Questions tagged [luks]

LUKS (Linux Unified Key Setup) is a disk-encryption specification.

Filter by
Sorted by
Tagged with
5
votes
1answer
2k views

unable to open luks encrypted device (wrong password)

I'm using CentOS 7 with a luks encrypted root partition. Usually I have to type my password during boot, but sometimes the system doesn't accept it. It reacts as it was wrong, but it isn't. I did not ...
5
votes
1answer
990 views

dmsetup luksFormat creating an alignment inconsistency

When unlocking a newly-formatted LUKS volume, I received a warning in the kernel log: kernel: device-mapper: table: 253:14: adding target device sdk1 caused an alignment inconsistency: ...
5
votes
2answers
791 views

Partition still encrypted with luks after wipefs

I wiped the disk using wipefs -a /dev/sda. I happily formatted the disk, and it seems that when I'm about to mount /dev/sda3 it says "unknown file system type crypto_LUKS". I did no encryption on ...
5
votes
2answers
3k views

Why does LUKS need to generate hash values?

If you create a new LUKS device, you can specify the option -hash and -iter-time. For example like this: sudo cryptsetup luksFormat --cipher aes-cbc-essiv:sha256 --key-size 256 --iter-time 2100 --...
5
votes
3answers
483 views

LUKS encryption for tape media?

I was wondering, if it was possible to use LUKS encryption with tape drives, QIC for instance. I'm using LUKS for USB drives and internal disks, even DVDs and CDROMs. But I was thinking of maybe ...
5
votes
3answers
3k views

Poor IO due to LUKS/Software RAID/LVM ordering?

I'm trying to determine if I should re-setup my RAID array due to poor IO performance. First off, the system: i7 920 4 4TB WD 5400 Green drives CentOS 6.3 host Secondly, the disk setup: /dev/sda2,...
5
votes
2answers
17k views

luksOpen: No key available with this passphrase

I've created a encrypted volume with LUKS at home and was looking to use it at work too. Unfortunately, that's not possible. Whyever, I'm unable to access the encrypted data on any other computer than ...
5
votes
2answers
2k views

Are there more advanced LUKS key schemes, e.g. 2 of 3 keys needed?

It seems like the two main LUKS encryption options are: USB keyfile (see https://superuser.com/questions/149578/how-can-i-use-a-keyfile-on-a-removable-usb-drive-for-my-encrypted-root-in-debian) ...
5
votes
1answer
11k views

How to interpret `cryptsetup benchmark` results?

Summary: I can run cryptsetup benchmark and sort the results, but seek guidance in their interpretation. E.g., should I give more weight to encryption speed or decryption speed? Should key-derivation ...
5
votes
3answers
1k views

Can I overwrite LUKS partition with it's decrypted content?

I have HDD with my data (partial backup of most important data available on other HDD), currently it's formatted as Ext4 over LVM over LUKS. I want to remove LUKS layer, but reformatting and data ...
5
votes
1answer
7k views

parted: create new partition

I have a 3TB disk, and I understand I have to use parted if I want to create a partition bigger than 2TB. All right then. parted /dev/sdb (parted) mklabel gpt (parted) mkpart primary ...
5
votes
1answer
3k views

NixOS installation on multi-boot system with GRUB (from Arch installation)

I have one physical disk (/dev/sda) which is divided in /dev/sda1 (which is /boot bootable GRUB2 partition used and setup with Arch) and /dev/sda2 which is my cryptroot that, when unlocked, is a ...
5
votes
2answers
454 views

What is the proper way to unlock a root filesystem spanning two LUKS devices by only entering the password once, using systemd?

I have been having a lot of issues getting an encrypted multi-disk root filesystem to boot up reliably under systemd on Debian Jessie while only having to enter the password once. Previously I've ...
5
votes
1answer
460 views

Is there an unencrypted but signed filesystems?

I'm curious if there is a filesystem that's unencrypted, making it readable by anyone, but employs a digital signature scheme so as to require that writes be digitally signed. I suspect the answer ...
5
votes
1answer
3k views

Filesystem types for encrypted partitions

I wish to encrypt two external hard drives using dm-crypt/LUKS for whole-disk encryption. I want one hard drive to have an ext4 filesystem for Linux use only, and the other to have an NTFS filesystem, ...
5
votes
3answers
5k views

LVM Ontop of LUKS using Grub

What am I trying to do? Install Arch with full system encryption (sans boot and media partition) using LVM on top of LUKS on an external hard drive (sdb) using: http://suddenkernelpanic.blogspot.com/...
5
votes
1answer
8k views

lvmetad is not active yet, using direct activation during sysinit

I get the following error message at boot, just before being asked for my master password to access to my encrypted hard-drive (using dm-encrypt): lvmetad is not active yet, using direct activation ...
5
votes
1answer
1k views

How to decrypt an encrypted container via ssh without entering a passphrase while requiring some client authentication?

I log in to a server via public key authentication and then mount a container (using e.g. LUKS/dm-crypt or truecrypt). At the moment, I have to enter the container password manually. Is there a way to ...
4
votes
4answers
973 views

Can I use scrypt to hash for LUKS?

Can scrypt be used as the hashing algorithm for LUKS? Can I tune its parameters? How can I do this?
4
votes
1answer
2k views

Where should I enable discard option?

I'm installing a system on SSD with LUKS and Btrfs, where should I enable discard option for TRIM support? Only /etc/crypttab, only /etc/fstab, everywhere, or nowhere since Btrfs detects SSDs and ...
4
votes
1answer
3k views

Is there a way to encrypt disk without formatting it?

When I was installing my OS, I didn't encrypt. Is there a way to encrypt it now without formatting and without losing any data? I read a few guides how to encrypt and every one says that I need to ...
4
votes
1answer
828 views

Are encrypted volumes more vulnerable to power loss?

I have some encrypted volumes that I use with my Xubuntu machine. One volume is a container file that is mapped to /dev/loop0 and encrypted using plain dm-crypt; another volume is a USB hard drive ...
4
votes
1answer
2k views

How to change luks encryption difficulty on manjaro full disk encrypt

I am using manjaro with full disk encrypt, however, the wait time at boot for decrypt is very long ( i assume because of a high difficulty setting) . How can I change encryption difficulty/ wait time ...
4
votes
1answer
2k views

Is it possible to unlock multiple LUKS devices to form a LVM at boot?

I have the following setup: A LUKS encrypted SSD on which a LVM is used to form the typical linux partitions (/, /home/, etc.). This setup is unlocked at boot by a password. I'm using Debian Jessie. ...
4
votes
1answer
2k views

Installing Debian with encrypted root: installer does not see EFI /boot partition

I am trying to do what I think is a pretty standard setup of encrypted / partition and unencrypted /boot using the Debian installer (for Stretch-rc1). I created /boot by selecting the option EFI ...
4
votes
2answers
522 views

Why does “systemctl start” ask for disk encryption password?

I'm installing Fedora 24 from scratch and writing it up at https://github.com/barrycarter/bcapps/blob/master/FEDORA/README I've reinstalled many many times (and even tried CentOS 7 but gave up on it),...
4
votes
1answer
2k views

Recovering a LUKS partition

I have a drive with 2 partitions 1st is plain ext4 2nd is encrypted LUKS. The partition table has been overwritten. I've found the beginning of the second partition, which I need to recover, thusly:...
4
votes
1answer
958 views

Are remote LUKS volumes mounted locally with sshfs made visible to remote users?

I created an encrypted volume with LUKS and uploaded it to a remote directory on an untrusted host. I can mount it locally though. I first mount the remote directory locally with sshfs and then open ...
4
votes
1answer
2k views

How to salvage a lvm/luks install from custom install

I was battling with setting up a Mint install on an encrypted hard-drive, and I think I partially succeeded. But I cannot boot the system because some configuration is not correct. I have no idea how ...
4
votes
1answer
7k views

Debian error message: “Unable to find LVM volume”, but then boots successfully

I was trying to encrypt all the HDD during the installation process of Debian 8 Jessie using full disk encryption + LVM, and I did it, but, there are a little "problem". Before the system asks me the ...
4
votes
1answer
2k views

Unlock LUKS partition using keyfile without root access?

Is there any way to unlock LUKS partition using keyfile while not having root priviliges? (using sudo is not an option) I know that udisksctl can open LUKS partition, however it can do it only with a ...
4
votes
1answer
531 views

Meaning of fsync() in sshfs+LUKS setup

Background: I'm investigating methods for encrypted storage on untrusted machines. My current setup uses sshfs to access a LUKS-encrypted image on the remote machine, which is decrypted locally and ...
4
votes
1answer
379 views

File containing ext filesystem

Let's suppose I create a file, map it to /dev/loop0, and create a LUKS partition inside dd if=/dev/zero of=myfile bs=1M count=1000 losetup /dev/loop0 myfile cryptsetup -c aes-cbc-essiv:sha256 -s 256 ...
4
votes
2answers
2k views

BCache and disk encryption

I recently bought a new laptop with a 16Gb mSATA SSD cache drive. I haven't used that one yet. I have, however, opted for Ubuntu 13.04 with "Full Disk Encryption" for the main partition (is that what'...
4
votes
1answer
394 views

Encrypted filesystems with swap partitions

A common error that happens with Ubuntu, though not Ubuntu in particular is the options of being able to encrypt the file system at installation time which creates an encrypted swap partition with ...
4
votes
1answer
2k views

how to clone images of drives with LUKS+LVM2?

I have 2 Debian boxes which I need to upgrade. In the past, before upgrading any box, I have used Clonezilla to create an image of each of the box's harddrives for use as disaster backup, in case ...
4
votes
1answer
6k views

`cryptsetup luksOpen <device> <name>` fails to set up the specified name mapping

HardenedArray has a helpful archlinux-installation guide at Efficient Encrypted UEFI-Booting Arch Installation. However, I encountered difficulty early in the installation process -- specifically, at ...
4
votes
0answers
979 views

Open a LUKS volume as a non-root user?

I'm using cryptsetup to create a LUKS file-based device to stash information in: # create a file as a container dd if=/dev/zero of=zulu.bin bs=1024 count=102400 # create a key dd if=/dev/urandom bs=1 ...
4
votes
0answers
1k views

How to use Dvorak keyboard layout in GRUB2 LUKS passphrase prompt?

I've tried to piece together how to do this from various sources. First approach, based on 1 and 2: $ grep ^HOOKS /etc/mkinitcpio.conf HOOKS="base udev autodetect modconf block lvm2 keyboard keymap ...
4
votes
1answer
527 views

Dropbear terminates before LUKS password prompt on Debian Jessie

I'm trying to use dropbear as a ssh server to unlock an encrypted partition which was created during Debian 8.2 setup. It boots to the password prompt (and unlocks if correct password is typed) but ...
4
votes
0answers
502 views

TPM passwordless boot

I'm trying to create device with CentOS6, encrypted disk (with LUKS), TPM module and TrustedGRUB to boot securely and without interaction. I'm following instructions from https://github.com/shpedoikal/...
4
votes
0answers
4k views

Accessed a TrueCrypt container without TrueCrypt. What dangers await?

I've got a TrueCrypt volume. In light of the unexpected demise of TrueCrypt, I've been trying to figure out what to do (reading lots of HOWTO websites). I'd like something that is simple and can work ...
4
votes
2answers
2k views

Linux Mint MATE: Disable encrypted volume password dialog

I'm running the MATE edition of Linux Mint on my laptop. I have an external USB disk with a LUKS container on it. The USB disk is connected to the laptop's docking station. Whenever I connect the ...
4
votes
0answers
472 views

How to use a samba login to mount a luks container?

Our server has an (dm-crypt/LUKS) encrypted project directory which is currently mounted via SSH before its samba share can be accessed - and obviously no one remembers to unmount it afterwards. (...
3
votes
2answers
2k views

How to recover after removing only LUKS key?

In a stupid attempt to disable LUKS encryption, I have done cryptsetup luksRemoveKey to my only key. So now everytime I try to boot my Fedora-21, it asks for the passphrase but obviously does not ...
3
votes
3answers
2k views

How can I get a HASH of the LUKS master key?

From: https://code.google.com/p/cryptsetup/wiki/FrequentlyAskedQuestions 6.15 Can I clone a LUKS container? You can, but it breaks security, because the cloned container has the same header ...
3
votes
1answer
3k views

Decrypt second encrypted LVM during headless server boot?

I've followed this question https://unix.stackexchange.com/questions/5017/ssh-to-decrypt-encrypted-lvm-during-headless-server-boot and successfully remotely decrypted my root drive. However, I have a ...
3
votes
1answer
379 views

How can the root file system be accessed to launch cryptsetup to allow access to the root file system?

I have got laptop with full disk encryption. There is a /boot partion which is not encrypted and the other partition /dev/sda5 is. In order to decrypt, it asks me for the passphrase which is then ...
3
votes
1answer
452 views

Encrypting whole disk with Luks (instead of one big encrypted partition)

Context Encrypting whole new external hard drive with Luks. I.e. it is not a system drive (will be used only to store data, not to boot the OS), and it is completely blank. Observation All ...
3
votes
2answers
6k views

Mount error when automounting a LUKS-encrypted USB flashdrive

UPDATE 1: userone@desktop:~$ sudo umount "/media/userone/New Volume" umount: /media/userone/New Volume: mountpoint not found userone@desktop:~$ sudo cryptsetup luksClose /dev/mapper/luks-04cb4ea7-...

1
2
3 4 5
10