Questions tagged [luks]

LUKS (Linux Unified Key Setup) is a disk-encryption specification.

Filter by
Sorted by
Tagged with
0
votes
0answers
21 views

Unable to install GRUB on dual boot Windows / CentOS 8 (LVM+LUKS)

I have an old laptop with Windows 7 on which I installed CentOS 8 on dual boot. Upon first reboot, GRUB showed only entries for Linux. Therefore I used Boot-Repair-Disk, but it somehow failed to ...
0
votes
1answer
17 views

Converting btrfs raid1 on two disks to btrfs raid1 on two luks-encrypted disks

I have a btrfs raid1 composed of two entire, large harddisks of the same size. Now I would like to migrate the data to a btrfs raid1 composed of two encrypted luks-devices on the same harddisks. I ...
1
vote
2answers
3k views

LUKS partition still accessible after removing drive physically

I have a USB flash drive with Full Disk Encryption using LUKS. I plugged in the drive and mounted it as such using the following: cryptsetup luksOpen /dev/sdb flash mount /dev/mapper/flash /mnt/flash ...
1
vote
1answer
2k views

USB key not mounting at boot to unlock LUKS system

I am running Debian Jessie. I have 2 hard drives with my various partitions spread across both (not RAID). Both of them are separately LUKS encrypted, and LVMs sit upon both of those. My /boot ...
6
votes
1answer
3k views

Linux Tablet: Is there a way to enter a password with onscreen keyboard to unlock a LUKS crypto device during bootup?

I just installed Linux (Ubuntu, but it does not really matter) on an x86-based tablet. I also encrypted a partition which is mounted during bootup. Of course, one usually needs to enter the password ...
1
vote
1answer
32 views

How to resize Logical Volume that is encrypted with LUKS

I'm trying to understand what is the proper way to resize my logical volumes (I want to shrink one and extend other one without adding any additional pv). As far as I understand, according to this ...
0
votes
1answer
20 views

Change partition without affecting LUKS encryption

I want to change one of my partitions from ext4 to something else (xfs or openzfs), the partition is sdc5_crypt and is mounted at startup. My intuition says that I can format it with something like ...
0
votes
0answers
13 views

Reinstall Fedora to other linux on dual boot, both ciphered

I have a laptop, which have two seperate disks: Windows ciphered by VeraCrypt (full disk) Fedora ciphered with LUKS The process of turning on my computer looks like this: Power on. I give a ...
2
votes
1answer
713 views

Debian Full Disk Encryption: Does Debian Installer use LUKS 1 or 2?

During installation, whenever I put /boot inside an LVM on top of LUKS along with swap, / and /home, afterwards when I try to boot into it, it only gives me the minimal bash-like grub terminal. This ...
4
votes
2answers
2k views

Linux Mint MATE: Disable encrypted volume password dialog

I'm running the MATE edition of Linux Mint on my laptop. I have an external USB disk with a LUKS container on it. The USB disk is connected to the laptop's docking station. Whenever I connect the ...
21
votes
4answers
22k views

Extend a LUKS encrypted partition to fill disk

I recently upgraded my disk from a 128GB SSD to 512GB SSD. The / partition is encrypted with LUKS. I'm looking for help extending the partition to use all the free space on the new disk. I've ...
4
votes
1answer
6k views

`cryptsetup luksOpen <device> <name>` fails to set up the specified name mapping

HardenedArray has a helpful archlinux-installation guide at Efficient Encrypted UEFI-Booting Arch Installation. However, I encountered difficulty early in the installation process -- specifically, at ...
1
vote
0answers
43 views

Slow write speed on encrypted drive, while benchmark shows much higher encryption / raw disk write rates

I currently setup a NAS with Ubuntu 18.04 on a Netgear ReadyNAS 102device. The machine has a Armada Marvell 370/XP SoC with a hardware encryption accelerator called "CESA". The kernel drivers for CESA ...
0
votes
1answer
21 views

How to encrypt external disk without backup/restore the existing data?

I have an external USB disk with ext4 unencrypted: /dev/sda1 3.6T 2.9T 613G 83% /data I wish to encrypt this disk without losing data. I migrated this disk from Raspberry3 to Raspberry4, ...
0
votes
1answer
47 views

GRUB2 won't Mount encrypted partitions for Kali 2019.4

While attempting to boot a new installation of Kali Linux 2019.4 on a USB drive it appears GRUB 2.04-5 will not decrypt the root partition: Volume group "cryotic" not found Cannot process volume ...
0
votes
1answer
32 views

Make cryptsetup available from the Busybox Ash during boot for remote unlocking

I've tried to set up remote unlocking following online guides like these. First I tried it on ubuntu 18.04, I am trying now in Debian buster. In both cases I was able to set up dropbear to give me ...
0
votes
0answers
36 views

How to auto mount LUKS partition on boot time that contains the other RAID-1 device?

I've set up a server with BTRFS with Single profile. Partition scheme is as follows: /dev/sda: +-- sda1: Boot +-- sda2: LUKS (foo_crypt) +-- LVM (foo) +-- foo-root (BTRFS)...
1
vote
1answer
1k views

Unlock LUKS non-root filesystem partition on boot

I have a system with an unencrypted / partition on Ubuntu 16.04, but with a LUKS encrypted ZFS zpool on 3 partitions. In order for the system to boot properly I want for the LUKS encrypted volumes to ...
1
vote
2answers
41 views

Mounting a Luks partition

I have backed up a drive with all its partitions using the command dd if=/dev/sda of=/media/oshirowanen/external-drive/backups-2019/full_drive_backup.img /dev/sda is an ssd which has a Linux OS ...
0
votes
0answers
17 views

Device found for 'cryptsetup luksFormat` but not `cryptsetup luksAddKey`

I run sudo cryptsetup --hash sha512 --key-file 00.key luksFormat /dev/disk/by-uuid/156e47f9-6996-481c-82ce-160b367b9ff4, everything works as expected: WARNING! ======== This will overwrite data on /...
3
votes
1answer
1k views

Booting to an encrypted Debian install, which has /boot on LVM-on-LUKS

I have a setup with a grub2 bootloader, and the rest of the system on an encrypted partition (LVM-on-LUKS). I have two OSes installed inside of the LUKS container, Kali Sana and Debian 8, as well as a ...
2
votes
1answer
154 views

Encrypting whole disk with Luks (instead of one big encrypted partition)

Context Encrypting whole new external hard drive with Luks. I.e. it is not a system drive (will be used only to store data, not to boot the OS), and it is completely blank. Observation All ...
0
votes
0answers
23 views

Is it possible to regenerate /boot partition of a LUKS drive?

I use Debian. For learning purposes I want to encrypt the whole hard drive. But let's say I am afraid of evil maid attacks so I want to bring my /boot partition with me always, and I put a boot ...
1
vote
0answers
103 views

unknown filesystem type ‘lvm2_member’

I have been trying to install Manjaro in a VirtualBox several times now and every time there is some failure. This latest install attempt with Manjaro-Architect seemed to complete despite a small ...
1
vote
0answers
35 views

Increase size of randomly created encrypted swap

Ubuntu 18.04 is by default creating a random encrypted swap during each boot using dm-crypt/Swap encryption. For me, this is creating a 1gb swap but I cannot find where to increase the size of the ...
0
votes
1answer
47 views

Can't boot from encrypted disk after deleting swap-memory partition [issue]

I can't login anymore into my encrypted disk. After writing the password: error: no such cryptodisk found. error: disk ‘cryptouuid/HEXstring’ not found. Entering rescue mode… intuitively that string ...
1
vote
1answer
420 views

Error unlocking a LUKS partition (failed to activate device:file exists)

I'm having problems unlocking a luks-encrypted disk with KDE dolphin, in a system with manjaro. The issue is not critical. It can be solved by rebooting, but sometimes it is not convenient to do so, ...
18
votes
2answers
12k views

List open dm-crypt LUKS volumes

If I mount a simple loop device, losetup -a give me the devices opened. Is something similar possible with cryptsetup?
0
votes
2answers
46 views

mount crypto_LUKS partition without decrypting (locally)

I have an encrypted external disk on a linux server. On the server, I can do this locally to decrypt cryptsetup -d keyfile luksOpen /dev/sdx1 /mnt/decrypted but I prefer to avoid doing that on the ...
1
vote
2answers
67 views

how many key slots does the luks2 support?

luks1 has limit of 8. But I just accidentally add 9 slots to luks2 (from 0 to 8). I wonder what is the limit for luks2? Keyslots: 0: luks2 Key: 512 bits Priority: normal ...
2
votes
1answer
1k views

Proper manual OS setup on LUKS encrypted drive with non-aes algorithm on yum-based distro (CentOS)

I'm trying to achieve LUKS-encrypted CentOS 7 install with separate /boot partition and lvm on EFI-friendly motherboard. I've done partitioning fresh CentOS install from old CentOS(installed from GUI)...
12
votes
2answers
1k views

Reboot without having to decrypt LUKS partitions?

Is there a way to kexec reboot a running kernel without having to decrypt an encrypted LUKS root filesystem? I'd imagine not, but I'm not sure if there's a workaround for this.
1
vote
2answers
37 views

why cryptsetup cannot use /dev/fd/63 as keyfile?

# cryptsetup luksOpen /dev/somedevice --key-file <(gpg2 somekeyfile.gpg) always failed with Failed to open key file. Is there any way to make this work? --key-file - also fails. The only thing I ...
2
votes
1answer
58 views

The password of previously encrypted volume got changed by the Debian installer

I already did some research on my question (see below), and it's as good as a 'done deal' but I would still like to put forward my problem to this knowledgeable community. Short version of the issue: ...
0
votes
1answer
90 views

Can I boot a LUKS encrypted system without editing /etc/crypttab and rebuilding the initramfs in Ubuntu?

I am trying to boot an encrypted Ubuntu system without needing to have a custom initramfs for each disk I boot. I currently use Funtoo/Gentoo and have a generic initramfs in which I specify the UUID ...
1
vote
1answer
56 views

Mount points in /etc/fstab on Debian system for an encrypted partition

I recently installed Debian 10 on my laptop and for the first time I decided to give file encryption a go. But I've found something interesting in the /etc/fstab file, and it's that it doesn't use ...
2
votes
1answer
463 views

Dictionary attack GPG symmetric encrypted LUKS keyfile

I remember typing in a long phrase for the password. I wrote all the words I could have possibly used into a plain text file, combining the words I know were used in a certain order. I might have ...
3
votes
0answers
88 views

CentOS-8 - Unsealing LUKS volume with TPM2 module - clevis issue

Im trying to get a LUKS volume unlocked by the TPM-module on a Dell Optiplex 3060. The binding seems to work fine: clevis luks bind -d /dev/nvme0n1p3 tpm2 '{"pcr_ids":"7"}' $ luksmeta show -d /dev/...
0
votes
2answers
57 views

Encrypted partitions appear as one

I wrote a partition table manually during a system installation which contains an encrypted part, the /boot partition and an unpartitioned rest. Although I first created the partitions (manually each) ...
3
votes
1answer
54 views

Changing LUKS password

I tried changing my LUKS password. Source I used: https://www.linuxexperten.com/content/how-do-i-change-my-luks-encryption-password-and-more I have separate partition’s for Boot, Root, Swap & ...
0
votes
2answers
425 views

LVM on LUKS FDE: GRUB won't mount my root partition / during boot even though cryptomount and cryptdevice are given in grub.cfg

I have a triple boot setup (3xLinux). All Linuces share /home and swap, and their / partitions are next to each other. All reside in an LVM on LUKS: # lsblk NAME MAJ:MIN RM ...
0
votes
1answer
89 views

Encrypt multiple partitions with luks cryptsetup

The other day I tried to setup a Full disk encryption on a test system (ArchLinux) within virtualbox. (I want to use this kind of a setup on my main machine so I wanted to test it out first) I ...
0
votes
1answer
239 views

LUKS: Wrong Password or Corrupt Headers?

I'm trying to gain access to my LUKS partitions after suddenly discovering that my password stopped working on all 4 LUKS partitions. 7 days ago when I tried booting and logging into my linux OS, my ...
4
votes
1answer
1k views

how to clone images of drives with LUKS+LVM2?

I have 2 Debian boxes which I need to upgrade. In the past, before upgrading any box, I have used Clonezilla to create an image of each of the box's harddrives for use as disaster backup, in case ...
1
vote
1answer
119 views

What are the limitations of a detached LUKS header

I'm trying to understand the relationship between LUKS detached headers and their respective block device. From what I understand "formatting" with a detached header doesn't actually change the ...
0
votes
0answers
26 views

After update Fedora doesn't decypher LUKS system while booting

So I have set up a machine with Windows at one disk and Fedora 29 at other one. Both are cyphered - Windows disk with VeraCrypt and Fedora with LUKS - default while installation. I did update of the ...
1
vote
1answer
2k views

How to install Debian on encrypted LVM partition?

I don't want to use Guided-use entire disk and set up encrypted LVM because I need change encryption type and I don't need /swap I tried to partition like this But it types You have selected the ...
1
vote
2answers
154 views

cryptsetup resize returns device not active, despite cryptdisk status returning active and in use (resizing LVM-on-LUKS)

I am in the process of resizing LVM-on-LUKS, referring to these two posts as guides. I had done this once before smoothly, but I have run into a strange problem. When I run #cryptsetup -b 377523479 ...
11
votes
4answers
6k views

How can I set a label on a dm-crypt+LUKS container?

I just received a new USB flash drive, and set up 2 encrypted partitions on it. I used dm-crypt (LUKS mode) through cryptsetup. With an additional non-encrypted partition, the drive has the following ...
0
votes
1answer
141 views

Problem with booting a newly LUKS encrypted root partition

I didn't encrypt my root partition when I was installing my Ubuntu 18.04 when 18.04 first came out (first few months of it's release) So for reasons I decided to encrypt it now. I know this question ...