Questions tagged [luks]

Questions specific to LUKS (Linux Unified Key Setup) disk-encryption specification in general, such as setup questions or questions about how LUKS works. Use this tag if your question directly involves the LUKS disk encryption; do not use it if you just happen to be using an encrypted LUKS disk and your question is about a specific Linux configuration.

Filter by
Sorted by
Tagged with
1
vote
1answer
27 views

How much do 4K sectors improve LUKS2 performance on SSD storage?

According to the cryptsetup(8) man page, the sector size of a LUKS2 volume may be configured with --sector-size: Set sector size for use with disk encryption. It must be power of two and in range 512 ...
1
vote
1answer
19 views

Decrypt LUKS partition by a script in udev rules

I am trying to decrypt a LUKS partition when I plug in an external HDD. Thus, I have configured the udev rules with the following: ACTION=="add", KERNEL=="sdb1", SUBSYSTEM=="...
0
votes
0answers
8 views

Can't place luks password on boot time

A weird situation is going on while booting. I recently upgraded my Linux Mint 20 distro. After the reboot the shift and the caps lock keystrokes aren't behaving as it should. Instead of a upper case ...
1
vote
1answer
17 views

`cryptsetup reencrypt` seems to cripple digest iteration count

I had a LUKS partition for which cryptsetup luksDump /dev/mydisk gave (excerpt) Digests: 0: pbkdf2 Hash: sha256 Iterations: 176646 Salt: xx xx ... ... Running cryptsetup ...
3
votes
1answer
183 views

How can I add a new physical volume to extend an existing LUKS-encrypted lvm (volume group) and maintain encryption?

I want to extend my LUKS-encrypted lvm (volume group) with a new physical volume. In my previous question I was told - in respect to my actual setup - that I need to encrypt the new physical volume ...
1
vote
1answer
37 views

Do I maintain encryption when extending a luks encrypted lvm with a physical volume?

My luks encrypted lvm is running out of space. I want to extend the volume group with a new physical volume. Will the data on that physical volume be encrypted automatically when added to the volume ...
0
votes
0answers
28 views

Transfering LUKS encrypted drive

I have a standard Fedora installed on my laptop, with the standard LUKS encryption enabled. My current laptop is falling apart and due for a replacement. Is there any way to transfer a LUKS-encrypted ...
0
votes
2answers
135 views

Ubuntu will no longer boot after upgrade from 20.04 to 20.10

Thanks in advance for the help. I have a Dell Precision 7540 that has Ubuntu 20.10 installed (previously 20.04). It is a pretty normal installation with a single physical nvme disk, with separate ...
0
votes
0answers
40 views

Virtual Keyboard for Linux LUKS Encryption for Tablet/Laptop Hybrids

I am thinking about installing a Linux based distro in my Surface Pro tablet/laptop hybrid. I would like to know if it is possible to have a GUI keyboard, much similar to onboard on Ubuntu, to be used ...
0
votes
0answers
32 views

gparted/ext4 - Shrink partition to encrypted filesystem previous size after failed “move right” operation

After unsuccessfully try to "move right" large encrypted partition on my HDD, GParted show me this: If I click on Partition > Information I have this message : 176.57 GiB of unallocated ...
0
votes
1answer
18 views

ext4 in luks: how to calculate the minimum 'outer partition's size

loop0p2 contains a luks2 that contains an ext4. The question is: how to calculate the minimum size the outer partition needs in order to hold the inner. Given is the size of the inner partition (in ...
0
votes
1answer
28 views

Resizing LUKS encrypted partition - had success but can't use the unallocated space now?

Following various guides online, I've attempted to reduce my LUKS-encrypted hard-drive partition (specifically, root / data). I've gotten to the point where GParted recognizes the new unallocated ...
4
votes
2answers
114 views

Is an LVM cache a security leak when using LUKS on LVM?

I have two hard drives in a volume group with LVM. All volumes in that volume group hold LUKS containers. If I add an SSD as an LVM cache to that volume group, is all data on the cache device ...
1
vote
1answer
47 views

Locked out: overwrote /etc/shadow and /etc/grub.d with pacnew

After all these years of using Linux, I have never goofed up this badly. I should have known better, I honestly don't know what I was thinking. While trying to fix a small error message I was getting (...
0
votes
1answer
37 views

I corrupted a linux luks partition and get initramfs at startup with no error msg

I have searched for like 10+ hours for this issue and have not found a fix so here I am :/ Long story short I corrupted my main linux boot drive (which has luks encryption) by downsizing it on a live ...
0
votes
1answer
50 views

Grub is not booting Ubuntu with LUKS/LVM

I have installed Ubuntu 20.04 on LUKS/LVM but unfortunately on booting I am only getting a grub> prompt. # lsblk NAME MAJ:MIN RM SIZE RO TYPE MOUNTPOINT sda ...
0
votes
1answer
102 views

NVMe performance hit when using LUKS encryption

I'm running all the commands on the Proxmox host, when I LUKS encrypt a disk I get about a 28% hit in read speeds and 66% hit in write speeds. I have aes-ni enabled and I should be getting good enough ...
0
votes
0answers
101 views

How to encrypt disk with LUKS without losing data?

I want to encrypt my entire disk, I use Kali Linux. LUKS was recommended to me. What is not clear to me is that all the information on the disk is lost, right? There is no way to LUKS encrypt the disk ...
1
vote
0answers
57 views

Error installing Arch on LUKS-encrypted ZFS root: `/sbin/init does not exist`

I have almost successfully installed Arch Linux on a LUKS-encrypted disk with a ZFS root. I can get the password prompt to decrypt the LUKS volume, but the next step with loading the installed system ...
4
votes
1answer
168 views

Arch Linux Setup with Encryption (LVM on LUKS)

I'd like to setup Arch Linux with encryption. I found the tutorial on the Arch wiki, and think that the second option (LVM on LUKS) is the best option for me. Here's the partitioning I'd like to use (...
1
vote
0answers
20 views

Boot sequence is paused to type password for external drive (LUKS) - how to revert or skip this?

I followed a tutorial to encrypt my external HDD but I was too silly to read the whole tutorial until the end. My problem is now that my Raspberry Pi 4 doesn't boot so far that SSH service is loaded. ...
5
votes
1answer
361 views

How to resize a LUKS device, revisited

I have read: Resize LUKS Volume(s) Increase the size of a LUKS encrypted partition Resizing LVM-on-LUKS And others. I'm trying to resize from 250 GB to 500 GB. Previously, the partition /dev/sda2, ...
0
votes
1answer
81 views

`cryptsetup luksDump` or `cryptsetup luksHeaderBackup` generate no output

The Luks volume works fine regarding mounting it, reading from and writing to it. But when It try to create a backup for its header, with cryptsetup luksDump or cryptsetup luksHeaderBackup I get ...
0
votes
0answers
59 views

Ubuntu 20.04.01, full disk encryption, btrfs, & hibernation?

I am trying to install *20.04.01 on my desktop with full (or almost full as Tj puts it) disk encryption including encrypted swap partition that allows hibernation, and btrfs. The last few years I am ...
0
votes
1answer
46 views

Encrypted partition reports wrong size

I have partitioned my 1TB drive with a luks encrypted partition. The fdisk -l output is Disk /dev/nvme0n1: 953,89 GiB, 1024209543168 bytes, 2000409264 sectors Disk model: INTEL SSDPEKNW010T8 Units: ...
1
vote
1answer
83 views

Cryptsetup/LUKS destroyed my data when I tried to remove encryption. Why?

Cryptsetup/LUKS2 destroyed my data when I tried to remove encryption, Why? I'm Using Cryptsetup 2.3.3. I was experimenting with LUKS (in a VM, thankfully) and had an ext4 filesystem on a LUKS2 ...
0
votes
2answers
58 views

How can I increase the size of an encrypted swap partition when the root partition already takes up all free space?

My laptop is getting kinda slow, especially when having Firefox opened with multiple tabs, which is why I'm trying different ways to make it a little snappier. It has an Intel Core 2 Duo T5600, 2 GB ...
2
votes
1answer
56 views

Backup a LUKS encrypted device on the cloud

I am going to use LUKS for encryption, however I cannot find a thoughtful manual and best practices how to do so. Here I will list my questions, sorry for naivety. Apparently I don't need to encrypt ...
0
votes
0answers
60 views

Incorrect mount order with ZFS, encrypted filesystems, and Systemd

I have a 'bulletproof' install of Arch Linux that is structured like so: /dev/sda1: FAT32 EFI partition: mounted as /boot/efi /dev/sda2: LUKS encrypted ext4 partition: mounted as /boot (prompt ...
2
votes
1answer
98 views

Restored encrypted LUKS drive with CloneZilla makes system non-bootable

As the title says, I've made a backup of my system before sending my laptop for tech repairs, my system was encrypted and I used CloneZilla's beginner mode so as to not mess anything up. I received my ...
1
vote
0answers
111 views

Enable Belgian keyboard for LUKS-LVM passphrase in OpenSUSE Leap 15.1

I have a new notebook from a German manufacturer with a Belgian keyboard and OpenSUSE Leap 15.1. The notebook was delivered with a temporary passphrase that you can change after completing the OS ...
2
votes
0answers
40 views

Elementary OS Luks passphrase not working

the past days I installed a lot of software, some of them from KXStudio Repositories, after that a reboot was required, now as the computer boots up and cryptsetup appears, my passphrase is not ...
1
vote
1answer
69 views

LUKS encrypted drive is missing. “cryptsetup: lvm is not available”

I have an internal SSD (NVMe) on which I've installed Ubuntu 18.04 with Full Encryption using LUKS. Recently, I replaced the motherboard of my laptop which caused the signature verification of the ...
0
votes
0answers
19 views

Centos 8 armhfp(rpi3) switched rootfs to luks->lvm->ext4 does not boot, device-mapper: table: 253:0: crypt: unknown target type

need your commbined knowledge to tackle a issue i have with moving the rootfs of Centos 8 to lvm on luks So when flashing the centos8 image (http://isoredirect.centos.org/altarch/8/isos/armhfp/) the ...
0
votes
0answers
59 views

Remove luks encryption from single partition of disk

I've been trying to figure out dualbooting windows 10 on my ubuntu laptop for a few says now - my 1tb hdd is encrypted with LUKS and after battling finding a way to partition it, I was finally able to ...
0
votes
1answer
42 views

ConditionPathIsEncrypted not supported?

I've created a unit file to mount the /srv partition automatically. It will check first if /dev/mapper/srv exists and then start it. I'd like to take it one step further and only let it be able to ...
0
votes
1answer
271 views

cryptsetup “command not found”

Hey guys i am on a Debian following this guide https://www.youtube.com/watch?v=upOqR4HPi60 and when i type in this command cryptsetup luksAddKey /dev/YourDeviceName /keyfile i get cryptsetup: command ...
1
vote
0answers
63 views

What is the easiest way to setup LUKS on a new image?

I am maintaining an RHEL7 image in a VM. When I deploy it to a new machine, I will convert the VDI to a raw image, then DD it or I will use clonezilla. I have a new requirement were some new machines ...
0
votes
2answers
459 views

Using rsync to create a complete OS backup/clone sufficient?

Will using rsync to duplicate an entire file system, e.g. doing rsync -avxHAX --progress / /dev/[backup disk] as suggested here, result in a complete duplicate Linux system? I.e. will all system and ...
0
votes
1answer
29 views

Does rsync support hot transfer while the system is running?

I want to use rsync for creating complete, bootable backups of a LUKS-encrypted Linux disk. Does it support hot-transferring of files, i.e. can I use rsync from a running (idling) system with opened ...
2
votes
1answer
29 views

Backup tool for pulling files out of encrypted disks?

Are there any backup/cloning/recovery tools that can pull files from LUKS-encrypted disks while dropping free blocks? Something that runs from within the unlocked system and hot-transfers the files, ...
1
vote
0answers
42 views

Corrupted LUKS2 /home partition

My /dev/sdc drive got corrupted by a dual boot windows missclick. I must have corrupted the partition table as far as I know. As most fora suggest I used testdisk to analyse and rewrite the GPT and It ...
0
votes
1answer
33 views

How can I achieve being able to run cryptdisks_start as normal user?

I have looked at how to be able to imbue in a crypttab stanza (referring to a LUKS device) to allow a specific user or any unprivileged user to map it. Roughly, I am looking for the equivalent of user ...
1
vote
1answer
144 views

Unlock LUKS device remotely - ipconfig: no devices to configure

I am trying to unlock my root encrypted Debian Buster on an acepc T11. I installed dropbear, added DEVICE=enp1s0 IP=:::::enp1s0:dhcp to /etc/initramfs-tools/initramfs.conf and executed update-...
0
votes
1answer
111 views

cryptsetup failed with code 22 invalid argument

I have read `cryptsetup luksOpen <device> <name>` fails to set up the specified name mapping https://www.saout.de/pipermail/dm-crypt/2014-August/004272.html And tried cryptsetup open --...
1
vote
1answer
78 views

Add OS/partition to encrypted disk using Logical Volume Manager, Debian 10 (Buster)

I installed Debian 10, using the boot disk to encrypt the entire disk, and create a logical volume manager. Now I would like to install a completely separate instance of Debian. However, when I ...
0
votes
1answer
38 views

In regards to dm-crypt with LUKS, what is meant by “passphrase strengthening”?

On the Fedora wiki it is mentioned that LUKS offers this protection. LUKS does provide passphrase strengthening but it is still a good idea to choose a good (meaning "difficult to guess") ...
1
vote
1answer
57 views

LUKS not prompting for password after kernel update

I have an unencrypted /boot partition and an encrypted root under lvm, created during kubuntu installation: root# cat /etc/crypttab nvme0n1p5_crypt UUID=562c3c2c-9ef4-4417-aff8-1912e3828175 none luks,...
0
votes
1answer
34 views

PV on LVM Partition inside a dm-crypt container

I am trying to set up LVM on LUKS. Here is what I did: head -c 100M /dev/zero > test-file losetup /dev/loop0 test-file cryptsetup luksFormat /dev/loop0 cryptsetup open /dev/loop0 cryptlvm gdisk /...
1
vote
2answers
44 views

Protecting (encrypting) system from even root access

I plan to provide a Linux appliance to several users. These users are tech savvy and can easily reset the root password on a standard linux system. How can I create a running Linux system that keeps ...

1
2 3 4 5
11