Questions tagged [dm-crypt]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
1 vote
1 answer
537 views

Mount a LUKS partition without manually supplying a passphrase

I'd like to add a LUKS partition to a remote VPS. However, the VPS must automatically re-boot itself occasionally (about every 10 to 14 days) because it auto-installs security updates. Is this ...
QF0's user avatar
  • 125
1 vote
1 answer
1k views

How do I get initramfs to find the root partition on all devices?

I have the following setup: artix linux OS linux-hardened kernel “6.1.24-hardened1-1-hardened” encrypted root partition (no lvm) unencrypted boot partition (GRUB installed) device is a USB stick no ...
user1794392's user avatar
0 votes
1 answer
352 views

Get the raw decrypted filesystem image out from a dm_crypt image file without dm_crypt kernel module and/or root permissions

On my linux box I have a small encrypted file system in an image file, like the following example. This works fine. # Create encrypted filesystem image file dd if=/dev/zero of=fs.img bs=1M count=100 ...
Gusiph's user avatar
  • 1
1 vote
1 answer
333 views

What to keep in mind when partitioning external hard drive with both encrypted ext4 and unencrypted NTFS?

I have an external hard drive that will be partitioned with two partitions, using GPT: ext4 filesystem on a dm-crypt-encrypted partition NTFS filesystem on an unencrypted partition The ext4 ...
Manuel Jacob's user avatar
2 votes
1 answer
9k views

Add new LUKS passphrase or key using existing keyfile for LUKS2 encrypted partition

I have two partitions in my laptop where EFI and /boot resides on the first partition and the rest of linux directories including root resides in second partition which is encrypted with dm-crypt and ...
wildnux's user avatar
  • 123
2 votes
2 answers
2k views

Is there a easy way to encrypt my /home directory?

I'm running Arch Linux and would like to encrypt my personal files in my home directory /home/myusername. What is the recommended way of encrypting it? I've already read about dm-crypt and LUKS. But ...
reonod's user avatar
  • 21
1 vote
1 answer
425 views

Command requires missing /run on read-only filsystem

I am trying to run a command (cryptsetup) on an embedded system using squashfs. It requires /run but that directory does not exist, and I cannot create it since it is read-only. I have an ASUS router ...
Nick's user avatar
  • 678
5 votes
1 answer
4k views

Load dm-crypt on Ubuntu Server 18.04 LTS in Windows Subsystem for Linux 1 or 2

I'm using Windows Subsystem for Linux (WSL1) on my Windows 10 system and tried to delete all data from a USB device and overwrite it with pseudorandom numbers following this tutorial (found it only in ...
AnHeuermann's user avatar
0 votes
1 answer
771 views

disk partition encryption: /etc/crypttab file ignored

I'm fairly new to luks and cryptsetup tool and trying to use them on a Beaglebone to encrypt a partition. I'm able successfully encrypt a partition and then access it and mount the mapped device ...
Rohit's user avatar
  • 1
2 votes
1 answer
5k views

What is the default encryption key-size for dm-crypt / cryptsetup in LUKS mode?

I'm using cryptsetup 2.1.0, for which the default encryption options are (as reported by cryptsetup --help): Default compiled-in device cipher parameters: LUKS: aes-xts-plain64, Key: 256 bits, ...
haelix's user avatar
  • 408
1 vote
3 answers
937 views

Understanding plain dm-crypt, cryptsetup, mapping; securely wiping data using plain dm-crypt

I stumbled upon this while trying to wipe my whole disk using plain dm-crypt as suggested, e.g., here (arch linux wiki): # cryptsetup open --type plain -d /dev/urandom /dev/sda to_be_wiped # dd if=/...
nox's user avatar
  • 216
0 votes
1 answer
187 views

Crypted drive, rsync and no space on half used drive

I have very strange problem that I don't know how to debug further. Drive is WD 2TB. I use it only for backup of my cloud and server data (lot of small files). I'm using linux and dm-crypt.. whole ...
Denis Periša's user avatar
0 votes
1 answer
361 views

LUKS detached header on RHEL 6

Is there any version of cryptsetup which supports LUKS detached header on RHEL-6 ? cryptsetup provides detached header support on RHEL-7 (cryptsetup-1.4 onwards) but not on RHEL-6. I tried building ...
user2255299's user avatar
2 votes
1 answer
2k views

dmcrypt : What happens when userspace crypto wrapper not present?

I am trying to set up an encrypted volume to store files securely. This is done on a NextThingCo pocketchip, but the OS is based on debian so I guessed I would give it a try here first, as my question ...
Paco's user avatar
  • 23
1 vote
2 answers
4k views

LUKS - change keyFile using cryptsetup

cryptsetup utility provides the option to change existing passphrase using luksChangeKey option. This requires the older key-file and other parameters as suggested on the man page. luksChangeKey &...
user2255299's user avatar
1 vote
1 answer
2k views

LUKS - Detached header - where is encryption key stored?

I encrypted a disk using LUKS with detached header. The header was present on a removable disk. Once the mapped device (under /dev/mapper) was created, I removed the disk containing header. I was ...
user2255299's user avatar
5 votes
1 answer
9k views

How to configure grub.cfg to decrypt root partition?

I'm using common "pattern" well known as LVM on LUKS. I have /dev/sda1 which is used for /boot and /dev/sda2 which is dm-crypted partition (default aes-sha512-xts). There are two lvm partitions: one ...
user8896663's user avatar
0 votes
1 answer
702 views

Passing keyfile to create LUKS header

The dm-crypt LUKS utility 'cryptsetup' allows us to specify the key-file in place of passphrase. Looking at the code for cryptsetup I understand that if key-file is specified, the passphrase is not ...
user2255299's user avatar
2 votes
1 answer
2k views

dm-crypt/LUKS, won't mount encrypted drive. Requested offset is beyond real size of device

I screwed up my partition table the other day but had recovered it with TestDisk. After re-writing the partition table, I'm able to boot up into GRUB and subsequently the interface for entering my ...
Moo's user avatar
  • 41
1 vote
0 answers
983 views

dm-crypt+LUKS performance and influence on RAM usage

I'm using dm-crypt + LUKS to encrypt 3 partitions of my disc. Recently I started wondering how does it influence my system.. I know that due to the decryption the boot time is longer, but I would ...
lewiatan's user avatar
  • 123
14 votes
2 answers
34k views

LUKS on Ubuntu 16.04 : unknown filesystem type 'crypto_LUKS'

I'm using (L)Ubuntu 16.04. I would like to backup my files on an external hard drive (sdd) with LUKS. There was no partition (sdd1, etc.) before the cryptsetup command. #sudo cryptsetup -v --cipher ...
aldaron's user avatar
  • 503
1 vote
1 answer
3k views

Arch - GRUB with dm-crypt LUKS on LVM

The last time I had to install Arch was a year or so ago. Grub always gives me the most trouble but I prefer it over syslinux. HOW CAN I GET GRUB TO RECOGNIZE MY ENCRYPTED VOLUME? I get the GRUB ...
David's user avatar
  • 229
2 votes
1 answer
710 views

Can I make a encrypted image by using openssl encrypt tools instead of dmsetup?

Generally, I can create a encrypted ext4 image by do this: fallocate -l 6553600 encrypt.img losetup -f encrypt.img dmsetup create encrypt_disk --table "0 12800 crypt aes 32BYTEKEY 0 /dev/loop0 0" ...
shuofei's user avatar
  • 21
0 votes
1 answer
3k views

dm-crypt with LUKS - /etc/crypttab using either keyfile or passphrase

I have my home partition encrypted using dm-crypt and LUKS header. I have two slots in its header: first one is a passphrase and second is keyfile. I have keyfile on external drive which I use only as ...
Kacper Kołodziej's user avatar
2 votes
2 answers
4k views

can we do the full disk encryption of a already installed Linux machine?

I need some information regarding any possibility to do full disk encryption for a already installed Linux system(e.g centOS or Ubuntu). Is there any default mechanism for FDE present in Linux like "...
Govind Karmakar's user avatar
1 vote
2 answers
4k views

How to recreate encrypted dm-crypt/LUKS partition with predefined UUID on Linux?

I have / and swap area of Ubuntu 14.04 LTS (and Linux Mint 17.1 LTS) encrypted in dm-crypt/LUKS. / and swap area reside in /dev/mapper/UUID_1 and /dev/mapper/UUID_2. Is it possible to recreate the /...
Christianus's user avatar
0 votes
1 answer
203 views

Set parameters for Linux Full Disk Encryption?

How do I change the parameters (algorithm, hash, key-lengh, block-size, IVs, mode-of-operation, key-derivation function etc.) for the encryption being used by Linux built in Full Disk Encryption (...
user3200534's user avatar
2 votes
1 answer
336 views

Setting up remote git repo that is on an encrypted drive?

I would like to set a remote git repo that I will be pushing to regulary, which is easy to do. But I want to set up this remote repo to be on a LUKS (Linux Unified Key Setup) formatted drive (via ...
yarun can's user avatar
  • 1,000
3 votes
1 answer
7k views

dm-crypt+luks: Can I have a separate header without storing it on the luks encrypted device?

I would like to encrypt my external hard drive with dm-crypt+luks, but I am not satisfied with all the information, that the LUKS header is providing in plaintext. So I would like to keep the LUKS ...
user1861174's user avatar
4 votes
0 answers
677 views

Is there a tool like dm-crypt/luks using RSA encryption?

Is there a library/tool available for linux, similar to dm-crypt/LUKS using RSA encryption instead of symmetric ciphers? I want the "public side" to only be able to create these volumes, and the ...
Michael Krupp's user avatar
16 votes
3 answers
17k views

How do I determine what ciphers & cipher modes I can use in dm-crypt/LUKS?

I'm using an Ubuntu-based system, and I'm having difficulty determining what ciphers and cipher modes are available to me. The cryptsetup man page says: "See /proc/crypto for a list of available ...
user avatar
5 votes
2 answers
2k views

Is it possible to add a key to an open luks volume whithout providing a current key?

As the title states, I need to know if there is a method to add a key that doesn't require the user to retype the password / provide a keyfile for an already open luks volume. I'd actually need to ...
user avatar