Questions tagged [crypttab]
The crypttab tag has no usage guidance.
26
questions
0
votes
0
answers
36
views
GRUB ignores my cryptdevice parameter in /etc/default/grub
I want to create setup with a encrypted root filesystem on my Arch Linux installation, so when I successfully mounted my /boot and /boot/efi partitions, I'm contuning with grub installation with grub, ...
- 13
0
votes
1
answer
35
views
crypttab seems to not been active
After I upgraded from Linux Mint 21.1 to 21.2 the newest initrd stopped working. The older one works fine. Regenerating the initrd doesn't help. On startup with the newest initrd the error tells that ...
0
votes
1
answer
275
views
How to open all LUKS volumes with use of a single password?
I'm using EndeavorOS (basically Arch), but with systemd-boot and dracut for initrd. I have a simple setup with an unencrypted boot partition and LUKS-encrypted root and swap partitions. Specifically, ...
- 103
1
vote
1
answer
236
views
Mount a LUKS encrypted EXT4 formated image file when mount folder is accessed (using autofs)
Here's what I'd like to do. Use autofs to automount an encrypted luks image file when the target directory is accessed.
I've been playing with both fstab and crypttab, but to no luck.
I do NOT want to ...
- 121
0
votes
1
answer
649
views
Unlock luks by other device
I know that by configuring crypttab I can automatically unlock LUKS drives by using keyfile stored on another drive in the machine which has been manually unlocked in advance. I have been wondering if ...
- 33
0
votes
1
answer
313
views
Systemd, crypttab and starting units after decryption
I have an encrypted partition that I configured with crypttab like
/etc/crypttab:
name UUID=<THE_UUID> none luks,noauto
and /etc/fstab
UUID=<THE_UUID> /mnt/mountpoint ext4 defaults,noauto ...
- 136
7
votes
2
answers
729
views
Detached LUKS-header on Debian-based GNU/Linux
There is scattered information on how to set up a detached header
for a LUKS-encrypted disk on Stack Exchange.
And by searching the web using Google, I found limited information.
Some of the best ...
- 253
2
votes
0
answers
734
views
cryptsetup ignoring unknown option 'tpm2-device'
I have been trying to get LUKS disk encryption with TPM2 working on an HP EliteBook 850 G8 running Kali Linux 2022.3. However, I am struggling to get TPM2 disk decryption added to Initramfs.
Steps I ...
- 21
4
votes
4
answers
5k
views
/etc/crypttab not updating in initramfs
I have a new installation of ubuntu 22.04, with full disk encryption (LUKS) and ZFS picked from the ubuntu installer options.
I need to make some edits to /etc/crypttab so that unlocking my drives ...
- 141
2
votes
0
answers
620
views
How to make boot drive encryption work with PKCS#11 Smart card in Fedora (35)
On Fedora Workstation 35 here. systemd v249
I am trying to unlock root LUKS volume with smart card on BOOT, but it does not work.
I added to /etc/crypttab
mydisk UUID=496e1cd5-712f-44ab-ad02-...
- 205
1
vote
0
answers
572
views
restoring using timeshift with an encrypted disk from a fresh live usb install
if you're using the live usb (this is specific to pop!_os 21.04, but i think it would apply to ubuntu etc) and you do a fresh reinstall, would you need to boot into the new system to get access to the ...
- 11
1
vote
0
answers
6k
views
How to mount a btrfs subvolume via fstab? Has the root subvolume to be already mounted elsewhere?
I'm trying to mount two btrfs subvolumes from a same (luks-encrypted) device via the entries in fstab. The crypttab entry must be correct, since the system asks for the password on boot. But then it ...
- 255
0
votes
1
answer
368
views
How can I achieve being able to run cryptdisks_start as normal user?
I have looked at how to be able to imbue in a crypttab stanza (referring to a LUKS device) to allow a specific user or any unprivileged user to map it. Roughly, I am looking for the equivalent of user ...
- 16.4k
3
votes
1
answer
3k
views
how to let the systemd cryptsetup automatically mount the usb key which contain keyfile?
In ubuntu 19.10 I followed the example here.
The keyfile is at the root of usb key filesystem. usbkey has uuid yyyy.
the /etc/crypttab is like this:
encrypted UUID=xxxx /keyfile:UUID=yyyy luks,...
- 1,244
1
vote
1
answer
523
views
How could I mount a non-encrypted partition before crypttab starts?
I have an ARM server that I want to have booted with (not booting FROM) a USB flash drive containing a LUKS keyfile, that's needed to decrypt a hard drive I have connected to the drive. So in order to ...
2
votes
1
answer
3k
views
invalid line /etc/crypttab
I am troubleshooting a debian system that will not boot; the system booted fine, and one day ceased to do so (possibly but not definitely related to an apt upgrade). It has a small boot partition (...
- 3,638
1
vote
1
answer
56
views
Can one combine logical volumes from different groups without copying the contents over?
I use Arch Linux kernel 4.18.12-arch1-1-ARCH (november 2018).
I use a SATA caddy (for a Thinkpad T400) which holds a hard drive from an old laptop. I'd like to decide on combining the contents and ...
- 247
1
vote
1
answer
539
views
LUKS encryption Mint - only being asked to decrypt one of my two encrypted drives
I've just finished setting up LUKS encryption on new install of Mint 18.3. I mainly followed the steps in this guide (only doing the system #1 setup however as this is the sole OS on this system).
...
- 123
2
votes
1
answer
1k
views
change designated name of encrypted lvm root? from sdo to sdn in crypttab?
I installed debian stretch using encrypted lvm from the installer on a usb drive.
during installation, with all disks connected, sdo5 is assigned to my boot disk. when running the full system, my ...
- 225
5
votes
2
answers
7k
views
crypttab and fstab UUID's
This works:
crypttab:
sda2_crypt UUID=6bbba323-ddad-479d-863e-4bd939b46f96 none luks,swap
sda3_crypt UUID=3087cec6-dcc9-44ee-8a08-5555bb2ca566 none luks
fstab:
/dev/mapper/sda3_crypt / ...
0
votes
1
answer
600
views
Secondary LUKS physical volume won't automount
I've got a second hard drive in my laptop. However, it only mounts itself when I load the GUI and click on the device in Nemo. What I'd like is for it to automount on boot.
sudo lsblk -f
NAME ...
- 373
2
votes
1
answer
2k
views
Why is my keyfile in /etc/crypttab not recognized?
I setup dm-crypt for a non-root partition on an Arch Linux installation and referenced a keyfile in /etc/crypttab (permissions -rw-------). However, during startup, I still get prompted for the ...
- 319
5
votes
2
answers
2k
views
How to not store hdd encryption key on machine, but still mount on boot?
Setup: I'm using a raspberry pi with a USB HDD, running arch linux and syncthing for my own "cloud" sync.
Problem: In case of a physical break-in where the HDD pi and HDD is stolen, I'd like to ...
- 185
2
votes
1
answer
7k
views
Enabling FIPS on a luks encrypted CentOS system breaks boot password
For one of my apps I need to enable FIPS for OpenSSL, while simultaneously using software disk encryption.
VM #1
I launched a CentOS VM instance which was software encrypted during install. The ...
- 3,204
1
vote
0
answers
303
views
/etc/crypttab for anyusb?
On my LUKS-encrypted machine, I have edited my /etc/crypttab to inform the system that a keyfile is on a pendrive. I did this by adding a line in /etc/crypttab, using the UUID of my encrypted HDD, and ...
- 576
4
votes
1
answer
5k
views
Difference between cryptopts and crypttab
I'm setting up an encrypted root fs, which I've done before, but this time I'm using a PGP-encrypted keyfile with a symmetric password to familiarize myself with the process.
There are two places ...
- 39.1k