Skip to main content
OverflowAI is here! AI power for your Stack Overflow for Teams knowledge community. Learn more

Questions tagged [luks]

Questions specific to LUKS (Linux Unified Key Setup) disk-encryption specification in general, such as setup questions or questions about how LUKS works. Use this tag if your question directly involves the LUKS disk encryption; do not use it if you just happen to be using an encrypted LUKS disk and your question is about a specific Linux configuration.

Filter by
Sorted by
Tagged with
1 vote
0 answers
48 views

Restore corrupted LUKS header after falsely creating GPT table over FDE LUKS device

I accidentally created a partition table of type GPT and a partition starting at 15GB and ending at 20GB with parted on a device with with 4001GB size and LUKS full disk encryption. The device either ...
Pablo's user avatar
  • 11
1 vote
1 answer
38 views

Where does cryptomount in Grub create decrypted disks

The documentation contains: Successfully decrypted disks are named as (cryptoX) and have increasing numeration suffix for each new decrypted disk. If the encrypted disk hosts some higher level of ...
jabaa's user avatar
  • 113
3 votes
2 answers
169 views

How do I use LUKS encrypted partitions with Kubuntu 24.04 installation?

I am trying to install Kubuntu 24.04 with manual partitioning. I have created primary partitions for EFI and boot, and an encrypted partition with logical volumes for swap, root, and home. Previously,...
Ray P.'s user avatar
  • 131
0 votes
0 answers
86 views

Ubuntu 24.04, Manual Install: /dev/mapper/* targets unavailable

We've got a new installer, Subiquity for Ubuntu 24.04. I've always set up my disks properly, encrypting, opening, creating logical volumes and filesystems, etc. Then I'd enter the installer and find ...
Diagon's user avatar
  • 640
0 votes
0 answers
30 views

Grub Cryptomount & Multiple Partitions in a LUKS container

It's possible to put multiple partitions in a LUKS (and LUKS2) container and, according to this question/answer, we can get it to work. The question I have is whether on bootup there's some way to ...
Diagon's user avatar
  • 640
2 votes
1 answer
45 views

Moving from plain LUKS to LVM on LUKS

At installation I forgot to create a logical volume group in LUKS container. I won't reinstall the system. So how do I create LVG in LUKS container without data loss? My plan is: Install lvm2 package ...
MPEI_stud's user avatar
0 votes
1 answer
29 views

Can a FIDO2 Security Token be removed after unlocking a LUKS volume at boot?

A FIDO2 security token should be used for decrypting all disks in a linux machine at boot. systemd allows this since version 248. Can the FIDO2 Security Token be removed after boot when using LUKS for ...
Simon Schürg's user avatar
0 votes
1 answer
66 views

How to resize a LUKS partition?

To put it simply, I'm trying to resize the /sdb3 partition to about 500gb, then use the rest of the space on the drive as an ntfs partition. In gparted it only lets me free up 32mb of space. I have no ...
luxem's user avatar
  • 1
1 vote
1 answer
52 views

ZFS dataset encryption on top of LUKS

There has been discussions about using ZFS on top of a LUKS-encrypted partition vs. using ZFS's native per-dataset encryption. However, they are always presented as either-or. My question is about ...
Cactus's user avatar
  • 845
0 votes
0 answers
31 views

Why is the --integrity switch in cryptsetup luksFormat still considered experimental?

As of 2024, the --integrity switch in cryptsetup luksFormat is still marked as experimental in the cryptsetup manpage: WARNING: This extension is EXPERIMENTAL and requires dm-integrity kernel ...
dv_'s user avatar
  • 141
0 votes
1 answer
49 views

LUKS encryption: Hide disk unlock target on boot

I would like to hide the device name of the LUKS-encrypted disk that is supposed to be unlocked during boot on Kali Purple. Currently whenever I boot my system there is a password prompt and below a ...
Max Brod's user avatar
0 votes
0 answers
45 views

Issues encrypting root partition with Luks

I was given a "golden image" of an out of date production server and was instructed to update and harden the OS for production delivery. The issue I am running into is that LUKS. I am using ...
Rob K's user avatar
  • 1
1 vote
1 answer
21 views

LVM on LUKS - linux not booting with error "vg-xxx" not found after moving to encrypted partition

I had a working ubuntu with root and swap partitions encrypted with an LVM on LUKS set-up. Name of the LVM virtual group is vg-ubuntu. Due to a maintenance need (a boot partition, not on LVM, ...
AlexVal's user avatar
  • 21
0 votes
0 answers
70 views

How do I fix a corrupted file system?

My NAS went offline today. I could not even boot up. I have extracted the OS drive (Debian Bookworm) and plugged it into my laptop via an adapter. I failed mounting it, with the error: unknown ...
Sandrew Cheru's user avatar
0 votes
0 answers
20 views

luks encryption passphrase fails if dock is connected

If my ThinkPad P1 gen4 is connected to Lenovo Thunderbolt4-dock (0B40 series). I'm not able to start. My root- and home-partitions are encrypted with luks. At boot I'm asked for passphrase, for ...
Johannes C. Schulz's user avatar
2 votes
2 answers
64 views

Does GRUB 2.12 now support detached headers?

In GRUB's project status update, at FOSDEM 2022, they talked about adding detached headers support in GRUB 2.12 (for decryption) : Add cryptodisk detached headers and key files support, Denis 'GNUtoo'...
ChennyStar's user avatar
  • 1,765
1 vote
1 answer
79 views

How do I rescue an encrypted LUKS partition after failed shrink

I had an encrypted ext4 partition on a Samsung T7 1TB USB drive. It was LUKS (I believe this may be called a LUKS container?) The partition was 850GB. It had about 130GB in use. I also had an ...
Code83's user avatar
  • 13
0 votes
0 answers
50 views

run a date command before unlocking encrypted volume at startup

When the PC boots up I have to enter quite a long password to unlock the hard drive. Next, Debian proceeds to boot, and only once it has booted and I have then entered the login credentials can I see ...
cardamom's user avatar
  • 550
0 votes
0 answers
23 views

trying to mount a LUKS file system attached to a VM in VMWare 16

I had a power out while a VM was up and now I can't get back into it. I can get to initramfs or similar but that is drastically cut back. I've spun up another VM and pointed it at the VHD for the 'bad'...
 VypЯ's user avatar
0 votes
0 answers
29 views

jbd2 problems while writing to encrypted USB thumb drive

I'm seeing an error while writing to a LUKS-encrypted USB thumb drive that is known-good. Could this be due to a bug in the jbd2 code? I'm also using a Wifi driver that is ''tainted'' i.e. the ...
ppppppp2's user avatar
0 votes
1 answer
181 views

cryptsetup: "Walting for encrypted source device" when removing disk from RAID1

I'm under Debian 12 bookworm. Partition layout is as follows: sdX1 (EFI files) sdX2 (boot, md-raid1) sdX3 (root, dm-crypt, luks, md-raid1) As soon as i remove one of the disks and try to boot from a ...
benjaminvonderweiden's user avatar
1 vote
1 answer
188 views

How do I image a LUKS system disk with Clonezilla without including all the empty space?

I have a 1 TB NVMe disk with Ubuntu 22 installed with vanilla options, except I used LVM, and enabled LUKS. I'd like to image the disk for easy restores. Simply backing up the files is not enough for ...
Duncan Marshall's user avatar
0 votes
0 answers
76 views

Recover files from disk image

I had backed up /dev/mapper/luks-.... (since I use FDE) using dd: sudo dd if=/dev/mapper/luks-... of=backup.img I don't seem to be able to access or restore the files. I have tried both mounting the ....
TimidFuzz's user avatar
3 votes
1 answer
145 views

How to install cryptsetup-luks

I'm actually trying to setup LUKS on a Red Hat 9.2 Server. Here is the problem : I can't do yum install cryptsetup-luks or dnf install cryptsetup-luks. When I try to use one of these command I have ...
joalbala's user avatar
2 votes
1 answer
49 views

Cannot close LUKS volume while any flatpak app is running

The problem I cannot cryptsetup close any LUKS volume while any flatpak app is running in the background. Yes, the flatpak app just has to be running in the background, I'm not trying to use ...
renzev's user avatar
  • 111
0 votes
0 answers
131 views

How to determine LUKS version on RHEL 7

I have an encrypted volume using LUKS and am unsure whether it is LUKS1 or LUKS2. Here's the lsblk output: [acoder@rhel7 ~]# lsblk --fs NAME FSTYPE ...
a coder's user avatar
  • 3,253
1 vote
0 answers
226 views

LUKS password correct, but not accepted

I am attempting to install Kali on a laptop, which should normally be straightforward. However, on this particular device, the Kali installer errors upon writing the partition changes to disk for some ...
ExecutionByFork's user avatar
2 votes
1 answer
107 views

Can a LUKS2 detached header technically be used for multiple drives?

First, I'm aware that a similar question has already been answered. The answer was YES, but I'd like a second opinion, because : The question didn't specify if it was LUKS1 or LUKS2 Something I've ...
ChennyStar's user avatar
  • 1,765
1 vote
1 answer
217 views

Debian unlock multiple Luks encrypted disks with passphrase AFTER boot

I have a specific situation. On Debian there are additional 3 disks and they are Luks encrypted. After decryption these disks are configured to ZFS pool RAIDZ (Raid5). After server reboot I need to ...
RegPab's user avatar
  • 13
0 votes
0 answers
250 views

GRUB ignores my cryptdevice parameter in /etc/default/grub

I want to create setup with a encrypted root filesystem on my Arch Linux installation, so when I successfully mounted my /boot and /boot/efi partitions, I'm contuning with grub installation with grub, ...
izarc's user avatar
  • 13
1 vote
0 answers
162 views

Can't mount an encrypted btrfs partition: wrong fs type

Problem I've a 2TB external hdd which has 2 partitions(a 1.4TB encrypted btrfs and a 500GB exfat). And I can't mount the btrfs partition, the 500GB exfat is fine tho. Context It's cable or socket is ...
broken443's user avatar
2 votes
1 answer
95 views

how to close encrypted partition with nested partition table?

If I create an encrypted partition using cryptsetup cryptsetup -q luksFormat /dev/vdb3 /tmp/pwfile cryptsetup -d /tmp/pwfile luksOpen /dev/vdb3 pv00 and setup a nested gpt partition table on /dev/...
Harri's user avatar
  • 23
0 votes
1 answer
240 views

Debian-installer custom luks crypto recipe

I want to automate the install of Debian and have control over how the partitioning is done by providing a custom recipe. It was easy enough (ish) when I wasn't using luks or lvm, but I can't get the ...
a2k42's user avatar
  • 131
1 vote
1 answer
301 views

Encrypted LVM "is not a valid LUKS device", cannot boot or open

I have an Arch installation on a LUKS-encrypted LVM. After I installed Debian on a different NVME drive I'm no longer able to cryptsetup open the partition from other systems, nor can I boot into Arch....
lkjtigeve's user avatar
1 vote
0 answers
48 views

LUKS on LVM – how to manage suspend/resume on external hdd?

I've just set up LUKS on top of LVM on my external hard drive. However, when I leave the hdd idle for an hour, I am getting I/O errors in dmesg when the drive spins up again: [170969.546887] usb-...
goldmund's user avatar
0 votes
1 answer
100 views

Scripting fdisk with filesystem signature issues

I'm trying to automatize fdisk with my Bash scripts. In my script, I have the following code block: echo "Creating root filesystem partition..." ( echo n echo 3 echo echo ...
izarc's user avatar
  • 13
1 vote
0 answers
126 views

Determining system's unresponsiveness when high IO load

I'm trying to understand why my Fedora 38 (KDE on Wayland) becomes unresponsive for some seconds while there's high IO on the root disk (a SanDisk SSD PLUS 240GB (UF5000RL)). The root partition is ...
TesX's user avatar
  • 81
0 votes
1 answer
159 views

Is it risky to use hibernation in Ubuntu?

I've read that hibernation often causes trouble in Linux environments, e.g. system fails to wake-up or freezes and sometimes even refuses booting after reset. I really like the idea of hibernating the ...
programonkey's user avatar
0 votes
1 answer
260 views

Linux Mint Mate 21.2 ZFS rpool, bpool, and another one - in Caja Sidebar visible - How to get rid of it?

In installed an enrcypted Linux on an separate SSD. In the Install process i choose ZFS. In Caja (1.26) i saw these Folder and wonder why i get this, so i just want to get rid of it, because i dont ...
CJCoochie's user avatar
0 votes
0 answers
116 views

Install Pop!_OS in custom mode with encrypted root partition

I've tried to install Pop!_OS in custom mode because I need Multiboot, but I also want an encrypted root partition. So I set an /boot/efi partition and unlocked a previous with luks2 encrypted and ...
opensource25's user avatar
1 vote
1 answer
235 views

How to configure waiting time for LUKS password

My /home partition (on Linux Debian testing) is encrypted with LUKS. $ mount|grep home /dev/mapper/home-crypt on /home type ext4 (rw,relatime) Configuration via /etc/crypttab: home-crypt UUID=...
lcheylus's user avatar
  • 203
0 votes
0 answers
58 views

Command needed to mount a LUKS partition on ubuntu

Ubuntu - I need to mount my LUKS encrypted partitions in read only mode. Have searched online, but no commands have worked. $ lsblk SDA 8:0 0 5.5T 0 disk SDA1 8:1 0 1.4T 0 part Partition name 253:0 1....
fredtheoctopus's user avatar
0 votes
0 answers
458 views

Encrypted partitions with Ubuntu 22.04, boots to initramfs prompt

I have painstakingly followed the Ubuntu help doc for setting up encrypted partitions located here. After the final step (remove USB and reboot), the system boots normally, asking for password. ...
a coder's user avatar
  • 3,253
1 vote
1 answer
111 views

LUKS Encryption - Readable content

In LUKS, only files get encrypted, not the entire drive. So my question is, what is accessible if just files are encrypted. For example: Are file paths or file names visible? (Eg: For Enrypted ZIP ...
user82375897897928347's user avatar
1 vote
2 answers
384 views

volume group not found on linux laptop after update

After a recent update (not sure if that was the first including a new kernel 6.1) my ubuntu linux laptop cannot boot anymore the error is Volume group “ubuntu-vg” not found Cannot process volume group ...
sigmud's user avatar
  • 156
0 votes
0 answers
30 views

Encrypting multiple new system partitions at once, when they're spread across two physical disks

I am installing Debian. I have two physical disks, and I would like to spread my system partitions across both for better performance. I also want to luks-encrypt my system, and preferably encrypt all ...
mkurz's user avatar
  • 207
0 votes
1 answer
240 views

Booting Linux from encrypted root parition without initrd/initramfs

Booting Linux without initrd/initramfs works OK when you have simple MBR/GPT partitions, you simply append root=/dev/device and you're good to go given that your kernel contains the modules required ...
Artem S. Tashkinov's user avatar
1 vote
0 answers
253 views

How to backup and restore full encrypted system partitions?

I want to be able to do the following: Install an arbitrary Linux distribution to one or more fully LUKS encrypted partitions (preferably one encrypted LVM group) Backup those encrypted partitions ...
mkurz's user avatar
  • 207
0 votes
0 answers
201 views

Unlocking two LUKS partitions with one password using Kernel parameters

My current setup includes a root partition and a swap partition, both LUKS encrypted. Currently to decrypt them I use the following Kernel paramters: (I am using the systemd and sd-encrypt initramfs ...
emilylime's user avatar
0 votes
1 answer
223 views

LUKS on LVM: lvresize won't work - Error: "Cannot find active LUKS dm-crypt device using..."

I have a LUKs-on-LVM setup. I'm trying to lvresize, so I can remove a pv. However, I keep getting an error: Cannot find active LUKS dm-crypt device using my_vg/luks_lv. More information: My setup: ...
Teatree's user avatar
  • 103

1
2 3 4 5
17