Questions tagged [disk-encryption]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
2
votes
1answer
53 views

Snapshottable encrypted folder

I'm trying to create an encrypted data folder which could periodically take snapshots of the current state of it. The snapshot should be an encrypted one, and I should be able to take snapshots ...
3
votes
1answer
1k views

how to clone images of drives with LUKS+LVM2?

I have 2 Debian boxes which I need to upgrade. In the past, before upgrading any box, I have used Clonezilla to create an image of each of the box's harddrives for use as disaster backup, in case ...
0
votes
0answers
8 views

cryptmount performance for large partitions?

Has anyone tried cryptmount with a large amount of data, say, several terabytes? Looks like a filesystem is stored in a single user disk file (such as ~/crypto.fs), so it makes me wonder if it can ...
0
votes
0answers
31 views

Is there a way to do one-time pads(OTP) with Linux cryptsetup(dm-crypt)?

It looks like losetup with cryptoloop did it and there was a dm-xor module for a very old kernel, but can't find anything modern. I'm wading through a ton of obsolete losetup documents. Something ...
5
votes
1answer
2k views

A stop job is running for LVM

I use full disk encryption which uses an LVM. It uses like this in lsblk: NAME MAJ:MIN RM SIZE RO TYPE MOUNTPOINT sda ...
0
votes
2answers
34 views

Encrypt a disk without having to log in to enter the password

I am using eCryptfs to encrypt the home directory and would like to access files without having the user log in. The program pam_mount will automount encrypted file systems, but it seems like that ...
1
vote
0answers
36 views

Recover space from persistent storage by Tails OS?

I installed Tails in a USB stick and enabled persistent storage. The USB had 16GB of storage. Now I formatted the USB without freeing up the persistent storage and lost 10GB of space. I remember the ...
0
votes
0answers
105 views

How to hibernate Debian with swapfile on home partition of fully encrypted disk?

I'm running Debian10/KDE with kernel 4.19.0-5-amd64. I have 16GB of RAM, a swapfile of 25GB on my separate home partition (the partition that holds the OS is too small for it). My hard drive is fully ...
1
vote
1answer
50 views

Wrong EXT4 Partition size in luks encrypted partition

I have encrypted my home partition via cryptsetup. Inside the mapper /dev/mapper, i have created a ext4 fs via mkfs.ext4 /dev/mapper/home Now, my home partiotion only has 91 GB. My luks partition ...
0
votes
1answer
138 views

debian and grub with raid10+lvm+luks

I set for testing a virtual machine with debian machine is so configured 4 disk in raid10 software the md0(raid10) in encrypted with luks on the luks(luksmd0) I have create the vg (debian2-vg) wich ...
2
votes
1answer
1k views

Proper manual OS setup on LUKS encrypted drive with non-aes algorithm on yum-based distro (CentOS)

I'm trying to achieve LUKS-encrypted CentOS 7 install with separate /boot partition and lvm on EFI-friendly motherboard. I've done partitioning fresh CentOS install from old CentOS(installed from GUI)...
1
vote
1answer
198 views

Is there a way to have hibernate and encrypted swap on nixos?

There's a way to get encrypted swap + hibernate on Ubuntu. There's also a way to get encrypted swap on nixos (use randomEncryption.enable = true), and a way to make hibernate to swap. Is there a way ...
1
vote
1answer
71 views

Crypt /home partition after install (CentOS 7) or reinstall?

I recently installed CentOS 7 on a computer with high-end hardware (8-core processor, NVMe 512GB SSD, 16GB RAM). My customer wants /home to be crypted and I was not aware of that, so that I didn't ...
1
vote
1answer
41 views

temporarily suspend/disable FileVault

Is there a way, or does anyone know of a way to temporarily disable or suspend File Vault disk encryption? I know fdesetup disable will decrypt the entire disk (which i don't want), but is there a way ...
2
votes
1answer
97 views

Extend Luks encrypted partition without using luksOpen command

I just tried to increase encrypted LVM partition. The proceduce is: Extend the partition with fdisk -> Resize PV -> Resize LV -> Increase size file system. Detail steps in https://www.thegeekdiary....
7
votes
2answers
15k views

Windows/Linux dual boot full disk encryption

I have an unencrypted Windows10/Manjaro dual boot on a 256Gb SSD, plus a 1Tb HDD, where I store most of my data. The partitions are organized as following: 1Tb HDD : |_ sda1 : exFAT partition, ...
0
votes
0answers
17 views

dm_crypt mount on login takes 90 seconds

I'm trying to configure automounting encrypted home on login with user password=encryption password. I'm using archlinux + kde + sddm + crypsetup (dm_crypt). Following archlinux article I did as ...
2
votes
1answer
266 views

How to install cryptoloop module on Kali 4.6?

I am unable to launch the cryptoloop module on Kali 4.6. How can I to install it? # modprobe cryptoloop modprobe: FATAL: Module cryptoloop not found in directory /lib/modules/4.6.0-kali1-amd64
0
votes
1answer
175 views

How to mount a partition inside encrypted lvm inside a disk image?

On my previous computer, I had my / /home and swap inside an encrypted lvm, and outside the lvm I had the /boot and /boot/efi. I then created an image. I think I did like this: dd if=/dev/sda of=lvm....
1
vote
1answer
452 views

Migrate Arch from encrypt to sd-encrypt

I recently installed Antergos (which is basically Arch) and set it to use full disk encryption. Now, I want to migrate from encrypt to sd-encrypt because I want to be able to hibernate and I couldn't ...
23
votes
3answers
12k views

Using a single passphrase to unlock multiple encrypted disks at boot

My machine has an SSD, where I installed the system and an HDD, which I use as a storage for large and/or infrequently used files. Both are encrypted, but I chose to use the same passphrase for them. ...
2
votes
1answer
60 views

On Debian 9, is /root part of the /home partition?

I am encrypting my /home partition and I would also like any secrets /root (not /) contains to be encrypted. Is the /root folder considered part of the /home partition by default, or do I need to ...
2
votes
2answers
871 views

Cannot recover encrypted files on Ubuntu

I needed to reinstall ubuntu on my hard drive because I think I corrupted some files and it wasn't booting up (I know, it was very stupid). I tried to reinstall from a LiveCD by checking the "keep the ...
0
votes
2answers
89 views

How to hide the encrypted version of a file put in a cryptfs filesystem?

Say I create an encrypted folder and add a file to it: # mount -t ecryptfs /srv /srv # echo word > /srv/file The content of file is unavailable only after unmounting the filesystem. How can I ...
5
votes
2answers
6k views

How to recover encrypted /home/ folder in Linux Mint 17.2

The issue: I changed my password earlier today, but I must've made a typo, because I couldn't log in afterwards. I booted into the Grub menu and started a passwordless root shell to reset my password. ...
1
vote
1answer
760 views

How to encrypt disk on Manjaro after installation

I have installed Manjaro Cinamon. How can I enable now full disk encryption? Does Manjaro provide some GUI for this?
0
votes
0answers
44 views

How come my encrypted drives/partitions randomly do not decrypt upon booting?

I have the following encrypted. - HOME drive - SWAP partition - BACKUP drive I use a keyfile on a USB stick to decrypt my drives upon booting. Sometimes, and I mean RANDOMLY, upon booting up my ...
1
vote
2answers
1k views

How do I automatically bind mount on boot in a non-root encrypted home directory?

I want to bind mount a directory within my home when I log on. The line in fstab would be /foo/bar /home/me/wherever none bind 0 0 The trouble is my home directory is encrypted, so it has to happen ...
0
votes
0answers
48 views

Cross plaform encryption of USB key (securefs Sirikali)

I'm in the need of: a) a folder based encryption mechanism like securefs, encfs on my USB key b) cross platform (linux and windows) c) has the binary on the USB as I can't have install software on at ...
0
votes
0answers
145 views

Can I use dm-crypt and dm-verity at the same time? Or is it “one-or-the-other”?

I don't know too much professional theory of the two tools. I thought I would use dm-crypt to encrypt the whole partition, and then use dm-verity to verify the integrity of each block. Does that make ...
2
votes
1answer
427 views

Is it possible to LUKS require both password and key file?

My goal is to be able easily destroy medium with key file in emergency situation and make system unbootable, even is potential advisor knows right password for the system. I'd store this key file in ...
1
vote
1answer
395 views

Stuck starting /dev/mapper/luks

A recent upgrade rendered my computer unbootable. The boot never completes. It is stuck at: Start job is running for /dev/mapper/luks-4956cb53-c8e8-4525-b3e0-2f54bad2a801 Additionally, I am now ...
1
vote
2answers
2k views

full disk encryption (including swap, possibly plausible deniability as well)

I'm looking for a method to encrypt my laptop including the swap partition. I also read trough older similar questions but mostly the answer included just a what not much of a how. (Currently I'm ...
2
votes
1answer
36 views

Writing to /root/workspace doesn't break the files inside encrypted partition

I have made full disk encryption on my hard disk exactly as in this guide https://web.archive.org/web/20180428191153/http://thesimplecomputer.info/full-disk-encryption-with-ubuntu Partition table: ...
1
vote
1answer
349 views

Device name to use in luks commands for LVM LUKS

Can somebody with more LUKS LVM experience than me tell me what the correct device name is to use in this context. I'm trying to follow some instructions about using clevis and tang in CentOS. The ...
2
votes
2answers
2k views

How To F2FS Filesystem Encryption?

I read that the f2fs format is good for SSD storage so I formatted one of my drives with it. I also read in some kernel notes that encryption was added for it but there's no documentation to speak of. ...
14
votes
2answers
2k views

Is it possible to encrypt a hard disk with a key file instead of a password?

Looking into hard disk encryption. the go to solution seems to be dm-crypt with LUKS using a password. I work with multiple independent hard disks mounted into a disk pool for reading. In this case, I ...
0
votes
1answer
119 views

Delete volume group of HDD of which the name is the same as my main SSD's

I just bought a new computer with an HDD + SSD. I must've accidentally encrypted the HDD it during installation, although I am sure I did undo it, but here it is, encrypted and even if I put the ...
6
votes
2answers
2k views

remap read-only LUKS partition to read-write

cryptsetup can be invoked with --readonly or -r option, which will set up a read-only mapping: cryptsetup --readonly luksOpen /dev/sdb1 sdb1 Once I have opened a device as read-only, can I later re-...
2
votes
0answers
1k views

Decrypt root device at boot with keyfile on usb - Debian Stretch

Basically what I need is to decrypt root device automatically with a keyfile stored on a usb with a partition scheme (ext3, ext4 I don't mind). I successfully implemented the script method with dd ...
0
votes
1answer
131 views

Full disk encryption with few volume groups

My current LVM configuration: I have two physical volumes (pv): 256 GB of SSD and 1 TB of HDD. These volumes are used by different volume groups (vg): SSD vg has logical volumes which are mount where ...
0
votes
1answer
132 views

Cryptmount-setup is not working

When I tried to set up encryption using cryptmount-setup, it just returns without any feedback. It did not even created the crypto.fs file. I ran the commands: cryptmount nextcloud_data and cryptmount ...
3
votes
2answers
91 views

Avoid GRUB infection which would crack my encrypted linux

I have an unencrypted /boot partition with GRUB and an encrypted partition, where my Linux is located. An attacker, who wants to read my encrypted partition, could gain physical access to my computer ...
1
vote
1answer
483 views

Is it OK to use Btrfs for a logical volume under encryption?

I want to use the Btrfs partition type for my main ("/") logical volume which is under encryption. The encrypted LVM will occupy my entire device aside from the two small "EFI-system" and "Boot" ...
2
votes
1answer
2k views

Is there a way to encrypt disk without formatting it?

When I was installing my OS, I didn't encrypt. Is there a way to encrypt it now without formatting and without losing any data? I read a few guides how to encrypt and every one says that I need to ...
0
votes
1answer
1k views

Mint, install and LUKS/LVM

I want to make my linux laptopwith LUKS Encryption. OS : Mint 17. Is it better to make the disk LUKS-encrypted: at the installation process ? after it ?
7
votes
1answer
2k views

Which Linux distributions support full disk encryption (including /boot)?

Recently I came across many Linux distributions. Before that I've been always using OpenSUSE so some things apparently were quite obvious to me - for example that it's possible and quite easy to set ...
3
votes
1answer
2k views

Reinstall Linux Mint without encryption

A few days ago I fully switched from Windows Vista to Linux Mint. I am happy with my decision so far. I just have one issue. During installation I opted for full disk encryption so that a password is ...
-1
votes
1answer
99 views

What I can do in LUKS when I'm asked for password?

When I start PC it asks for my password to boot in system. 1) But I cannot use CAPSLOCK when I use CAPSLOCK the light on my keyboard is not lighting. 2) Does SHIFT button work ? 3) Can I delete a ...
3
votes
1answer
505 views

Disk encryption with ecryptfs - full disk

i'm new and i hope to find an answer here. Please tell me, if you need more information. I have an disk encryption for my home partition on Linux 4.13.0-43-generic x86_64 (Ubuntu 16.04.4 LTS). Today ...