Questions tagged [luks]

Questions specific to LUKS (Linux Unified Key Setup) disk-encryption specification in general, such as setup questions or questions about how LUKS works. Use this tag if your question directly involves the LUKS disk encryption; do not use it if you just happen to be using an encrypted LUKS disk and your question is about a specific Linux configuration.

Filter by
Sorted by
Tagged with
1
vote
1answer
29 views

How can I fix LVM PV size after a botched encrypted partition shrinking

I apparently messed up today. I have to resize an encrypted root partition to make room for a windows dual boot. I followed instructions from the arch wiki since it seemed to match my needs even ...
0
votes
0answers
25 views

How do I run things in /etc/fstab and /etc/crypttab interlocked?

Imagine this there is a cloud storage foo which can get mounted via mount -t s3fs foo /mnt/s3 Which in turn contains a file luks_file which has a LUKS container in it. That can be unlocked like with ...
0
votes
1answer
57 views

Grub unlock luks encrypted btrfs raid0

The goal is to have grub unlock /dev/nvme0n1p3 which contains a keyfile to unlock the 2 luks encrypted btrfs raid0 drives. If I can get it working, I'll create a tool that can accompany Linux ...
0
votes
0answers
18 views

Mount second encrypted volume at boot

Running Debian 11 in a Proxmox Virtual machine. Fairly new to encryption and the mounting of them outside of pre-created during system setup. Trying to do something new here. Also quite new to ...
1
vote
1answer
46 views

Error unlocking LUKS USB Device: Operation not supported

I am using a Debian 11 system with cinnamon and trying to unlock a LUKS encrypted USB device with an ext4 filesystem, which I successfully created and can use when I manually use root and unlock it ...
-1
votes
0answers
14 views

LVM volume group accidentally deleted most likely due to encryption of one of the extended volumes, now I can't access my drive

I was trying to figure out a way to encrypt my new harddisk after adding it to my original logical volume using vgextend etc. I somehow ended up with deleting my volumegroup and I am not quite sure ...
0
votes
2answers
66 views

Automatic LUKS unlock using keyfile on boot partition

Background I'm attempting to configure automatic LUKS unlock on CentOS 8 Stream. I would like to place a keyfile on the unencrypted boot partitionand and use it to unlock the LUKS protected LVM PV (...
0
votes
1answer
131 views

Detached LUKS header (on USB) for an existing full-disk encryption device with Ubuntu

I already have a /boot partition on a USB stick and a LUKS partition on my computer, which correspond to a fulldisk encryption scheme with Ubuntu 21 I want to put the header of my LUKS partition onto ...
0
votes
0answers
35 views

Installing Ubuntu 21.04 with LVM on LUKS2 with integrity check returns errors when generating initramfs

TL;DR: I'm unable to generate initramfs after encrypting volumes with LUKS2 with integrity option and LVM on top of those volumes: cryptsetup: ERROR: first: Source mismatch cryptsetup: WARNING: target ...
0
votes
0answers
35 views

Multibooting two encrypted linux distros on two separate drives with GRUB

I've recently built a new computer, and I installed two drives on it. I was hoping to encrypt both drives with LUKS, and put separate instances of the same Linux distribution on each drive. One drive ...
0
votes
0answers
69 views

Breaking Luks encryption from a Memory Dump

I lost my LUKS encryption passphrase and I know that there are ways to recover the disk from a memory dump so I used the post of Subash SN I used findaes to extract the keys from the dump: Searching ...
1
vote
1answer
35 views

KVM disk-based VM on a luks-encrypted disk

I have an Arch linux running windows 10 disk-based VMs. The disk is on a different volume group and is luks encrypted. I have a logical volume for each VM with ext4 file system. I manually edited the ...
1
vote
1answer
58 views

How do I extend LUKS partition to fill the whole logical volume of 2 disks on LVM?

I have added a second disk to my LVM system. I created a physical volume there, added it to the volume group of ubuntu, 'vgubuntu', extended logical volume to fill the whole disk. How do I extend the ...
1
vote
0answers
34 views

How can I run a Manjaro ISO from a LUKS encrypted root using Grub

My / including /boot is one fully encrypted LUKS partition, I want to reinstall Manjaro but I can't seem to get Grub to find the initramfs with whatever I try, which makes sense because I haven't ...
1
vote
1answer
129 views

Mounting external hard drive using LUKS2 and FIDO2 Key

I have encrypted an external hard drive using LUKS2 on my machine running Fedora 34 using the cryptsetup command. When I now plug in the hard drive and enter the passphrase, the drive is unlocked ...
4
votes
2answers
184 views

Shrink root LVM on LUKS2 btrfs root partition to enlarge swap partition

Here's my setup $ lsblk NAME MAJ:MIN RM SIZE RO TYPE MOUNTPOINTS nvme0n1 259:0 0 238.5G 0 disk ├─nvme0n1p1 259:1 0 100M 0 part /boot/efi ├─...
0
votes
0answers
99 views

LUKS-LVM partition resize problems

I have a concerning adventure while trying to resize(shrink) my LUKS lvm partition. I wanted to shrink my partition so that I can easily copy my system to a new smaller sized drive. Before I started ...
1
vote
2answers
140 views

How should I enable discard and no workqueue for LUKS in Arch/Manjaro

So I've read the wiki and this answer, and I'm still a bit overwhelmed. In the wiki it feels like a lot of these are optional. Here's what I did. I used Manjaro to install into a single partition, ...
0
votes
1answer
33 views

SELinux and cryptsetup: chown failed and can't access temporary keystore

I am trying to set up SELinux and an encrypted additional partition that I mount at startup using a systemd service. If I run SELinux in permissive mode, everything runs ok (partition is correctly ...
-1
votes
1answer
46 views

How to extend an encryted partition? (Kali linux)

My encrypted partition is full. How can I extend it step by step please?
1
vote
0answers
69 views

BTRFS error blk_update_request: I/O error mounts device as read-only, but no errors to be found

It all started with the fact that podman was doing auto-updates at night. I assume this lead to a high usage of the device – although I have to say only one Docker/podman container actually uses a ...
1
vote
1answer
147 views

Configure grub2 to use a keyfile to unlock luks encrypted / and /boot

I'm using openSUSE and want to use full disk encryption and a USB device with a keyfile to decrypt the system. My whole system is encrypted in the same LUKS container (including /boot). Because /boot ...
2
votes
1answer
57 views

Encrypted LUKS volume does not accept password on boot after system freeze

My Laptop froze and after a hard shutdown the boot process won’t accept my disk encryption password anymore. I have a ‘standard’ luks-inside-lvm setup, generated while installing fedora, split in a /...
1
vote
1answer
154 views

Failed to mount /sysroot - zfs on lvm on luks with detached header

I tried to install a fresh system. With encrypted zfs and a detached header and boot on usb. But I can't boot, because the mount of /sysroot is failing. I tried changing the kernel parameters and ...
1
vote
1answer
44 views

How to proceed to enlarge /boot

I know how to use gparted on a livecd to resize partitions, but here it's a bit more complex and I don't want to screw it up. I have a /boot which is ridiculously small (can hold only one kernel at a ...
0
votes
2answers
46 views

Disk replacement in encrypted LUKS LVM without data loss

so here's my setup of an off-site rsync backup server. Ubuntu 20.10 with 9 hard disks. Disks /dev/sd[a-h] belong to backup volume group. System is on /dev/sdi Server is: powered on via network-...
1
vote
1answer
39 views

Unable to validate LUKS encryption

Hello I have a question about LUKS encryption. I have used LUKS to encrypt a disk on my server but when I create a file and add content to it, and cat the file, the content is still in plain text. ...
0
votes
0answers
44 views

Can't mount LUKS encrypted drive

Note: Cross-posted I have a LUKS encrypted disk that I can unlock, but not mount: $ sudo cryptsetup luksOpen /dev/sdb1 disk4tb # enter key $ sudo mkdir /mnt/disk4tb $ sudo mount /dev/mapper/disk4tb /...
0
votes
1answer
167 views

Mount LUKS encrypted drive

I have an external NVMe disk that was in my old laptop which is encrypted with LUKS. I need to mount that disk and extract some data out of it so this is what I have tried fdisk -l /dev/sdc3 2549760 ...
1
vote
1answer
54 views

Can LUKS be used in a similar way as veracrypt?

I am in the process of eliminating non-free code from my machines. I currently am using Veracrypt to lock some files behind encryption, and quite like that I have a .vc file I can easily backup and ...
1
vote
0answers
100 views

Debian - Volume group "debian-vg" not found on every boot

On every boot of my debian system, the following warnings appear: Volume group "debian-vg" not found. Skipping volume group "debian-vg" Volume group "debian-vg" not found....
0
votes
0answers
48 views

How much size is enough for volume group on debian 10 with luks encryption?

I'm installing Debian 10 on my laptop with LUKS full disk encryption via partitioning guide (Recommended for new users). Now it asks me about the amount of volume group to use for guided partitioning. ...
1
vote
2answers
261 views

What are the advantages of using btrfs snapshots over rsnapshot in a backup scenario [closed]

Currently I use rsnapshot to backup data from one encrypted ext4 drive to another. My system opens a LUKS container on each drive and runs rsnapshot according to an hourly schedule. I'm intrigued by ...
1
vote
0answers
81 views

Debian Installation booting into GRUB

I'm having a bit of an issue with my Debian installation on my new Dell XPS 13 2021. It's booting directly into GNU GRUB with no errors, and I can't get it to boot into Debian even with this guide. I'...
1
vote
1answer
358 views

LUKS + TPM2 + PIN

I am currently aware of two recent methods to bind a LUKS encrypted root partition to a TPM2: systemd-cryptenroll and clevis. Both of them seem to release the encryption key after successfully ...
0
votes
0answers
74 views

Can not mount an encrypted hard drive after Linux Mint crashed down

I can not boot my Linux Mint 20.1 Cinnamon. I have an encrypted file system on sda3. The only extra Installation on notebook was a Resilio Sync for online file synchroniying between two Linux Mint ...
4
votes
2answers
215 views

What is the epoch of LUKS that is shown when running luksDump?

When you run luksDump on a LUKS device, I get this: $ sudo cryptsetup luksDump /dev/sda1 LUKS header information Version: 2 Epoch: 3 Metadata area: 16384 [bytes] Keyslots area: ...
0
votes
0answers
18 views

Start Clonezilla/Gparted from encrypted partition

I’m striving to start clonezilla/gparted (I will always talk about clonezilla, but it is the same issue) with grub with the live-hd configuration (so basically from the boot partition on /dev/sda3 but ...
2
votes
2answers
347 views

Open: cryptsetup out of memory

I am working on my yocto distribution including cryptsetup in the 2.3.2 version I am running such distribution on a board with 1 GB RAM and I am incurring in an "out of memory" error trying ...
0
votes
1answer
155 views

GRUB error: unknown filesystem

I am trying to setup lvm on luks2 with boot inside lvm. NAME FSTYPE FSVER FSAVAIL FSUSE% MOUNTPOINT nvme0n1 ├─nvme0n1p1 vfat FAT32 510.7M 0% ...
0
votes
1answer
76 views

Moving Gigs on LVM-on-Luks from one partition to another

I need to resize LVM on LUKS on Debian to take space from home and give it to var. └─sda5 8:5 0 931G 0 part └─sda5_crypt 253:0 0 931G 0 crypt ├─my-vg-root 253:...
0
votes
1answer
76 views

Slow /dev/zero format using dd with nvme to prepare crypto, is there nvme specific tool?

I try to prepare an nvme for encryption, so i first follow this post on SO. But the speed of dd is really really slow (less than 100 mb/s). I see there is new option to speed up dm-crypt on kernel 5.9 ...
0
votes
1answer
182 views

tang / clevis: automatic unlocking for luks device not triggered unless defined as _netdev

I've setup a server with luks devices (not used for root partition), they are listed in /etc/crypttab this way # <target name> <source device> <key file> <options> ...
0
votes
1answer
79 views

LUKS: Determine which keyslots match which pass phrase

I have a LUKS encrypted disk. It has 3 keyslots, and I know the pass phases for two of them. How do I determine which keyslots I know the pass phrases for?
1
vote
0answers
119 views

Bootsplash setup with LUKS password prompt

I'm running manjaro with full disk encryption. I want to have "themed" boot experience and so I installed bootsplash. Unfortunately it doesn't theme the initial disk password prompt. Is it ...
0
votes
0answers
54 views

modprobe: module aes-i586 not found in modules.dep

I'm using LMDE4 with LVM on LUKS and recently I've been getting these cryptic error messages at boot: modprobe: module aes-i586 not found in modules.dep Volume group "lvmlmde" not found ...
1
vote
1answer
293 views

Debian preseed does not create encrypted disk with LUKS LVM properly

I'm trying to create a LUKS LVM disk partition autmatically using preseed on Debian 10 (Buster). I have only a single disk /dev/sda with the size of 80GB and it has system memory of 4GB Here is my ...
0
votes
0answers
24 views

How to set up tpm2 and luksmeta?

I am installing CentOS 7 on some servers and the installation script includes some lines to encrypt the disk, add the passphrase to the TPM2 chip, set the TPM2 to decrypt the passphrase automatically, ...
0
votes
1answer
54 views

Only first slot password is valid during decryption of boot device while all others are valid while testing to open a device

I made a full encryption setup of Ubuntu 20.04 LTS according to this article. Due to it is highly recommended to add further passphrases to avoid loosing all data due to unavailability of the initial ...
1
vote
0answers
153 views

Linux Mint 20 with LUKS and LVM hangs on boot after upgrade

Solution I've solved the problem by adding the initramfs flag in /etc/crypttab and using keyscript=decrypt_keyctl instead of a keyfile to avoid entering the password two times for the second drive: ...

1
2 3 4 5
13