Skip to main content

Questions tagged [crypttab]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
3 votes
2 answers
271 views

Does crypttab's "key-slot" option mean LUKS will try that keyslot "only", or "first"?

I am following the Debian dev's guide to full disk encryption. I am currently on Section 4, step 3- editing /etc/crypttab. In the guide, in section 3 they set up keyslot 0 for something else and now ...
SuperDialga's user avatar
0 votes
0 answers
331 views

GRUB ignores my cryptdevice parameter in /etc/default/grub

I want to create setup with a encrypted root filesystem on my Arch Linux installation, so when I successfully mounted my /boot and /boot/efi partitions, I'm contuning with grub installation with grub, ...
discouragedone's user avatar
0 votes
1 answer
82 views

crypttab seems to not been active

After I upgraded from Linux Mint 21.1 to 21.2 the newest initrd stopped working. The older one works fine. Regenerating the initrd doesn't help. On startup with the newest initrd the error tells that ...
opensource25's user avatar
0 votes
1 answer
1k views

How to open all LUKS volumes with use of a single password?

I'm using EndeavorOS (basically Arch), but with systemd-boot and dracut for initrd. I have a simple setup with an unencrypted boot partition and LUKS-encrypted root and swap partitions. Specifically, ...
Snusifer's user avatar
  • 103
1 vote
1 answer
407 views

Mount a LUKS encrypted EXT4 formated image file when mount folder is accessed (using autofs)

Here's what I'd like to do. Use autofs to automount an encrypted luks image file when the target directory is accessed. I've been playing with both fstab and crypttab, but to no luck. I do NOT want to ...
JDMcMillian's user avatar
0 votes
1 answer
1k views

Unlock luks by other device

I know that by configuring crypttab I can automatically unlock LUKS drives by using keyfile stored on another drive in the machine which has been manually unlocked in advance. I have been wondering if ...
fales's user avatar
  • 33
0 votes
1 answer
544 views

Systemd, crypttab and starting units after decryption

I have an encrypted partition that I configured with crypttab like /etc/crypttab: name UUID=<THE_UUID> none luks,noauto and /etc/fstab UUID=<THE_UUID> /mnt/mountpoint ext4 defaults,noauto ...
famfop's user avatar
  • 136
7 votes
2 answers
1k views

Detached LUKS-header on Debian-based GNU/Linux

There is scattered information on how to set up a detached header for a LUKS-encrypted disk on Stack Exchange.  And by searching the web using Google, I found limited information.  Some of the best ...
Mikkel Rev's user avatar
3 votes
1 answer
1k views

cryptsetup ignoring unknown option 'tpm2-device'

I have been trying to get LUKS disk encryption with TPM2 working on an HP EliteBook 850 G8 running Kali Linux 2022.3. However, I am struggling to get TPM2 disk decryption added to Initramfs. Steps I ...
lxndrblz's user avatar
5 votes
5 answers
8k views

/etc/crypttab not updating in initramfs

I have a new installation of ubuntu 22.04, with full disk encryption (LUKS) and ZFS picked from the ubuntu installer options. I need to make some edits to /etc/crypttab so that unlocking my drives ...
Bob Arezina's user avatar
2 votes
0 answers
698 views

How to make boot drive encryption work with PKCS#11 Smart card in Fedora (35)

On Fedora Workstation 35 here. systemd v249 I am trying to unlock root LUKS volume with smart card on BOOT, but it does not work. I added to /etc/crypttab mydisk UUID=496e1cd5-712f-44ab-ad02-...
Boris Hamanov's user avatar
1 vote
0 answers
681 views

restoring using timeshift with an encrypted disk from a fresh live usb install

if you're using the live usb (this is specific to pop!_os 21.04, but i think it would apply to ubuntu etc) and you do a fresh reinstall, would you need to boot into the new system to get access to the ...
zfigz's user avatar
  • 11
1 vote
0 answers
7k views

How to mount a btrfs subvolume via fstab? Has the root subvolume to be already mounted elsewhere?

I'm trying to mount two btrfs subvolumes from a same (luks-encrypted) device via the entries in fstab. The crypttab entry must be correct, since the system asks for the password on boot. But then it ...
d.k's user avatar
  • 257
0 votes
1 answer
442 views

How can I achieve being able to run cryptdisks_start as normal user?

I have looked at how to be able to imbue in a crypttab stanza (referring to a LUKS device) to allow a specific user or any unprivileged user to map it. Roughly, I am looking for the equivalent of user ...
0xC0000022L's user avatar
  • 16.8k
3 votes
1 answer
3k views

how to let the systemd cryptsetup automatically mount the usb key which contain keyfile?

In ubuntu 19.10 I followed the example here. The keyfile is at the root of usb key filesystem. usbkey has uuid yyyy. the /etc/crypttab is like this: encrypted UUID=xxxx /keyfile:UUID=yyyy luks,...
Wang's user avatar
  • 1,336
1 vote
1 answer
600 views

How could I mount a non-encrypted partition before crypttab starts?

I have an ARM server that I want to have booted with (not booting FROM) a USB flash drive containing a LUKS keyfile, that's needed to decrypt a hard drive I have connected to the drive. So in order to ...
Automounting guest's user avatar
2 votes
1 answer
3k views

invalid line /etc/crypttab

I am troubleshooting a debian system that will not boot; the system booted fine, and one day ceased to do so (possibly but not definitely related to an apt upgrade). It has a small boot partition (...
user001's user avatar
  • 3,738
1 vote
1 answer
60 views

Can one combine logical volumes from different groups without copying the contents over?

I use Arch Linux kernel 4.18.12-arch1-1-ARCH (november 2018). I use a SATA caddy (for a Thinkpad T400) which holds a hard drive from an old laptop. I'd like to decide on combining the contents and ...
Bart's user avatar
  • 247
1 vote
1 answer
569 views

LUKS encryption Mint - only being asked to decrypt one of my two encrypted drives

I've just finished setting up LUKS encryption on new install of Mint 18.3. I mainly followed the steps in this guide (only doing the system #1 setup however as this is the sole OS on this system). ...
TheHCA's user avatar
  • 123
2 votes
1 answer
1k views

change designated name of encrypted lvm root? from sdo to sdn in crypttab?

I installed debian stretch using encrypted lvm from the installer on a usb drive. during installation, with all disks connected, sdo5 is assigned to my boot disk. when running the full system, my ...
jakethedog's user avatar
5 votes
2 answers
8k views

crypttab and fstab UUID's

This works: crypttab: sda2_crypt UUID=6bbba323-ddad-479d-863e-4bd939b46f96 none luks,swap sda3_crypt UUID=3087cec6-dcc9-44ee-8a08-5555bb2ca566 none luks fstab: /dev/mapper/sda3_crypt / ...
oak-island-pirate's user avatar
0 votes
1 answer
609 views

Secondary LUKS physical volume won't automount

I've got a second hard drive in my laptop. However, it only mounts itself when I load the GUI and click on the device in Nemo. What I'd like is for it to automount on boot. sudo lsblk -f NAME ...
SilverlightFox's user avatar
2 votes
1 answer
3k views

Why is my keyfile in /etc/crypttab not recognized?

I setup dm-crypt for a non-root partition on an Arch Linux installation and referenced a keyfile in /etc/crypttab (permissions -rw-------). However, during startup, I still get prompted for the ...
Steven Roose's user avatar
5 votes
2 answers
2k views

How to not store hdd encryption key on machine, but still mount on boot?

Setup: I'm using a raspberry pi with a USB HDD, running arch linux and syncthing for my own "cloud" sync. Problem: In case of a physical break-in where the HDD pi and HDD is stolen, I'd like to ...
kidmose's user avatar
  • 185
2 votes
1 answer
7k views

Enabling FIPS on a luks encrypted CentOS system breaks boot password

For one of my apps I need to enable FIPS for OpenSSL, while simultaneously using software disk encryption. VM #1 I launched a CentOS VM instance which was software encrypted during install. The ...
a coder's user avatar
  • 3,263
1 vote
0 answers
309 views

/etc/crypttab for anyusb?

On my LUKS-encrypted machine, I have edited my /etc/crypttab to inform the system that a keyfile is on a pendrive. I did this by adding a line in /etc/crypttab, using the UUID of my encrypted HDD, and ...
ArchiT3K's user avatar
  • 577
4 votes
1 answer
6k views

Difference between cryptopts and crypttab

I'm setting up an encrypted root fs, which I've done before, but this time I'm using a PGP-encrypted keyfile with a symmetric password to familiarize myself with the process. There are two places ...
Naftuli Kay's user avatar
  • 40.2k