Questions tagged [luks]

Questions specific to LUKS (Linux Unified Key Setup) disk-encryption specification in general, such as setup questions or questions about how LUKS works. Use this tag if your question directly involves the LUKS disk encryption; do not use it if you just happen to be using an encrypted LUKS disk and your question is about a specific Linux configuration.

Filter by
Sorted by
Tagged with
0
votes
0answers
20 views

LUKS + TPM2 + PIN

I am currently aware of two recent methods to bind a LUKS encrypted root partition to a TPM2: systemd-cryptenroll and clevis. Both of them seem to release the encryption key after successfully ...
0
votes
0answers
25 views

Can not mount an encrypted hard drive after Linux Mint crashed down

I can not boot my Linux Mint 20.1 Cinnamon. I have an encrypted file system on sda3. The only extra Installation on notebook was a Resilio Sync for online file synchroniying between two Linux Mint ...
4
votes
2answers
155 views

What is the epoch of LUKS that is shown when running luksDump?

When you run luksDump on a LUKS device, I get this: $ sudo cryptsetup luksDump /dev/sda1 LUKS header information Version: 2 Epoch: 3 Metadata area: 16384 [bytes] Keyslots area: ...
0
votes
0answers
8 views

Start Clonezilla/Gparted from encrypted partition

I’m striving to start clonezilla/gparted (I will always talk about clonezilla, but it is the same issue) with grub with the live-hd configuration (so basically from the boot partition on /dev/sda3 but ...
2
votes
2answers
36 views

Open: cryptsetup out of memory

I am working on my yocto distribution including cryptsetup in the 2.3.2 version I am running such distribution on a board with 1 GB RAM and I am incurring in an "out of memory" error trying ...
0
votes
1answer
27 views

GRUB error: unknown filesystem

I am trying to setup lvm on luks2 with boot inside lvm. NAME FSTYPE FSVER FSAVAIL FSUSE% MOUNTPOINT nvme0n1 ├─nvme0n1p1 vfat FAT32 510.7M 0% ...
0
votes
1answer
25 views

Moving Gigs on LVM-on-Luks from one partition to another

I need to resize LVM on LUKS on Debian to take space from home and give it to var. └─sda5 8:5 0 931G 0 part └─sda5_crypt 253:0 0 931G 0 crypt ├─my-vg-root 253:...
0
votes
1answer
33 views

Slow /dev/zero format using dd with nvme to prepare crypto, is there nvme specific tool?

I try to prepare an nvme for encryption, so i first follow this post on SO. But the speed of dd is really really slow (less than 100 mb/s). I see there is new option to speed up dm-crypt on kernel 5.9 ...
0
votes
1answer
28 views

tang / clevis: automatic unlocking for luks device not triggered unless defined as _netdev

I've setup a server with luks devices (not used for root partition), they are listed in /etc/crypttab this way # <target name> <source device> <key file> <options> ...
0
votes
1answer
27 views

LUKS: Determine which keyslots match which pass phrase

I have a LUKS encrypted disk. It has 3 keyslots, and I know the pass phases for two of them. How do I determine which keyslots I know the pass phrases for?
0
votes
0answers
22 views

Bootsplash setup with LUKS password prompt

I'm running manjaro with full disk encryption. I want to have "themed" boot experience and so I installed bootsplash. Unfortunately it doesn't theme the initial disk password prompt. Is it ...
0
votes
0answers
24 views

modprobe: module aes-i586 not found in modules.dep

I'm using LMDE4 with LVM on LUKS and recently I've been getting these cryptic error messages at boot: modprobe: module aes-i586 not found in modules.dep Volume group "lvmlmde" not found ...
1
vote
1answer
57 views

Debian preseed does not create encrypted disk with LUKS LVM properly

I'm trying to create a LUKS LVM disk partition autmatically using preseed on Debian 10 (Buster). I have only a single disk /dev/sda with the size of 80GB and it has system memory of 4GB Here is my ...
0
votes
0answers
9 views

How to set up tpm2 and luksmeta?

I am installing CentOS 7 on some servers and the installation script includes some lines to encrypt the disk, add the passphrase to the TPM2 chip, set the TPM2 to decrypt the passphrase automatically, ...
0
votes
1answer
30 views

Only first slot password is valid during decryption of boot device while all others are valid while testing to open a device

I made a full encryption setup of Ubuntu 20.04 LTS according to this article. Due to it is highly recommended to add further passphrases to avoid loosing all data due to unavailability of the initial ...
1
vote
0answers
35 views

Linux Mint 20 with LUKS and LVM hangs on boot after upgrade

Solution I've solved the problem by adding the initramfs flag in /etc/crypttab and using keyscript=decrypt_keyctl instead of a keyfile to avoid entering the password two times for the second drive: ...
0
votes
0answers
18 views

Can't run “clevis luks bind” without error “Failed tpm session start auth with params”

Running into this error trying to bind to tpm2: # clevis luks bind -f -k- -d /dev/sde3 tpm2 '{"pcr_ids":"7"}' ERROR: Failed tpm session start auth with params ERROR: Error starting ...
0
votes
1answer
36 views

What is deleting my symlink to my USB luks partition upon cryptsetup luksOpen?

I wrote a new udev rule to create a symlink to a luks-encrypted partition on a USB flash drive when the drive is plugged in. The new udev rule I wrote does create the symlink to the USB drive's ...
1
vote
0answers
29 views

How to mount directly encrypted partitions with autofs

When working with encrypted disks and partitions, basic idea of this question is, instead of having to enter the encrypted password at boot time, we want to enter the encrypted password only when we ...
0
votes
1answer
57 views

cryptsetup luksFormat error “Device /dev/nvme0n1p3 is in use. Can not proceed with format operation.”

I've followed this guideline to the point where I encrypt the target partition: cryptsetup -h sha256 -c aes-xts-plain64 -s 512 luksFormat /dev/nvme0n1p3 Then, the error appears, even though I'd ...
2
votes
0answers
30 views

cannot open LUKS patition as read only

I have saved a whole disk image of a Debian Jessie in a image.img file using: $ dd if=/dev/sda of=/media/usbdisk/image.img This file is meant to be a backup of the whole disk. The whole partition was ...
0
votes
0answers
13 views

Accidently imaged only part of LUKS drive while unencrypted

I accidentally imaged the drive while it was unlocked and I only imaged the luks partition (Ie. only the luks part of the drive and not the unlocked part of the drive), now when restored I cannot ...
0
votes
0answers
49 views

Grub error 'lvmid/xxx' not found

I have a similar problem to this one: https://bbs.archlinux.org/viewtopic.php?id=249535. However, the fix does not work for me. So I am trying to install arch linux in a dm-encrypted partition. I have ...
0
votes
0answers
22 views

How does my distro know the password for the LUKS encrypted disk?

/dev/nvme and /dev/sda are LUKS2 encrypted with same password. /dev/nvme formatted by Ubuntu installation, contains OS. /dev/sda formatted by me, contains data. I want to mount /dev/sda automatically. ...
1
vote
1answer
23 views

Is it possible to use Luks on output in bash?

Hello, a short question: Can I(as in OpenSSL), use luks to encrypt bash output? e.g with OpenSSL: echo "test" | openssl ..... can I do that with Luks/Cryptsetup in some way? like this: echo &...
0
votes
1answer
109 views

open veracrypt file with cryptsetup/luks

Can cryptsetup be used to open a veracrypt file like crypsetup can open luks? What is the correct process ? Want to make sure other software can open veracrypt file , command line or gui is fine, as ...
0
votes
0answers
48 views

Best practice to switch unencrypted RAID1 (mdadm) to LUKS & RAID1

I have a raid1 setup with mdadm with 2x 4TB HDDs. My operating system is on a 500GB SSD. My OS HDD is encrypted with LUKS. I would like to get my raid1 under LUKS and LVM as well. Since I don't have a ...
5
votes
1answer
130 views

How to increase LVM when using LUKS2 on Debian Buster

I'm running Debian Buster on a ThinkPad T420 which is equipped with a 250 GB SSD. Since I needed more disk space I used Clonezilla to clone my current Debian installation from the internal 250 GB SSD ...
0
votes
0answers
43 views

Can't mount my LUKS drive. Is it lost?

7 days ago I encrypted my 2TB Hard Drive using the gnome-disk-utility (Disks) on Linux Mint Debbie, after that it all worked fine. After that I installed Kali, and when I got to the desktop I couldn't ...
0
votes
1answer
24 views

Option to automatically shutdown at GRUB without user input?

I have a laptop that dual boots Arch and Windows 10. My boot select is set to a GRUB screen where I'm given a few seconds to change my selection (default is Arch) until it boots to a LUKS unlock ...
0
votes
0answers
21 views

LUKS error rescue

My disk has some problems, perhaps going to die so I bought a new one and backup the LUKS partition from the error disk with UDisk, but the proccess is stuck at 90% for hours, so I have to click stop ...
2
votes
0answers
83 views

GRUB alternative for LUKS2 with Argon2ID support

It seems that the even the most recent version of GRUB2 doesn't support LUKS2 with the PBKDF Argon2ID (source). The Raspberry Pi bootloader for instance fully supports this new hashing function. Is ...
0
votes
0answers
19 views

Restore partialy deleted luks partition

I was cleaning a few old hdd. Then I ran shred on my main hdd... by accident. I've scoured around and found a few helpful guides but here is my issue: This command: sudo hexdump -C /dev/sda | grep ...
1
vote
0answers
24 views

Adding RAM changed UUID of Luks partition (Linux Mint 20.1)

This is one of the weirdest glitches I've ever encountered. I have (3) partitions encrypted with Luks: /home (on same disk as root) /media/backups (external USB drive) swap (on ...
0
votes
0answers
20 views

How do I use an OPAL self-encrypting disk as a non-root disk?

I run an openSUSE Tumbleweed laptop with two disks; one root disk used for / and /boot/efi, and a home disk used for (unsurprisingly) /home. Both are currently encrypted with LUKS, and a key to the ...
0
votes
0answers
74 views

unable to decrypt luks partition in initramfs

I'm setting up decrypt over ssh and have successfully created an initramfs I can boot into. currently though, whether pasted or typed manually, my password fails to be accepted, but I've confirmed ...
0
votes
0answers
22 views

How to pause timer at LUKS passphrase prompt once typing is started?

I keep a short timeout value in the /etc/crypttab (in order to skip it quickly in case I don't need to unlock the luks partition at boot). The problem is that the timer - being short - continues to ...
0
votes
0answers
60 views

How to use no echo by default on LUKS password prompt?

I am using Arch Linux. Encrypted my root partition using cryptsetup. By default LUKS password prompt shows asterisks. I can hide this pressing tab. But it's annoying to me. I don't wanna press tab ...
1
vote
0answers
190 views

Use fstab to mount luks encrypted drive to subfolder within home

Fresh install of Lubuntu 20.04 on system with Windows 10 and Lubuntu installed on 256GB NVME drive to dual boot. Boot drive is /dev/nvme0n1p2 Home folder is therefore /dev/nvme0n1p2/home/username I ...
-1
votes
1answer
34 views

Can't install applications because of LUKS encryption and partitioning

I installed Kali into my machine along with another operating system and one thing I did was manual partitioning to encrypt the whole Kali partition using this guide. Now whenever I try to update I ...
0
votes
1answer
28 views

How to identify which process is writing on encrypted disk with ZFS

My disks (ZFS on Linux on encrypted LUKS) are not staying in standby and I'm not able to identify which process is waking them up. iotop is showing command txg_sync which is related to ZFS. So I tried ...
0
votes
0answers
40 views

Block devices missing in initramfs

I have setup Debian 10 on my machine on an (not encrypted) block device with a EFI partition and the system installed to a btrfs subvolume on a separate partition. Inside the machine there are ...
0
votes
1answer
32 views

LUKS auto decryption with key file fails, please help me debug

I have a Raspberry Pi with attached, via USB, HDD drive inside Orico chassis with a separate power source. I encrypted this drive with the command: cryptsetup luksFormat /dev/sda Then, I created key ...
2
votes
1answer
1k views

How to create a new encrypted LUKS-partition in GParted?

I want to create a new encrypted LUKS-partition in GParted. I've searched the UI and the help, but the only thing I can find is how to open and close an existing LUKS partition and how to to copy and ...
1
vote
1answer
48 views

Recover partition table from running system and encrypted disk

I've made a small mistake, I've removed my boot partition by mistake. Using testdisk I was able to recover the boot partition without problem but I either misused it or did not understand and only ...
0
votes
0answers
53 views

How to switch from a running system to initramfs, in order to unmount the root overlayfs and its components and than reboot or shutdown?

The embedded system is based on NXP ARM iMX8Mini, the root filesystem is an overlayfs composed by three parts, these parts are filesystems that are contained inside files image. The partition who ...
0
votes
0answers
118 views

LUKS Encrypted Disk Damaged - Windows 10 install placed boot loader on disk without warning

I had a LUKS encrypted disk, with an atypical structure. The entire disk (3tb) was encrypted such that no secondary partition exists. Example /dev/sdb without a secondary /dev/sdb1. The disk was ...
0
votes
0answers
74 views

mdadm raid + luks + ext4 stride stripe-width optimization

In this setup raid+ext4, after creating a RAID, it is recommended to optimize the filesystem, this is done at fs creation time as shown in the following link. now, what is the procedure to optimize ...
2
votes
1answer
221 views

How much do 4K sectors improve LUKS2 performance on SSD storage?

According to the cryptsetup(8) man page, the sector size of a LUKS2 volume may be configured with --sector-size: Set sector size for use with disk encryption. It must be power of two and in range 512 ...
1
vote
1answer
124 views

Decrypt LUKS partition by a script in udev rules

I am trying to decrypt a LUKS partition when I plug in an external HDD. Thus, I have configured the udev rules with the following: ACTION=="add", KERNEL=="sdb1", SUBSYSTEM=="...

1
2 3 4 5
12