Questions tagged [luks]

LUKS (Linux Unified Key Setup) is a disk-encryption specification.

155 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
7
votes
1answer
704 views

How do I cancel a stale “pending” drive mount with error “An operation is already pending”

The An operation is already pending error is very generic and many things can cause this. (other answers don't relate to my problem). I have a Luks encrypted volume that I clicked to open, a password ...
6
votes
1answer
3k views

Linux Tablet: Is there a way to enter a password with onscreen keyboard to unlock a LUKS crypto device during bootup?

I just installed Linux (Ubuntu, but it does not really matter) on an x86-based tablet. I also encrypted a partition which is mounted during bootup. Of course, one usually needs to enter the password ...
4
votes
1answer
6k views

`cryptsetup luksOpen <device> <name>` fails to set up the specified name mapping

HardenedArray has a helpful archlinux-installation guide at Efficient Encrypted UEFI-Booting Arch Installation. However, I encountered difficulty early in the installation process -- specifically, at ...
4
votes
0answers
1k views

How to use Dvorak keyboard layout in GRUB2 LUKS passphrase prompt?

I've tried to piece together how to do this from various sources. First approach, based on 1 and 2: $ grep ^HOOKS /etc/mkinitcpio.conf HOOKS="base udev autodetect modconf block lvm2 keyboard keymap ...
4
votes
1answer
514 views

Dropbear terminates before LUKS password prompt on Debian Jessie

I'm trying to use dropbear as a ssh server to unlock an encrypted partition which was created during Debian 8.2 setup. It boots to the password prompt (and unlocks if correct password is typed) but ...
4
votes
0answers
500 views

TPM passwordless boot

I'm trying to create device with CentOS6, encrypted disk (with LUKS), TPM module and TrustedGRUB to boot securely and without interaction. I'm following instructions from https://github.com/shpedoikal/...
4
votes
0answers
4k views

Accessed a TrueCrypt container without TrueCrypt. What dangers await?

I've got a TrueCrypt volume. In light of the unexpected demise of TrueCrypt, I've been trying to figure out what to do (reading lots of HOWTO websites). I'd like something that is simple and can work ...
4
votes
2answers
2k views

Linux Mint MATE: Disable encrypted volume password dialog

I'm running the MATE edition of Linux Mint on my laptop. I have an external USB disk with a LUKS container on it. The USB disk is connected to the laptop's docking station. Whenever I connect the ...
4
votes
0answers
465 views

How to use a samba login to mount a luks container?

Our server has an (dm-crypt/LUKS) encrypted project directory which is currently mounted via SSH before its samba share can be accessed - and obviously no one remembers to unmount it afterwards. (...
3
votes
0answers
88 views

CentOS-8 - Unsealing LUKS volume with TPM2 module - clevis issue

Im trying to get a LUKS volume unlocked by the TPM-module on a Dell Optiplex 3060. The binding seems to work fine: clevis luks bind -d /dev/nvme0n1p3 tpm2 '{"pcr_ids":"7"}' $ luksmeta show -d /dev/...
3
votes
1answer
55 views

Changing LUKS password

I tried changing my LUKS password. Source I used: https://www.linuxexperten.com/content/how-do-i-change-my-luks-encryption-password-and-more I have separate partition’s for Boot, Root, Swap & ...
3
votes
1answer
116 views

How to configure a shutdown at the xth wrong entered password?

Having an encrypted hard drive is all well and good, but chances are that if someone is gonna steal your laptop, it’s probably not going to be turned off. Most likely, it will be stolen in a powered-...
3
votes
0answers
259 views

Is it possible to partially recover files from a btrfs raid-0 filesystem with a missing disk?

I've got a bit of a quite terrible situation on my hands and I'm just looking for a bit of insight before calling this a lost cause. To put things into context, I'll just give you my partitioning ...
3
votes
0answers
872 views

Open a LUKS volume as a non-root user?

I'm using cryptsetup to create a LUKS file-based device to stash information in: # create a file as a container dd if=/dev/zero of=zulu.bin bs=1024 count=102400 # create a key dd if=/dev/urandom bs=1 ...
3
votes
1answer
1k views

Booting to an encrypted Debian install, which has /boot on LVM-on-LUKS

I have a setup with a grub2 bootloader, and the rest of the system on an encrypted partition (LVM-on-LUKS). I have two OSes installed inside of the LUKS container, Kali Sana and Debian 8, as well as a ...
3
votes
0answers
285 views

Earliest I can run xrandr?

Every time I boot my laptop I go blind. I can use xrandr to set the brightness but it becomes a rather impractical. I also use LUKS so when I boot the computer I am always greeted with (from what I ...
3
votes
0answers
767 views

LUKS: Change master key

I've already read this SE question, but it's somewhat old now. How can I reencrypt a LUKS partition using a different master key? I have a cloned VM image that needs to go into production, but it's ...
3
votes
0answers
392 views

LUKS decryption at boot: using an nfs mount to store the key

I've been through this site for a number of LUKS related questions. I've seen methods for storing the LUKS key in plaintext on the root filesystem or on a USB key. My question is: Is there a way ...
3
votes
0answers
1k views

Systemd config for later mounted encrypted volume with services working on it

Hi everyone, I am working on a Banana Pi with Arch Linux and i am currently trying to accomplish the following: After someone mounted the encrypted keyfiles for my external storage systemd shall use ...
3
votes
0answers
376 views

adding encrypted /home in LVM/LUKS

I installed a new (debian) system to an SSD device. After standard install I want to mount /home on the internal HDD. To be able to ask the question, some details: On install I (manually) generated /...
3
votes
0answers
241 views

Replicate a complex partition structure with LUKS and LVM volumes

I have two external hard discs on an OpenSUSE 13.1 system. On one I have created a partition structure: An encrypted LVM partition (LUKS) Several volumes (10) on this LVM partition, some formatted ...
3
votes
0answers
1k views

Creating an encrypted file container as a non-root user

Linux kernel 3.2.0-64-generic here (Ubuntu LTS if someone is wondering about kernel options / modules). I have some file space on this Linux server (~ 24 GB). I would like to use this space as an ...
3
votes
0answers
159 views

luks single signon

I've got LUKS (Linux Unified Key Setup) running on a couple of my Linux boxes. I've looked online but haven't seen anyone document how to make it work in a single signon option, but was hoping ...
2
votes
1answer
246 views

Extend Luks encrypted partition without using luksOpen command

I just tried to increase encrypted LVM partition. The proceduce is: Extend the partition with fdisk -> Resize PV -> Resize LV -> Increase size file system. Detail steps in https://www.thegeekdiary....
2
votes
0answers
1k views

Decrypt root device at boot with keyfile on usb - Debian Stretch

Basically what I need is to decrypt root device automatically with a keyfile stored on a usb with a partition scheme (ext3, ext4 I don't mind). I successfully implemented the script method with dd ...
2
votes
0answers
3k views

Ubuntu 18.04 LUKS boot problems

Problem description I am trying to achieve dualboot of Windows 10 (pre-installed) and Ubuntu 18.04 on a new laptop. This is not very difficult, however it appears to get much more complex if you also ...
2
votes
0answers
62 views

Strange memory usage pattern using LUKS

I'm setting up and external HDD encrypted with LUKS. After adding the LUKS partition on it, to 1) scramble it a bit (which could be pointless) and 2) check that I can write on all the disk, I did: dd ...
2
votes
1answer
115 views

How to install passphrase screen to a USB stick?

At the beginning of booting Linux a special program asking for passphrase is loaded if your linux is installed to encrypted-lvm, but this can be a security problem if the special program gets ...
2
votes
1answer
1k views

Proper manual OS setup on LUKS encrypted drive with non-aes algorithm on yum-based distro (CentOS)

I'm trying to achieve LUKS-encrypted CentOS 7 install with separate /boot partition and lvm on EFI-friendly motherboard. I've done partitioning fresh CentOS install from old CentOS(installed from GUI)...
2
votes
0answers
250 views

Libvirt managed storage volume encryption of a volume on 'logical' storage pool

I can't figure out how to make encrypted storage volume (managed by libvirt) for a volume which sits on 'logical' pool type (ie. on LVM). # virsh vol-create ocz-5ef92v58m9be7jo9 /tmp/in error: Failed ...
2
votes
0answers
1k views

Centos device /dev/sdb1 is not a valid luks device?

I have Centos on Virtualbox, when I installed Centos I used all 20G. After installation I made extend for more one driver with 5G inside Centos everything is good when I made partitions and file ...
2
votes
0answers
100 views

Macbook pro retina 2013 with full disk encryption boot issue

I have installed Ubuntu 15.10 on Macbook Pro Retina late 2013. It was working well until I break the boot by reinstalling grub. Now I am not able to repair it. I have three partitions: /dev/sda1 - /...
2
votes
0answers
898 views

Black screen after hibernation

I have the problem described here: https://wiki.archlinux.org/index.php/Power_management/Suspend_and_hibernate#Hibernation On the latest version of Arch Linux (4.7.5-1), on a mid-2012 MacBook Air (...
2
votes
1answer
361 views

Resizing boot partition

I need to expand my /boot partition to install updates. I have 200MB /boot partition and then I have 2 LVM partitions - /home and / encrypted by LUKS. Is it possible to shrink LVM partitions by ...
2
votes
1answer
464 views

Dictionary attack GPG symmetric encrypted LUKS keyfile

I remember typing in a long phrase for the password. I wrote all the words I could have possibly used into a plain text file, combining the words I know were used in a certain order. I might have ...
2
votes
0answers
425 views

Make changes to busybox/initramfs that are persistent?

I am in the process of recovering my 32-bit Debian Jessie box with a lvm+LUKS disk. I am coming back from a system that had a root partition but no boot partition. Grub executes, but either vmlinuz or ...
2
votes
0answers
609 views

Kernel 4.1.18 doesn't support aes-xts-plain64

My root partition is under a luks crypt and when I type in my password it tells me to make sure my kernel supports aes-xts-plain64 and to check syslog for more info. Obviously I can't check syslog ...
2
votes
0answers
659 views

ArchLinux: Error installing grub on encrypted lvm partition(lvm on luks)

I am trying to install Arch Linux on an encrypted partition (LVM on LUKS). I followed the relevant Arch Wiki guide, but when I do: grub-install --recheck /dev/sda it gives me this output: grub-...
2
votes
0answers
333 views

Encrypted boot drops to shell, how to set LVM crypttab consistently? 'ALERT! {logical volume path} does not exist'

I used Luks to encrypt my whole hard drive, and created that sda drive as a physical volume. Under that volume, I create a volume group vg00 with my 3 logical volumes lv00_root, lv01_home, and ...
2
votes
0answers
819 views

Unlock LUKS volume without root access - how does that work?

It seems I am trying to do the same as the user who asked this question: Unlock LUKS partition using keyfile without root access? The answer from frostschutz explains that this is impossible. I am ...
2
votes
0answers
745 views

Unable to boot with dracut and luks: '/dev/resume' : file exists

I am installing gentoo and have performed my first reboot after configuration and installation within my chroot environment. I am using LUKS and LVM to manage encryption of my drives. I am encrypting ...
2
votes
1answer
518 views

LUKS: encrypted device is much smaller than its host partition

To store personal data, I have encrypted a partition with LUKS but, according to the file manager, the resulting encrypted device is much smaller: 334 GB versus 385 GB. However, the Disk Utility in ...
2
votes
1answer
625 views

expanding boot, moving LUKS root

GPT > Partition2 > LUKS > btrfs I need some additional space for my boot volume, so far I did: Shrink my btrfs volume by 250MB. btrfs resize -250M / Shrink the LUKS root volume cryptsetup ...
1
vote
0answers
43 views

Slow write speed on encrypted drive, while benchmark shows much higher encryption / raw disk write rates

I currently setup a NAS with Ubuntu 18.04 on a Netgear ReadyNAS 102device. The machine has a Armada Marvell 370/XP SoC with a hardware encryption accelerator called "CESA". The kernel drivers for CESA ...
1
vote
0answers
108 views

unknown filesystem type ‘lvm2_member’

I have been trying to install Manjaro in a VirtualBox several times now and every time there is some failure. This latest install attempt with Manjaro-Architect seemed to complete despite a small ...
1
vote
0answers
36 views

Increase size of randomly created encrypted swap

Ubuntu 18.04 is by default creating a random encrypted swap during each boot using dm-crypt/Swap encryption. For me, this is creating a 1gb swap but I cannot find where to increase the size of the ...
1
vote
2answers
37 views

why cryptsetup cannot use /dev/fd/63 as keyfile?

# cryptsetup luksOpen /dev/somedevice --key-file <(gpg2 somekeyfile.gpg) always failed with Failed to open key file. Is there any way to make this work? --key-file - also fails. The only thing I ...
1
vote
1answer
141 views

Debian 10 only boots to GRUB (LUKS + LVM)

On reboot, my new installation of Debian 10 (amd64) only spits out a GRUB shell. The operating system is not loading. My disk is GPT, with the first parititon being ESP (/dev/sda1), formatted FAT32 ...
1
vote
1answer
148 views

Dependency failed for /boot LUKS on external USB drive after Debian update initramfs

Please somebody help me :( after a firmware update my Debian Sid with encrypted LUKS root does not boot clean anymore. At boot, after inserting my passphrase, there are a bunch of messages and a ...
1
vote
0answers
106 views

Broken LVM Physical volume after resizing partition

I bought a new larger SSD to replace my old one. The old one has 3 partitions, 2 for booting and a third (last) one with LVM2 on LUKS. I did the following to migrate: dd the contents of the old drive ...