Last call to make your voice heard! Our 2022 Developer Survey closes in less than a week. Take survey.

Questions tagged [luks]

Questions specific to LUKS (Linux Unified Key Setup) disk-encryption specification in general, such as setup questions or questions about how LUKS works. Use this tag if your question directly involves the LUKS disk encryption; do not use it if you just happen to be using an encrypted LUKS disk and your question is about a specific Linux configuration.

Filter by
Sorted by
Tagged with
0 votes
0 answers
9 views

Calculate blocksize for encrypted (LUKS) LVM

On the Arch wiki I can this formula: To calculate the new LUKS volume size, use a simple formula: NEW_LUKS_SECTOR_COUNT = PV_EXTENT_COUNT * PV_EXTENT_SIZE / LUKS_SECTOR_SIZE # pvdisplay /dev/mapper/...
user avatar
  • 639
-1 votes
0 answers
23 views

Recover deleted, header-intact LUKS partition - loop device created w/ lomap rejected by cryptsetup "Unsupported Luks Version 83"

EDIT3- SOLVED: I eventually changed partition to gpt, having found the header start hexadec value via test disk when selecting GPT as partition table. The hexdump had been spitting out two header ...
user avatar
1 vote
1 answer
44 views

fedora 36 encrypted drive password prompt

when i open firefox I get prompted for a password. I have tried looking it up and cant find any answers or similar problems.
user avatar
  • 11
0 votes
0 answers
15 views

cryptsetup mistake and fixing a start job is running for no time limit

I was messing with cryptsetup to mount a LUKS encrypted volume automatically without prompting for a passphrase (which I was successful in doing) however I naively deleted everything in /etc/ccryptab ...
user avatar
  • 4,131
1 vote
2 answers
29 views

Automatically mounting LUKS encrypted volume during boot

Running RHEL 7.9, my root partition is LUKS encrypted so during system boot I am prompted at the console for the passphrase to continue booting; that part is fine. Once system is booted, in /etc/...
user avatar
  • 4,131
0 votes
0 answers
13 views

Stop Dracut from asking for a password

I have a device I've encrypted with luks1 and I decrypt it with a script in init.d. (Centos 6, no keyscript in crypttab). Its a raid disk, with the encryption under the raid, but I don't think that ...
user avatar
  • 151
5 votes
1 answer
153 views

Is swapped memory encrypted on encrypted partitions?

If I installed Ubuntu on an encrypted ext4 partition, I normally have a /swapfile. Now I would expect that the swapped memory is also encrypted by default. However, the man-page of swapon says: The ...
user avatar
  • 181
0 votes
0 answers
31 views

Encrypted rootfs wont boot

I've encrypted my rootfs with LUKS+lvm (sda5). sda1 is my boot partition where grub.cfg stored (not encrypted) sda2 and sda3 not encrypted rootfs sda4 - swap (not encrypted) I want to boot sda5 ...
user avatar
0 votes
1 answer
18 views

Boot partition full: Move to encrypted partition

Once the /boot partition is half-full with a single kernel you can't upgrade, Resizing is painful when the other partition is encrypted, Solution: Move /boot to the encrypted partition. Backstory: ...
user avatar
  • 1
1 vote
2 answers
50 views

Can I backup LUKS encrypted partition with fsarchiver?

When installing Elementary OS, I've chosen too small a size for /boot and it constantly bites me when doing updates. The rest of the drive is a single LUKS encrypted root partition: lsblk --fs NAME ...
user avatar
  • 113
0 votes
1 answer
61 views

Luks encrypted Manjaro with Bitlocker encrypted Win11 dualboot

As I'm new to UNIX this might be a stupid question but here we go. I want to install manjaro next to my win11 which I have bitlocker encrypted. I need to keep the Win11 installation as is. I reduced ...
user avatar
0 votes
1 answer
29 views

Systemd to ExecStart always executing?

Working on creating a systemD service to retrieve a key file from a remote SSH server and then use it to auto mount an encrypted Luks disk on a server(not the root drive). [Unit] Description=Open ...
user avatar
0 votes
0 answers
25 views

Error "File System Loop Detected" Permission Denied to Decrypt folder with ecryptfs-recover-private

I'm trying to open encrypted files from a full encrypted drive that is unlocked and mounted. I have tried various commands and have been unsuccessful. How can we fix the find "file system loop ...
user avatar
  • 13
1 vote
0 answers
35 views

Adding a working boot option to get to my pacstrap/chroot install on a luks partition

I know there are are a lot of questions like this but the examples I have found differ enough to confuse me, I'm hoping someone can help clarify this for me. To briefly explain my setup. I have a ...
user avatar
  • 121
0 votes
1 answer
74 views

How To MOUNT A LUKS Encrypted Linux Filesystem Unlocked Partition VIA USB on another LINUX OS to retrieve files

Ive been at this all day. I've scoured the web and this board and have tried many solutions to this issue but nothing has seemed to work. Someone on here asked a similar question and the solution did ...
user avatar
  • 13
0 votes
0 answers
63 views

How to make boot drive encryption work with PKCS#11 Smart card in Fedora (35)

On Fedora Workstation 35 here. systemd v249 I am trying to unlock root LUKS volume with smart card on BOOT, but it does not work. I added to /etc/crypttab mydisk UUID=496e1cd5-712f-44ab-ad02-...
user avatar
0 votes
0 answers
90 views

LUKS add new password or key when only TPM unlock is available

It seems like having no password is a big pain when working with any of the crypt tools like systemd-cryptenroll and cryptsetup! I got a volume that is protected by pkcs11-uri=auto (Smart Card) and ...
user avatar
0 votes
0 answers
21 views

How to dual boot macOS and encrypted Debian with rEFInd?

I am trying to run Debian on a MacBook Pro which runs macOS Catalina. Here is what I have done so far: Install rEFInd on macOS. Install Debian from a bootable flash drive. The Debian is fully ...
user avatar
  • 101
0 votes
0 answers
23 views

How to access xfs partition encrypted with LUKS backed up with dd

How to access xfs partition encrypted with LUKS backed up with dd? Some time ago I've backup up two disks from old laptop. One of them was encrypted with LUKS and inside it there was xfs partition. ...
user avatar
  • 1
1 vote
2 answers
53 views

How to check if a LUKS device is unlocked, without sudo permissions?

Is there any way to check if a LUKS device is unlocked, without having sudo permissions? I'm aware of two questions, but all the answers require sudo. It seems that I've found an indirect way (...
user avatar
  • 778
1 vote
1 answer
67 views

Did Windows break my LUKS encrypted disk?

Primary OS is Qubes, secondary OS is Windows 10. I have a disk sda with full disk encryption (LUKS). But now I don't see my ext4 partitions on that disk and there only is one NTFS partition with a ...
user avatar
  • 11
1 vote
2 answers
36 views

Luks volume in new PC destroyed header?

I had my data backed up on a Luks Volume in a raid1 (2 discs in raid 1 first, Luks second) I moved the 2 drives into a new server and they quit working. After a mild panic attack I searched for more ...
user avatar
3 votes
1 answer
167 views

How to modify -iter-time on a existing luks partition

first of all I already read this topic : How to change the hash-spec and iter-time of an existing dm-crypt LUKS device? where the proposal is the following command : cryptsetup-reencrypt --keep-key ...
user avatar
0 votes
1 answer
38 views

Add back a luks passphrase to clevis setup

I have a laptop here that has LUKS setup with clevis to automatically unlock. There previously was a passphrase to unlock it as well, but either I have forgotten it or it was removed. I'd like to add ...
user avatar
  • 905
0 votes
1 answer
398 views

Decrypting a full disk LUKS encryption manually from initramfs

I recently installed a fresh Ubuntu 20.04 image on my laptop while doing so i chose a full disk encrpytion using a password. (I think it is LUKS but I do not know how to verify this). For some reason ...
user avatar
0 votes
2 answers
101 views

LUKS instruction set when booting GRUB in EFI mixed mode

There are some amd64 computers that only support to boot from UEFI in x86 (32-bit) mode but allow to load an amd64 operating system. On GNU/Linux that is usually achieved by issuing --target=i386-efi ...
user avatar
0 votes
0 answers
34 views

Please help me change my LUKS password

I have a terrible LUKS password and if that wasn't enough I also have to type it blindly with the wrong locale keyboard in a headless server. I want to change it to something else but I have a very ...
user avatar
0 votes
1 answer
292 views

How do I get Linux to find the root filesystem on an encrypted partition?

I have an Ubuntu machine that has been through several kernel upgrades. At the start of the day, I had 3 kernels installed: 5.11.0-34, 5.11.0-46, and 5.11.0-49. I had to upgrade a bunch of packages, ...
user avatar
0 votes
1 answer
176 views

Why can mkfs.ext4 not create a 2048 block size file system on 650 MB image file?

The commands I invoke are the following Create image file dd if=/dev/zero of=benj.luks bs=1k count=666000 Set up LUKS container cryptsetup luksFormat benj.luks Set up loop device and open the ...
user avatar
  • 123
0 votes
1 answer
25 views

Shrink partitionless filesystem

I have data on a disk that I want to encrypt by cloning the full filesystem of that disk (source) to a virtual block device (devicemapper/cryptsetup) based on an additional disk (target) of identical ...
user avatar
  • 1,895
0 votes
0 answers
253 views

cryptsetup uuid problem in initramfs while mounting btrfs

I have a BTRFS disk array, where all disks are LUKS2 encrypted. During the bootup, I unlock disks 1 by 1 using cryptsetup open. After that, I want to mount the BTRFS array using mount /dev/mapper/one-...
user avatar
0 votes
1 answer
112 views

Can't boot into my LUKS-encrypted Drive after deleting swapfile

My drive uses LVM and is LUKS encrypted (EFI). I am trying to get into my drive, but after I put in my password for the LUKS encryption, it hangs. I recently needed to add more memory to my root ...
user avatar
0 votes
1 answer
68 views

arch - /run/cryptsetup missing while formatting luks partition

I'm relatively new to linux and I have just wiped my drive and I am installing arch linux from the start. When I run: cryptsetup luksFormat /dev/sda3 I get the following warning: WARNING: Locking ...
user avatar
  • 3
0 votes
0 answers
175 views

FIDO2 not supported when setting up 2FA for LUKS encryption with FIDO2 and systemd-cryptenroll

I'm trying to set up my LUKS encryption to use 2FA with a password and a FIDO2 key with the following command: systemd-cryptenroll --fido2-device=auto --fido2-with-user-verification=true /dev/...
user avatar
3 votes
1 answer
378 views

Storage encryption on Linux desktop: LVM on LUKS or ZFS

I choose solution for storage encryption on Linux desktop. For years LVM on LUKS was a best option with superior performance and reliability. But ZFS on Linux actively develops new functions and now ...
user avatar
  • 141
0 votes
0 answers
20 views

Tool to manage multiple LUKS devices as a group

I'm looking for a program which can manage a whole "group" of drives that have LUKS containers with the same passphrase; unlocking and locking them (ideally also formatting and/or passphrase ...
user avatar
  • 333
1 vote
1 answer
160 views

How to mount on Linux a QNAP external drive with LUKS partition

I need help to mount an external drive used on my QNAP TS-230 (latest firmware) to backup data. I set encrypted partition (LUKS) on this drive with a passphrase. I tried to mount that partition on a ...
user avatar
2 votes
2 answers
153 views

Extend LUKS partition

I have built a kali live usb 32GB with encrypted persistence. Now I have copied the 32GB content to a 64GB usb device using the dd command, and everything is working fine on the new 64 GB device. ...
user avatar
  • 21
0 votes
0 answers
162 views

Encrypting RHEL8's /boot & /boot/efi on a UEFI machine

My objective is to encrypt my /boot and /boot/efi partitions with luks1 on a RHEL8 UEFI secure boot system for full system encryption. I am able to encrypt (LUKS1) my /boot partition in a BIOS mode ...
user avatar
0 votes
0 answers
154 views

dracut warning: /dev/mapper/foobar does not exists

I'm trying to install Void Linux with LUKS encryption on the root partition, currently, my /etc/fstab file looks like this: /dev/sda1 /boot/efi vfat rw,relatime 0 2 /dev/sda2 swap swap rw,noatime,...
user avatar
1 vote
1 answer
127 views

LVM, LUKS2 & BTRFS Problem

I had the following setup: 3 HDDs 10Tb of size, in LVM Raid5 configuration On top a LUKS2 encryption and inside a BTRFS filesystem. Since my storage got low i added another 16TB HDD (was cheaper than ...
user avatar
0 votes
1 answer
39 views

Is possible to rename a luks slot?

I have successfully removed the second slot(is 1, because luks slots start from 0) from an encrypted device. $> echo mypass | cryptsetup luksKillSlot /dev/loop0 1 Now I have this situation $> ...
user avatar
  • 11k
0 votes
0 answers
86 views

Why are LUKS partitions so slow?

I created a LUKS partition using cryptsetup's default values (cryptsetup 2.3.6). Read speed on the device: # cat /dev/md/thedev | pv > /dev/null yields ~1GiB/s. Reading from the encrypted ...
user avatar
-1 votes
1 answer
255 views

Why XFS under LUKS encryption is so slow (Samsung 980 PRO SSD)

I tried to measure the overhead of LUKS/dm-crypt encryption on a XFS filesystem with default settings. It turned out that on a laptop with Samsung 980 PRO SSD (NVME variety) the overhead of git status ...
user avatar
0 votes
1 answer
52 views

Change mount location of an encrypted volume?

I've followed this page to make a partition encrypted. When I format the created luks volume I do this: root@M17A:/home/mike# sudo mkfs.ext4 /dev/mapper/cryptpart mke2fs 1.45.5 (07-Jan-2020) Creating ...
user avatar
  • 1,042
4 votes
3 answers
1k views

LUKS password is wrong after system power off

I'm trying to find out what happened to my laptop LUKS drive. I'm sure it ran out of battery since I forgot to plug it in. This morning I booted the system and the LUKS password does not work. I tried ...
user avatar
  • 163
13 votes
2 answers
1k views

Bit Rot within LUKS Encryption

How does bit rot affect a LUKS container and the filesystem inside? Suppose you have a filesystem that is well suited to deal with bit rot. Now put it inside a LUKS container. In case bit rot ...
user avatar
  • 247
1 vote
2 answers
105 views

Does LUKS take space?

I have just encrypted an empty partition using LUKS. The partition size is 875 GiB. Before encryption 28 KiB were in use. After encryption, 14.81 GiB are in use (1.7% of the total). Why is that so? ...
user avatar
  • 315
1 vote
1 answer
76 views

cant create encrypted usb drive on raspberry pi 4

I have a raspberry pi 4. I have followed the instructions at https://linuxconfig.org/usb-stick-encryption-using-linux I have created and recreated the partitions, tried fat32, apt, and gpt. I started ...
user avatar
1 vote
1 answer
258 views

LUKS with FIDO2 *and* password

I just finished setting up a LUKS encrypted system that is unlocked using a FIDO2 hardware token following this blog post. However, at home I usually leave the hardware token plugged in and I only ...
user avatar
  • 111

1
2 3 4 5
14