Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [disk-encryption]

The tag has no usage guidance.

0
votes
0answers
8 views

How to encrypt disk on Manjaro after installation

I have installed Manjaro Cinamon. How can I enable now full disk encryption? Does Manjaro provide some GUI for this?
0
votes
0answers
15 views

How come my encrypted drives/partitions randomly do not decrypt upon booting?

I have the following encrypted. - HOME drive - SWAP partition - BACKUP drive I use a keyfile on a USB stick to decrypt my drives upon booting. Sometimes, and I mean RANDOMLY, upon booting up my ...
0
votes
0answers
29 views

Can I use dm-crypt and dm-verity at the same time? Or is it “one-or-the-other”?

I don't know too much professional theory of the two tools. I thought I would use dm-crypt to encrypt the whole partition, and then use dm-verity to verify the integrity of each block. Does that make ...
2
votes
1answer
75 views

Is it possible to LUKS require both password and key file?

My goal is to be able easily destroy medium with key file in emergency situation and make system unbootable, even is potential advisor knows right password for the system. I'd store this key file in ...
0
votes
0answers
23 views

Cross plaform encryption of USB key (securefs Sirikali)

I'm in the need of: a) a folder based encryption mechanism like securefs, encfs on my USB key b) cross platform (linux and windows) c) has the binary on the USB as I can't have install software on at ...
1
vote
1answer
79 views

Stuck starting /dev/mapper/luks

A recent upgrade rendered my computer unbootable. The boot never completes. It is stuck at: Start job is running for /dev/mapper/luks-4956cb53-c8e8-4525-b3e0-2f54bad2a801 Additionally, I am now ...
1
vote
0answers
33 views

Is it necessary to encyrpt the EFI parition [closed]

I am used to building systems with LUKS on LVM and encrypting the boot parition containing GRUB2. Since moving to newer machines I am using UEFI. Is it necessary to encrypt the EFI partition in the ...
2
votes
1answer
29 views

Writing to /root/workspace doesn't break the files inside encrypted partition

I have made full disk encryption on my hard disk exactly as in this guide https://web.archive.org/web/20180428191153/http://thesimplecomputer.info/full-disk-encryption-with-ubuntu Partition table: ...
1
vote
1answer
72 views

Device name to use in luks commands for LVM LUKS

Can somebody with more LUKS LVM experience than me tell me what the correct device name is to use in this context. I'm trying to follow some instructions about using clevis and tang in CentOS. The ...
0
votes
0answers
68 views

debian and grub with raid10+lvm+luks

I set for testing a virtual machine with debian machine is so configured 4 disk in raid10 software the md0(raid10) in encrypted with luks on the luks(luksmd0) I have create the vg (debian2-vg) wich ...
0
votes
1answer
46 views

Delete volume group of HDD of which the name is the same as my main SSD's

I just bought a new computer with an HDD + SSD. I must've accidentally encrypted the HDD it during installation, although I am sure I did undo it, but here it is, encrypted and even if I put the ...
1
vote
0answers
659 views

Decrypt root device at boot with keyfile on usb - Debian Stretch

Basically what I need is to decrypt root device automatically with a keyfile stored on a usb with a partition scheme (ext3, ext4 I don't mind). I successfully implemented the script method with dd ...
0
votes
1answer
38 views

Full disk encryption with few volume groups

My current LVM configuration: I have two physical volumes (pv): 256 GB of SSD and 1 TB of HDD. These volumes are used by different volume groups (vg): SSD vg has logical volumes which are mount where ...
0
votes
1answer
62 views

Cryptmount-setup is not working

When I tried to set up encryption using cryptmount-setup, it just returns without any feedback. It did not even created the crypto.fs file. I ran the commands: cryptmount nextcloud_data and cryptmount ...
3
votes
2answers
81 views

Avoid GRUB infection which would crack my encrypted linux

I have an unencrypted /boot partition with GRUB and an encrypted partition, where my Linux is located. An attacker, who wants to read my encrypted partition, could gain physical access to my computer ...
1
vote
0answers
51 views

How to boot after removing one disk from encrypted software RAID? [closed]

I have installed encrypted software RAID 1 on ubuntu server: After installing I got ubuntu successfully booted up. Then I tried to remove one drive, after that boot failed: Why I cant boot if its ...
1
vote
1answer
268 views

Is it OK to use Btrfs for a logical volume under encryption?

I want to use the Btrfs partition type for my main ("/") logical volume which is under encryption. The encrypted LVM will occupy my entire device aside from the two small "EFI-system" and "Boot" ...
1
vote
0answers
103 views

Debian cryptoloop module missing [closed]

When I do modprobe cryptoloop I get: modprobe: FATAL: Module cryptoloop not found in directory /lib/modules/4.9.0-8-amd64 the package cryptsetup is installed. I have this working on another Debian ...
-1
votes
1answer
63 views

What I can do in LUKS when I'm asked for password?

When I start PC it asks for my password to boot in system. 1) But I cannot use CAPSLOCK when I use CAPSLOCK the light on my keyboard is not lighting. 2) Does SHIFT button work ? 3) Can I delete a ...
1
vote
0answers
99 views

Installing on a pre-encrypted drive [closed]

A work issued laptop has and an IT mandated drive encryption installed to protect data on the primary OS that I'd like to install Linux Mint on. I've asked several times to have drive encryption ...
0
votes
0answers
40 views

Why does booting from Debian on usb with lvm fail until usb is plugged out and in again?

Background: I decided to “dual boot” an encrypted Fedora and Debian system. I installed fedora first on a the usb drive. Created a boot partition (call it sdb1 for reference) and then an encrypted ...
2
votes
1answer
342 views

Disk encryption with ecryptfs - full disk

i'm new and i hope to find an answer here. Please tell me, if you need more information. I have an disk encryption for my home partition on Linux 4.13.0-43-generic x86_64 (Ubuntu 16.04.4 LTS). Today ...
1
vote
1answer
467 views

Is there a way to encrypt disk without formatting it?

When I was installing my OS, I didn't encrypt. Is there a way to encrypt it now without formatting and without losing any data? I read a few guides how to encrypt and every one says that I need to ...
0
votes
0answers
115 views

Strange command line behaviour when ssh, 7z or cd?

I have a very strange behaviour with my remote server. First of all, when I access my server with ssh, I sometimes have to enter my password although my user is in authorized_keys. Sometimes it works ...
1
vote
1answer
234 views

LUKS encryption Mint - only being asked to decrypt one of my two encrypted drives

I've just finished setting up LUKS encryption on new install of Mint 18.3. I mainly followed the steps in this guide (only doing the system #1 setup however as this is the sole OS on this system). ...
0
votes
0answers
201 views

Grub-install error: disk 'crpytouuid/<uuid>' not found

I followed fdiblen's guide on Arch Linux Installation with a Fully encrypted disk and Btrfs filesystem that uses cryptsetup. I'm at the bootloader stage where I'm trying to grub-install with these ...
0
votes
0answers
22 views

Moving hard drive from old laptop to new laptop

The story On my old laptop (Asus K56CB) I was running Linux Mint, the drive was also encrypted since Mint was first installed, for clarity. Eventually this laptop broke and I recently got a Lenovo ...
1
vote
0answers
37 views

extend encrypted system partion

I have a system using luks encryption and I want to extend the system partition. Seems to look like Extend a LUKS encrypted partition to fill disk, but a bit different. Because my physical disk seems ...
0
votes
1answer
602 views

Login loop ubuntu 16.04

The day before I run into the problem I had installed Virtual Machine and Vagrant and everything was fine. When I fired up my computer the next day, I got stuck in a login loop. My next action was go ...
-1
votes
1answer
207 views

Encrypted separate home partition with Ubuntu, now moving to CentOS

Do I need to to decrypt the home partition before I move, or does CentOS support the encryption methods that Ubuntu uses? Hopping between Ubuntu distros is no problem at all, but I think I might have ...
1
vote
1answer
223 views

FreeBSD GELI Encrypted Disk Capacity vs Unencrypted

I encrypt my external backup devices with AES256 using GELI on FreeBSD 11. I have recently changed the disks to 240GB SSDs whereby only half the capacity is usable which is causing the backup to fail. ...
5
votes
2answers
409 views

QNAP eCryptFS Filesystem Broken Permissions

Following an issue with my QNAP device I've had to do a whole load of manual recovery of data and only getting at my encrypted data remains. It seems that QNAP use eCryptFS to do this. I've managed ...
1
vote
1answer
511 views

Mounting encrypted external device with conflicting LVM names

I got myself a new hard drive and installed the most current version of Linux Mint. Now I wanted to transfer the files from the old disk (I had no recent backup) but there are several issues the LVMs'...
7
votes
1answer
1k views

Which Linux distributions support full disk encryption (including /boot)?

Recently I came across many Linux distributions. Before that I've been always using OpenSUSE so some things apparently were quite obvious to me - for example that it's possible and quite easy to set ...
3
votes
1answer
3k views

How to encrypt a btrfs subvolume?

I'm looking for information about encryption with btrfs. I have experience with full-disk (LVM actually) encryption, so this time I only need to look at some btrfs specific questions. I have found ...
0
votes
1answer
463 views

Why should we encrypt the system partition and not only /home? [closed]

I am currently installing a Debian distro on a new desktop computer and I am looking for pros/cons arguments for two ways of making the partition table (in matter of performance and security). My new ...
1
vote
1answer
201 views

Best encryption for multi-disk lvm volumes

Here's the scenario: I have a backup server that currently has a (unencrypted) logical backup volume that expands over two physical disks. I need to be able to expand the volume by adding more disks. ...
1
vote
1answer
25 views

Geting access to a partition over the network

I want to access my user-partition from a client, so that it can encrypt the saved data without the server knowing the key, therefore the client doesn't have to trust it. Diagram: Layer5: Filesystem |...
-1
votes
1answer
2k views

How do I find the passphrase which encrypts my home directory? [closed]

Years ago I installed Ubuntu and encrypted my home directory. I can still log in as normal, I know my password and I have access to my files. Just now, installing Lubuntu on another machine, I saw ...
1
vote
0answers
403 views

Modify LUKS encryption after install

I'v set up a debian install like this : /dev/sdb5 is /boot /dev/sdb6 is LUKS encrypted / /dev/sdb7 is LUKS encrypted swap This works well however I need to enter 2 passphrases at each boot. Is ...
0
votes
1answer
212 views

Arch Linux - How could I decrypt and automount multiple encrypted drives during init?

I have two encrypted drives (one SSD for booting and a hard drive for storage) I need both to be unlocked and mounted before all of the runlevel programs/services. Else some of my services would freak ...
1
vote
1answer
560 views

dm-crypt / cryptsetup which block encryption dimension use

I'm working on dm-crypt utilizing cryptsetup. I'm interested to understand if it's using a fixed block dimension to encrypt files. I explain it better: I created a LUKS envelop, formatted it with ...
1
vote
0answers
442 views

Failed to mount encrypted swap on LVM volume

I need help mounting encrypted swap with systemd during boot time. The situation is as follows: I have a Debian 9 system, in Crunchbang++ flavour. During installation, I set up swap as an encrypted ...
1
vote
0answers
110 views

Show entered password with geli

In FreeBSD you get access to a geli-encrypted partition by: geli attach -k /root/ada1.key /dev/ada1 Which then opens a password prompt. Is there a way to get the password displayed while it is ...
2
votes
1answer
6k views

How to decrypt a hard drive with LUKS encryption?

today i was installing ubuntu on an external hard drive and in the initial setup i marked the option "encrypt installation" and the clicked the install button, but i didn't notice that my internal ...
1
vote
0answers
559 views

Install Linux side by side on an encrypted disk running Windows 10

I have a workplace issued laptop that has Windows 10 installed and BitLocker encyrption enabled. So when I power on the machine, the first thing that happens (after the vendor logo) is BitLocker key ...
15
votes
2answers
8k views

Using a single passphrase to unlock multiple encrypted disks at boot

My machine has an SSD, where I installed the system and an HDD, which I use as a storage for large and/or infrequently used files. Both are encrypted, but I chose to use the same passphrase for them. ...
25
votes
1answer
2k views

Pre-encryption wipe, why?

I wanted to know why, before encrypting and installing itself on the drive , Kali : wiped the whole drive filled the drive with 0s filled the drive with 1s filled the drive with Random data wiped the ...
-2
votes
2answers
91 views

Why are there no post-installation encryption mechanisms in Linux?

I know it can be done (LUKS) using an extra hard-drive which involves significant manual work. In Windows it's just a single click for encrypting/decrypting your hard-drives. Ubuntu offers a way to ...
3
votes
1answer
2k views

LUKS passphrase doesn't work

One day, when I turned on the computer, my passphrase for home part /dev/sda7 doesn't worked (I am 147% absolutely sure, that I was writing right pass)! After three times of tries, I have rebooted ...