Questions tagged [dm-crypt]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
1answer
37 views

LVM + LUKS is this error okay?

I have a encrypted partition, inside it there exist LVM / and /home. When I start PC it says. Volume group "vg" not found Cannot process volume group vg Please unlock disk sdc2_crypt After I type ...
1
vote
1answer
22 views

It is okay to mount 2 encrypted disks with same UUID

I have 2 harddrives. 1 was empty - let's call it hard2 and other had a working Linux OS - lets call it hard1. I use dd to copy hard1 to hard2, but I could not boot with hard2. I had a error: inode ...
0
votes
1answer
68 views

Serious backup options for linux disk (dmcrypt, luks, ext4, ext3, btrfs) normal and encrypted system

Disk/Partition Backup What are the backup options and good practice to make a solid and easy to use full system backup? With the following requirement: Live backup Image backup Encrypted backup ...
0
votes
0answers
22 views

How can I change the name of an unencrypted LUKS partition mounted as the root filesystem?

When I installed Linux, the block-device-path of my root LUKS device was /dev/md125 and the unencrypted partition was /dev/mapper/md125_crypt. I have since renamed the MD device to /dev/md0, and now I'...
0
votes
1answer
20 views

Where to download cryptsetup-luks-devel package?

How to download and install cryptsetup-luks-devel package for Debian? I can't find it. When I google I get this package only for CentOS.
1
vote
0answers
104 views

My disk doesn't want to unlock encryption

I use Debian default encryption disk encryption. When I boot I need to type my password, and then I will be logged in. However today I can't login. It always says that I typed the wrong password, but ...
1
vote
0answers
90 views

Slow write speed on encrypted drive, while benchmark shows much higher encryption / raw disk write rates

I currently setup a NAS with Ubuntu 18.04 on a Netgear ReadyNAS 102device. The machine has a Armada Marvell 370/XP SoC with a hardware encryption accelerator called "CESA". The kernel drivers for CESA ...
1
vote
0answers
46 views

Increase size of randomly created encrypted swap

Ubuntu 18.04 is by default creating a random encrypted swap during each boot using dm-crypt/Swap encryption. For me, this is creating a 1gb swap but I cannot find where to increase the size of the ...
0
votes
0answers
17 views

dm-crypt --type plain on usb device that changes the drive letter

I have a little problem using an encrypted physical volume from an external usb3 disk encloser. This is the situation: I put a sata hard disk into the disk case and plugin the usb3 cable to my ...
0
votes
0answers
59 views

Is there a way to do one-time pads(OTP) with Linux cryptsetup(dm-crypt)?

It looks like losetup with cryptoloop did it and there was a dm-xor module for a very old kernel, but can't find anything modern. I'm wading through a ton of obsolete losetup documents. Something ...
0
votes
0answers
138 views

LUKS volume does not get unsealed by the TPM after a update

I'm performing a Kickstart-installation from a USB-Stick of Oracle-Linux 7.6 on a Dell Optiplex 3060 where I also encrypt the volume and bind it to the TPM to unlock it automatically: clevis luks ...
0
votes
0answers
28 views

Using dm-crypt with RAID0. Should I just encrypt the array or every device itself and than add it to array?

I want to protect/encrypt my data on RAID0 array. What is the best or recommended approach, encrypt each device or encrypt the whole array and then create the file system? The naive approach would ...
0
votes
0answers
448 views

Partition size mismatch using df and lsblk comands

On one of our systems, Additional SSD device mounted is showing size of 5.8 TB, but same partition showing size of only 59 GB using df command- [opc@kms10]$ df -Th /data1 Filesystem Type ...
0
votes
1answer
116 views

Addressing USB-Stick by UUID as kernel parameter in grub.cfg

I'm using Arch Linux and setting up an USB-Stick as decryption key for my luks-encrypted root partition (boot is unencrypted). I described it already in this question. Now, the key, that's used for ...
2
votes
1answer
141 views

Using space before 1st partition of USB-Stick as luks key

I'm using arch linux with an encrypted luks root partition (boot unencrypted), with a passphrase yet. Now I have a keyfile (3072 bytes), that's written to USB-Stick this way: sudo dd if=tempKeyFile....
0
votes
0answers
28 views

dm_crypt mount on login takes 90 seconds

I'm trying to configure automounting encrypted home on login with user password=encryption password. I'm using archlinux + kde + sddm + crypsetup (dm_crypt). Following archlinux article I did as ...
0
votes
1answer
607 views

A separate partition for a user's /home directory?

Is it possible to separate /home/$USER for one particular user into a separate partition in Arch Linux x86_64 with the 4.19.31-1-lts kermel? I want to encrypt one user's /home directory, but I prefer ...
0
votes
1answer
523 views

Bad magic number in super-block: dm-crypt device

I have a device that is encrypted using dm-crypt. This is a mini SD card that I use on my laptop. I've had some issues with my laptop freezing recently, and in the journal these messages come up: ...
0
votes
1answer
306 views

Encrypting a currently used external hard drive such that it can be updated with rsync?

I currently have an unencrypted external hard drive that I use as a backup for my encrypted (with LUKS) main machine. To update my backup, I simply log in to the main machine and rsync to my external ...
0
votes
1answer
72 views

Safest way to store TLS private keys without a security module

I am using BeableBone Black devices running Debian which communicate securely with an AWS server over TLS using signed certificates. I need to store my private keys securely on the devices. The best ...
0
votes
0answers
44 views

How to create an encrypted partition and how does Linux then decrypt it [duplicate]

I'm still very much in the learning phase of Linux especially for the use in embedded systems. My intention is to create a separate encrypted partition on an SD card, possibly by using dm-crypt. ...
2
votes
1answer
176 views

Creating an encrypted partition to store private keys [closed]

I am using a BeagleBone Black board running Debian. My intention is to create a separate encrypted partition to store private keys in the internal emmc. The keys are used for SSL communication. The ...
0
votes
1answer
83 views

Find physical block device of root filesystem on an encrypted filesystem?

I'm running Arch Linux (systemd) on several systems. Some have SSD storage, others have nvme storage devices and some use rotational HDD's. Some systems use dm-crypt to encrypt the filesystem. All ...
2
votes
2answers
2k views

How to specify cryptdevice by label using systemd boot?

I'm running Arch Linux with systemd boot. In /boot/loader/entries/arch.conf I currently specify the luks crypto device with a line like this: options rw cryptdevice=/dev/sda1:ABC root=/dev/...
2
votes
1answer
65 views

The password of previously encrypted volume got changed by the Debian installer

I already did some research on my question (see below), and it's as good as a 'done deal' but I would still like to put forward my problem to this knowledgeable community. Short version of the issue: ...
0
votes
1answer
163 views

Cryptmount-setup is not working

When I tried to set up encryption using cryptmount-setup, it just returns without any feedback. It did not even created the crypto.fs file. I ran the commands: cryptmount nextcloud_data and cryptmount ...
3
votes
1answer
157 views

Security of key reuse with dm-crypt in plain mode?

Are there, from a cryptanalysis point of view, security drawbacks when reusing the same key for different volumes in dm-crypt plain mode with cypher aes-xts-plain64? # Example: Encrypt two volumes ...
1
vote
2answers
777 views

Can't boot Arch Linux after installation with dm-crypt whole system encryption (BIOS)

So I'm installing a new Arch with the document here for a whole system encryption. The first part I get confused is here which the document wrote: Warning: GRUB does not support LUKS2. Do not use ...
2
votes
1answer
1k views

veritysetup verify successful but mount fails after upgrade to new kernel

We are using dm-verity for a squashfs root file system. Using kernel 4.8.4 everything was ok, after upgrading to kernel 4.14.14 mount fails, even though the veritysetup verify command validates the ...
0
votes
1answer
463 views

change designated name of encrypted lvm root? from sdo to sdn in crypttab?

I installed debian stretch using encrypted lvm from the installer on a usb drive. during installation, with all disks connected, sdo5 is assigned to my boot disk. when running the full system, my ...
1
vote
1answer
461 views

How to dm-crypt the data only once by filesystem level RAID?

I'd like to use dm-crypt with btrfs, because of the bitrot protection of this filesystem. What I am worrying about that the RADI1 is on the filesystem level above the dm-crypt, so if I write a file, ...
1
vote
1answer
909 views

dm-crypt / cryptsetup which block encryption dimension use

I'm working on dm-crypt utilizing cryptsetup. I'm interested to understand if it's using a fixed block dimension to encrypt files. I explain it better: I created a LUKS envelop, formatted it with ...
1
vote
0answers
946 views

cryptsetup, LUKS, dm-crypt benchmark

I'm working on embedded software, where I used the cryptsetup to create an encrypted disk space over a NFS ethernet standard connection... I'm interested to understand the writing speed that this disk ...
1
vote
0answers
292 views

Unable to mount decrypted image

I have an encrypted image (ext4) that can be mounted perfectly on my Raspberry Pi but not on my (L)Ubuntu VM. The following commands work perfectly on the Pi: sudo cryptsetup luksOpen stuff.iso img ...
2
votes
1answer
1k views

Filling SSD with Random Data for Encryption with Dm-Crypt

I need to encrypt an SSD drive and I have opted to use dm-crypt. This is not something I do on a regular basis. So far I have successfully cleared the memory cells of my SSD with the ATA secure erase ...
2
votes
1answer
730 views

How to remove LUKS encryption after transferring files to an unencrypted disk

My / was originally on an encrypted volume and was transferred to an unencrypted volume by recursively copying every directory, and then grub was reinstalled: sudo -s cp -ax /mnt/encrypted /mnt/...
3
votes
1answer
3k views

LUKS passphrase doesn't work

One day, when I turned on the computer, my passphrase for home part /dev/sda7 doesn't worked (I am 147% absolutely sure, that I was writing right pass)! After three times of tries, I have rebooted ...
4
votes
0answers
971 views

Open a LUKS volume as a non-root user?

I'm using cryptsetup to create a LUKS file-based device to stash information in: # create a file as a container dd if=/dev/zero of=zulu.bin bs=1024 count=102400 # create a key dd if=/dev/urandom bs=1 ...
5
votes
0answers
327 views

Is it possible to decrypt a single isolated dm-crypt sector (perhaps using OpenSSL)?

Given full knowledge of the parameters required to open a dm-crypt volume, is it possible to decrypt a single sector taken from such a volume ? Assume that the original volume is not available but ...
2
votes
1answer
3k views

LUKS with USB key authentication, how secure is it?

I am thinking of creating a LUKS encryption by using a USB key instead of a passphrase to unlock my hard drive. However some people told me that using a USB key for authentication is less secure than ...
2
votes
1answer
584 views

Auto-mount encrypted volume on boot with key in crypttab

I have a LUKS-formatted volume and crypttab that contains the following: cryptdata UUID=3e26bc03-... /etc/cryptdata.key When the system boots, systemd asks me the password for this volume ...
3
votes
0answers
509 views

Documentation on Device Mapper ioctls?

In the Red Hat documentation on Device Mapper, it reads: "the application interface to the Device Mapper is the ioctl system call." So far, I understand that the ioctls are sent to /dev/mapper/...
2
votes
1answer
598 views

How to make device mappings stay after reboot?

I notice that if a device mapping is created with the low-level dmsetup or through ioctls, the device mapping will no longer be there after reboot. Is this normal? I am using a USB to test out ...
1
vote
1answer
157 views

Copy bootloader/boot partition to another disk (cdm-crypt)

I installed Debian jesse on an USB stick. I have like usual in these cases 4 partitions. Boot, root, swap, home. Last 3 of course encrypted. But during installation, I don't know why, Debian didn't ...
0
votes
2answers
57 views

Can dm-crypt be configured to ask for key on every read/write?

My understanding is that dm-crypt serves to abstract the actual block device so that the read/decrypt and write/encrypt happen automatically. However, assuming a device mapping with target: crypt is ...
1
vote
0answers
266 views

Debian Jessie - Can't boot after install dm crypt + luks - grub error

So after following this tutorial. Grub fails to load this new Debian installation. I followed that whole tutorial with 1 exception: I setup the 3 partitions all with 3 different passwords. everything ...
3
votes
1answer
973 views

Unlock Android encrypted DISK IMAGE FILE of SD card on desktop Linux

I am able to successfully unlock a corrupted Android encrypted SD card on desktop Linux using instructions from the Internet. # dmsetup create crypt5 --table "0 `blockdev --getsize /dev/mmcblk0p2` ...
8
votes
1answer
3k views

fstrim doesn't seem to trim a partition that uses lvm and dm-crypt

I try to setup Fedora 25 with dm-crypt and LVM, but struggle to make TRIM work. $ sudo fstrim -av /boot: 28.6 MiB (30003200 ...
5
votes
1answer
2k views

LUKS password not being requested by dmcrypt / encrypt hook at boot

At boot I see: :: running hook [encrypt] A password is required to access the volume: Command requires device and mapped name as arguments Command requires device and mapped name as arguments ...
3
votes
2answers
3k views

LUKS discard/TRIM: conflicting kernel command line options

I'm confused between the various ways that LUKS/dmcrypt/cryptsetup discard /TRIM operations can be enabled via the Linux kernel command line. The dracut manpage: rd.luks.allow-discards Allow ...