Unix & Linux

Questions tagged [disk-encryption]

Ask Question

The tag has no usage guidance.

188 questions
Newest
Active
Bountied
Unanswered
Filter by
Sorted by
Tagged with
1
vote
0answers
23 views

Encrypted external hard disk not recognized

I'm using a dual boot system with Windows 8 and Fedora 31 KDE on my PC. I've encrypted my external hard disk with VeraCrypt in Windows. Windows recognizes this external hard drive and I can unlock ...
0
votes
0answers
8 views

How to correctly clone disk-to-disk using clonezilla?

I'm copying my OS from one USB flash drive to another USB flash drive. My OS have encrypted / and encrypted /boot. And I always get errors after copying and I think that's because of encrypted /boot. ...
2
votes
0answers
31 views

Can I install Debian with encrypted /boot?

Is there a way to install Debian with full disk encryption, including /boot ? Or the only way is to install Debian and encrypt all without /boot and then encrypt /boot using this guide ?
0
votes
1answer
15 views

luks recovery of key safety hole

i found out that if you forget one of your 1-8 passwords for luks it can still be possible to recover it as a keyfile and then set a new password with that keyfile without remembering your old ...
0
votes
1answer
18 views

Encryption after Symlinks are made

I wanted to ask before I did something really stupid. So, here it goes... . Here's the components I will be referencing: "LinuxOS" Partition (dedicated disk; no other partitions on the disk) "...
0
votes
0answers
20 views

Full-disk encryption password fails when booting kernels newer than 5.2.0

My full-disk encryption password has stopped working on newer kernels. At the grub menu I can boot to 5.2.0 and the password works; on newer kernels (e.g. 5.3, 5.4) it does not boot (and gives an ...
0
votes
1answer
23 views

Cannot list and access my disk after cryptsetup command

I just tried to encrypt the new 2 TB disk I just received. Unfortunately I unplugged it (external disk on a USB port) just after running a cryptsetup command and now I cannot even list it with fd or ...
0
votes
0answers
14 views

Reinstalling Debian on LVM encrypted disk

After updating my Debian 10 os it boots into a terminal based interface instead of my normal gnome desktop. I don't know how to fix it so I want to reinstall my os but I don't want to lose my data in ...
0
votes
3answers
81 views

Mount a block device as a regular file

Preamble Suppose I have an encrypted partition of 1TB on machine A containing the home directories of a dozen users, let's call this partition sda2. I want to backup that partition on a remote ...
1
vote
0answers
102 views

My disk doesn't want to unlock encryption

I use Debian default encryption disk encryption. When I boot I need to type my password, and then I will be logged in. However today I can't login. It always says that I typed the wrong password, but ...
2
votes
2answers
66 views

How do I delete an immutable encrypted file?

I was experimenting with encryption on an ext4 filesystem and I encrypted a file (using fscrypt) which was set to be immutable (via chattr +i). I have now lost the encryption key and uninstalled ...
1
vote
1answer
29 views

Can't mount encrypted disk from old cryptsetup

I've got a very old USB disk, on which there's a very old encrypted partition. It mounts as /dev/sdb1 On a newish box (with cryptsetup 1.7.3), I can attach to it with: cryptsetup -c aes-plain -s ...
0
votes
1answer
32 views

How to encrypt external disk without backup/restore the existing data?

I have an external USB disk with ext4 unencrypted: /dev/sda1 3.6T 2.9T 613G 83% /data I wish to encrypt this disk without losing data. I migrated this disk from Raspberry3 to Raspberry4, ...
0
votes
1answer
91 views

GRUB2 won't Mount encrypted partitions for Kali 2019.4

While attempting to boot a new installation of Kali Linux 2019.4 on a USB drive it appears GRUB 2.04-5 will not decrypt the root partition: Volume group "cryotic" not found Cannot process volume ...
1
vote
0answers
57 views

Slow write speed on encrypted drive, while benchmark shows much higher encryption / raw disk write rates

I currently setup a NAS with Ubuntu 18.04 on a Netgear ReadyNAS 102device. The machine has a Armada Marvell 370/XP SoC with a hardware encryption accelerator called "CESA". The kernel drivers for CESA ...
0
votes
0answers
16 views

Kali Linux persistent USB stick

Is it possible to use veracrypt to encrypt the persistence partition instead of luks. I know it would involve a lot of decompiling and recompiling but it sounds like a fun project just don't know ...
0
votes
0answers
28 views

Device found for 'cryptsetup luksFormat` but not `cryptsetup luksAddKey`

I run sudo cryptsetup --hash sha512 --key-file 00.key luksFormat /dev/disk/by-uuid/156e47f9-6996-481c-82ce-160b367b9ff4, everything works as expected: WARNING! ======== This will overwrite data on /...
1
vote
1answer
26 views

Boot doesn't see my encrypted OS after update

I have two Ubuntu 18.04 installations on my machine: personal /dev/sda1 work (full-disk encryption) /dev/sda3 I installed some updates on my personal partition last night (see log on pastebin: https:...
0
votes
1answer
69 views

Can't boot from encrypted disk after deleting swap-memory partition [issue]

I can't login anymore into my encrypted disk. After writing the password: error: no such cryptodisk found. error: disk ‘cryptouuid/HEXstring’ not found. Entering rescue mode… intuitively that string ...
0
votes
0answers
30 views

Locked out on disk encryption

I bought a Darter Pro laptop from System76 2.5 months ago. Today all of a sudden I got the "please unlock disk cryptdata" prompt. I rebooted the box many times before and never had this prompt. At ...
0
votes
2answers
49 views

mount crypto_LUKS partition without decrypting (locally)

I have an encrypted external disk on a linux server. On the server, I can do this locally to decrypt cryptsetup -d keyfile luksOpen /dev/sdx1 /mnt/decrypted but I prefer to avoid doing that on the ...
1
vote
1answer
63 views

Mount points in /etc/fstab on Debian system for an encrypted partition

I recently installed Debian 10 on my laptop and for the first time I decided to give file encryption a go. But I've found something interesting in the /etc/fstab file, and it's that it doesn't use ...
0
votes
1answer
24 views

How to move swap from encrypted lvm to one-time key?

Currently my setup is: cryptsetup lvm root home swap I would like to achieve something like cryptsetup lvm root home swap (one-time key) The steps i am thinking of are: remove swap (can do) ...
2
votes
1answer
68 views

Snapshottable encrypted folder

I'm trying to create an encrypted data folder which could periodically take snapshots of the current state of it. The snapshot should be an encrypted one, and I should be able to take snapshots ...
0
votes
0answers
9 views

cryptmount performance for large partitions?

Has anyone tried cryptmount with a large amount of data, say, several terabytes? Looks like a filesystem is stored in a single user disk file (such as ~/crypto.fs), so it makes me wonder if it can ...
0
votes
0answers
55 views

Is there a way to do one-time pads(OTP) with Linux cryptsetup(dm-crypt)?

It looks like losetup with cryptoloop did it and there was a dm-xor module for a very old kernel, but can't find anything modern. I'm wading through a ton of obsolete losetup documents. Something ...
0
votes
2answers
138 views

Encrypt a disk without having to log in to enter the password

I am using eCryptfs to encrypt the home directory and would like to access files without having the user log in. The program pam_mount will automount encrypted file systems, but it seems like that ...
1
vote
0answers
80 views

Recover space from persistent storage by Tails OS?

I installed Tails in a USB stick and enabled persistent storage. The USB had 16GB of storage. Now I formatted the USB without freeing up the persistent storage and lost 10GB of space. I remember the ...
1
vote
1answer
122 views

Wrong EXT4 Partition size in luks encrypted partition

I have encrypted my home partition via cryptsetup. Inside the mapper /dev/mapper, i have created a ext4 fs via mkfs.ext4 /dev/mapper/home Now, my home partiotion only has 91 GB. My luks partition ...
1
vote
1answer
503 views

Is there a way to have hibernate and encrypted swap on nixos?

There's a way to get encrypted swap + hibernate on Ubuntu. There's also a way to get encrypted swap on nixos (use randomEncryption.enable = true), and a way to make hibernate to swap. Is there a way ...
1
vote
1answer
314 views

Crypt /home partition after install (CentOS 7) or reinstall?

I recently installed CentOS 7 on a computer with high-end hardware (8-core processor, NVMe 512GB SSD, 16GB RAM). My customer wants /home to be crypted and I was not aware of that, so that I didn't ...
0
votes
0answers
210 views

How to hibernate Debian with swapfile on home partition of fully encrypted disk?

I'm running Debian10/KDE with kernel 4.19.0-5-amd64. I have 16GB of RAM, a swapfile of 25GB on my separate home partition (the partition that holds the OS is too small for it). My hard drive is fully ...
1
vote
1answer
59 views

temporarily suspend/disable FileVault

Is there a way, or does anyone know of a way to temporarily disable or suspend File Vault disk encryption? I know fdesetup disable will decrypt the entire disk (which i don't want), but is there a way ...
2
votes
1answer
272 views

Extend Luks encrypted partition without using luksOpen command

I just tried to increase encrypted LVM partition. The proceduce is: Extend the partition with fdisk -> Resize PV -> Resize LV -> Increase size file system. Detail steps in https://www.thegeekdiary....
0
votes
0answers
27 views

dm_crypt mount on login takes 90 seconds

I'm trying to configure automounting encrypted home on login with user password=encryption password. I'm using archlinux + kde + sddm + crypsetup (dm_crypt). Following archlinux article I did as ...
0
votes
1answer
481 views

How to mount a partition inside encrypted lvm inside a disk image?

On my previous computer, I had my / /home and swap inside an encrypted lvm, and outside the lvm I had the /boot and /boot/efi. I then created an image. I think I did like this: dd if=/dev/sda of=lvm....
2
votes
1answer
81 views

On Debian 9, is /root part of the /home partition?

I am encrypting my /home partition and I would also like any secrets /root (not /) contains to be encrypted. Is the /root folder considered part of the /home partition by default, or do I need to ...
2
votes
1answer
941 views

Migrate Arch from encrypt to sd-encrypt

I recently installed Antergos (which is basically Arch) and set it to use full disk encryption. Now, I want to migrate from encrypt to sd-encrypt because I want to be able to hibernate and I couldn't ...
1
vote
1answer
2k views

How to encrypt disk on Manjaro after installation

I have installed Manjaro Cinamon. How can I enable now full disk encryption? Does Manjaro provide some GUI for this?
0
votes
0answers
49 views

How come my encrypted drives/partitions randomly do not decrypt upon booting?

I have the following encrypted. - HOME drive - SWAP partition - BACKUP drive I use a keyfile on a USB stick to decrypt my drives upon booting. Sometimes, and I mean RANDOMLY, upon booting up my ...
0
votes
0answers
202 views

Can I use dm-crypt and dm-verity at the same time? Or is it “one-or-the-other”?

I don't know too much professional theory of the two tools. I thought I would use dm-crypt to encrypt the whole partition, and then use dm-verity to verify the integrity of each block. Does that make ...
2
votes
1answer
662 views

Is it possible to LUKS require both password and key file?

My goal is to be able easily destroy medium with key file in emergency situation and make system unbootable, even is potential advisor knows right password for the system. I'd store this key file in ...
1
vote
1answer
564 views

Stuck starting /dev/mapper/luks

A recent upgrade rendered my computer unbootable. The boot never completes. It is stuck at: Start job is running for /dev/mapper/luks-4956cb53-c8e8-4525-b3e0-2f54bad2a801 Additionally, I am now ...
2
votes
1answer
44 views

Writing to /root/workspace doesn't break the files inside encrypted partition

I have made full disk encryption on my hard disk exactly as in this guide https://web.archive.org/web/20180428191153/http://thesimplecomputer.info/full-disk-encryption-with-ubuntu Partition table: ...
1
vote
1answer
578 views

Device name to use in luks commands for LVM LUKS

Can somebody with more LUKS LVM experience than me tell me what the correct device name is to use in this context. I'm trying to follow some instructions about using clevis and tang in CentOS. The ...
0
votes
1answer
236 views

debian and grub with raid10+lvm+luks

I set for testing a virtual machine with debian machine is so configured 4 disk in raid10 software the md0(raid10) in encrypted with luks on the luks(luksmd0) I have create the vg (debian2-vg) wich ...
0
votes
1answer
228 views

Delete volume group of HDD of which the name is the same as my main SSD's

I just bought a new computer with an HDD + SSD. I must've accidentally encrypted the HDD it during installation, although I am sure I did undo it, but here it is, encrypted and even if I put the ...
2
votes
0answers
1k views

Decrypt root device at boot with keyfile on usb - Debian Stretch

Basically what I need is to decrypt root device automatically with a keyfile stored on a usb with a partition scheme (ext3, ext4 I don't mind). I successfully implemented the script method with dd ...
0
votes
1answer
227 views

Full disk encryption with few volume groups

My current LVM configuration: I have two physical volumes (pv): 256 GB of SSD and 1 TB of HDD. These volumes are used by different volume groups (vg): SSD vg has logical volumes which are mount where ...
0
votes
1answer
158 views

Cryptmount-setup is not working

When I tried to set up encryption using cryptmount-setup, it just returns without any feedback. It did not even created the crypto.fs file. I ran the commands: cryptmount nextcloud_data and cryptmount ...

1 2 3 4