Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [luks]

LUKS (Linux Unified Key Setup) is a disk-encryption specification.

0
votes
0answers
43 views
+50

Migrate Arch from encrypt to sd-encrypt

I recently installed Antergos (which is basically Arch) and set it to use full disk encryption. Now, I want to migrate from encrypt to sd-encrypt because I want to be able to hibernate and I couldn't ...
0
votes
1answer
16 views

invalid line /etc/crypttab

I am troubleshooting a debian system that will not boot; the system booted fine, and one day ceased to do so (possibly but not definitely related to an apt upgrade). It has a small boot partition (...
3
votes
1answer
73 views

How to configure a shutdown at the xth wrong entered password?

Having an encrypted hard drive is all well and good, but chances are that if someone is gonna steal your laptop, it’s probably not going to be turned off. Most likely, it will be stolen in a powered-...
1
vote
1answer
19 views

Rebuild LUKS as extended container

I deleted a LUKS partition by fdisk for some reason; I rebuilt it, but mistakenly did so as an extended container, then hit w. Although I deleted the extended container later, and rebuilt the LUKS ...
3
votes
1answer
67 views

How to merge and expand filesystem LVM encrypted LUKS

My filesystem: $ df -h Filesystem Size Used Avail Use% Mounted on devtmpfs 9.8G 0 9.8G 0% /dev tmpfs 9.8G 18M 9.8G 1% /dev/shm tmpfs ...
0
votes
0answers
38 views

Luks UEFI Boot not asking for password?

I've setup an encrypted UEFI-Booting Arch installation1. Why am I not asked for the phrase on booting? Remark: If I change the name crypto in `/etc/crypttab` to e.g. encryptedBOOT I am required to ...
0
votes
0answers
34 views

Do my LUKS partition damaged?

Some say that my LUKS parition may have been damaged due to some mistakes, but I'm not very sure. hexdump -C /dev/sda7 | grep LUKS 1cca2cc80 7f 66 4c 55 4b 53 bd 14 ff c3 3e 2c 52 f0 7c 3a |....
1
vote
0answers
23 views

Dual boot setup with LUKS and rEFInd: Can't Restore Backup to Second Partition

I have a dual boot setup on a Windows machine with multiple partitions, the two Linux ones being encrypted using LUKS. For some reason, I can no longer restore a backup to my second Linux LUKS ...
0
votes
1answer
48 views

GRUB doesn't boot copied Linux install

I copied a Linux installation from one partition to another partition on a different drive. I did this from a live usb and omitted dev, /proc and /sys. I ran update-grub from the original install, it ...
0
votes
0answers
18 views

How come my encrypted drives/partitions randomly do not decrypt upon booting?

I have the following encrypted. - HOME drive - SWAP partition - BACKUP drive I use a keyfile on a USB stick to decrypt my drives upon booting. Sometimes, and I mean RANDOMLY, upon booting up my ...
1
vote
1answer
22 views

Is it possible to determine which luks slot has been used to unlock an encrypted partition?

I'm in a (bad) situation where I have multiple correct passwords and used luks slots, but I can't tell which password belongs to which slot Decryption (during startup thanks to crypttab) works well, ...
1
vote
0answers
19 views

Hibernation with encrypted home and swap without initramfs

I have a Linux setup with an encrypted /home/<username> (LUKS) and without an initramfs. I currently have an unencrypted swap partition, intended for hibernation. For security reasons, I would ...
0
votes
0answers
28 views

Automounting LUKS encrypted volume at boot time using USB memory as key

I'm setting up a new Debian Stretch installation, and it's all a bit new to me. I've used linux a lot, but I've never really been an administrator of a server before. Because this system, or some ...
1
vote
1answer
45 views

How to get the position of LUKS header by `bgrep`

I tried to get the position of LUKS header: grep -a -b -P --only-matching 'LUKS\xba\xbe' /dev/sdb It is out of memory. Some sugest me use 'bgrep' instead, but I don't how to make it work. bgrep -A ...
0
votes
1answer
69 views

Resize LUKS Volume(s)

I have a laptop with Arch on it, and I sized the root partition too small. Now I want to expand the partition by taking some from the home partition. I will put the details of the specifics below. My ...
0
votes
2answers
51 views

Can't add LUKS key to encrypted swap

For some reason, I can't add a key to my encrypted swap. My /etc/crypttab: swap_crypt /dev/disk/by-partuuid/c4f049d5-ae21-44d6-b753-6e72b7e21770 none luks,swap,discard,keyscript=decrypt_keyctl ...
-1
votes
1answer
191 views

Mount encrypted partition of an image file

I've an image backup file of my harddisk, which consists of three partitions (sudo fdisk -l /mnt/hdd/19_02.img): Device Start End Sectors Size Type /mnt/hdd/19_02.img1 ...
1
vote
0answers
48 views

Unable to enable discard/fstrim on a luks encrypted lvm-volume with Siduction (Debian Unstable)

i'm to get discard/fstrim enabled on my Siduction-System on a thinkpad x250. I use Siduction (Debian Unstable) with LVM 2.03.02(2). I have a big partition /dev/sda2 which is LUKS-Encrypted and in it ...
1
vote
1answer
112 views

Stuck starting /dev/mapper/luks

A recent upgrade rendered my computer unbootable. The boot never completes. It is stuck at: Start job is running for /dev/mapper/luks-4956cb53-c8e8-4525-b3e0-2f54bad2a801 Additionally, I am now ...
0
votes
0answers
10 views

Why does not Anaconda's question box appear during system startup?

Process: Regular start of the system: press the power button, select the element corresponding to the encrypted partition LUKS, in the boot menu Grub2. Components: * Operating system Fedora 28. * /...
0
votes
1answer
57 views

How to decrypt LUKS encrypted drive

I have a LUKS encrypted SSD and I would like to clear it and install a different Linux distro (Debian -> Ubuntu). I want to decrypt my drive and I tried to use: cryptsetup luksRemoveKey /dev/DRIVE ...
2
votes
1answer
272 views

How to change luks encryption difficulty on manjaro full disk encrypt

I am using manjaro with full disk encrypt, however, the wait time at boot for decrypt is very long ( i assume because of a high difficulty setting) . How can I change encryption difficulty/ wait time ...
0
votes
1answer
29 views

Using cores on multiple servers for bruteforce-luks [closed]

BACKGROUND: I have already created a passphrase list to use with bruteforce-luks. Unfortunately, that list was not enough to find the correct passphrase. I am assuming I missed out a word or 2. I ...
0
votes
4answers
82 views

Automate multiple password enties to decrypted LUKS + Ext4 USB stick

I have a USB stick encrypted with LUKS + Ext4. I have forgotten the password... However, I know which words will be included in the password and have a list of all permutations of those words. ...
-1
votes
1answer
47 views

crypttab: location of luks header file

Hi my crypttab looks as follows: crypt_device /dev/sda luks,header=/boot/header.img update-initramfs -u -k all works with success, but for some reason cryptsetup will not find the header.img which ...
0
votes
0answers
32 views

RBP 3+ Stuck at rainbow screen after LUKS encryption

I'm trying to create a raspberry pi with kali linux that is encrypted with a key that is located on a USB device, so it doesn't boot without the USB device plugged in. I followed this guide: https://...
0
votes
0answers
144 views

Can't mount second hdd due to error /dev/mapper/backup--mint--vg-root: can't read superblock

I'm trying to mount a second hdd. I don't know where I'm going wrong. First, I set up a partition with cryptsetup: sudo cryptsetup open /dev/sdb5 backup sudo vgdisplay I got two identical vg names, ...
1
vote
0answers
53 views

Encrypting hard drive containing the MBR with Veracrypt

I have three hard drives in my laptop: /dev/sdc (an mSATA drive) is where the system is installed and is completely encrypted with LUKS. /dev/sdb (for media/text files - the majority of /home) was ...
0
votes
1answer
66 views

Encrypting data written to an LVM snapshot with a different key

I have the following requirements: I have an LVM volume A, encrypted with key K1 using LUKS. I need to make a copy-on-write snapshot of A such that Writes to A will continue to be encrypted under K1 ...
1
vote
0answers
26 views

Live resize of root partition in case of “LUKS on LVM” [duplicate]

Having read about the pros and cons of "LUKS on LVM" vs "LVM on LUKS" I came to the conclusion that "LUKS on LVM" does not provide live resize. But why? And is this even true as of todays ...
1
vote
1answer
112 views

Device name to use in luks commands for LVM LUKS

Can somebody with more LUKS LVM experience than me tell me what the correct device name is to use in this context. I'm trying to follow some instructions about using clevis and tang in CentOS. The ...
1
vote
1answer
350 views

additional LUKS partition does not mount on boot

I am attempting to add a new LUKS encrypted hard drive to my 18.04 setup. I already have 3 drives (2 of which are RAID) that have LUKS and they work fine - when my computer boots, I get prompted to ...
1
vote
0answers
164 views

How to allow removal of USB-drive with LUKS key while keeping device decrypted untill reboot or logout?

I'm running DietPi (Debian) on a raspberry pi where I've mounted an external drive encrypted with LUKS. I use a USB drive to decrypt the LUKS device at boot/login using: a /etc/crypttab as such: <...
0
votes
1answer
231 views

How can I create multiple partitions in a LUKS container using a gpt/mbr partition table in the container?

Is it possible to have multiple partitions in a single LUKS or cryptsetup container? If so, how?
0
votes
1answer
42 views

Missing HDD space

I have a 4 TB drive and I am missing some space. It has one partition of 7814035086 sectors: $ sudo gdisk -l /dev/sdc GPT fdisk (gdisk) version 1.0.1 Partition table scan: MBR: protective BSD: ...
0
votes
1answer
43 views

Lost Physical and logical Volumes

I can still decrypt my drive and see the files but the physical and volume information is coming up blank. See below is there any way to recreate the physical and logical volumes? root@dad-PC:/home/...
1
vote
1answer
18 views

Can one combine logical volumes from different groups without copying the contents over?

I use Arch Linux kernel 4.18.12-arch1-1-ARCH (november 2018). I use a SATA caddy (for a Thinkpad T400) which holds a hard drive from an old laptop. I'd like to decide on combining the contents and ...
0
votes
0answers
75 views

debian and grub with raid10+lvm+luks

I set for testing a virtual machine with debian machine is so configured 4 disk in raid10 software the md0(raid10) in encrypted with luks on the luks(luksmd0) I have create the vg (debian2-vg) wich ...
1
vote
2answers
794 views

How to encrypt LVM partition with LUKS after installation?

Is it possible to encrypt a LMV partition after having installed an OS? I just finally managed to get LVM but I couldn't figure out how to get it encrypted. The installer didn't seem to provide for ...
1
vote
1answer
89 views

by mistake removed the very last key (LUKS)

So I wanted to change LUKS key but by mistake I removed the very last key before adding the new one, and left the system with no enabled slot and is still on. any suggestions to solve such a problem?
0
votes
0answers
30 views

How to delete LUKS header from a GRUB2 menu entry?

To allow quick deletion of LUKS header, it would be useful to be able to overwrite LUKS header from GRUB2 without requiring to start a complete system. Is it possible ? How ?
0
votes
2answers
42 views

Is Encrypting/Decrypting an external USB Drive with minimal priviledge possible?

The following situation is the case: I want to provide my students with an easy way to protect their data securely and encrypted on an external usb drive with the zero knowledge principle in mind so ...
1
vote
1answer
48 views

LUKS header modified? [closed]

When a LUKS password is sent to the LUKS header for decryption, can it be stolen by a hacker who modified the LUKS header? Suppose my boot partition is healthy.
0
votes
2answers
223 views

Failed to open root LUKS device on LVM during boot

I have LVM partitions which are encrypted using LUKS. My root partition is /dev/HDD/root: LVM group "HDD" (at /dev/HDD): Encrypted LUKS device "root" at /dev/HDD/root I'm trying to decrypt it via ...
0
votes
2answers
204 views

How to boot an encrypted Debian, from an unencrypted Ubuntu?

I am trying to setup a full-encrypted Debian os, alongside my preinstalled unencrypted Ubuntu. so far, I have(traditional BIOS) installed the Debian with the following scheme.. /boot as extended ...
0
votes
1answer
299 views

cryptsetup-reencrypt disk without data loss

If someone has stolen the head of LUKS disk and hacked my LUKS passphrase, and I then change the passphrase, can the person still decrypt my data using the stolen head? If yes, what can I do to ...
2
votes
2answers
86 views

Replace LUKS partition with ext4 partition with same contents

I have a LUKS (Linux Unified Key Setup) partition that contains the rootfs. I wish to replace it with an unencrypted ext4 partition containing the same rootfs. Having searched far and wide I've seen ...
1
vote
0answers
755 views

Decrypt root device at boot with keyfile on usb - Debian Stretch

Basically what I need is to decrypt root device automatically with a keyfile stored on a usb with a partition scheme (ext3, ext4 I don't mind). I successfully implemented the script method with dd ...
2
votes
2answers
526 views

How to specify cryptdevice by label using systemd boot?

I'm running Arch Linux with systemd boot. In /boot/loader/entries/arch.conf I currently specify the luks crypto device with a line like this: options rw cryptdevice=/dev/sda1:ABC root=/dev/...
2
votes
0answers
2k views

Ubuntu 18.04 LUKS boot problems

Problem description I am trying to achieve dualboot of Windows 10 (pre-installed) and Ubuntu 18.04 on a new laptop. This is not very difficult, however it appears to get much more complex if you also ...