Questions tagged [luks]

LUKS stands for Linux Unified Key Setup, a disk-encryption specification. (It does not refer to Rodopi Luks cigarettes!)

Filter by
Sorted by
Tagged with
0
votes
0answers
11 views

Random LUKS disks won't mount after adding new disks

I have a JBOD array of disks running on Ubuntu 18.04. For the sake of not having to deal with wiping them if/when fail they are all an XFS partition within a LUKS container. In /etc/crypttab I have ...
0
votes
1answer
57 views

Why does cryptsetup fail with container 10M in size?

I'm trying to create an encrypted volume 10M in size. I know this is possible because I have tombs that are 10M in size. I've run the following commands. fallocate -l 10M container cryptsetup -y -v ...
1
vote
0answers
6 views

Recover master key from active LUKS partition

I have an open LUKS partition (open meaning that it is decrypted and mounted) the passphrase to which I would like to recover. It used to be possible to just add a new key slot by recovering the ...
0
votes
0answers
14 views

LUKS2 encrypt bootable UEFI USB drive - GRUB loads iso

Dears, Please help me with this: My scenario is to have a bootable UEFI USB drive what is encrypted, and once decryption password provided it loads an iso file (ubuntu live). So I presume I should ...
0
votes
1answer
46 views

Running cryptsetup commands without sudo permissions

I'm trying to figure out how to run cryptsetup commands without the use of sudo. This is so a non-root user could run a script to unlock and mount two luks-encrypted drives when they are needed, ...
0
votes
0answers
9 views

Thecus NAS USB Crypt Key - How to Backup?

Hej, I encrypted my Thecus n2350 RAID. I would like to backup the key from the usb Image. I plugged in the USB Stick to my Linux, fdisk -l show a /dev/mapper/luks-c1f80955-5030-4fa6-96ad-...
0
votes
0answers
48 views

How safe is VMWare encryption?

VMWare encryption is really safe ? It would resist attacks like than a LUKS container ?? Or create a LUKS container and then place the plain virtual disk inside it would be more resistant and secure ?...
0
votes
0answers
72 views

What would have better performance for VMWare Workstation? Encrypted container or encripted virtual disk?

What would have better performance using VMWare Workstation? Create an encrypted LUKS container and then create the plain virtual disk ? or Just create the encrypted virtual disk and save as it is ...
3
votes
1answer
90 views

How can I reinstall Ubuntu focal 20.04 on an existing LUKS encrypted system?

I'm a very long time Ubuntu user (over a decade) but have not been here as I've had no issues with Ubuntu. With the arrival of Ubuntu 20.04 LTS I decided to encrypt my data (or system if needed). I'm ...
0
votes
0answers
40 views

Encrypting the hard drive without formatting

Is there a way to encrypt an hard drive in ubuntu after installation? I know we can encrypt while installing the OS but I dont want to re-install the OS. There are 300gb of files and applications ...
0
votes
0answers
14 views

LUKS full disk encryptation + USB key

I go this setup working, but when the USB key is not present, Grub shows the message: Keyfile could not be opened, reverting to passphrase I don't want it to give the user this possibility, I want ...
0
votes
0answers
26 views

HOW TO: Manjaro LUKS encryption with a keyfile from a pendrive

I installed a default installation of manjaro, with full disk LUKS encryption enabled. It works fine, every time I start my system I'm asked for a password Well I'd like to stop being asked for a ...
0
votes
0answers
29 views

How to implement dm-integrity?

I am currently planning the setup of my new NAS using Debian 10. So far I've got the following stack: 2x HDD --> MD RAID-1 --> LUKS --> LVM --> BTRFS + Subvolumes I plan to add more ...
0
votes
0answers
40 views

Encrypted Disk, Stuck At GRUB Command Line

While I am trying to install Kali Linux to a USB drive, I can't install GRUB. I get the error grub-install dummy failed. As I said in the title, my disk is LUKS encrypted and has a /boot partition. So ...
0
votes
0answers
23 views

How to mount an encrypted HDD on Debian?

I have a laptop running Debian on a SDD and I mounted a HDD using a Caddy. So my file system looks like this sda1 -> Debian sda2 -> Debian sda3 -> Debian sdb -> My new ext4 HDD I want ...
0
votes
0answers
21 views

Decrypting LUKS encrypted disk by grub take different ammount of time ( a long time )

I've setup GRUB with /boot encrypting option on my computer. It sometimes takes about 2 seconds to decrypt the drive, sometimes absurd 30 seconds. In this case GRUB also writes something, but it ...
1
vote
1answer
109 views

sd-encrypt with keyfile on optional external partition

Context I have an encrypted /home partition, which can be unlocked with a passphrase and a keyfile. This keyfile is on a USB drive which I keep at home. This means that someone who steals my laptop ...
0
votes
0answers
26 views

Recover data from LUKS encrypted LVM partition

I have an encrypted drive with an installed Debian OS on it. I has been giving me errors lately when I tried to boot into it, but yesterday didn't boot anymore. It crashed after I entered the password,...
1
vote
0answers
40 views

SSD, HDD, lvm on luks, btrfs, efi

I want to install Ubuntu desktop 20.04 on my laptop (which has an SSD and an HDD) using this scheme: Create luks2 container on each drive and lvms inside them. Format ssd's lvm as btrfs for using ...
0
votes
1answer
47 views

Is there a easy way to encrypt my /home directory?

I'm running Arch Linux and would like to encrypt my personal files in my home directory /home/myusername. What is the recommended way of encrypting it? I've already read about dm-crypt and LUKS. But ...
1
vote
1answer
43 views

Security of Cryptsetup partition on Raspberry PI

I cannot open one of my LUKS partitions on Raspberry PI due to the memory restriction. I already found out that the suggestion in this case is to recreate the partition on the slowest device, which ...
1
vote
2answers
386 views

Can't read superblock on RAID 10 LUKS array after rsync freeze (Ubuntu Server 18.04.3 with Budgie desktop)

During an rsync from an external LUKS raid 10 array (connected by e-sata) to an internal drive, the OS froze. After rebooting, I can no longer access the external raid 10. When I click on it I get ...
0
votes
0answers
116 views

How do 240 GiB fill up a 1 TB drive?

I just got the message that: Fehler: Partition / ist überfüllt: 6009 Blöcke werden benötigt, 0 Blöcke sind frei Fehler: Konnte den Vorgang nicht durchführen (Nicht genug freier Festplattenspeicher) ...
1
vote
0answers
43 views

How to wait for Thunderbolt device discovery before invoking cryptsetup during startup?

I am using a Linux sytem running Kernel 5.4.12 and systemd 234 on a notebook, which is connected via Thunderbolt 3 to a docking station providing an external keyboard, mouse and monitor. The root ...
0
votes
0answers
111 views

tpm2 take ownership eroor | Failed to initialize tcti context: 0x1

When I enter the following commands I have the errors, can someone help me with this? How do I solve? tom@lol:~$ sudo tpm2_takeownership -c Failed to initialize tcti context: 0x1 tom@lol:~$ sudo ...
0
votes
1answer
133 views

How to decrypt the luks encrypted hard disk password automatically using tpm2 | ubutnu 18.04

I have encrypted my hard disks using default method(Luks encryption) present in ubuntu 18.04 and I have tpm2, now i wanted to save my passwords on tpm2 device and decrypt automatically without ...
0
votes
0answers
34 views

Cannot enlarge a LUKS filesystem

I enlarged a LUKS partition from 2.7TB to 3.7TB with GParted. lsblk and fdisk -l now show the desired size, but df -h still shows 2.7TB, and I can only write as much to the disk. resize2fs and e2fsck ...
0
votes
1answer
132 views

Hide LUKS partition on USB drive from Windows 10

Following advice given on https://meta.stackexchange.com/questions/209397/where-do-i-ask-questions-about-the-windows-os I am posting my question here For my 16 GB USB drive I created a GPT with 2 ...
0
votes
1answer
111 views

Token-based, single-factor LUKS full disk encryption

We're building a Linux-based system that will be located at our customer's site and operated by our customer. We want all data on that system to be encrypted so if it gets stolen the data is still ...
0
votes
0answers
77 views

Ubuntu LUKS won't accept password after installing Nvidia GPU driver

I have Ubuntu 18.04.3 running with full disk encryption on my 2014 macbook pro 15. To take advantage of the Nvidia GPU on my computer I decided to install the proprietary Nvidia driver (390) which was ...
0
votes
0answers
12 views

how can I open detached header luks with udisksctl?

We can use udisksctl unlock to unlock the normal luks partition. However I cannot find a way to pass the --header /dev/detached-header to it. Is there any way to open luks partition with detached ...
0
votes
0answers
60 views

how to let systemd automatically mount the keydev?

in /etc/crypttab I have entry: luks_part UUID=<uuid> /keyfile:LABEL=keydev luks From the manual it seems the systemd should automatically find the partition which match the label and then ...
0
votes
0answers
14 views

Allow Reboot Without Full-Disk Decryption Password (RHEL 7.7)

I am a new admin on a RHEL 7.7 machine which has had full-disk encryption applied. A reboot prompts for the full-disk decryption password, which means the machine cannot be rebooted remotely (the ...
0
votes
0answers
39 views

How do I let my server turn itself off and on with cron when it uses an lvm encrypted disk?

I once had a ubuntu server set up (a minecraft gameserver for my little brother) and to save on electricity and to not make so much noise, it shut itself down in the evening and then turned back on in ...
2
votes
0answers
300 views

How to make systemd start ssh.service before generated crypttab units

I have a server, running Debian Buster, whose root filesystem is not encrypted, but other drives are. [ETA: All of the OS system directories (/var, /home, /etc, etc) are in the unencrypted root ...
0
votes
1answer
60 views

Volume group still active after disabling with vgchange?

I noticed that sometimes vgchange -a n [vgname] seems to not close the volume group properly. This happens most often, when I actually prepare a new system and I do not know what is causing this. ...
1
vote
0answers
39 views

Decrypt LUKS FDE Disk image

So, I screwed up my system with a risky dist --upgrade to the point where it won't boot. It's not the end of the world, because I have a recent backup, however there are a couple of files from the ...
2
votes
1answer
47 views

Encrypted luks SSD from dead laptop in another laptop / data recovery

Recently my laptop died, there is no chance to save the laptop anymore. On the laptop i was running Elementary OS. While installing i choose the encryption with LUkS option. Now i have another laptop,...
0
votes
2answers
891 views

Linux Debian install on SSD with LUKS full disk encryption - Will adding home directory encryption add additional wear to SSD?

I read a lot of posts on SSD wear and full disk encryption awhile back. Many are dated or conflicting, but the general consensus seemed to be that full disk encryption through LUKS or another full ...
0
votes
0answers
53 views

clonezilla with LUKS and LVM

How can I use clonezilla with a LUKS & LVM setup? I have a single volume group inside LUKS, and two btrfs logical volumes inside that. Ideally, only the used filesystem blocks will be saved to ...
0
votes
0answers
399 views

LUKS encrypted drive will not accept password

I have a brand new 4TB drive that I installed and encrypted using this tutorial: https://www.tecmint.com/encrypt-drives-using-luks-in-fedora-linux/ System is a fresh install of Fedora 30. When I ...
1
vote
1answer
312 views

LUKS Cryptsetup Options Failing for Raspberry Pi 3 Model B+ Running Kali Linux ARM

I've scoured the internet for help on this, and it seems I'm one of the only people with this problem. I recently downloaded a fresh copy of Kali Linux ARM for the Raspberry Pi 3 Model B+, and I want ...
0
votes
0answers
180 views

How to obtain volume encryption interoperability between Android and Linux (LUKS)

On Linux, I use LUKS to encrypt containers (a filesystem on a file), which is portable as it can be easily copied, stored on any external filesystem, such as FAT or NTFS on external drives or SD cards....
0
votes
0answers
39 views

Unable to boot root encrypted volume in Ubuntu

I "installed" an Ubuntu image (squashfs compressed) to a volume inside an LVM volume group. The underlying device is encrypted and I am currently booting to Funtoo from it: For sake of illustrative ...
0
votes
0answers
109 views

Incorrect disk space on LUKS LVM volume

I have a new HDD attached to my machine (CentOS 7.6), 1TB in size. I used fdisk to create a new primary partition there of size 500GB, type "8e" (Linux LVM). I then marked it as an LVM physical ...
1
vote
1answer
127 views

Hanging XFS filesystem on encrypted USB device

I have an XFS filesystem mounted from LUKS encrypted partition on a USB device on Arch Linux. It works fine sometimes, but occasionally hangs (or gets incredibly slow?) for minutes at a time when ...
1
vote
0answers
106 views

Performance when using encrypted external drive on raspi 3b+

I read here that the speed for an encrypted external drive on the pi is about 3MB/s. Is there a way to increase this by using a different cipher for dm-crypt/luks or tweak it in some other way?
0
votes
0answers
287 views

Ansible luks_device Failed to open key file

I have strange problem. The module itself works properly until there is keyfile needed. Every task with keyfile involved cause identical error. Here is my task: - name: Create LUKS device hosts: ...
1
vote
0answers
102 views

Luks/LVM disk encryption: how to change size

I installed Linux Mint Cinnamon 19.1 and enabled LUKS. It automatically created the following set-up: [~]: lsblk NAME MAJ:MIN RM SIZE RO TYPE MOUNTPOINT nvme0n1 259:...
2
votes
1answer
899 views

What is the default encryption key-size for dm-crypt / cryptsetup in LUKS mode?

I'm using cryptsetup 2.1.0, for which the default encryption options are (as reported by cryptsetup --help): Default compiled-in device cipher parameters: LUKS: aes-xts-plain64, Key: 256 bits, ...

1
2 3 4 5