Questions tagged [luks]

LUKS stands for Linux Unified Key Setup, a disk-encryption specification. (It does not refer to Rodopi Luks cigarettes!)

Filter by
Sorted by
Tagged with
0 votes
0 answers
8 views

Is it possible to automatically decrypt hd0,gpt2 in GRUB2? [duplicate]

I'm wondering if it's possible to let GRUB automatically decrypt the boot partition and if so, how do you do it? I did a full disk encryption when installing Manjaro and set up a Yubikey Challenge-...
user avatar
0 votes
0 answers
11 views

Automatic unlock of LUKS external data drive when plugged in

I have set up LUKS for an external USB HDD with two protectors: a passphrase and a file key. I would like to automatically both unlock the drive and automount when the drive is plugged in. I've set up ...
user avatar
  • 408
0 votes
0 answers
24 views

Installing two identical Linux systems with full disk encryption alongside each other - second one overwrites EFI entries

Disclaimer: I've seen a few similar posts online, answers to which suggested that reinstalling grub might help. I tried it (see below), but for me the issue is still unresolved. I wanted to set up two ...
user avatar
  • 121
1 vote
1 answer
28 views

LUKS with separate /home within encrypted volume

First time using full disk encryption with LUKS. Sorry for a lot of novice questions. Before using full disk encryption, I used to have separate partitions /boot, /, home which allow to to reinstall ...
user avatar
1 vote
1 answer
47 views

LUKS using clevis TPM2.0

Hi I'm trying to encrypt a secondary data disk. I want this disk to be decrypted during boot of my machine. I currently have RAID setup, with an LVM volume on top which is already encrypted with LUKS. ...
user avatar
1 vote
1 answer
97 views

How to restore a LUKS 2 drive corrupt by improper partition resizing?

I have a 256 GB (232.88 GiB) M.2 SSD with GPT and a root partition which is a "full-drive" LUKS 2. The drive actually has some unencrypted partitions too - bootloader w/ cryptsetup, recovery ...
user avatar
  • 143
0 votes
1 answer
24 views

Recover LUKS partition of flash drive that (should) still have header

On an flash drive with 7.1 GB useable storage, I had a LUKS partition (2nd partition) of around 3.1GB, IIRC. A linux FS flashing using balena deleted that and the 1st partition, with the OS partition ...
user avatar
0 votes
0 answers
69 views

Debian Live: How to encrypt persistent partition in USB setup

I installed Debian Live 11.3 in USB device with persistence following this tutorial. USB works fine. I can boot it both BIOS and UEFI motherboards also with Secure Booot activated. But after to ...
user avatar
0 votes
1 answer
78 views

Auto reboot of a Luks Container

I have tried autobooting a luks container on Ubuntu Server (20.04) with a keyfile and a keyscript. My '/etc/crypttab' entry for both options are as follows. Keyfile: dm_crypt-0 /dev/sda3 /root/...
user avatar
1 vote
2 answers
134 views

Peppermint OS boot failure because of disk encryption

I'll start off by saying that I had found a temporary fix but need a permanent one, which I don't have sufficient expertise to do it. My temporary fix is just a lucky guess that worked the first try, ...
user avatar
  • 21
1 vote
0 answers
60 views

Diagnosing a blank screen at drive decryption - garuda linux

I have a dual boot setup of windows and garuda Linux which have been working fine (efi). I've been working mainly in garuda and haven't done a reboot for a while. My system drive is luks encrypted and ...
user avatar
  • 516
0 votes
1 answer
82 views

LUKS partition disappeared after Windows installation

I had a NVMe drive that had one partition with a LUKS encrpyted Linux Mint 19 and another partition with Windows 10. Both were able to boot (I had grub were I could select Linux or Windows to boot). ...
user avatar
  • 3
0 votes
0 answers
16 views

Can’t see files in encrypted drive when mounting it in EndevourOS

Using Linux Mint I encrypted a 500 GB Kingston SSD drive with LUKS. But I changed the operating system in my machine to EndevourOS (an Arch distro). I can mount my drive through the File Manager, ...
user avatar
0 votes
0 answers
64 views

How to access xfs partition encrypted with LUKS backed up with dd

How to access xfs partition encrypted with LUKS backed up with dd? Some time ago I've backup up two disks from old laptop. One of them was encrypted with LUKS and inside it there was xfs partition. ...
user avatar
  • 1
0 votes
0 answers
51 views

Crypttab doesn't respect keyfile-timeout

I want to use a partition on a USB device as keypartiton for my luks encrypted home but I also want it to fallback to asking a passphrase if the USB is not plugged in. I have added a passphrase and ...
user avatar
0 votes
1 answer
24 views

Is it possibly to queue dictionaries or lists in hashcat?

I'm trying to brute force one of my old harddrives I no longer have the password for; (LUKS v1). Hashcat is doing great for this, I'm just not sure how to queue multiple lists or dictionaries other ...
user avatar
0 votes
0 answers
128 views

How to recover corrupted ext4 partition after in-place cryptsetup-reencrypt without resize?

I ran the following to encrypt an existing ext4 partition (spanning all 4TB of my external hard drive) cryptsetup-reencrypt --new --type luks2 --reduce-device-size 32M /dev/sdb1 I didn't resize the ...
user avatar
  • 354
6 votes
2 answers
1k views

LUKS on top of BTRFS raid array

How can I encrypt a partition that's btrfs RAIDed? Running encryption on top of RAID is the best practice among a lot of sources even recommended by cryptsetup FAQ (see 2.2). The reason I want this to ...
user avatar
  • 163
2 votes
2 answers
307 views

difference between passphrase and key file in LUKS

I'm trying to understand with no success the difference between a passphrase and a key file in LUKS. At first I thought they were the same thing, with the difference of a key file being a passphrase ...
user avatar
  • 21
0 votes
0 answers
511 views

Luks "No key available with this passphrase" but seemingly at random

I've been having the strangest of experiences with my encrypted Luks volume and was hoping maybe someone could help me shed some light on it. Let me walk you through it. When installing my OS (vanilla ...
user avatar
  • 1
0 votes
1 answer
149 views

Encrypted boot partition is automatically decrypted at boot

I have a question concerning the behavior of decrypting encrypted devices at startup. I am using two different installations of Debian 11. One is a headless server installation without any GUI and the ...
user avatar
0 votes
0 answers
43 views

Can LUKS2 integrity checksum initialization be made faster?

I am setting up a 2TB external USB disk with encryption using cryptsetup and LUKS2 with data integrity checksums. I am running: > cryptsetup -y -v luksFormat /dev/sda1 --integrity hmac-sha256 ...
user avatar
  • 151
0 votes
0 answers
128 views

How to build GRUB 2.06 to handle ubuntu on efi-luks-btrfs

I want to build GRUB 2.06 on a efi-system with ubuntu 20.04 on luks-btrfs. I've built GRUB with: ./configure --with-platform=efi On grub-install /dev/sda this error interrupt the execution: ...
user avatar
  • 11
0 votes
0 answers
134 views

Fix For Blanked Out UUID On Luks Encrypted Drive?

Problem: When I mount a Luks Encrypted drive, the drive mounts, but I can't access the files. The drive is the root drive. It has ElementaryOS installed on it. It booted fine, until after doing some ...
user avatar
  • 161
2 votes
1 answer
230 views

How to fix messed up Logical Volumes From (initramfs) shell? (Linux, ElementaryOS)

TLDR: Encrypted Luks drive will unlock on boot sequence, but then fails to boot. Drops to (intiramsfs) on boot. Logical volumes messed up. Not finding data-root (boot drive) was using Gparted and ...
user avatar
  • 161
0 votes
2 answers
269 views

Moving a LUKS encrypted POP_OS installation with boot to a new location

I would like to move my POP_OS! Linux installation which is encrypted with LUKS to a different Brand new SSD. (Source is nvme, target is a blank SATA SSD). **Disk model: INTEL SSDPEKKW256G7 ...
user avatar
0 votes
1 answer
124 views

Mount/Use LUKS .img file with Header and Key file

This is for a cybersecurity school challenge. I need to get into a .img file that was encrypted using LUKS. They have provided a header file and a key file to open it as well. I am brand new to Linux ...
user avatar
3 votes
2 answers
50 views

Handle command line argument value from in-memory / inject content instead of use cli argument

Is there a way to handle command line arguments from in-memory? My concrete problem is, I have a volume encrypted with luks, with a detached header file. Setup as following: workstation server I don'...
user avatar
  • 225
0 votes
0 answers
21 views

Invoking an interactive shell via a udev event so a prompt can be filled by the user upon inserting USB

Invoking an interactive shell via a udev event so a prompt can be filled by the user upon inserting USB I have scripted the commands that need to be inputed right after connecting an storage drive ...
user avatar
0 votes
0 answers
109 views

How can I make dropbear-initramfs restart when the network is back up?

I use dropbear to remotely unlock my Luks encrypted bootup disk via SSH. Unfortunately, if the network is down before dropbear starts or goes down whilst running, dropbear becomes unreachable. I would ...
user avatar
  • 164
0 votes
0 answers
200 views

Unexplained entry in /etc/crypttab

I'm on Fedora 34 and I have LUKS set up for my main SSD (root fs) and a secondary SSD (VM block device). Recently I was noticing an error during shutdown and it had to do with an unavailable luks ...
user avatar
0 votes
0 answers
52 views

How to get casper mount home-rw from a luks encrypted partition

I am building a live system using casper. It is supposed to mount a luks encrypted partition labeled home-rw. The luks partition is unlocked early during boot by means of an entry in crypttab. After ...
user avatar
1 vote
0 answers
79 views

Resetting passphrase on booted and unlocked LUKS2 partition?

I have an Ubuntu server 20.04 install with LUKS enabled. While trying to add an extra key it no longer accepted my old passphrase. I've tried many times with: sudo cryptsetup luksOpen --test-...
user avatar
  • 111
5 votes
1 answer
850 views

Linux - accidentally used dd on a LUKS encrypted drive, is there a way to recover?

I accidentally ran dd bs=4M if=image.iso of=/dev/sda oflag=sync when creating a bootable drive instead of targeting the USB stick. I am fairly certain most of the files would be fine - the iso is only ...
user avatar
  • 151
0 votes
0 answers
104 views

Protect USB key against formatting? Avoid unfortunate formatting of LUKS encrypted pen-drive

I notice that when I insert my LUKS-encrypted pen-drive into Windows (which is not meant to work), I get a message inviting me to format the pen-drive, and the option to format the disk is preselected:...
user avatar
0 votes
0 answers
48 views

Dead Hard Drive cannot mount

I'm running ubuntu 20, and the SSD that died was running ubuntu 18.04. It was LUKS encrypted and suddenly died. I was able to access grub for a short amount of time but I no longer can. On my ubuntu ...
user avatar
  • 1
0 votes
0 answers
685 views

Can't mount LUKS encrypted drive

Note: Cross-posted I have a LUKS encrypted disk that I can unlock, but not mount: $ sudo cryptsetup luksOpen /dev/sdb1 disk4tb # enter key $ sudo mkdir /mnt/disk4tb $ sudo mount /dev/mapper/disk4tb /...
user avatar
0 votes
1 answer
23 views

Backup ext4 on LUKS to an external drive if the size of the target drive is less than the size of the source drive

I have a few spare 1TB marked SSDs that I'd like to use for my primary NAND backup. I'd prefer to have dd for dumping everything as it is - but the tricky part is that my NAND has about 1.5 GB more ...
user avatar
  • 131
0 votes
1 answer
150 views

Boot Linux off a BitLocker protected drive

I have a bootable USB drive with Clonezilla installed, which I use to take images of drives from various computers. Is there a way to install BitLocker on it, so that during boot I get prompted for a ...
user avatar
  • 431
0 votes
0 answers
211 views

Linux LUKS encrypted root: fstrim always trims all empty space

I have a Manjaro system with a LUKS encrypted root filesystem on an NVME SSD. It is set up to decrypt / on boot via the kernel. $ cat /proc/cmdline initrd=\amd-ucode.img initrd=\initramfs-5.11-x86_64....
user avatar
  • 353
0 votes
1 answer
32 views

Is the fastest open determined by preceeding key slots?

After installing LUKS (v1) devices with openSUSE LEap 15.2, it turned out that the iteration count was set so high that it takes more than 10 seconds for a successful decryption of the master key (bug ...
user avatar
  • 314
-1 votes
4 answers
575 views

Increase Time to Brute Force Luks Full Disk Encryption

I want to increase the time it would take to brute force my full disc encryption. I’m on Ubuntu and encrypted with Luks on installation. I have read that I would use the following command to make it ...
user avatar
0 votes
1 answer
64 views

What is module aes-i586?

I'm using LMDE4 with LVM on LUKS and recently I've been getting these cryptic error messages at boot: modprobe: module aes-i586 not found in modules.dep Volume group "lvmlmde" not found ...
user avatar
1 vote
1 answer
437 views

cryptsetup, detach header on existing volume

Is there a way to detach/remove a header from a existing cryptsetup volume? So that I have to specify --header when I want to open (cryptsetup luksOpen ...) the volume? I haven't found a solution to &...
user avatar
  • 225
1 vote
0 answers
1k views

systemd error message : Failed to start LVM event activation on device 253:0

I have an Acer Notebook with Debian Linux 10.0. As may be seen from lsblk output below, root partition is on 256GB SSD at /var/home and SWAP is located on an LVM2 volume located on two LUKS encrypted ...
user avatar
1 vote
1 answer
219 views

How to default nemo to forget LUKS password?

I just finished encrypting all my drives with LUKS. Right now I boot Mint 20.1 off an ssd and have a 6TB hdd. Both drives are now encrypted with LUKS. In the nemo file browser when I click on my ...
user avatar
  • 111
1 vote
2 answers
346 views

Luks header overwritten with dd

I've copy and pasted too fast from a tutorial and overwritten the LUKS header from one of my drives with dd. The used command was: dd if=/dev/urandom of=/dev/sdb bs=512 seek=1 count=100 And now: ...
user avatar
  • 13
1 vote
2 answers
390 views

My luks encrypted image unlocks but fails to mount

I have a LUKS image which I decrypt, mount and save important documents to. Until recently, this was running fine, on an Ubuntu 19 machine. I shut this machine down, while the image was mounted, ...
user avatar
  • 111
1 vote
1 answer
72 views

GRUB: Reboot PC after typing wrong password to decrypt OS partition

I have encrypted with LUKS the OS and swap partition on my laptop. When I boot if I type the wrong password it stops at the first attempt. This seems strange, but it's all right for me. The trouble is ...
user avatar
  • 111
1 vote
2 answers
199 views

Login bypass in linux?

I have installed CentOS on my 1U server with LUKS encryption. My question is - is there any possibility for someone to access any of the files on the hard disks if the machine is running and he's on ...
user avatar

1
2 3 4 5 6