Questions tagged [disk-encryption]
The disk-encryption tag has no usage guidance.
1
vote
0answers
32 views
Is it necessary to encyrpt the EFI parition [closed]
I am used to building systems with LUKS on LVM and encrypting the boot parition containing GRUB2. Since moving to newer machines I am using UEFI.
Is it necessary to encrypt the EFI partition in the ...
2
votes
1answer
27 views
Writing to /root/workspace doesn't break the files inside encrypted partition
I have made full disk encryption on my hard disk exactly as in this guide
https://web.archive.org/web/20180428191153/http://thesimplecomputer.info/full-disk-encryption-with-ubuntu
Partition table: ...
1
vote
1answer
34 views
Device name to use in luks commands for LVM LUKS
Can somebody with more LUKS LVM experience than me tell me what the correct device name is to use in this context.
I'm trying to follow some instructions about using clevis and tang in CentOS. The ...
0
votes
0answers
38 views
debian and grub with raid10+lvm+luks
I set for testing a virtual machine with debian
machine is so configured
4 disk in raid10 software
the md0(raid10) in encrypted with luks
on the luks(luksmd0) I have create the vg (debian2-vg)
wich ...
0
votes
1answer
33 views
Delete volume group of HDD of which the name is the same as my main SSD's
I just bought a new computer with an HDD + SSD. I must've accidentally encrypted the HDD it during installation, although I am sure I did undo it, but here it is, encrypted and even if I put the ...
1
vote
0answers
404 views
Decrypt root device at boot with keyfile on usb - Debian Stretch
Basically what I need is to decrypt root device automatically with a keyfile stored on a usb with a partition scheme (ext3, ext4 I don't mind).
I successfully implemented the script method with dd ...
0
votes
1answer
29 views
Full disk encryption with few volume groups
My current LVM configuration: I have two physical volumes (pv): 256 GB of SSD and 1 TB of HDD. These volumes are used by different volume groups (vg):
SSD vg has logical volumes which are mount where ...
0
votes
1answer
49 views
Cryptmount-setup is not working
When I tried to set up encryption using cryptmount-setup, it just returns without any feedback. It did not even created the crypto.fs file. I ran the commands: cryptmount nextcloud_data and cryptmount ...
3
votes
2answers
77 views
Avoid GRUB infection which would crack my encrypted linux
I have an unencrypted /boot partition with GRUB and an encrypted partition, where my Linux is located. An attacker, who wants to read my encrypted partition, could gain physical access to my computer ...
1
vote
0answers
39 views
How to boot after removing one disk from encrypted software RAID? [closed]
I have installed encrypted software RAID 1 on ubuntu server:
After installing I got ubuntu successfully booted up.
Then I tried to remove one drive, after that boot failed:
Why I cant boot if its ...
1
vote
1answer
166 views
Is it OK to use Btrfs for a logical volume under encryption?
I want to use the Btrfs partition type for my main ("/") logical volume which is under encryption. The encrypted LVM will occupy my entire device aside from the two small "EFI-system" and "Boot" ...
1
vote
0answers
91 views
Debian cryptoloop module missing [closed]
When I do modprobe cryptoloop I get:
modprobe: FATAL: Module cryptoloop not found in directory /lib/modules/4.9.0-8-amd64
the package cryptsetup is installed. I have this working on another Debian ...
-1
votes
1answer
54 views
What I can do in LUKS when I'm asked for password?
When I start PC it asks for my password to boot in system. 1) But I cannot use CAPSLOCK when I use CAPSLOCK the light on my keyboard is not lighting.
2) Does SHIFT button work ?
3) Can I delete a ...
1
vote
0answers
89 views
Installing on a pre-encrypted drive [closed]
A work issued laptop has and an IT mandated drive encryption installed to protect data on the primary OS that I'd like to install Linux Mint on. I've asked several times to have drive encryption ...
0
votes
0answers
36 views
Why does booting from Debian on usb with lvm fail until usb is plugged out and in again?
Background: I decided to “dual boot” an encrypted Fedora and Debian system.
I installed fedora first on a the usb drive. Created a boot partition (call it sdb1 for reference) and then an encrypted ...
2
votes
1answer
233 views
Disk encryption with ecryptfs - full disk
i'm new and i hope to find an answer here. Please tell me, if you need more information.
I have an disk encryption for my home partition on Linux 4.13.0-43-generic x86_64 (Ubuntu 16.04.4 LTS).
Today ...
1
vote
1answer
244 views
Is there a way to encrypt disk without formatting it?
When I was installing my OS, I didn't encrypt. Is there a way to encrypt it now without formatting and without losing any data?
I read a few guides how to encrypt and every one says that I need to ...
0
votes
0answers
111 views
Strange command line behaviour when ssh, 7z or cd?
I have a very strange behaviour with my remote server. First of all, when I access my server with ssh, I sometimes have to enter my password although my user is in authorized_keys. Sometimes it works ...
1
vote
1answer
184 views
LUKS encryption Mint - only being asked to decrypt one of my two encrypted drives
I've just finished setting up LUKS encryption on new install of Mint 18.3. I mainly followed the steps in this guide (only doing the system #1 setup however as this is the sole OS on this system).
...
0
votes
0answers
151 views
Grub-install error: disk 'crpytouuid/<uuid>' not found
I followed fdiblen's guide on Arch Linux Installation with a Fully encrypted disk and Btrfs filesystem that uses cryptsetup.
I'm at the bootloader stage where I'm trying to grub-install with these ...
0
votes
0answers
22 views
Moving hard drive from old laptop to new laptop
The story
On my old laptop (Asus K56CB) I was running Linux Mint, the drive was also encrypted since Mint was first installed, for clarity. Eventually this laptop broke and I recently got a Lenovo ...
1
vote
0answers
36 views
extend encrypted system partion
I have a system using luks encryption and I want to extend the system partition. Seems to look like Extend a LUKS encrypted partition to fill disk, but a bit different.
Because my physical disk seems ...
0
votes
1answer
546 views
Login loop ubuntu 16.04
The day before I run into the problem I had installed Virtual Machine and Vagrant and everything was fine. When I fired up my computer the next day, I got stuck in a login loop. My next action was go ...
-1
votes
1answer
157 views
Encrypted separate home partition with Ubuntu, now moving to CentOS
Do I need to to decrypt the home partition before I move, or does CentOS support the encryption methods that Ubuntu uses? Hopping between Ubuntu distros is no problem at all, but I think I might have ...
1
vote
1answer
205 views
FreeBSD GELI Encrypted Disk Capacity vs Unencrypted
I encrypt my external backup devices with AES256 using GELI on FreeBSD 11. I have recently changed the disks to 240GB SSDs whereby only half the capacity is usable which is causing the backup to fail. ...
5
votes
2answers
354 views
QNAP eCryptFS Filesystem Broken Permissions
Following an issue with my QNAP device I've had to do a whole load of manual recovery of data and only getting at my encrypted data remains.
It seems that QNAP use eCryptFS to do this. I've managed ...
1
vote
1answer
443 views
Mounting encrypted external device with conflicting LVM names
I got myself a new hard drive and installed the most current version of Linux Mint. Now I wanted to transfer the files from the old disk (I had no recent backup) but there are several issues
the LVMs'...
7
votes
1answer
1k views
Which Linux distributions support full disk encryption (including /boot)?
Recently I came across many Linux distributions. Before that I've been always using OpenSUSE so some things apparently were quite obvious to me - for example that it's possible and quite easy to set ...
2
votes
1answer
2k views
How to encrypt a btrfs subvolume?
I'm looking for information about encryption with btrfs. I have experience with full-disk (LVM actually) encryption, so this time I only need to look at some btrfs specific questions.
I have found ...
0
votes
1answer
352 views
Why should we encrypt the system partition and not only /home? [closed]
I am currently installing a Debian distro on a new desktop computer and I am looking for pros/cons arguments for two ways of making the partition table (in matter of performance and security). My new ...
1
vote
1answer
156 views
Best encryption for multi-disk lvm volumes
Here's the scenario: I have a backup server that currently has a (unencrypted) logical backup volume that expands over two physical disks. I need to be able to expand the volume by adding more disks. ...
1
vote
1answer
24 views
Geting access to a partition over the network
I want to access my user-partition from a client, so that it can encrypt the saved data without the server knowing the key, therefore the client doesn't have to trust it.
Diagram:
Layer5: Filesystem |...
-1
votes
1answer
1k views
How do I find the passphrase which encrypts my home directory? [closed]
Years ago I installed Ubuntu and encrypted my home directory.
I can still log in as normal, I know my password and I have access to my files.
Just now, installing Lubuntu on another machine, I saw ...
1
vote
0answers
382 views
Modify LUKS encryption after install
I'v set up a debian install like this :
/dev/sdb5 is /boot
/dev/sdb6 is LUKS encrypted /
/dev/sdb7 is LUKS encrypted swap
This works well however I need to enter 2 passphrases at each boot.
Is ...
0
votes
1answer
181 views
Arch Linux - How could I decrypt and automount multiple encrypted drives during init?
I have two encrypted drives (one SSD for booting and a hard drive for storage) I need both to be unlocked and mounted before all of the runlevel programs/services. Else some of my services would freak ...
1
vote
1answer
485 views
dm-crypt / cryptsetup which block encryption dimension use
I'm working on dm-crypt utilizing cryptsetup. I'm interested to understand if it's using a fixed block dimension to encrypt files.
I explain it better: I created a LUKS envelop, formatted it with ...
1
vote
0answers
407 views
Failed to mount encrypted swap on LVM volume
I need help mounting encrypted swap with systemd during boot time. The situation is as follows:
I have a Debian 9 system, in Crunchbang++ flavour. During installation, I set up swap as an encrypted ...
1
vote
0answers
104 views
Show entered password with geli
In FreeBSD you get access to a geli-encrypted partition by:
geli attach -k /root/ada1.key /dev/ada1
Which then opens a password prompt. Is there a way to get the password displayed while it is ...
1
vote
1answer
5k views
How to decrypt a hard drive with LUKS encryption?
today i was installing ubuntu on an external hard drive and in the initial setup i marked the option "encrypt installation" and the clicked the install button, but i didn't notice that my internal ...
1
vote
0answers
530 views
Install Linux side by side on an encrypted disk running Windows 10
I have a workplace issued laptop that has Windows 10 installed and BitLocker encyrption enabled. So when I power on the machine, the first thing that happens (after the vendor logo) is BitLocker key ...
12
votes
2answers
7k views
Using a single passphrase to unlock multiple encrypted disks at boot
My machine has an SSD, where I installed the system and an HDD, which I use as a storage for large and/or infrequently used files. Both are encrypted, but I chose to use the same passphrase for them. ...
25
votes
1answer
2k views
Pre-encryption wipe, why?
I wanted to know why, before encrypting and installing itself on the drive , Kali :
wiped the whole drive
filled the drive with 0s
filled the drive with 1s
filled the drive with Random data
wiped the ...
-2
votes
2answers
85 views
Why are there no post-installation encryption mechanisms in Linux?
I know it can be done (LUKS) using an extra hard-drive which involves significant manual work. In Windows it's just a single click for encrypting/decrypting your hard-drives. Ubuntu offers a way to ...
3
votes
1answer
1k views
LUKS passphrase doesn't work
One day, when I turned on the computer, my passphrase for home part /dev/sda7 doesn't worked (I am 147% absolutely sure, that I was writing right pass)! After three times of tries, I have rebooted ...
0
votes
1answer
779 views
Grub with encrypted /boot and / on btrfs RAID1?
I'm trying to setup grub to boot from encrypted /boot on BTRFS based RAID1 array. However, I'm cannot find a way to force grub to unlock both disks. GRUB asks for key twice to unlock /boot, but I don'...
3
votes
3answers
3k views
luksOpen doesn't decrypt with keyfile unless --key-file argument is provided
I have an encrypted volume for which I had initially set up a passphrase interactively, which works just fine to decrypt the partition.
I added more keys using a keyfile in both the following ways:
...
1
vote
0answers
337 views
Long booting to password screen for encrypted disk
Half year ago I bought laptop HP EliteBook 850 G3 with Intel i7, 16GB RAM and 512GB SDD. This was my first time when in installator I chose option "full encrypted disk" (don't remember exactly name). ...
0
votes
1answer
245 views
hibernate does not work on fresh zorin os 12.1 installation
I just installed zorin os 12.1. I notice there is no hibernate option.
After some googling i still found no answer.
sudo systemctl hibernate
powers off the laptop, but after logging in no programs ...
3
votes
2answers
3k views
How to install Debian with full disk encryption for UEFI?
So I'm trying to install the latest version of Debian on my SSD drive with UEFI. I'd like to use the CinnamonKDE desktop environment and have my drive fully encrypted.
I used Windows 10 before and am ...
5
votes
2answers
11k views
Windows/Linux dual boot full disk encryption
I have an unencrypted Windows10/Manjaro dual boot on a 256Gb SSD, plus a 1Tb HDD, where I store most of my data.
The partitions are organized as following:
1Tb HDD :
|_ sda1 : exFAT partition, ...
