answers
1k views

How to disable LUKS encryption filesystem?

Background I have installed Pop!_OS distro on my local machine, and turned on the full-disk encryption layer, which means on each boot I'll have to enter the password in order to access it, lately, I'...
1
vote
1answer
139 views

It is okay to mount 2 encrypted disks with same UUID

I have 2 harddrives. 1 was empty - let's call it hard2 and other had a working Linux OS - lets call it hard1. I use dd to copy hard1 to hard2, but I could not boot with hard2. I had a error: inode ...
1
vote
1answer
829 views

Encrypting user folder after installing Ubuntu, without using 2.5x currently used space?

I've installed a XUnbuntu a few months ago, and did the stupid mistake of not checking "Encrypt Home". I'm now looking for a way to encrypt my user's home directory (I have only one user using this ...
1
vote
0answers
621 views

Slow write speed on encrypted drive, while benchmark shows much higher encryption / raw disk write rates

I currently setup a NAS with Ubuntu 18.04 on a Netgear ReadyNAS 102device. The machine has a Armada Marvell 370/XP SoC with a hardware encryption accelerator called "CESA". The kernel drivers for CESA ...
1
vote
0answers
36 views

/dev/mapper device remains after stopping cryptsetup unit

This is an ArchLinux box and I can't cleanly stop an encrypted container by means of systemd. I have to additionally issue cryptsetup close. Is this misconfiguration or a bug? /etc/crypttab: ...
1
vote
0answers
1k views

cryptsetup, LUKS, dm-crypt benchmark

I'm working on embedded software, where I used the cryptsetup to create an encrypted disk space over a NFS ethernet standard connection... I'm interested to understand the writing speed that this disk ...
1
vote
0answers
361 views

Unable to mount decrypted image

I have an encrypted image (ext4) that can be mounted perfectly on my Raspberry Pi but not on my (L)Ubuntu VM. The following commands work perfectly on the Pi: sudo cryptsetup luksOpen stuff.iso img ...
1
vote
0answers
291 views

Is there a way to tell initramfs via Grub cmdline to open specified device with cryptsetup?

I have a Debian setup where rootfs is on a btrfs subvolume which is on a lvm partition which is on a luks partition which is on disk-A2 (disk-A||disk-A2||luks||lvm||btrfs||rootfs) I just copied my ...
1
vote
0answers
462 views

Moving encrypted partition from passphrase to random keyfile?

I have a fresh install of Debian using sda2_crypt as swap. When I set it up I used a passphrase, but I would like to move to a random keyfile instead so that it won't prompt to unlock at every boot. ...
1
vote
0answers
907 views

Failed to start Cryptography Setup for 0

What does it mean? What should I do to fix it? [root@MYSRV /]# systemctl status systemd-cryptsetup@0.service ● systemd-cryptsetup@0.service - Cryptography Setup for 0 Loaded: loaded (/etc/...
1
vote
0answers
422 views

Is multiple ecryptfs encryption possible?

Is multiple ecryptfs encryption possible? How to encrypt a folder called level2 with ecryptfs that is inside a ecryptfs mounted folder called level1? level1 and level2 folder are organized as # ...
1
vote
2answers
1k views

LUKS - changing passphrase with /dev/mapper/fedora-root

I would like to change my passphrase in LUKS, so I started with typing mount | grep 'on / '. The result was /dev/mapper/fedora-root on / type ext4 (rw,relatime,seclabel,data=ordered). So next as usual ...
0
votes
0answers
36 views

Can't mount my LUKS drive. Is it lost?

7 days ago I encrypted my 2TB Hard Drive using the gnome-disk-utility (Disks) on Linux Mint Debbie, after that it all worked fine. After that I installed Kali, and when I got to the desktop I couldn't ...
0
votes
1answer
27 views

Volume group not found after hard shutdown due to beveage spilled on the computer

This afternoon, I made a stupid move and some beverage spilled over my computer. I did not notice it directly, but when I came back the PC was shutdown. The computer was not on battery. I tried to ...
0
votes
0answers
10 views

Cloned contents of an encrypted drive into a new SSD, with the same OS, it hangs: can't find encrypted drive

Running Pop-os 20.04 on an m.2 drive with full disk encryption. Needed to move to a computer that does not allow an m.2 and I wanted to get rid of encryption. Formatted a new SSD with Pop-os 20.04 (...
0
votes
0answers
51 views

Close crypto map after a mount stop

Given the following mount unit, which by itself is started via the SYSTEMD_WANTS in /etc/udev/rules.d/...: [Unit] Description=A mount [Mount] What=/dev/disk/by-uuid/BBBBBBBB-BBBB-BBBB-BBBB-...
0
votes
0answers
21 views

I have no attempts to query a password when using a crypttab

I want to auto-mount my encrypted(veracrypt) partition at system boot time. According to the documentation, I have three attempts, but after the first wrong attempt, the system boots and I get an ...
0
votes
0answers
132 views

Incorrect mount order with ZFS, encrypted filesystems, and Systemd

I have a 'bulletproof' install of Arch Linux that is structured like so: /dev/sda1: FAT32 EFI partition: mounted as /boot/efi /dev/sda2: LUKS encrypted ext4 partition: mounted as /boot (prompt ...
0
votes
1answer
804 views

cryptsetup “command not found”

Hey guys i am on a Debian following this guide https://www.youtube.com/watch?v=upOqR4HPi60 and when i type in this command cryptsetup luksAddKey /dev/YourDeviceName /keyfile i get cryptsetup: command ...
0
votes
0answers
76 views

Run a script as root to map and then mount a LUKS volume, at user login?

I have a LUKS volume (cryptsetup) which I want to mount each time I boot: not automatically (e.g. with keyfile), but by entering the "passphrase" in a Terminal. My first approach was to try an @...
0
votes
1answer
27 views

Is it practically possible to make an encrypted partition be auto-mounted without entering a passphrase?

I've just discovered the joys of encryptsetup. I'm now wondering about the possibility of auto-mounting a partition which is encryptsetup ("LUKS") formatted. I found this article, which talks about ...
0
votes
1answer
28 views

Cannot list and access my disk after cryptsetup command

I just tried to encrypt the new 2 TB disk I just received. Unfortunately I unplugged it (external disk on a USB port) just after running a cryptsetup command and now I cannot even list it with fd or ...
0
votes
0answers
1k views

how to let the systemd cryptsetup automatically mount the usb key which contain keyfile?

In ubuntu 19.10 I followed the example here. The keyfile is at the root of usb key filesystem. usbkey has uuid yyyy. the /etc/crypttab is like this: encrypted UUID=xxxx /keyfile:UUID=yyyy luks,...
0
votes
0answers
125 views

Is there a way to do one-time pads(OTP) with Linux cryptsetup(dm-crypt)?

It looks like losetup with cryptoloop did it and there was a dm-xor module for a very old kernel, but can't find anything modern. I'm wading through a ton of obsolete losetup documents. Something ...
0
votes
0answers
398 views

Kali Linux: USB drive cannot be formatted by cryptsetup; Device is in use: error code -1 “wrong or missing parameters”

I am trying to make a Kali Live drive with a 32gb flash drive, using LUKS encryption for the persistence, following the instructions on this page: https://docs.kali.org/downloading/kali-linux-live-usb-...
0
votes
1answer
83 views

cryptsetup and passphrae restrictions

I'm trying to encrypt a new HD to add to my Red Hat server. I have two other drives that are already encrypted with a passphrase. However, when I try to use the same passphrase on the new drive I get: ...
0
votes
1answer
502 views

crypttab: location of luks header file

Hi my crypttab looks as follows: crypt_device /dev/sda luks,header=/boot/header.img update-initramfs -u -k all works with success, but for some reason cryptsetup will not find the header.img which ...
0
votes
1answer
422 views

Re encrypt using cryptsetup-reencrypt

My LUKS disk is created some years ago the options would be outdated right now, if to change my LUKS header by: # cryptsetup-reencrypt /dev/sdaX WARNING: this is experimental code, it can completely ...
0
votes
0answers
211 views

Grow LVM on LUKS Logical Volume

so I'm on ArchLinux and have the following setup └─sda3 8:3 0 297.3G 0 part └─cryptolvm 254:0 0 297.3G 0 crypt ├─mandos-swap 254:1 0 8G 0 lvm [SWAP] ├─...
0
votes
0answers
222 views

Debugging incosistent LUKS/cryptsetup behaviour

I've encountered this issue a few times but so far I've been unable to reliably reproduce this/find the root cause. Where do I go from here? It seems like taking hexdump of the header might help, so ...
0
votes
0answers
786 views

Grub-install error: disk 'crpytouuid/<uuid>' not found

I followed fdiblen's guide on Arch Linux Installation with a Fully encrypted disk and Btrfs filesystem that uses cryptsetup. I'm at the bootloader stage where I'm trying to grub-install with these ...
0
votes
1answer
225 views

How to mount 192.168.0.3:/dev/sda to local:/mnt/sda for cryptsetup luksOpen /mnt/sda?

as mentioned above, I have a cryptsetup full disk encrypted device on /dev/sda at 192.168.0.3. And I am at 192.168.0.2. $ sudo cryptsetup luksOpen user@192.168.0.3:/dev/sda encHDD $ sudo mount /dev/...