Questions tagged [luks]

LUKS (Linux Unified Key Setup) is a disk-encryption specification.

Filter by
Sorted by
Tagged with
0
votes
1answer
9 views

Fedora 31 kernels 5.5.10 and 5.5.11 fail when trying to decrypt luks root filesystem after kernel update, but kernel 5.5.8 works

After updating to kernel 5.5.10-200.fc31, Fedora 31 can't decrypt the root file system on boot. After entering the decryption passphrase, the filesystem fails to decrypt. The same happens with kernel ...
0
votes
1answer
20 views

How to have a luks-protected LVM volume mounted at boot

I have my primary Ubuntu install on one disk, and a secondary install (for offline backups of the primary) on another disk. For convenience, I would like the root volume of the second install mounted ...
0
votes
1answer
14 views

Cannot create LUKS encrypted partition: passwords do not match

I use Manjaro Architect 19.0 I've created ext4 partition /dev/sda2 with parted Then I go to luks encryption, select my partition and choose "automatic luks format". It asks for passphrase twice. If I ...
0
votes
2answers
15 views

Unable to enlarge/resize LUKS partition on virtual disk

I have tried different guides and tutorials to enlarge an encrypted LUKS LVM partition, but I am unable to move forward and finish the process as I don't have complete clarity over the structure of ...
0
votes
1answer
62 views

Serious backup options for linux disk (dmcrypt, luks, ext4, ext3, btrfs) normal and encrypted system

Disk/Partition Backup What are the backup options and good practice to make a solid and easy to use full system backup? With the following requirement: Live backup Image backup Encrypted backup ...
1
vote
0answers
15 views

How to enable discards on encrypted root

I have installed system on ext4 filesystem on lvm (vg name encrypted, root is called encrypted-root) on luks. When I'm trying to run fstrim /, I get fstrim: /: the discard operation is not supported. ...
0
votes
0answers
22 views

Setting up NixOS with lvmcache and LUKS-on-LVM

I'm trying to install NixOS 19.09 on a notebook. My disk setup is a 30GB SSD and a 700GB HDD. I decided that I want to use the SSD as cache for the HDD, and also that I want the entire root partition ...
2
votes
1answer
1k views

Proper manual OS setup on LUKS encrypted drive with non-aes algorithm on yum-based distro (CentOS)

I'm trying to achieve LUKS-encrypted CentOS 7 install with separate /boot partition and lvm on EFI-friendly motherboard. I've done partitioning fresh CentOS install from old CentOS(installed from GUI)...
0
votes
0answers
29 views

Arch: Encrypt new HDD with LUKS to be decrypted in boot

I installed archlinux with full disk encryption with LUKS for both of my disks a few years back. So when booting, I need to enter the encryption key for each disk. Now I bought a new HDD and I want to ...
3
votes
2answers
144 views

How to configure a shutdown at the xth wrong entered password?

Having an encrypted hard drive is all well and good, but chances are that if someone is gonna steal your laptop, it’s probably not going to be turned off. Most likely, it will be stolen in a powered-...
0
votes
1answer
36 views

LVM + LUKS is this error okay?

I have a encrypted partition, inside it there exist LVM / and /home. When I start PC it says. Volume group "vg" not found Cannot process volume group vg Please unlock disk sdc2_crypt After I type ...
3
votes
2answers
3k views

LUKS discard/TRIM: conflicting kernel command line options

I'm confused between the various ways that LUKS/dmcrypt/cryptsetup discard /TRIM operations can be enabled via the Linux kernel command line. The dracut manpage: rd.luks.allow-discards Allow ...
1
vote
1answer
22 views

It is okay to mount 2 encrypted disks with same UUID

I have 2 harddrives. 1 was empty - let's call it hard2 and other had a working Linux OS - lets call it hard1. I use dd to copy hard1 to hard2, but I could not boot with hard2. I had a error: inode ...
0
votes
1answer
33 views

Shrink LUKS and btrfs not using LVM

I have been all over Google and can only find directions for LVM on LUKS, or otherwise focused on ext4 but I have a btrfs on a LUKS paritition. There is plenty of advice for growing a LUKS. As for ...
1
vote
1answer
110 views

Booting LUKS Linux installation from external USB disk

Before: SATA internal SSD with a LUKS encrypted ext4 partition (Debian installation) + a small unencrypted boot partition with kernel, initrd and GRUB configuration files After: that same disk is now ...
0
votes
0answers
18 views

Latency issue with encrypted block device

I have an SSD connected via USB. If I use it unencrypted I can manage to get a steady 350 MBytes/sec write performance. If I use it encrypted (with LUKS), I get the same write performance over time, ...
0
votes
1answer
993 views

How to fix external HD?

I have an external HD which is divided into two partitions: an exFAT with 700GB and a LUKS partition with 300GB. I was copying from my computer to the luks partition but it got slow and stucked so I ...
7
votes
2answers
9k views

How do can I tell what encryption is being used with signed in luks?

What command tells you what encryption is being used by a luks partition (all the relevant information initialization vector generation scheme, mode of operation and block cipher primitive).
0
votes
0answers
39 views

PureOSL Luks no longer accepts password

I need help with luks not recognizing my password all of a sudden. I'm using pureos on a librem and I was having trouble getting wine32 installed so one of the things I did was add the debain main ...
2
votes
0answers
60 views

Can I install Debian with encrypted /boot?

Is there a way to install Debian with full disk encryption, including /boot ? Or the only way is to install Debian and encrypt all without /boot and then encrypt /boot using this guide ?
0
votes
1answer
134 views

GRUB2 won't Mount encrypted partitions for Kali 2019.4

While attempting to boot a new installation of Kali Linux 2019.4 on a USB drive it appears GRUB 2.04-5 will not decrypt the root partition: Volume group "cryotic" not found Cannot process volume ...
0
votes
1answer
16 views

luks recovery of key safety hole

i found out that if you forget one of your 1-8 passwords for luks it can still be possible to recover it as a keyfile and then set a new password with that keyfile without remembering your old ...
1
vote
1answer
29 views

luks impact cryptsetup benchmark

i have a laptop with i5-8250U CPU @ 1.60GHz × 4, SSD and 8gb ram and am considering FDE. how do i know if the results i got from running cryptsetup benchmark are good or not? Algorithm | Key | ...
17
votes
3answers
13k views

Best practice to backup a LUKS encrypted device

What's the fastest method to backup and restore a luks encrypted device (e.g. a full encrypted usb-device to a image-file). The usb-device can be decrypted/accessed. I'm looking for a solution to ...
1
vote
2answers
76 views

Mounting a Luks partition

I have backed up a drive with all its partitions using the command dd if=/dev/sda of=/media/oshirowanen/external-drive/backups-2019/full_drive_backup.img /dev/sda is an ssd which has a Linux OS ...
1
vote
1answer
36 views

GRUB2 2 LUKS encrypted OS: attach 2nd luks os

I setted-up ubuntu with encrypting root partition(/boot and /boot/efi are regular ones). Then I reduced size of this partition and created new encrypted. After all, I ran kali installer in expert mode,...
0
votes
0answers
22 views

How can I change the name of an unencrypted LUKS partition mounted as the root filesystem?

When I installed Linux, the block-device-path of my root LUKS device was /dev/md125 and the unencrypted partition was /dev/mapper/md125_crypt. I have since renamed the MD device to /dev/md0, and now I'...
0
votes
1answer
134 views

Unable to install GRUB on dual boot Windows / CentOS 8 (LVM+LUKS)

I have an old laptop with Windows 7 on which I installed CentOS 8 on dual boot. Upon first reboot, GRUB showed only entries for Linux. Therefore I used Boot-Repair-Disk, but it somehow failed to ...
0
votes
1answer
35 views

Converting btrfs raid1 on two disks to btrfs raid1 on two luks-encrypted disks

I have a btrfs raid1 composed of two entire, large harddisks of the same size. Now I would like to migrate the data to a btrfs raid1 composed of two encrypted luks-devices on the same harddisks. I ...
1
vote
2answers
3k views

LUKS partition still accessible after removing drive physically

I have a USB flash drive with Full Disk Encryption using LUKS. I plugged in the drive and mounted it as such using the following: cryptsetup luksOpen /dev/sdb flash mount /dev/mapper/flash /mnt/flash ...
1
vote
1answer
2k views

USB key not mounting at boot to unlock LUKS system

I am running Debian Jessie. I have 2 hard drives with my various partitions spread across both (not RAID). Both of them are separately LUKS encrypted, and LVMs sit upon both of those. My /boot ...
6
votes
1answer
3k views

Linux Tablet: Is there a way to enter a password with onscreen keyboard to unlock a LUKS crypto device during bootup?

I just installed Linux (Ubuntu, but it does not really matter) on an x86-based tablet. I also encrypted a partition which is mounted during bootup. Of course, one usually needs to enter the password ...
1
vote
1answer
95 views

How to resize Logical Volume that is encrypted with LUKS

I'm trying to understand what is the proper way to resize my logical volumes (I want to shrink one and extend other one without adding any additional pv). As far as I understand, according to this ...
0
votes
1answer
22 views

Change partition without affecting LUKS encryption

I want to change one of my partitions from ext4 to something else (xfs or openzfs), the partition is sdc5_crypt and is mounted at startup. My intuition says that I can format it with something like ...
0
votes
0answers
15 views

Reinstall Fedora to other linux on dual boot, both ciphered

I have a laptop, which have two seperate disks: Windows ciphered by VeraCrypt (full disk) Fedora ciphered with LUKS The process of turning on my computer looks like this: Power on. I give a ...
2
votes
1answer
1k views

Debian Full Disk Encryption: Does Debian Installer use LUKS 1 or 2?

During installation, whenever I put /boot inside an LVM on top of LUKS along with swap, / and /home, afterwards when I try to boot into it, it only gives me the minimal bash-like grub terminal. This ...
4
votes
2answers
2k views

Linux Mint MATE: Disable encrypted volume password dialog

I'm running the MATE edition of Linux Mint on my laptop. I have an external USB disk with a LUKS container on it. The USB disk is connected to the laptop's docking station. Whenever I connect the ...
23
votes
4answers
24k views

Extend a LUKS encrypted partition to fill disk

I recently upgraded my disk from a 128GB SSD to 512GB SSD. The / partition is encrypted with LUKS. I'm looking for help extending the partition to use all the free space on the new disk. I've ...
4
votes
1answer
6k views

`cryptsetup luksOpen <device> <name>` fails to set up the specified name mapping

HardenedArray has a helpful archlinux-installation guide at Efficient Encrypted UEFI-Booting Arch Installation. However, I encountered difficulty early in the installation process -- specifically, at ...
1
vote
0answers
88 views

Slow write speed on encrypted drive, while benchmark shows much higher encryption / raw disk write rates

I currently setup a NAS with Ubuntu 18.04 on a Netgear ReadyNAS 102device. The machine has a Armada Marvell 370/XP SoC with a hardware encryption accelerator called "CESA". The kernel drivers for CESA ...
0
votes
1answer
44 views

How to encrypt external disk without backup/restore the existing data?

I have an external USB disk with ext4 unencrypted: /dev/sda1 3.6T 2.9T 613G 83% /data I wish to encrypt this disk without losing data. I migrated this disk from Raspberry3 to Raspberry4, ...
0
votes
1answer
82 views

Make cryptsetup available from the Busybox Ash during boot for remote unlocking

I've tried to set up remote unlocking following online guides like these. First I tried it on ubuntu 18.04, I am trying now in Debian buster. In both cases I was able to set up dropbear to give me ...
0
votes
0answers
47 views

How to auto mount LUKS partition on boot time that contains the other RAID-1 device?

I've set up a server with BTRFS with Single profile. Partition scheme is as follows: /dev/sda: +-- sda1: Boot +-- sda2: LUKS (foo_crypt) +-- LVM (foo) +-- foo-root (BTRFS)...
1
vote
1answer
1k views

Unlock LUKS non-root filesystem partition on boot

I have a system with an unencrypted / partition on Ubuntu 16.04, but with a LUKS encrypted ZFS zpool on 3 partitions. In order for the system to boot properly I want for the LUKS encrypted volumes to ...
0
votes
0answers
41 views

Device found for 'cryptsetup luksFormat` but not `cryptsetup luksAddKey`

I run sudo cryptsetup --hash sha512 --key-file 00.key luksFormat /dev/disk/by-uuid/156e47f9-6996-481c-82ce-160b367b9ff4, everything works as expected: WARNING! ======== This will overwrite data on /...
3
votes
1answer
2k views

Booting to an encrypted Debian install, which has /boot on LVM-on-LUKS

I have a setup with a grub2 bootloader, and the rest of the system on an encrypted partition (LVM-on-LUKS). I have two OSes installed inside of the LUKS container, Kali Sana and Debian 8, as well as a ...
3
votes
1answer
415 views

Encrypting whole disk with Luks (instead of one big encrypted partition)

Context Encrypting whole new external hard drive with Luks. I.e. it is not a system drive (will be used only to store data, not to boot the OS), and it is completely blank. Observation All ...
0
votes
0answers
28 views

Is it possible to regenerate /boot partition of a LUKS drive?

I use Debian. For learning purposes I want to encrypt the whole hard drive. But let's say I am afraid of evil maid attacks so I want to bring my /boot partition with me always, and I put a boot ...
1
vote
0answers
197 views

unknown filesystem type ‘lvm2_member’

I have been trying to install Manjaro in a VirtualBox several times now and every time there is some failure. This latest install attempt with Manjaro-Architect seemed to complete despite a small ...
1
vote
0answers
45 views

Increase size of randomly created encrypted swap

Ubuntu 18.04 is by default creating a random encrypted swap during each boot using dm-crypt/Swap encryption. For me, this is creating a 1gb swap but I cannot find where to increase the size of the ...

1
2 3 4 5
10