Questions tagged [luks]

LUKS (Linux Unified Key Setup) is a disk-encryption specification.

Filter by
Sorted by
Tagged with
0
votes
1answer
23 views

Trying to recover a deleted encrypted partition

I have deleted the root partition on my ubuntu box. The partition was encrypted with LUKS So far I have managed to find the partition and decrypt it with losetup -o 0xXXXXXXXX -r -f /dev/sda ...
2
votes
0answers
15 views

IO Error but badblocks and fsck are happy

I have an ext4 partition with the following underlaying stack: sda1 and sdb1 are together in a RAID1, resulting in md0 md0 is LUKS-encrypted, resulting in md0_crypt on top of md0_crypt is a single ...
0
votes
2answers
24 views

Fedora 31 kernels 5.5.10 and 5.5.11 fail when trying to decrypt luks root filesystem after kernel update, but kernel 5.5.8 works

After updating to kernel 5.5.10-200.fc31, Fedora 31 can't decrypt the root file system on boot. After entering the decryption passphrase, the filesystem fails to decrypt. The same happens with kernel ...
0
votes
1answer
21 views

How to have a luks-protected LVM volume mounted at boot

I have my primary Ubuntu install on one disk, and a secondary install (for offline backups of the primary) on another disk. For convenience, I would like the root volume of the second install mounted ...
0
votes
1answer
14 views

Cannot create LUKS encrypted partition: passwords do not match

I use Manjaro Architect 19.0 I've created ext4 partition /dev/sda2 with parted Then I go to luks encryption, select my partition and choose "automatic luks format". It asks for passphrase twice. If I ...
0
votes
2answers
16 views

Unable to enlarge/resize LUKS partition on virtual disk

I have tried different guides and tutorials to enlarge an encrypted LUKS LVM partition, but I am unable to move forward and finish the process as I don't have complete clarity over the structure of ...
1
vote
0answers
19 views

How to enable discards on encrypted root

I have installed system on ext4 filesystem on lvm (vg name encrypted, root is called encrypted-root) on luks. When I'm trying to run fstrim /, I get fstrim: /: the discard operation is not supported. ...
0
votes
0answers
25 views

Setting up NixOS with lvmcache and LUKS-on-LVM

I'm trying to install NixOS 19.09 on a notebook. My disk setup is a 30GB SSD and a 700GB HDD. I decided that I want to use the SSD as cache for the HDD, and also that I want the entire root partition ...
0
votes
0answers
29 views

Arch: Encrypt new HDD with LUKS to be decrypted in boot

I installed archlinux with full disk encryption with LUKS for both of my disks a few years back. So when booting, I need to enter the encryption key for each disk. Now I bought a new HDD and I want to ...
0
votes
1answer
38 views

LVM + LUKS is this error okay?

I have a encrypted partition, inside it there exist LVM / and /home. When I start PC it says. Volume group "vg" not found Cannot process volume group vg Please unlock disk sdc2_crypt After I type ...
1
vote
1answer
22 views

It is okay to mount 2 encrypted disks with same UUID

I have 2 harddrives. 1 was empty - let's call it hard2 and other had a working Linux OS - lets call it hard1. I use dd to copy hard1 to hard2, but I could not boot with hard2. I had a error: inode ...
0
votes
1answer
39 views

Shrink LUKS and btrfs not using LVM

I have been all over Google and can only find directions for LVM on LUKS, or otherwise focused on ext4 but I have a btrfs on a LUKS paritition. There is plenty of advice for growing a LUKS. As for ...
0
votes
1answer
72 views

Serious backup options for linux disk (dmcrypt, luks, ext4, ext3, btrfs) normal and encrypted system

Disk/Partition Backup What are the backup options and good practice to make a solid and easy to use full system backup? With the following requirement: Live backup Image backup Encrypted backup ...
0
votes
0answers
18 views

Latency issue with encrypted block device

I have an SSD connected via USB. If I use it unencrypted I can manage to get a steady 350 MBytes/sec write performance. If I use it encrypted (with LUKS), I get the same write performance over time, ...
2
votes
0answers
64 views

Can I install Debian with encrypted /boot?

Is there a way to install Debian with full disk encryption, including /boot ? Or the only way is to install Debian and encrypt all without /boot and then encrypt /boot using this guide ?
0
votes
0answers
40 views

PureOSL Luks no longer accepts password

I need help with luks not recognizing my password all of a sudden. I'm using pureos on a librem and I was having trouble getting wine32 installed so one of the things I did was add the debain main ...
1
vote
1answer
112 views

Booting LUKS Linux installation from external USB disk

Before: SATA internal SSD with a LUKS encrypted ext4 partition (Debian installation) + a small unencrypted boot partition with kernel, initrd and GRUB configuration files After: that same disk is now ...
0
votes
1answer
16 views

luks recovery of key safety hole

i found out that if you forget one of your 1-8 passwords for luks it can still be possible to recover it as a keyfile and then set a new password with that keyfile without remembering your old ...
1
vote
1answer
29 views

luks impact cryptsetup benchmark

i have a laptop with i5-8250U CPU @ 1.60GHz × 4, SSD and 8gb ram and am considering FDE. how do i know if the results i got from running cryptsetup benchmark are good or not? Algorithm | Key | ...
0
votes
0answers
22 views

How can I change the name of an unencrypted LUKS partition mounted as the root filesystem?

When I installed Linux, the block-device-path of my root LUKS device was /dev/md125 and the unencrypted partition was /dev/mapper/md125_crypt. I have since renamed the MD device to /dev/md0, and now I'...
1
vote
1answer
39 views

GRUB2 2 LUKS encrypted OS: attach 2nd luks os

I setted-up ubuntu with encrypting root partition(/boot and /boot/efi are regular ones). Then I reduced size of this partition and created new encrypted. After all, I ran kali installer in expert mode,...
0
votes
1answer
151 views

Unable to install GRUB on dual boot Windows / CentOS 8 (LVM+LUKS)

I have an old laptop with Windows 7 on which I installed CentOS 8 on dual boot. Upon first reboot, GRUB showed only entries for Linux. Therefore I used Boot-Repair-Disk, but it somehow failed to ...
1
vote
1answer
97 views

How to resize Logical Volume that is encrypted with LUKS

I'm trying to understand what is the proper way to resize my logical volumes (I want to shrink one and extend other one without adding any additional pv). As far as I understand, according to this ...
0
votes
1answer
39 views

Converting btrfs raid1 on two disks to btrfs raid1 on two luks-encrypted disks

I have a btrfs raid1 composed of two entire, large harddisks of the same size. Now I would like to migrate the data to a btrfs raid1 composed of two encrypted luks-devices on the same harddisks. I ...
0
votes
1answer
22 views

Change partition without affecting LUKS encryption

I want to change one of my partitions from ext4 to something else (xfs or openzfs), the partition is sdc5_crypt and is mounted at startup. My intuition says that I can format it with something like ...
0
votes
0answers
15 views

Reinstall Fedora to other linux on dual boot, both ciphered

I have a laptop, which have two seperate disks: Windows ciphered by VeraCrypt (full disk) Fedora ciphered with LUKS The process of turning on my computer looks like this: Power on. I give a ...
0
votes
1answer
46 views

How to encrypt external disk without backup/restore the existing data?

I have an external USB disk with ext4 unencrypted: /dev/sda1 3.6T 2.9T 613G 83% /data I wish to encrypt this disk without losing data. I migrated this disk from Raspberry3 to Raspberry4, ...
0
votes
1answer
144 views

GRUB2 won't Mount encrypted partitions for Kali 2019.4

While attempting to boot a new installation of Kali Linux 2019.4 on a USB drive it appears GRUB 2.04-5 will not decrypt the root partition: Volume group "cryotic" not found Cannot process volume ...
1
vote
0answers
92 views

Slow write speed on encrypted drive, while benchmark shows much higher encryption / raw disk write rates

I currently setup a NAS with Ubuntu 18.04 on a Netgear ReadyNAS 102device. The machine has a Armada Marvell 370/XP SoC with a hardware encryption accelerator called "CESA". The kernel drivers for CESA ...
0
votes
1answer
85 views

Make cryptsetup available from the Busybox Ash during boot for remote unlocking

I've tried to set up remote unlocking following online guides like these. First I tried it on ubuntu 18.04, I am trying now in Debian buster. In both cases I was able to set up dropbear to give me ...
0
votes
0answers
49 views

How to auto mount LUKS partition on boot time that contains the other RAID-1 device?

I've set up a server with BTRFS with Single profile. Partition scheme is as follows: /dev/sda: +-- sda1: Boot +-- sda2: LUKS (foo_crypt) +-- LVM (foo) +-- foo-root (BTRFS)...
1
vote
2answers
76 views

Mounting a Luks partition

I have backed up a drive with all its partitions using the command dd if=/dev/sda of=/media/oshirowanen/external-drive/backups-2019/full_drive_backup.img /dev/sda is an ssd which has a Linux OS ...
0
votes
0answers
47 views

Device found for 'cryptsetup luksFormat` but not `cryptsetup luksAddKey`

I run sudo cryptsetup --hash sha512 --key-file 00.key luksFormat /dev/disk/by-uuid/156e47f9-6996-481c-82ce-160b367b9ff4, everything works as expected: WARNING! ======== This will overwrite data on /...
3
votes
1answer
449 views

Encrypting whole disk with Luks (instead of one big encrypted partition)

Context Encrypting whole new external hard drive with Luks. I.e. it is not a system drive (will be used only to store data, not to boot the OS), and it is completely blank. Observation All ...
0
votes
0answers
28 views

Is it possible to regenerate /boot partition of a LUKS drive?

I use Debian. For learning purposes I want to encrypt the whole hard drive. But let's say I am afraid of evil maid attacks so I want to bring my /boot partition with me always, and I put a boot ...
1
vote
0answers
200 views

unknown filesystem type ‘lvm2_member’

I have been trying to install Manjaro in a VirtualBox several times now and every time there is some failure. This latest install attempt with Manjaro-Architect seemed to complete despite a small ...
1
vote
0answers
46 views

Increase size of randomly created encrypted swap

Ubuntu 18.04 is by default creating a random encrypted swap during each boot using dm-crypt/Swap encryption. For me, this is creating a 1gb swap but I cannot find where to increase the size of the ...
0
votes
1answer
94 views

Can't boot from encrypted disk after deleting swap-memory partition [issue]

I can't login anymore into my encrypted disk. After writing the password: error: no such cryptodisk found. error: disk ‘cryptouuid/HEXstring’ not found. Entering rescue mode… intuitively that string ...
0
votes
2answers
69 views

mount crypto_LUKS partition without decrypting (locally)

I have an encrypted external disk on a linux server. On the server, I can do this locally to decrypt cryptsetup -d keyfile luksOpen /dev/sdx1 /mnt/decrypted but I prefer to avoid doing that on the ...
1
vote
2answers
118 views

how many key slots does the luks2 support?

luks1 has limit of 8. But I just accidentally add 9 slots to luks2 (from 0 to 8). I wonder what is the limit for luks2? Keyslots: 0: luks2 Key: 512 bits Priority: normal ...
0
votes
1answer
136 views

Can I boot a LUKS encrypted system without editing /etc/crypttab and rebuilding the initramfs in Ubuntu?

I am trying to boot an encrypted Ubuntu system without needing to have a custom initramfs for each disk I boot. I currently use Funtoo/Gentoo and have a generic initramfs in which I specify the UUID ...
1
vote
2answers
49 views

why cryptsetup cannot use /dev/fd/63 as keyfile?

# cryptsetup luksOpen /dev/somedevice --key-file <(gpg2 somekeyfile.gpg) always failed with Failed to open key file. Is there any way to make this work? --key-file - also fails. The only thing I ...
1
vote
1answer
73 views

Mount points in /etc/fstab on Debian system for an encrypted partition

I recently installed Debian 10 on my laptop and for the first time I decided to give file encryption a go. But I've found something interesting in the /etc/fstab file, and it's that it doesn't use ...
3
votes
0answers
131 views

CentOS-8 - Unsealing LUKS volume with TPM2 module - clevis issue

Im trying to get a LUKS volume unlocked by the TPM-module on a Dell Optiplex 3060. The binding seems to work fine: clevis luks bind -d /dev/nvme0n1p3 tpm2 '{"pcr_ids":"7"}' $ luksmeta show -d /dev/...
3
votes
1answer
63 views

Changing LUKS password

I tried changing my LUKS password. Source I used: https://www.linuxexperten.com/content/how-do-i-change-my-luks-encryption-password-and-more I have separate partition’s for Boot, Root, Swap & ...
0
votes
2answers
60 views

Encrypted partitions appear as one

I wrote a partition table manually during a system installation which contains an encrypted part, the /boot partition and an unpartitioned rest. Although I first created the partitions (manually each) ...
1
vote
1answer
799 views

Error unlocking a LUKS partition (failed to activate device:file exists)

I'm having problems unlocking a luks-encrypted disk with KDE dolphin, in a system with manjaro. The issue is not critical. It can be solved by rebooting, but sometimes it is not convenient to do so, ...
2
votes
1answer
1k views

Debian Full Disk Encryption: Does Debian Installer use LUKS 1 or 2?

During installation, whenever I put /boot inside an LVM on top of LUKS along with swap, / and /home, afterwards when I try to boot into it, it only gives me the minimal bash-like grub terminal. This ...
0
votes
1answer
118 views

Encrypt multiple partitions with luks cryptsetup

The other day I tried to setup a Full disk encryption on a test system (ArchLinux) within virtualbox. (I want to use this kind of a setup on my main machine so I wanted to test it out first) I ...
0
votes
1answer
369 views

LUKS: Wrong Password or Corrupt Headers?

I'm trying to gain access to my LUKS partitions after suddenly discovering that my password stopped working on all 4 LUKS partitions. 7 days ago when I tried booting and logging into my linux OS, my ...

1
2 3 4 5
10