Questions tagged [luks]

LUKS (Linux Unified Key Setup) is a disk-encryption specification.

Filter by
Sorted by
Tagged with
0
votes
0answers
11 views

Is it possible to regenerate /boot partition of a LUKS drive?

I use Debian. For learning purposes I want to encrypt the whole hard drive. But let's say I am afraid of evil maid attacks so I want to bring my /boot partition with me always, and I put a boot ...
0
votes
0answers
32 views

unknown filesystem type ‘lvm2_member’

I have been trying to install Manjaro in a VirtualBox several times now and every time there is some failure. This latest install attempt with Manjaro-Architect seemed to complete despite a small ...
1
vote
0answers
23 views

Increase size of randomly created encrypted swap

Ubuntu 18.04 is by default creating a random encrypted swap during each boot using dm-crypt/Swap encryption. For me, this is creating a 1gb swap but I cannot find where to increase the size of the ...
0
votes
1answer
17 views

Can't boot from encrypted disk after deleting swap-memory partition [issue]

I can't login anymore into my encrypted disk. After writing the password: error: no such cryptodisk found. error: disk ‘cryptouuid/HEXstring’ not found. Entering rescue mode… intuitively that string ...
0
votes
2answers
35 views

mount crypto_LUKS partition without decrypting (locally)

I have an encrypted external disk on a linux server. On the server, I can do this locally to decrypt cryptsetup -d keyfile luksOpen /dev/sdx1 /mnt/decrypted but I prefer to avoid doing that on the ...
1
vote
2answers
34 views

how many key slots does the luks2 support?

luks1 has limit of 8. But I just accidentally add 9 slots to luks2 (from 0 to 8). I wonder what is the limit for luks2? Keyslots: 0: luks2 Key: 512 bits Priority: normal ...
0
votes
1answer
47 views

Can I boot a LUKS encrypted system without editing /etc/crypttab and rebuilding the initramfs in Ubuntu?

I am trying to boot an encrypted Ubuntu system without needing to have a custom initramfs for each disk I boot. I currently use Funtoo/Gentoo and have a generic initramfs in which I specify the UUID ...
1
vote
2answers
29 views

why cryptsetup cannot use /dev/fd/63 as keyfile?

# cryptsetup luksOpen /dev/somedevice --key-file <(gpg2 somekeyfile.gpg) always failed with Failed to open key file. Is there any way to make this work? --key-file - also fails. The only thing I ...
1
vote
1answer
46 views

Mount points in /etc/fstab on Debian system for an encrypted partition

I recently installed Debian 10 on my laptop and for the first time I decided to give file encryption a go. But I've found something interesting in the /etc/fstab file, and it's that it doesn't use ...
3
votes
0answers
57 views

CentOS-8 - Unsealing LUKS volume with TPM2 module - clevis issue

Im trying to get a LUKS volume unlocked by the TPM-module on a Dell Optiplex 3060. The binding seems to work fine: clevis luks bind -d /dev/nvme0n1p3 tpm2 '{"pcr_ids":"7"}' $ luksmeta show -d /dev/...
3
votes
1answer
44 views

Changing LUKS password

I tried changing my LUKS password. Source I used: https://www.linuxexperten.com/content/how-do-i-change-my-luks-encryption-password-and-more I have separate partition’s for Boot, Root, Swap & ...
0
votes
2answers
52 views

Encrypted partitions appear as one

I wrote a partition table manually during a system installation which contains an encrypted part, the /boot partition and an unpartitioned rest. Although I first created the partitions (manually each) ...
1
vote
1answer
222 views

Error unlocking a LUKS partition (failed to activate device:file exists)

I'm having problems unlocking a luks-encrypted disk with KDE dolphin, in a system with manjaro. The issue is not critical. It can be solved by rebooting, but sometimes it is not convenient to do so, ...
1
vote
1answer
324 views

Debian Full Disk Encryption: Does Debian Installer use LUKS 1 or 2?

During installation, whenever I put /boot inside an LVM on top of LUKS along with swap, / and /home, afterwards when I try to boot into it, it only gives me the minimal bash-like grub terminal. This ...
0
votes
1answer
72 views

Encrypt multiple partitions with luks cryptsetup

The other day I tried to setup a Full disk encryption on a test system (ArchLinux) within virtualbox. (I want to use this kind of a setup on my main machine so I wanted to test it out first) I ...
0
votes
1answer
148 views

LUKS: Wrong Password or Corrupt Headers?

I'm trying to gain access to my LUKS partitions after suddenly discovering that my password stopped working on all 4 LUKS partitions. 7 days ago when I tried booting and logging into my linux OS, my ...
1
vote
1answer
54 views

What are the limitations of a detached LUKS header

I'm trying to understand the relationship between LUKS detached headers and their respective block device. From what I understand "formatting" with a detached header doesn't actually change the ...
0
votes
0answers
22 views

After update Fedora doesn't decypher LUKS system while booting

So I have set up a machine with Windows at one disk and Fedora 29 at other one. Both are cyphered - Windows disk with VeraCrypt and Fedora with LUKS - default while installation. I did update of the ...
0
votes
2answers
232 views

LVM on LUKS FDE: GRUB won't mount my root partition / during boot even though cryptomount and cryptdevice are given in grub.cfg

I have a triple boot setup (3xLinux). All Linuces share /home and swap, and their / partitions are next to each other. All reside in an LVM on LUKS: # lsblk NAME MAJ:MIN RM ...
1
vote
2answers
123 views

cryptsetup resize returns device not active, despite cryptdisk status returning active and in use (resizing LVM-on-LUKS)

I am in the process of resizing LVM-on-LUKS, referring to these two posts as guides. I had done this once before smoothly, but I have run into a strange problem. When I run #cryptsetup -b 377523479 ...
0
votes
1answer
80 views

Problem with booting a newly LUKS encrypted root partition

I didn't encrypt my root partition when I was installing my Ubuntu 18.04 when 18.04 first came out (first few months of it's release) So for reasons I decided to encrypt it now. I know this question ...
0
votes
0answers
29 views

Mounting Luks partition

I am unable to mount luks partition: root@pc:/home/artur# lsblk | grep luks │ └─luks-6fef63fc-4b38-4e03-84d0-ed26c11e1041 253:0 0 140,8G 0 crypt root@pc:/home/artur# udisksctl unlock -b /dev/...
0
votes
1answer
122 views

btrfs ref and backpointer mismatch, ERROR in extent allocation tree

I have an encrypted LUKS partition, with btrfs for backups on it. Kernel panic happened while system was mounted and performing receive/send operations during backup. After restart no problem with ...
0
votes
1answer
42 views

Luks and encryption key

I want to check how safe is this solution, I can't find on the web what I have and the differences in scenarios I found make me uneasy especially we are talking about security. What I have is one ...
0
votes
0answers
51 views

Kali Linux: USB drive cannot be formatted by cryptsetup; Device is in use: error code -1 “wrong or missing parameters”

I am trying to make a Kali Live drive with a 32gb flash drive, using LUKS encryption for the persistence, following the instructions on this page: https://docs.kali.org/downloading/kali-linux-live-usb-...
0
votes
1answer
31 views

cryptsetup and passphrae restrictions

I'm trying to encrypt a new HD to add to my Red Hat server. I have two other drives that are already encrypted with a passphrase. However, when I try to use the same passphrase on the new drive I get: ...
0
votes
0answers
20 views

How to securely set up SSHFS up in /etc/fstab with a LUKS encrypted drive?

I would like to be able to securely mount a encrypted drive over sshfs onto my local computer. The remote computer is mine, but should be thought as a untrusted machine as the remote machine is not ...
1
vote
2answers
88 views

Multiple LUKS Disks @Boot with One Password Prompt (CentOS)

How do we unlock multiple disks with one password prompt at CentOS-7 bootup? In Debian, I can do it using decrypt_keyctl & initramfs in /etc/crypttab (which I see is described here). Right now, ...
2
votes
1answer
748 views

Convert LUKS2 back to LUKS version 1

Is it possible to convert LUKS2 to LUKS version 1, and by extension, change the use of features that would block such a conversion? Fedora 30 uses LUKS2 by default, however I ran into a situation ...
1
vote
1answer
83 views

Wrong EXT4 Partition size in luks encrypted partition

I have encrypted my home partition via cryptsetup. Inside the mapper /dev/mapper, i have created a ext4 fs via mkfs.ext4 /dev/mapper/home Now, my home partiotion only has 91 GB. My luks partition ...
0
votes
0answers
82 views

LUKS volume does not get unsealed by the TPM after a update

I'm performing a Kickstart-installation from a USB-Stick of Oracle-Linux 7.6 on a Dell Optiplex 3060 where I also encrypt the volume and bind it to the TPM to unlock it automatically: clevis luks ...
3
votes
1answer
194 views

Grub2/LUKS How to avoid to type the passphrase twice?

I am on the latest OpenSUSE Tumbleweed and this guide has not worked for me. I did everything like in the guide except I did not generate a new random key and added it to the harddisk but used the ...
1
vote
1answer
122 views

Debian 10 only boots to GRUB (LUKS + LVM)

On reboot, my new installation of Debian 10 (amd64) only spits out a GRUB shell. The operating system is not loading. My disk is GPT, with the first parititon being ESP (/dev/sda1), formatted FAT32 ...
1
vote
1answer
113 views

Dependency failed for /boot LUKS on external USB drive after Debian update initramfs

Please somebody help me :( after a firmware update my Debian Sid with encrypted LUKS root does not boot clean anymore. At boot, after inserting my passphrase, there are a bunch of messages and a ...
0
votes
0answers
18 views

Using dm-crypt with RAID0. Should I just encrypt the array or every device itself and than add it to array?

I want to protect/encrypt my data on RAID0 array. What is the best or recommended approach, encrypt each device or encrypt the whole array and then create the file system? The naive approach would ...
0
votes
0answers
34 views

Ordering lvmcache and LUKS

When using lvmcache and LUKS, are there recommendations for the order of the layers? Ie, should I place LUKS at the "bottom" and use it to protect the individual LVM PVs, or should I place it last ...
1
vote
1answer
81 views

How Extending LUKS2

I read a guide few years ago that's on how LUKS1 extending to the right and adjacent freespace without data loss, but could not left. Nowadays LUKS2 has arrived with many new features, does it makes ...
0
votes
1answer
37 views

Partition not showing up after Luks decryption

Everytime i decrypt my luks drive the partition is not showing up: cryptsetup -v luksOpen /dev/md0 md0_crypt lsblk sdb 8:16 0 3,7T 0 disk └─sdb1 ...
2
votes
1answer
179 views

Extend Luks encrypted partition without using luksOpen command

I just tried to increase encrypted LVM partition. The proceduce is: Extend the partition with fdisk -> Resize PV -> Resize LV -> Increase size file system. Detail steps in https://www.thegeekdiary....
0
votes
0answers
78 views

How to show letters at cryptsetup luks preboot password entry prompt as typing?

At the moment cryptsetup luks preboot password entry prompt shows not even asterisk symbols while typing. Password entry is functional though. But this is too difficult for some users. How to make ...
1
vote
0answers
79 views

Broken LVM Physical volume after resizing partition

I bought a new larger SSD to replace my old one. The old one has 3 partitions, 2 for booting and a third (last) one with LVM2 on LUKS. I did the following to migrate: dd the contents of the old drive ...
0
votes
1answer
76 views

Addressing USB-Stick by UUID as kernel parameter in grub.cfg

I'm using Arch Linux and setting up an USB-Stick as decryption key for my luks-encrypted root partition (boot is unencrypted). I described it already in this question. Now, the key, that's used for ...
2
votes
1answer
81 views

Using space before 1st partition of USB-Stick as luks key

I'm using arch linux with an encrypted luks root partition (boot unencrypted), with a passphrase yet. Now I have a keyfile (3072 bytes), that's written to USB-Stick this way: sudo dd if=tempKeyFile....
0
votes
0answers
39 views

Encrypted /boot without UEFI

I have only one, LUKS-encrypted, partition. Is it possible to boot system from /boot on this partition? I don't want to use UEFI to do this. EDIT I'm using GRUB. I have uncommented ...
2
votes
2answers
119 views

script to automate luksHeaderBackup for multiple partitions

I have several servers each with at least six dm-crypt partitions. I would like to have an automated way to make sure I always have a luks header backup stored in a safe place. I've been making header ...
0
votes
2answers
142 views

Recover overwritten LUKS partition

Is there a way to recover an overwritten LUKS partition? Consider the following case: I had a (external) hard drive (not SSD) which is completely LUKS encrypted containing an ext4 file system with ...
-1
votes
2answers
40 views

Partitioning disk

I would like to have 5 partitions: Boot Swap 3 separate (one is 'main' system partition) LUKS encrypted partitions I have boot partition as primary bootable and swap as primary linux swap. At this ...
1
vote
0answers
277 views

How Can I luks encrypt the root and swap partition on a Fedora ARM Server?

On every graphical Linux installation I've used there is typically a checkbox to enable luks encryption. Problem is the installation is different, whereas typically you get a bootable .iso or .img the ...
1
vote
1answer
631 views

Migrate Arch from encrypt to sd-encrypt

I recently installed Antergos (which is basically Arch) and set it to use full disk encryption. Now, I want to migrate from encrypt to sd-encrypt because I want to be able to hibernate and I couldn't ...
2
votes
1answer
593 views

invalid line /etc/crypttab

I am troubleshooting a debian system that will not boot; the system booted fine, and one day ceased to do so (possibly but not definitely related to an apt upgrade). It has a small boot partition (...