Questions tagged [luks]
Questions specific to LUKS (Linux Unified Key Setup) disk-encryption specification in general, such as setup questions or questions about how LUKS works. Use this tag if your question directly involves the LUKS disk encryption; do not use it if you just happen to be using an encrypted LUKS disk and your question is about a specific Linux configuration.
738
questions
1
vote
0
answers
20
views
SSD partition table deleted of an encrypted LUKS Linux drive
Dear Unix&Linux Stackexchange Members:
I accidentally deleted the partition table of my with LUKS encrypted SSD. I did use the encryption that came with the linux 22.04 installer. Then I was ...
- 11
1
vote
0
answers
33
views
Is it possible to recover this LUKS-encrypted SD card?
I have a large size SD card that was encrypted with LUKS using the GNOME Disk Utility running on Ubuntu. I had some cherished photos on it. I've managed to accidentally format the SD card and wish to ...
- 121
11
votes
1
answer
489
views
cryptsetup: verification in luksOpen is non-deterministic when reading the password from a file
I'm debugging a weird behavior of cryptsetup:
Assume the correct password is stored in the file pw. I expected now that --test-passphrase would always succeed (i.e. printing no output) if it is passed ...
- 4,597
1
vote
1
answer
38
views
Mount a LUKS encrypted EXT4 formated image file when mount folder is accessed (using autofs)
Here's what I'd like to do. Use autofs to automount an encrypted luks image file when the target directory is accessed.
I've been playing with both fstab and crypttab, but to no luck.
I do NOT want to ...
- 121
0
votes
0
answers
20
views
How can I resize my LUKS partitions on arch? [duplicate]
My Arch installation is on a nvme drive with three partitions: a boot partition, a root partition of 30GB, and a home partition of 1TB. Both the root and home partitions have LUKS encryption. However, ...
1
vote
1
answer
51
views
Is it possible to check if a LUKS device has been damaged by a foreign person?
Let's assume I lost a LUKS encrypted USB pen drive. I think the file system type (ext4/fat32/...) doesn't play a role. A foreign person finds it. Of course he cannot access my data because he doesn't ...
- 811
1
vote
0
answers
16
views
LUKS: Use TPM to make password hash function resistant to parallellized cracking
In order to do that, I think it's possible to make the password hash dependent on the TPM: that way, an attacker would need to invoke the TPM for every password hash, limiting the speed of password ...
- 397
0
votes
0
answers
70
views
Resizing encrypted LUKS partition using KDE Partition Manager
I want to reduce the size of my encrypted LUKS partition so that I can increase my swap size.
From reading here, I thought using kpm would be the easiest as gparted does not support encrypted ...
- 101
0
votes
0
answers
52
views
LUKS Unlock Linux (Fedora) with non-US Keyboard layout
If I boot normally (1 of 3 kernels), my keyboard layout is set to my physical layout (in my case CH-DE). There are 2 issues:
In case I have a system boot failure and I need to use the recovery mode,
...
1
vote
1
answer
53
views
Why are three large partitions created when installing Fedora with the encrypted disk option?
I've just installed Fedora 37 on a 2TB SSD, and see this partition table:
I understand the role of the EFI partition, but why is it so large? 0.6 gigs seems excessive.
What is the role of the second ...
- 7,389
1
vote
1
answer
88
views
How to extend madam RAID1 with LUKS and ext4 filesystem on Debian 10
I am trying to expand an existing RAID1 array with an ext4 filesystem on a LUKS volume on Debian GNU/Linux 10 (buster).
This is my disk layout from lsblk:
NAME MAJ:MIN RM SIZE RO TYPE ...
- 13
0
votes
0
answers
52
views
How to recover files after encrypting whole disk with LUKS?
During Debian 11 installation by error I encrypted (LUKS) the whole HDD with personal data.
During the process it said "data will be erased, irreversible, are you sure?" etc.
Now, after ...
- 11
0
votes
0
answers
12
views
encrypted root partition error
I have created a custom image of u20. I have used qemu-system to boot through the custom image to check the sanity. after entering username and password in the login prompt, i am getting below error:-
...
1
vote
0
answers
79
views
Booting encrypted root with encrypted USB key
Running Debian 11 with grub, full disk encryption (no LVM) on /dev/sdb2, unencrypted /boot/efi on /dev/sdb1.
At boot, I want two options:
typing password
plugging an encrypted USB key (which stores a ...
- 11
1
vote
1
answer
39
views
Fedora and Ubuntu on the Same Volume Group
Can I install Ubuntu and Fedora on the same volume group of LVM. I wanted to do this as I could extend or compress a logical volume in a volume group and share the space with others.
I was going to ...
- 1,570
9
votes
1
answer
280
views
Overwritten LUKS with a partition table
In what I now know feel was a stupid decision, I attempted to dual boot Windows and linux by using the windows installer, After booting into the windows installer I chose one of a 2 cloned hard drives ...
- 93
0
votes
0
answers
37
views
Plymouth: disable status messages
I installed Plymouth on a LUKS encrypted machine. Works fine. Theme is Spinner, in case it matters.
I'd like to modify one thing, though:
After entering the LUKS passphrase, there's a status message ...
- 1,299
0
votes
0
answers
38
views
umount or mount possibly corrupting partitions
I have installed a new system, using void linux with btrfs + LUKS, everything is working now just need to configure the whole system. I mounted my home from the other system to get some files then ...
- 1
1
vote
0
answers
36
views
How important is LUKS reserved block count for external drive?
I have LUKS FDE on my external data HDD but recently almost filled it up. When cleaning it up I noticed that the available and free counters don't match.
Read that LUKS reserves 5% of total capacity ...
- 133
3
votes
2
answers
77
views
How to refresh decoy data on a plausible deniability dm-crypt scheme?
I just read this discussion between Linus Torvalds and (among others) Milan Broz, one of dm-crypt's maintainers.
I am intrigued by the the following part of the discussion :
Linus Torvalds:
I thought ...
- 1,299
0
votes
0
answers
78
views
Fedora Live - Encrypted Persistent Overlay
I set up a live fedora on a USB stick with overlayfs. I've been prying into the files to see what goes where. I would like to have an encrypted overlay (everything's out in the open at the moment), ...
- 403
2
votes
0
answers
146
views
Network Bound Disk Encryption (tang/clevis) Setup
I am trying to have NBDE on Ubunutu LTS 22.04.1 . basically i want my compute-1 node to auto decrypt on boot when it's able to ping controller (tang server) node. the problem is i encrypted every ...
- 305
0
votes
0
answers
133
views
Restoring timeshift backup on luks encrypted file system
after crashing my luks encrypted home partition I rebooted into my manjaro live usb stick and reformatted my ssd as I did before.
300mib efi -> flag:boot
16gb swap -> flag:swap; luks
120gb root -...
1
vote
2
answers
83
views
Recover mdadm raid1 built with full disks (overwritten partition data)
While setting up my new PC I also setup a new RAID 1 with 2 drives with LUKS on top.
After copying all the data to it I made sure everything was usable and afterwards shredded the old drive.
But now I ...
0
votes
2
answers
70
views
Restore lost bootloader on a luks partition
I need an advice about a bad situation.
I was installing a new linux ditro by using my main PC. I booted with the ISO and then installed the distro on /dev/sdc, which was an external USB drive.
My bad,...
- 3
2
votes
2
answers
157
views
read encrypted LUKS hard drive from another machine
If I LUKS encrypted a hard drive using linux machine A, can I read the data on it using machine B? Of course assuming I know the passphrase of the disk. Thanks.
- 261
0
votes
1
answer
118
views
I Have LUKS Enabled And Integrated With TPM 2. How To Hide Passphrase Screen?
System: Fedora 37, Gnome 43
I enabled LUKS encryption on setup and enabled auto-decrypt via TPM 2 with following an article from Fedora Magazine. Auto-decrypt works but while it decrypts, it shows the ...
2
votes
0
answers
49
views
Kubuntu LUKS on USB boots internal disk after password prompt
I have an install of Kubuntu 22.04 on a USB connected NVMe drive. This drive has the root filesystem encrypted with LUKS. On all but one machine I have tried, this OS boots just fine and lets me use ...
- 396
0
votes
0
answers
58
views
Moving and resizing system and data partitions with LVM over LUKS
The Setup
I am running Debian 11 with LUKS inside LVM. Currently my entire system (except ESP) is located on an HDD (sda) even though I have an M.2 NVMe SSD (nvme0n1) built in.
The setup currently ...
- 1
0
votes
0
answers
37
views
Hibernate sometimes works and sometimes doesn't
My system is set up for hibernation and everything works mostly fine.
However sometimes the system won't hibernate. When I issue the hibernate command it disconnects WiFi but doesn't go to sleep. A ...
- 46
2
votes
0
answers
42
views
Can't open dmcrypt drive after integrity error
I'm using dm-integrity on this drive using cryptsetup directly I formatted it with
cryptsetup luksFormat --hash sha384 --cipher aes-xts-plain64 --integrity hmac-sha1.
After a while I thing some data ...
- 21
0
votes
1
answer
226
views
Unlock luks by other device
I know that by configuring crypttab I can automatically unlock LUKS drives by using keyfile stored on another drive in the machine which has been manually unlocked in advance. I have been wondering if ...
- 33
0
votes
1
answer
289
views
Automounting LUKS encrypted external usb when device inserted without error or hanging on boot if not present
Scenario
Have an external device, encrypted with LUKS, automatically mount when inserted and not cause any issues if not present on boot.
Most questions on this topic refer to mounting on boot - this ...
- 121
0
votes
0
answers
52
views
How can I backup and reconstruct partitioning, LUKS, and LVM scheme?
I have a server which I've already set up periodic remote rsync -aHAXS backups of the files in the /boot partition, / root logical volume, and /home logical volume. My next concern is if my physical ...
- 232
0
votes
0
answers
102
views
LUKS + TPM2 + noSD + Dracut
So I have been struggling for several days to determine what I am doing wrong and I know it is something small.
I currently have Void Linux setup on a full encrypted LUK2 volume. The system uses ...
1
vote
1
answer
354
views
LUKS partition mounting just as read-only
I have a LUKS encrypted partition on a second hard drive that I use on my computer. When I turn on my computer, it is encrypted unless I go to it and try to open it, an operation that the system then ...
- 13
1
vote
0
answers
62
views
I want to recover data from encrypted hard disk after failed ubuntu release upgrade
I had an encrypted ubuntu 18.04 and i tried a release upgrade which failed and now the system cannot boot.
I have reinstalled ubuntu on another disk and now i am trying to mount the old encrypted ...
- 11
0
votes
1
answer
34
views
Why does the swap mapper file get created even though I removed it from /etc/crypttab?
I have this line in /etc/crypttab for my swap partition:
luks-4205519b-f3fe-468f-b05e-44f25f6882a4 UUID=4205519b-f3fe-468f-b05e-44f25f6882a4 /crypto_keyfile.bin luks,keyscript=/bin/cat
I ...
- 811
2
votes
0
answers
47
views
LUKS password stopped working
I have an old Macbook pro that I installed Debian 10 on and encrypted it. Don't have the Luks Header file/backup. Suddenly, the password used to access it stopped working. I know that I am using the ...
- 21
0
votes
0
answers
36
views
Recover after Partition Deletion of Encrypted Ubuntu 18.04 Drive
So I started all this with a big mistake. While trying to format a USB drive, mistakenly deleted all partitions on my boot drive. I was running ubuntu 18.04 on an encrypted drive, no dual boot or ...
0
votes
0
answers
33
views
how to make system automatically handle partitions inside a single luks container?
I created an luks partition on a disk together with other partitions:
└─nvme0n1p6 crypto_LUKS 2 1b591ed1-8599-4fff-b404-6bb2541b72fa
└─...
- 1,152
0
votes
1
answer
398
views
How to get a dual boot (2 Linux OSs) system working when both are LUKS-encrypted
I followed my own instructions here to shrink down a LUKS-encrypted Ubuntu 20.04 partition and its inner LVM volume so I could install Ubuntu 22.04 in a new LUKS-encrypted partition next to it, but ...
- 2,100
1
vote
0
answers
354
views
Ubuntu 22.10 drop to initramfs on fresh install with full disk encryption
I have been trying to reinstall Ubuntu 22.10 with full disk encryption using the default install options, but I keep running into the same issue where after finishing the install, the splash screen on ...
- 11
2
votes
2
answers
284
views
Compression, and a disk image of a LUKS container
I have a dd image of disk, which is a LUKS container containing a filesystme, and which I can loop mount and unlock to access the files. The filesystem in the container is only about 1/4 full. What ...
- 570
0
votes
0
answers
128
views
Bootctl designates wrong root partition in loader/entries/*.conf file (debootstrap install fail)
I want to install Debian LUKS2 encrypted BTRFS filesystem with Systemd-boot via debootstrap, following this guide :
https://gist.github.com/meeas/b574e4bede396783b1898c90afa20a30
My host OS is an ...
- 11
1
vote
1
answer
66
views
Why does pumount close a luks device it did not open?
I have a luks device and it is opened on boot by /etc/crypttab. lsblk looks like this:
sdc 8:32 1 114,6G 0 disk
└─luks-672dcc74-d002-47dc-b61b-...
- 811
0
votes
1
answer
88
views
Bash file to generate luks key in Grub
I'm using Luks to encrypt my hard drive along with Grub and initramfs. I don't want to leave any doubt in that e.g. someone could take out my SSD, put it into something else or clone it and then try ...
- 45
0
votes
0
answers
30
views
"Failed to start cryptography" after resizing of root partition
I had a basic setup with a LUKS encoded small partition mounting on system boot subject to typing in password. I extended the root Ext4 partition from Windows. This didn't affect encrypted partition ...
- 1
1
vote
0
answers
62
views
Luks2 does not accept unlock password after fixing efi boot
I have 2 usb's of different brands and capacities encrypted with Luks2 using Kali's disk tool. After correcting a problem with the boot and correcting the path I was able to access the disks, but ...
1
vote
0
answers
68
views
How to mount / recover my encrypted logical volumes?
I have put some EDIT at the END of the first reply.
unfortunately I run into some problem with my old LVM installation where debian10 was running on it.
I have installed Debian 11 alongside Debian 10. ...
- 623