Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [disk-encryption]

The tag has no usage guidance.

0
votes
0answers
5 views

dm_crypt mount on login takes 90 seconds

I'm trying to configure automounting encrypted home on login with user password=encryption password. I'm using archlinux + kde + sddm + crypsetup (dm_crypt). Following archlinux article I did as ...
0
votes
1answer
37 views

How to mount a partition inside encrypted lvm inside a disk image?

On my previous computer, I had my / /home and swap inside an encrypted lvm, and outside the lvm I had the /boot and /boot/efi. I then created an image. I think I did like this: dd if=/dev/sda of=lvm....
2
votes
1answer
33 views

On Debian 9, is /root part of the /home partition?

I am encrypting my /home partition and I would also like any secrets /root (not /) contains to be encrypted. Is the /root folder considered part of the /home partition by default, or do I need to ...
1
vote
1answer
106 views

Migrate Arch from encrypt to sd-encrypt

I recently installed Antergos (which is basically Arch) and set it to use full disk encryption. Now, I want to migrate from encrypt to sd-encrypt because I want to be able to hibernate and I couldn't ...
1
vote
1answer
116 views

How to encrypt disk on Manjaro after installation

I have installed Manjaro Cinamon. How can I enable now full disk encryption? Does Manjaro provide some GUI for this?
0
votes
0answers
24 views

How come my encrypted drives/partitions randomly do not decrypt upon booting?

I have the following encrypted. - HOME drive - SWAP partition - BACKUP drive I use a keyfile on a USB stick to decrypt my drives upon booting. Sometimes, and I mean RANDOMLY, upon booting up my ...
0
votes
0answers
63 views

Can I use dm-crypt and dm-verity at the same time? Or is it “one-or-the-other”?

I don't know too much professional theory of the two tools. I thought I would use dm-crypt to encrypt the whole partition, and then use dm-verity to verify the integrity of each block. Does that make ...
2
votes
1answer
199 views

Is it possible to LUKS require both password and key file?

My goal is to be able easily destroy medium with key file in emergency situation and make system unbootable, even is potential advisor knows right password for the system. I'd store this key file in ...
0
votes
0answers
35 views

Cross plaform encryption of USB key (securefs Sirikali)

I'm in the need of: a) a folder based encryption mechanism like securefs, encfs on my USB key b) cross platform (linux and windows) c) has the binary on the USB as I can't have install software on at ...
1
vote
1answer
174 views

Stuck starting /dev/mapper/luks

A recent upgrade rendered my computer unbootable. The boot never completes. It is stuck at: Start job is running for /dev/mapper/luks-4956cb53-c8e8-4525-b3e0-2f54bad2a801 Additionally, I am now ...
1
vote
0answers
33 views

Is it necessary to encyrpt the EFI parition [closed]

I am used to building systems with LUKS on LVM and encrypting the boot parition containing GRUB2. Since moving to newer machines I am using UEFI. Is it necessary to encrypt the EFI partition in the ...
2
votes
1answer
30 views

Writing to /root/workspace doesn't break the files inside encrypted partition

I have made full disk encryption on my hard disk exactly as in this guide https://web.archive.org/web/20180428191153/http://thesimplecomputer.info/full-disk-encryption-with-ubuntu Partition table: ...
1
vote
1answer
144 views

Device name to use in luks commands for LVM LUKS

Can somebody with more LUKS LVM experience than me tell me what the correct device name is to use in this context. I'm trying to follow some instructions about using clevis and tang in CentOS. The ...
0
votes
0answers
90 views

debian and grub with raid10+lvm+luks

I set for testing a virtual machine with debian machine is so configured 4 disk in raid10 software the md0(raid10) in encrypted with luks on the luks(luksmd0) I have create the vg (debian2-vg) wich ...
0
votes
1answer
61 views

Delete volume group of HDD of which the name is the same as my main SSD's

I just bought a new computer with an HDD + SSD. I must've accidentally encrypted the HDD it during installation, although I am sure I did undo it, but here it is, encrypted and even if I put the ...
1
vote
0answers
878 views

Decrypt root device at boot with keyfile on usb - Debian Stretch

Basically what I need is to decrypt root device automatically with a keyfile stored on a usb with a partition scheme (ext3, ext4 I don't mind). I successfully implemented the script method with dd ...
0
votes
1answer
50 views

Full disk encryption with few volume groups

My current LVM configuration: I have two physical volumes (pv): 256 GB of SSD and 1 TB of HDD. These volumes are used by different volume groups (vg): SSD vg has logical volumes which are mount where ...
0
votes
1answer
86 views

Cryptmount-setup is not working

When I tried to set up encryption using cryptmount-setup, it just returns without any feedback. It did not even created the crypto.fs file. I ran the commands: cryptmount nextcloud_data and cryptmount ...
3
votes
2answers
84 views

Avoid GRUB infection which would crack my encrypted linux

I have an unencrypted /boot partition with GRUB and an encrypted partition, where my Linux is located. An attacker, who wants to read my encrypted partition, could gain physical access to my computer ...
1
vote
0answers
55 views

How to boot after removing one disk from encrypted software RAID? [closed]

I have installed encrypted software RAID 1 on ubuntu server: After installing I got ubuntu successfully booted up. Then I tried to remove one drive, after that boot failed: Why I cant boot if its ...
1
vote
1answer
331 views

Is it OK to use Btrfs for a logical volume under encryption?

I want to use the Btrfs partition type for my main ("/") logical volume which is under encryption. The encrypted LVM will occupy my entire device aside from the two small "EFI-system" and "Boot" ...
1
vote
0answers
114 views

Debian cryptoloop module missing [closed]

When I do modprobe cryptoloop I get: modprobe: FATAL: Module cryptoloop not found in directory /lib/modules/4.9.0-8-amd64 the package cryptsetup is installed. I have this working on another Debian ...
-1
votes
1answer
77 views

What I can do in LUKS when I'm asked for password?

When I start PC it asks for my password to boot in system. 1) But I cannot use CAPSLOCK when I use CAPSLOCK the light on my keyboard is not lighting. 2) Does SHIFT button work ? 3) Can I delete a ...
1
vote
0answers
107 views

Installing on a pre-encrypted drive [closed]

A work issued laptop has and an IT mandated drive encryption installed to protect data on the primary OS that I'd like to install Linux Mint on. I've asked several times to have drive encryption ...
0
votes
0answers
45 views

Why does booting from Debian on usb with lvm fail until usb is plugged out and in again?

Background: I decided to “dual boot” an encrypted Fedora and Debian system. I installed fedora first on a the usb drive. Created a boot partition (call it sdb1 for reference) and then an encrypted ...
2
votes
1answer
409 views

Disk encryption with ecryptfs - full disk

i'm new and i hope to find an answer here. Please tell me, if you need more information. I have an disk encryption for my home partition on Linux 4.13.0-43-generic x86_64 (Ubuntu 16.04.4 LTS). Today ...
1
vote
1answer
794 views

Is there a way to encrypt disk without formatting it?

When I was installing my OS, I didn't encrypt. Is there a way to encrypt it now without formatting and without losing any data? I read a few guides how to encrypt and every one says that I need to ...
0
votes
0answers
120 views

Strange command line behaviour when ssh, 7z or cd?

I have a very strange behaviour with my remote server. First of all, when I access my server with ssh, I sometimes have to enter my password although my user is in authorized_keys. Sometimes it works ...
1
vote
1answer
254 views

LUKS encryption Mint - only being asked to decrypt one of my two encrypted drives

I've just finished setting up LUKS encryption on new install of Mint 18.3. I mainly followed the steps in this guide (only doing the system #1 setup however as this is the sole OS on this system). ...
0
votes
0answers
259 views

Grub-install error: disk 'crpytouuid/<uuid>' not found

I followed fdiblen's guide on Arch Linux Installation with a Fully encrypted disk and Btrfs filesystem that uses cryptsetup. I'm at the bootloader stage where I'm trying to grub-install with these ...
0
votes
0answers
23 views

Moving hard drive from old laptop to new laptop

The story On my old laptop (Asus K56CB) I was running Linux Mint, the drive was also encrypted since Mint was first installed, for clarity. Eventually this laptop broke and I recently got a Lenovo ...
1
vote
0answers
40 views

extend encrypted system partion

I have a system using luks encryption and I want to extend the system partition. Seems to look like Extend a LUKS encrypted partition to fill disk, but a bit different. Because my physical disk seems ...
0
votes
1answer
650 views

Login loop ubuntu 16.04

The day before I run into the problem I had installed Virtual Machine and Vagrant and everything was fine. When I fired up my computer the next day, I got stuck in a login loop. My next action was go ...
-1
votes
1answer
249 views

Encrypted separate home partition with Ubuntu, now moving to CentOS

Do I need to to decrypt the home partition before I move, or does CentOS support the encryption methods that Ubuntu uses? Hopping between Ubuntu distros is no problem at all, but I think I might have ...
1
vote
1answer
258 views

FreeBSD GELI Encrypted Disk Capacity vs Unencrypted

I encrypt my external backup devices with AES256 using GELI on FreeBSD 11. I have recently changed the disks to 240GB SSDs whereby only half the capacity is usable which is causing the backup to fail. ...
5
votes
2answers
433 views

QNAP eCryptFS Filesystem Broken Permissions

Following an issue with my QNAP device I've had to do a whole load of manual recovery of data and only getting at my encrypted data remains. It seems that QNAP use eCryptFS to do this. I've managed ...
1
vote
1answer
598 views

Mounting encrypted external device with conflicting LVM names

I got myself a new hard drive and installed the most current version of Linux Mint. Now I wanted to transfer the files from the old disk (I had no recent backup) but there are several issues the LVMs'...
7
votes
1answer
1k views

Which Linux distributions support full disk encryption (including /boot)?

Recently I came across many Linux distributions. Before that I've been always using OpenSUSE so some things apparently were quite obvious to me - for example that it's possible and quite easy to set ...
3
votes
1answer
3k views

How to encrypt a btrfs subvolume?

I'm looking for information about encryption with btrfs. I have experience with full-disk (LVM actually) encryption, so this time I only need to look at some btrfs specific questions. I have found ...
1
vote
1answer
598 views

Why should we encrypt the system partition and not only /home? [closed]

I am currently installing a Debian distro on a new desktop computer and I am looking for pros/cons arguments for two ways of making the partition table (in matter of performance and security). My new ...
1
vote
1answer
244 views

Best encryption for multi-disk lvm volumes

Here's the scenario: I have a backup server that currently has a (unencrypted) logical backup volume that expands over two physical disks. I need to be able to expand the volume by adding more disks. ...
1
vote
1answer
26 views

Geting access to a partition over the network

I want to access my user-partition from a client, so that it can encrypt the saved data without the server knowing the key, therefore the client doesn't have to trust it. Diagram: Layer5: Filesystem |...
-1
votes
1answer
2k views

How do I find the passphrase which encrypts my home directory? [closed]

Years ago I installed Ubuntu and encrypted my home directory. I can still log in as normal, I know my password and I have access to my files. Just now, installing Lubuntu on another machine, I saw ...
1
vote
0answers
419 views

Modify LUKS encryption after install

I'v set up a debian install like this : /dev/sdb5 is /boot /dev/sdb6 is LUKS encrypted / /dev/sdb7 is LUKS encrypted swap This works well however I need to enter 2 passphrases at each boot. Is ...
0
votes
1answer
266 views

Arch Linux - How could I decrypt and automount multiple encrypted drives during init?

I have two encrypted drives (one SSD for booting and a hard drive for storage) I need both to be unlocked and mounted before all of the runlevel programs/services. Else some of my services would freak ...
1
vote
1answer
620 views

dm-crypt / cryptsetup which block encryption dimension use

I'm working on dm-crypt utilizing cryptsetup. I'm interested to understand if it's using a fixed block dimension to encrypt files. I explain it better: I created a LUKS envelop, formatted it with ...
1
vote
0answers
482 views

Failed to mount encrypted swap on LVM volume

I need help mounting encrypted swap with systemd during boot time. The situation is as follows: I have a Debian 9 system, in Crunchbang++ flavour. During installation, I set up swap as an encrypted ...
1
vote
0answers
125 views

Show entered password with geli

In FreeBSD you get access to a geli-encrypted partition by: geli attach -k /root/ada1.key /dev/ada1 Which then opens a password prompt. Is there a way to get the password displayed while it is ...
2
votes
1answer
7k views

How to decrypt a hard drive with LUKS encryption?

today i was installing ubuntu on an external hard drive and in the initial setup i marked the option "encrypt installation" and the clicked the install button, but i didn't notice that my internal ...
1
vote
0answers
588 views

Install Linux side by side on an encrypted disk running Windows 10

I have a workplace issued laptop that has Windows 10 installed and BitLocker encyrption enabled. So when I power on the machine, the first thing that happens (after the vendor logo) is BitLocker key ...