Questions tagged [luks]

LUKS (Linux Unified Key Setup) is a disk-encryption specification.

Filter by
Sorted by
Tagged with
2
votes
1answer
944 views

Mounting encrypted external device with conflicting LVM names

I got myself a new hard drive and installed the most current version of Linux Mint. Now I wanted to transfer the files from the old disk (I had no recent backup) but there are several issues the LVMs'...
2
votes
1answer
12k views

How to decrypt a hard drive with LUKS encryption?

today i was installing ubuntu on an external hard drive and in the initial setup i marked the option "encrypt installation" and the clicked the install button, but i didn't notice that my internal ...
2
votes
1answer
732 views

How to remove LUKS encryption after transferring files to an unencrypted disk

My / was originally on an encrypted volume and was transferred to an unencrypted volume by recursively copying every directory, and then grub was reinstalled: sudo -s cp -ax /mnt/encrypted /mnt/...
2
votes
1answer
1k views

how to remove luks encryption from a usb stick

I was looking at this thread to remove the encryption from the usb stick, but it says that the key cannot be removed if its the last. How to remove LUKS encryption? I would simply want the usb stick ...
2
votes
2answers
2k views

LUKS Container creation error: no loop device

I want to create an encrypted LUKS Container: # dd if=/dev/random of=pvt.img bs=1M count=512 # cryptsetup -y luksFormat pvt.img WARNING! ======== This will overwrite data on pvt.img irrevocably. ...
2
votes
1answer
854 views

Can I hide the fact that my USB is LUKS encryted?

Say I have a LUKS encrypted USB (full disk). I am looking for a way to hide the fact that it is a LUKS device. Which strategy would you use to hide the fact that my USB is a LUKS device? My approach ...
2
votes
2answers
4k views

How can I tell if a encrypted (LUKS) device is already open?

Is there a way to tell, given a path to a LUKS block device, and not knowing the passphrase, whether the device is already open (decrypted)? What about knowing the path to the decrypted device?
2
votes
1answer
1k views

LUKS: 1 master key but multiple passwords and key files?

After reading "man cryptsetup" and many StackExchange questions, I'm confused: Does LUKS use the same master key in each slot? If I execute the commands below, the displayed master key does not ...
2
votes
1answer
6k views

Cannot format device /dev/sda4 which is still in use

When I try to LUKS encrypt a partition on a CentOS 7 server using the command cryptsetup -y luksFormat /dev/sda4, the attempt fails with the error Cannot format device /dev/sda4 which is still in use. ...
2
votes
1answer
251 views

Secure deletion on BTRFS in LVM

I have a BTRFS filesystem in an LVM logical volume, which exists inside of a LUKS disk. For reference's sake, let's call the LV lvm-root, and the LUKS disk crypt-root, and the BTRFS filesystem fs-root....
2
votes
2answers
227 views

Kernel panic if LUKS password is bad x times

Q: Is it normal if a RHEL 6.5 machine kernel panics if I type the LUKS password a few times wrong?
2
votes
1answer
1k views

Dm-Crypt system encryption with different keys per user

I have found the following example configuration for a system encryption: Example 5: paranoid system encryption • whole hard drive encrypted with dm-crypt+LUKS └──> unlocked before boot, ...
2
votes
1answer
143 views

Using space before 1st partition of USB-Stick as luks key

I'm using arch linux with an encrypted luks root partition (boot unencrypted), with a passphrase yet. Now I have a keyfile (3072 bytes), that's written to USB-Stick this way: sudo dd if=tempKeyFile....
2
votes
2answers
137 views

script to automate luksHeaderBackup for multiple partitions

I have several servers each with at least six dm-crypt partitions. I would like to have an automated way to make sure I always have a luks header backup stored in a safe place. I've been making header ...
2
votes
2answers
340 views

Replace LUKS partition with ext4 partition with same contents

I have a LUKS (Linux Unified Key Setup) partition that contains the rootfs. I wish to replace it with an unencrypted ext4 partition containing the same rootfs. Having searched far and wide I've seen ...
2
votes
2answers
2k views

How to specify cryptdevice by label using systemd boot?

I'm running Arch Linux with systemd boot. In /boot/loader/entries/arch.conf I currently specify the luks crypto device with a line like this: options rw cryptdevice=/dev/sda1:ABC root=/dev/...
2
votes
1answer
65 views

The password of previously encrypted volume got changed by the Debian installer

I already did some research on my question (see below), and it's as good as a 'done deal' but I would still like to put forward my problem to this knowledgeable community. Short version of the issue: ...
2
votes
1answer
1k views

How to reinstall Ubuntu 16.04 and reuse encrypted home partition

Before the reinstall, I already had Ubuntu 16.04 installed and set up with an encrypted home partition. Now, I tried to reinstall and configure it so that basically the same setup is used again: For ...
2
votes
1answer
3k views

Using LUKS keyfile on external USB with grub

I am trying to encrypt my laptop with an external USB disk. However, every time I boot up grub prompts me with a 'Enter passphrase for $DISK ($UUID):'. This prompt allows me to unlock the disk with ...
2
votes
1answer
1k views

How to install Arch Linux root file system on LVM thin LVs on LUKS on GUID partitioned device?

I'm not able to boot a freshly installed Arch Linux system with its root file system residing on a LVM thinly provisioned logical volume on a LUKS encrypted partition on a GUID partitioned device. ...
2
votes
2answers
4k views

NFS v4 export encrypted partition. Client mounts empty dir

I have an encrypted hard drive on my Lan Server. It was encrypted using luks/dm-crypt. The server has a NFS v4 running to share files in the Lan. It works, except for the encrypted USB hard drive. If ...
2
votes
1answer
465 views

Is it safe to reencrypt unencrypted mdadm array with LUKS?

I would like to convert my raid6 mdadm into encrypted LUKS. Right now raid6 consists of "/dev/sdX1" which are raid partitions. /dev/md0 doesn't have a partition - it is pure ext4 FS. Is it safe to ...
2
votes
1answer
99 views

Does the speed of a USB bootloader matter?

What I am trying to do Create an encrypted arch linux setup using LUKS. Bootloader must be on USB. QUESTION Does the speed of USB-device matter? Does the system contiously use the bootloader to ...
2
votes
1answer
2k views

cryptsetup luksFormat - cannot open device for read-only access

I created a new partition that I would like to encrypt with LUKS. The device is a 1GB partition with ID 83 (Linux). I've changed the owner to root, and chmod to 777. The command I'm using is : ...
2
votes
1answer
2k views

Physical volumes, logical volumes, superblocks gone… how to boot?

A story fairly similar to this one happened to me yesterday. Update: My only hard drive /dev/sda was originally partitioned this way: Device Boot Start End Blocks Id System /dev/...
2
votes
1answer
118 views

LVM + LUKS partition - Is this architecture dependent or independent?

I've been recently dealing with an LVM + LUKS partition trying to install a new linux (ubuntu in this case). I tried a few different options to make it work, but the pc resisted, the only system I ...
2
votes
1answer
278 views

Can I migrate a LUKS partition from a passphrase to a keyfile?

Let's say I have a LUKS-formatted partition, and it's secured using the passphrase "test123". Can I migrate this partition to a key-based mechanism, without loss of data?
2
votes
2answers
2k views

Provide passphrase to plymouth ask-for-password from command line

I'm working on booting a headless server (Fedora 16), entering the passphrase to decrypt the root disk (LUKS) over SSH using dropbear. I've got dropbear all working: I can SSH to the server while it's ...
2
votes
1answer
1k views

Migrate Arch from encrypt to sd-encrypt

I recently installed Antergos (which is basically Arch) and set it to use full disk encryption. Now, I want to migrate from encrypt to sd-encrypt because I want to be able to hibernate and I couldn't ...
2
votes
1answer
980 views

invalid line /etc/crypttab

I am troubleshooting a debian system that will not boot; the system booted fine, and one day ceased to do so (possibly but not definitely related to an apt upgrade). It has a small boot partition (...
2
votes
1answer
186 views

Dual boot setup with LUKS and rEFInd: Can't Restore Backup to Second Partition

I have a dual boot setup on a Windows machine with multiple partitions, the two Linux ones being encrypted using LUKS. For some reason, I can no longer restore a backup to my second Linux LUKS ...
2
votes
1answer
822 views

additional LUKS partition does not mount on boot

I am attempting to add a new LUKS encrypted hard drive to my 18.04 setup. I already have 3 drives (2 of which are RAID) that have LUKS and they work fine - when my computer boots, I get prompted to ...
2
votes
1answer
271 views

Fastest way to count zero bytes on a partition

My root and home partitions are LUKS-encrypted. I wish to have discard/TRIM enabled on them (I'm aware of security implications). If my understanding is correct, this should result in discarded areas ...
2
votes
2answers
676 views

Slow Write Speed(<2 MB/s) on Unencrypted and LUKS Encrypted ext4 filesystems using mdadm Software RAID1 Debian 8 Dell PowerEdge T330 Server

We have installed Debian 8 on a new Dell PowerEdge T330, there are two partitions, / and /var, in a RAID1 array using mdadm. During testing the primary applications: mysql and tomcat were stopped. We ...
2
votes
1answer
236 views

Install UEFI boot loader for second Linux on existing disk

I had an existing Linux on a disk with free space. The existing / partition was too small, so I created new partitions for / and separate /home, then rsynced files over - from old / to new / and /...
2
votes
1answer
130 views

LUKS on an internal hard drive

I have a hard drive which is encrypted using LUKS. It was originally an external hard drive. Recently I removed the casing and connected it directly (via SATA). However, when I connect it directly, I'...
2
votes
1answer
4k views

Grub cryptdevice with changing device names?

I feel this is a stupid question. I have an encrypted Arch setup (without LVM) were a single disk (sdc) contains an unencrypted boot partition and the encrypted root partition. Below the output of ...
2
votes
1answer
1k views

LUKS: Enter passphrase and nothing happens

I've installed gentoo on my new laptop. I've got an LUKS-encrypted root partition (/dev/sda3). Cryptsetup (USE="gcrypt") is installed. Essential cryptographic API is compiled in kernel. Kernel and ...
2
votes
1answer
603 views

Auto de-crypt all LUKS partitions in Debian

I use Debian Wheezy and have all partitions encrypted using LUKS, except /boot. I want to decrypt the partitions automatically without having to type the password in each of the 7 encrypted partitions ...
2
votes
3answers
952 views

Automatically suspend luks volume after delay

Anyone have any ideas for how I can automatically do a luksSuspend on a luks volume after it's been unused for a certain amount of time. I was thinking of just scheduling a command with crontab or ...
2
votes
0answers
14 views

IO Error but badblocks and fsck are happy

I have an ext4 partition with the following underlaying stack: sda1 and sdb1 are together in a RAID1, resulting in md0 md0 is LUKS-encrypted, resulting in md0_crypt on top of md0_crypt is a single ...
2
votes
0answers
64 views

Can I install Debian with encrypted /boot?

Is there a way to install Debian with full disk encryption, including /boot ? Or the only way is to install Debian and encrypt all without /boot and then encrypt /boot using this guide ?
2
votes
1answer
312 views

Extend Luks encrypted partition without using luksOpen command

I just tried to increase encrypted LVM partition. The proceduce is: Extend the partition with fdisk -> Resize PV -> Resize LV -> Increase size file system. Detail steps in https://www.thegeekdiary....
2
votes
0answers
133 views

Broken LVM Physical volume after resizing partition

I bought a new larger SSD to replace my old one. The old one has 3 partitions, 2 for booting and a third (last) one with LVM2 on LUKS. I did the following to migrate: dd the contents of the old drive ...
2
votes
0answers
1k views

Decrypt root device at boot with keyfile on usb - Debian Stretch

Basically what I need is to decrypt root device automatically with a keyfile stored on a usb with a partition scheme (ext3, ext4 I don't mind). I successfully implemented the script method with dd ...
2
votes
1answer
577 views

Unable to make Grub2 boot Kali with LVM+LUKS [duplicate]

I need to dual boot Win10 and encrypted Kali in an UEFI system. Booting windows is not a problem, i will add an entry in GRUB later, the problem is that as i power on the machine, GRUB loads ...
2
votes
1answer
870 views

Booting from LVM on encrypted device

I've just finished a Debian install and I'm trying to boot. I've encrypted my hard drive (LUKS) without partitioning and set up LVM on it. I don't have a separate boot volume, so the system will boot ...
2
votes
0answers
68 views

Strange memory usage pattern using LUKS

I'm setting up and external HDD encrypted with LUKS. After adding the LUKS partition on it, to 1) scramble it a bit (which could be pointless) and 2) check that I can write on all the disk, I did: dd ...
2
votes
1answer
748 views

Debian Stretch hangs at boot with “Please unlock disk xxx” error after upgrade from Debian Jessie

I upgraded my server from Debian Jessie to Debian Stretch without any issue before the reboot. After rebooting, the server now hangs with the message "Please unlock disk xxx". The disk in question is ...
2
votes
1answer
119 views

How to install passphrase screen to a USB stick?

At the beginning of booting Linux a special program asking for passphrase is loaded if your linux is installed to encrypted-lvm, but this can be a security problem if the special program gets ...

1 2 3
4
5
10