Questions tagged [luks]

LUKS (Linux Unified Key Setup) is a disk-encryption specification.

170 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
7
votes
1answer
825 views

How do I cancel a stale “pending” drive mount with error “An operation is already pending”

The An operation is already pending error is very generic and many things can cause this. (other answers don't relate to my problem). I have a Luks encrypted volume that I clicked to open, a password ...
6
votes
1answer
3k views

Linux Tablet: Is there a way to enter a password with onscreen keyboard to unlock a LUKS crypto device during bootup?

I just installed Linux (Ubuntu, but it does not really matter) on an x86-based tablet. I also encrypted a partition which is mounted during bootup. Of course, one usually needs to enter the password ...
4
votes
1answer
6k views

`cryptsetup luksOpen <device> <name>` fails to set up the specified name mapping

HardenedArray has a helpful archlinux-installation guide at Efficient Encrypted UEFI-Booting Arch Installation. However, I encountered difficulty early in the installation process -- specifically, at ...
4
votes
0answers
976 views

Open a LUKS volume as a non-root user?

I'm using cryptsetup to create a LUKS file-based device to stash information in: # create a file as a container dd if=/dev/zero of=zulu.bin bs=1024 count=102400 # create a key dd if=/dev/urandom bs=1 ...
4
votes
0answers
1k views

How to use Dvorak keyboard layout in GRUB2 LUKS passphrase prompt?

I've tried to piece together how to do this from various sources. First approach, based on 1 and 2: $ grep ^HOOKS /etc/mkinitcpio.conf HOOKS="base udev autodetect modconf block lvm2 keyboard keymap ...
4
votes
1answer
527 views

Dropbear terminates before LUKS password prompt on Debian Jessie

I'm trying to use dropbear as a ssh server to unlock an encrypted partition which was created during Debian 8.2 setup. It boots to the password prompt (and unlocks if correct password is typed) but ...
4
votes
0answers
502 views

TPM passwordless boot

I'm trying to create device with CentOS6, encrypted disk (with LUKS), TPM module and TrustedGRUB to boot securely and without interaction. I'm following instructions from https://github.com/shpedoikal/...
4
votes
0answers
4k views

Accessed a TrueCrypt container without TrueCrypt. What dangers await?

I've got a TrueCrypt volume. In light of the unexpected demise of TrueCrypt, I've been trying to figure out what to do (reading lots of HOWTO websites). I'd like something that is simple and can work ...
4
votes
2answers
2k views

Linux Mint MATE: Disable encrypted volume password dialog

I'm running the MATE edition of Linux Mint on my laptop. I have an external USB disk with a LUKS container on it. The USB disk is connected to the laptop's docking station. Whenever I connect the ...
4
votes
0answers
472 views

How to use a samba login to mount a luks container?

Our server has an (dm-crypt/LUKS) encrypted project directory which is currently mounted via SSH before its samba share can be accessed - and obviously no one remembers to unmount it afterwards. (...
3
votes
0answers
131 views

CentOS-8 - Unsealing LUKS volume with TPM2 module - clevis issue

Im trying to get a LUKS volume unlocked by the TPM-module on a Dell Optiplex 3060. The binding seems to work fine: clevis luks bind -d /dev/nvme0n1p3 tpm2 '{"pcr_ids":"7"}' $ luksmeta show -d /dev/...
3
votes
1answer
63 views

Changing LUKS password

I tried changing my LUKS password. Source I used: https://www.linuxexperten.com/content/how-do-i-change-my-luks-encryption-password-and-more I have separate partition’s for Boot, Root, Swap & ...
3
votes
0answers
3k views

Ubuntu 18.04 LUKS boot problems

Problem description I am trying to achieve dualboot of Windows 10 (pre-installed) and Ubuntu 18.04 on a new laptop. This is not very difficult, however it appears to get much more complex if you also ...
3
votes
0answers
272 views

Is it possible to partially recover files from a btrfs raid-0 filesystem with a missing disk?

I've got a bit of a quite terrible situation on my hands and I'm just looking for a bit of insight before calling this a lost cause. To put things into context, I'll just give you my partitioning ...
3
votes
1answer
2k views

Booting to an encrypted Debian install, which has /boot on LVM-on-LUKS

I have a setup with a grub2 bootloader, and the rest of the system on an encrypted partition (LVM-on-LUKS). I have two OSes installed inside of the LUKS container, Kali Sana and Debian 8, as well as a ...
3
votes
0answers
301 views

Earliest I can run xrandr?

Every time I boot my laptop I go blind. I can use xrandr to set the brightness but it becomes a rather impractical. I also use LUKS so when I boot the computer I am always greeted with (from what I ...
3
votes
0answers
785 views

LUKS: Change master key

I've already read this SE question, but it's somewhat old now. How can I reencrypt a LUKS partition using a different master key? I have a cloned VM image that needs to go into production, but it's ...
3
votes
0answers
403 views

LUKS decryption at boot: using an nfs mount to store the key

I've been through this site for a number of LUKS related questions. I've seen methods for storing the LUKS key in plaintext on the root filesystem or on a USB key. My question is: Is there a way ...
3
votes
0answers
1k views

Systemd config for later mounted encrypted volume with services working on it

Hi everyone, I am working on a Banana Pi with Arch Linux and i am currently trying to accomplish the following: After someone mounted the encrypted keyfiles for my external storage systemd shall use ...
3
votes
0answers
379 views

adding encrypted /home in LVM/LUKS

I installed a new (debian) system to an SSD device. After standard install I want to mount /home on the internal HDD. To be able to ask the question, some details: On install I (manually) generated /...
3
votes
0answers
245 views

Replicate a complex partition structure with LUKS and LVM volumes

I have two external hard discs on an OpenSUSE 13.1 system. On one I have created a partition structure: An encrypted LVM partition (LUKS) Several volumes (10) on this LVM partition, some formatted ...
3
votes
0answers
1k views

Creating an encrypted file container as a non-root user

Linux kernel 3.2.0-64-generic here (Ubuntu LTS if someone is wondering about kernel options / modules). I have some file space on this Linux server (~ 24 GB). I would like to use this space as an ...
3
votes
0answers
162 views

luks single signon

I've got LUKS (Linux Unified Key Setup) running on a couple of my Linux boxes. I've looked online but haven't seen anyone document how to make it work in a single signon option, but was hoping ...
2
votes
0answers
15 views

IO Error but badblocks and fsck are happy

I have an ext4 partition with the following underlaying stack: sda1 and sdb1 are together in a RAID1, resulting in md0 md0 is LUKS-encrypted, resulting in md0_crypt on top of md0_crypt is a single ...
2
votes
0answers
64 views

Can I install Debian with encrypted /boot?

Is there a way to install Debian with full disk encryption, including /boot ? Or the only way is to install Debian and encrypt all without /boot and then encrypt /boot using this guide ?
2
votes
1answer
313 views

Extend Luks encrypted partition without using luksOpen command

I just tried to increase encrypted LVM partition. The proceduce is: Extend the partition with fdisk -> Resize PV -> Resize LV -> Increase size file system. Detail steps in https://www.thegeekdiary....
2
votes
0answers
134 views

Broken LVM Physical volume after resizing partition

I bought a new larger SSD to replace my old one. The old one has 3 partitions, 2 for booting and a third (last) one with LVM2 on LUKS. I did the following to migrate: dd the contents of the old drive ...
2
votes
0answers
1k views

Decrypt root device at boot with keyfile on usb - Debian Stretch

Basically what I need is to decrypt root device automatically with a keyfile stored on a usb with a partition scheme (ext3, ext4 I don't mind). I successfully implemented the script method with dd ...
2
votes
0answers
68 views

Strange memory usage pattern using LUKS

I'm setting up and external HDD encrypted with LUKS. After adding the LUKS partition on it, to 1) scramble it a bit (which could be pointless) and 2) check that I can write on all the disk, I did: dd ...
2
votes
1answer
119 views

How to install passphrase screen to a USB stick?

At the beginning of booting Linux a special program asking for passphrase is loaded if your linux is installed to encrypted-lvm, but this can be a security problem if the special program gets ...
2
votes
1answer
1k views

Proper manual OS setup on LUKS encrypted drive with non-aes algorithm on yum-based distro (CentOS)

I'm trying to achieve LUKS-encrypted CentOS 7 install with separate /boot partition and lvm on EFI-friendly motherboard. I've done partitioning fresh CentOS install from old CentOS(installed from GUI)...
2
votes
0answers
261 views

Libvirt managed storage volume encryption of a volume on 'logical' storage pool

I can't figure out how to make encrypted storage volume (managed by libvirt) for a volume which sits on 'logical' pool type (ie. on LVM). # virsh vol-create ocz-5ef92v58m9be7jo9 /tmp/in error: Failed ...
2
votes
0answers
1k views

Centos device /dev/sdb1 is not a valid luks device?

I have Centos on Virtualbox, when I installed Centos I used all 20G. After installation I made extend for more one driver with 5G inside Centos everything is good when I made partitions and file ...
2
votes
0answers
102 views

Macbook pro retina 2013 with full disk encryption boot issue

I have installed Ubuntu 15.10 on Macbook Pro Retina late 2013. It was working well until I break the boot by reinstalling grub. Now I am not able to repair it. I have three partitions: /dev/sda1 - /...
2
votes
0answers
914 views

Black screen after hibernation

I have the problem described here: https://wiki.archlinux.org/index.php/Power_management/Suspend_and_hibernate#Hibernation On the latest version of Arch Linux (4.7.5-1), on a mid-2012 MacBook Air (...
2
votes
1answer
366 views

Resizing boot partition

I need to expand my /boot partition to install updates. I have 200MB /boot partition and then I have 2 LVM partitions - /home and / encrypted by LUKS. Is it possible to shrink LVM partitions by ...
2
votes
1answer
487 views

Dictionary attack GPG symmetric encrypted LUKS keyfile

I remember typing in a long phrase for the password. I wrote all the words I could have possibly used into a plain text file, combining the words I know were used in a certain order. I might have ...
2
votes
0answers
444 views

Make changes to busybox/initramfs that are persistent?

I am in the process of recovering my 32-bit Debian Jessie box with a lvm+LUKS disk. I am coming back from a system that had a root partition but no boot partition. Grub executes, but either vmlinuz or ...
2
votes
0answers
612 views

Kernel 4.1.18 doesn't support aes-xts-plain64

My root partition is under a luks crypt and when I type in my password it tells me to make sure my kernel supports aes-xts-plain64 and to check syslog for more info. Obviously I can't check syslog ...
2
votes
0answers
673 views

ArchLinux: Error installing grub on encrypted lvm partition(lvm on luks)

I am trying to install Arch Linux on an encrypted partition (LVM on LUKS). I followed the relevant Arch Wiki guide, but when I do: grub-install --recheck /dev/sda it gives me this output: grub-...
2
votes
0answers
339 views

Encrypted boot drops to shell, how to set LVM crypttab consistently? 'ALERT! {logical volume path} does not exist'

I used Luks to encrypt my whole hard drive, and created that sda drive as a physical volume. Under that volume, I create a volume group vg00 with my 3 logical volumes lv00_root, lv01_home, and ...
2
votes
0answers
853 views

Unlock LUKS volume without root access - how does that work?

It seems I am trying to do the same as the user who asked this question: Unlock LUKS partition using keyfile without root access? The answer from frostschutz explains that this is impossible. I am ...
2
votes
0answers
765 views

Unable to boot with dracut and luks: '/dev/resume' : file exists

I am installing gentoo and have performed my first reboot after configuration and installation within my chroot environment. I am using LUKS and LVM to manage encryption of my drives. I am encrypting ...
2
votes
1answer
539 views

LUKS: encrypted device is much smaller than its host partition

To store personal data, I have encrypted a partition with LUKS but, according to the file manager, the resulting encrypted device is much smaller: 334 GB versus 385 GB. However, the Disk Utility in ...
2
votes
1answer
633 views

expanding boot, moving LUKS root

GPT > Partition2 > LUKS > btrfs I need some additional space for my boot volume, so far I did: Shrink my btrfs volume by 250MB. btrfs resize -250M / Shrink the LUKS root volume cryptsetup ...
1
vote
0answers
19 views

How to enable discards on encrypted root

I have installed system on ext4 filesystem on lvm (vg name encrypted, root is called encrypted-root) on luks. When I'm trying to run fstrim /, I get fstrim: /: the discard operation is not supported. ...
1
vote
1answer
22 views

It is okay to mount 2 encrypted disks with same UUID

I have 2 harddrives. 1 was empty - let's call it hard2 and other had a working Linux OS - lets call it hard1. I use dd to copy hard1 to hard2, but I could not boot with hard2. I had a error: inode ...
1
vote
1answer
112 views

Booting LUKS Linux installation from external USB disk

Before: SATA internal SSD with a LUKS encrypted ext4 partition (Debian installation) + a small unencrypted boot partition with kernel, initrd and GRUB configuration files After: that same disk is now ...
1
vote
1answer
29 views

luks impact cryptsetup benchmark

i have a laptop with i5-8250U CPU @ 1.60GHz × 4, SSD and 8gb ram and am considering FDE. how do i know if the results i got from running cryptsetup benchmark are good or not? Algorithm | Key | ...
1
vote
0answers
92 views

Slow write speed on encrypted drive, while benchmark shows much higher encryption / raw disk write rates

I currently setup a NAS with Ubuntu 18.04 on a Netgear ReadyNAS 102device. The machine has a Armada Marvell 370/XP SoC with a hardware encryption accelerator called "CESA". The kernel drivers for CESA ...