Questions tagged [luks]
LUKS stands for Linux Unified Key Setup, a disk-encryption specification. (It does not refer to Rodopi Luks cigarettes!)
280
questions
1
vote
1
answer
54
views
Linux, SSD, TRIM - Not working? (hdparm, Samsung)
MY SSD is working but TRIM may not be.
I'm running Fedora 36 with BTRFS. I installed a Samsung SSD 980 PRO 2TB SSD firmware version 5B2QGXA7 as a secondary drive that does not auto mount, as intended. ...
- 313
0
votes
0
answers
30
views
Recover LUKS LVM partition after overwriting partition table
I accidentally deleted the partition table of my hard disk in Gparted. The partition is an LVM encrypted with LUKS. I used "sudo hexdump /dev/sdb | grep LUKS" to find the LUKS header. When I ...
0
votes
0
answers
24
views
System does not see fully encryped luks disk
I had a laptop with debian, which was encrypted using this guide https://help.ubuntu.com/community/Full_Disk_Encryption_Howto_2019
Recently the laptop suffered major physical damage, ssd slot was ...
0
votes
0
answers
49
views
Can I force Linux to write data at the start of a file system?
TLDR;
Is there a command to force Linux to write a file (for example a PDF file, MP3, anything really) at the start of a file system ? I don't thing that # dd does the trick, because the inode table ...
- 180
1
vote
0
answers
64
views
Is luksChangeKey trustworthy on SSD (due to wear leveling)
The LUKS key which I use to secure my SSD was recently compromised, but I'm questioning how effective it would be to change the key, because the LUKS header might not be overwritten. In fact, I wonder ...
user1782876
0
votes
0
answers
166
views
How to exactly clone a LUKS full-disk-encrypted SSD (NVME, M.2) to a larger, bootable SDD incl. changes in GRUB, /etc/crypttab (UUIDs) etc
Can anybody help in a detailed step-by-step guide for Linux/Debian 11?
So far I have:
Plug in both SSDs and boot Linux from live-USB stick
Open shell and list all block devices with "sudo lsblk&...
1
vote
0
answers
92
views
Clone LUKS encrypted SSD to NVME (slightly different size)
I bought a same sized NVME as my previous SSD to clone it.
I mean I thought they were of the same size. Both are supposed to be 1 TB discs.
I did:
sudo dd if=/dev/sda of=/dev/nvme1n1 bs=64K conv=sync,...
- 23
1
vote
0
answers
109
views
Clonezilla error creating image from encrypted SSD: LUKS header file not found
I'm trying to create a full-disk image with Clonezilla alternative stable - 20221103-kinetic (Ubuntu-based) of my Dell XPS 15 7590. The notebook has only Ubuntu 22.04, standard partitioning.
The disk ...
0
votes
0
answers
42
views
Corrupted Drives While Copying Large Files Between LUKS Partitions
I'm currently in the process of backing up a few terrabytes of files from one drive to another. (both LUKS encrypted HDDs)
Unfortunately, after some time I always end up with readonly filesystem ...
- 131
2
votes
0
answers
309
views
repair boot with encrypted partitions
I am trying to repair my system boot with boot-repair.
I used to have a dual boot with Windows and Ubuntu and installed Manjaro alongside.
Unfortunately, Windows does no longer show in the boot menu.
...
- 159
0
votes
2
answers
375
views
How to recover accidentily deleted LUKS partition table?
The problem
I've accidently deleted a LUKS partition by pressing the red button in the bottom right corner on one of my external hard drives.
Now it just says "Free Space":
The files are ...
- 131
1
vote
0
answers
90
views
LUKS2 master passphrase in kernel keyring: Token unusable error
I'm trying to follow the documentation on how to pass a key to LUKSv2 via the kernel key ring: https://fossies.org/linux/cryptsetup/docs/Keyring.txt
This does not work for me at all:
# dd if=/dev/zero ...
0
votes
0
answers
25
views
Logging in with a secondary encrypted luks drive
I added another drive in my Debian machine and also encrypted it using Luks. So using the following instruction from this site, I got it to work. My question, however is that I thought that in my ...
- 137
0
votes
0
answers
329
views
Grub does not load on boot after transfer of SSD drive to another laptop
I got two laptops of the same make and model, laptop Alpha and laptop Beta. Alpha runs a LUKS encrypted LVM of linux and is partitioned into three parts: Grub, swap, and the encrypted drive. It's been ...
- 21
0
votes
1
answer
428
views
Other ways to login and decrypt LUKS volumen when dropbear-initramfs is installed
I'm new to this site and after searching for a couple of hours already, I couldn't find a similar topic or figure out a solution, so I'm going to ask here.
I have setup a new remote server with Ubuntu ...
1
vote
0
answers
76
views
How to delete a debian luks swap partition properly?
There is the post Removing the swap partition from a LUKS encrypted SSDD but it's tagged as linux mint.
Because of the fact that update-initramfs (a debian tool) reports an error my problem is related ...
- 1,234
0
votes
1
answer
414
views
Extending encrypted partition (LVM, LUKS)
I'm running a dual boot (Win 10 Pro, Ubuntu 20.04) system on a single NVMe harddisk. Linux contains one encrypted root partition, an encrypted boot partition and a swap partition. As the root ...
- 1
0
votes
0
answers
254
views
LUKS encrypted disk with pop_os installed booting into initramfs
I've purchased a new SSD and created partitions for root, home, swap and boot. I've encrypted root, home and swap using LUKS following the directions at https://www.ibm.com/docs/en/order-management-sw/...
- 1
0
votes
0
answers
153
views
cryptmount with LUKS partition
I am having trouble to get cryptmount setup for my LUKS-encrypted partition.
This works:
sudo cryptsetup luksOpen /dev/sda1 cryptdata
mount /cryptdata/
## with this entry in fstab
## /dev/mapper/...
- 121
1
vote
1
answer
502
views
Is there any vulnerability if I encrypt disk with LUKS and TPM without specifying pcr_ids?
According to many tutorials on the internet, the process of adding a TPM-stored key to LUKS is to run clevis luks bind -d /dev/sda1 tpm2 '{"pcr_ids": "7"}', but I received the ...
- 133
0
votes
1
answer
77
views
Unsure if I encrypted external HDD correctly with LUKS
I followed the instruction from this page.
I was unable to encrypt the the disk, but was able to encrypt its partition. I don't if it was the correct thing to do, but i did it anyway because it's not ...
0
votes
1
answer
142
views
In a new rocky9 vm, LVM2 does NOT see the newly attached PVs under LUKS
In a new rocky9 vm, LVM2 does NOT see the newly attached PVs under LUKS.
===
The end goal is to migrate a simple "repo" server (that holds iso files) from centos8 to rocky9.
I have a freshly ...
0
votes
1
answer
58
views
Secure LUKS keyfile in root partition
I have 10 virtual machines with elasticsearch on VMware and compliance said that i should encrypt data volumes, the disk based encryption will be enough for compliance
i want to use keyfile to ...
- 1
0
votes
0
answers
261
views
Mount bitlocker partition on boot with Fedora 36
Here is the setup I want to go through, while dual-booting Linux/luks-Windows/bitlocker,
Linux is my primary system, but the following would be welcome.
Input LUKS phrase, decrypt linux partition, ...
0
votes
1
answer
78
views
SUDO asks for "Encryption passphrase" on new setup with LUKS
SUDO keeps asking for Encryption passphrase on my latest setup. I'm not sure what encryption the passphrase is for, except that I suspect that it is related to LUKS encryption. Also I noted it doesn't ...
- 101
0
votes
0
answers
12
views
Is it possible to automatically decrypt hd0,gpt2 in GRUB2? [duplicate]
I'm wondering if it's possible to let GRUB automatically decrypt the boot partition and if so, how do you do it?
I did a full disk encryption when installing Manjaro and set up a Yubikey Challenge-...
0
votes
0
answers
478
views
Automatic unlock of LUKS external data drive when plugged in
I have set up LUKS for an external USB HDD with two protectors: a passphrase and a file key. I would like to automatically both unlock the drive and automount when the drive is plugged in.
I've set up ...
- 408
1
vote
0
answers
446
views
Installing two identical Linux systems with full disk encryption alongside each other - second one overwrites EFI entries
Disclaimer: I've seen a few similar posts online, answers to which suggested that reinstalling grub might help. I tried it (see below), but for me the issue is still unresolved.
I wanted to set up two ...
- 161
1
vote
1
answer
2k
views
LUKS with separate /home within encrypted volume
First time using full disk encryption with LUKS. Sorry for a lot of novice questions.
Before using full disk encryption, I used to have separate partitions /boot, /, home which allow to to reinstall ...
- 223
1
vote
1
answer
1k
views
LUKS using clevis TPM2.0
Hi I'm trying to encrypt a secondary data disk. I want this disk to be decrypted during boot of my machine. I currently have RAID setup, with an LVM volume on top which is already encrypted with LUKS.
...
- 13
1
vote
1
answer
373
views
How to restore a LUKS 2 drive corrupt by improper partition resizing?
I have a 256 GB (232.88 GiB) M.2 SSD with GPT and a root partition which is a "full-drive" LUKS 2. The drive actually has some unencrypted partitions too - bootloader w/ cryptsetup, recovery ...
- 143
0
votes
1
answer
218
views
Recover LUKS partition of flash drive that (should) still have header
On an flash drive with 7.1 GB useable storage, I had a LUKS partition (2nd partition) of around 3.1GB, IIRC. A linux FS flashing using balena deleted that and the 1st partition, with the OS partition ...
- 1
1
vote
1
answer
581
views
Auto reboot of a Luks Container
I have tried autobooting a luks container on Ubuntu Server (20.04) with a keyfile and a keyscript. My '/etc/crypttab' entry for both options are as follows.
Keyfile:
dm_crypt-0 /dev/sda3 /root/...
1
vote
2
answers
489
views
Peppermint OS boot failure because of disk encryption
I'll start off by saying that I had found a temporary fix but need a permanent one, which I don't have sufficient expertise to do it. My temporary fix is just a lucky guess that worked the first try, ...
- 21
1
vote
0
answers
239
views
Diagnosing a blank screen at drive decryption - garuda linux
I have a dual boot setup of windows and garuda Linux which have been working fine (efi). I've been working mainly in garuda and haven't done a reboot for a while.
My system drive is luks encrypted and ...
- 528
0
votes
1
answer
357
views
LUKS partition disappeared after Windows installation
I had a NVMe drive that had one partition with a LUKS encrpyted Linux Mint 19 and another partition with Windows 10. Both were able to boot (I had grub were I could select Linux or Windows to boot).
...
- 3
1
vote
0
answers
247
views
Crypttab doesn't respect keyfile-timeout
I want to use a partition on a USB device as keypartiton for my luks encrypted home but I also want it to fallback to asking a passphrase if the USB is not plugged in. I have added a passphrase and ...
- 19
0
votes
1
answer
147
views
Is it possibly to queue dictionaries or lists in hashcat?
I'm trying to brute force one of my old harddrives I no longer have the password for; (LUKS v1).
Hashcat is doing great for this, I'm just not sure how to queue multiple lists or dictionaries other ...
8
votes
2
answers
2k
views
LUKS on top of BTRFS raid array
How can I encrypt a partition that's btrfs RAIDed?
Running encryption on top of RAID is the best practice among a lot of sources even recommended by cryptsetup FAQ (see 2.2). The reason I want this to ...
- 183
3
votes
2
answers
2k
views
difference between passphrase and key file in LUKS
I'm trying to understand with no success the difference between a passphrase and a key file in LUKS. At first I thought they were the same thing, with the difference of a key file being a passphrase ...
- 31
0
votes
0
answers
2k
views
Luks "No key available with this passphrase" but seemingly at random
I've been having the strangest of experiences with my encrypted Luks volume and was hoping maybe someone could help me shed some light on it. Let me walk you through it.
When installing my OS (vanilla ...
- 1
0
votes
1
answer
603
views
Encrypted boot partition is automatically decrypted at boot
I have a question concerning the behavior of decrypting encrypted devices at startup.
I am using two different installations of Debian 11. One is a headless server installation without any GUI and the ...
- 1
0
votes
0
answers
398
views
Fix For Blanked Out UUID On Luks Encrypted Drive?
Problem:
When I mount a Luks Encrypted drive, the drive mounts, but I can't access the files.
The drive is the root drive. It has ElementaryOS installed on it.
It booted fine, until after doing some ...
- 161
2
votes
1
answer
1k
views
How to fix messed up Logical Volumes From (initramfs) shell? (Linux, ElementaryOS)
TLDR:
Encrypted Luks drive will unlock on boot sequence, but then fails to boot.
Drops to (intiramsfs) on boot.
Logical volumes messed up. Not finding data-root (boot drive)
was using Gparted and ...
- 161
0
votes
2
answers
841
views
Moving a LUKS encrypted POP_OS installation with boot to a new location
I would like to move my POP_OS! Linux installation which is encrypted with LUKS to a different Brand new SSD. (Source is nvme, target is a blank SATA SSD).
**Disk model: INTEL SSDPEKKW256G7 ...
0
votes
1
answer
379
views
Mount/Use LUKS .img file with Header and Key file
This is for a cybersecurity school challenge.
I need to get into a .img file that was encrypted using LUKS. They have provided a header file and a key file to open it as well.
I am brand new to Linux ...
3
votes
2
answers
58
views
Handle command line argument value from in-memory / inject content instead of use cli argument
Is there a way to handle command line arguments from in-memory?
My concrete problem is, I have a volume encrypted with luks, with a detached header file.
Setup as following:
workstation
server
I don'...
- 265
0
votes
0
answers
284
views
Unexplained entry in /etc/crypttab
I'm on Fedora 34 and I have LUKS set up for my main SSD (root fs) and a secondary SSD (VM block device). Recently I was noticing an error during shutdown and it had to do with an unavailable luks ...
- 101
1
vote
0
answers
173
views
Resetting passphrase on booted and unlocked LUKS2 partition?
I have an Ubuntu server 20.04 install with LUKS enabled.
While trying to add an extra key it no longer accepted my old passphrase.
I've tried many times with:
sudo cryptsetup luksOpen --test-...
- 111
6
votes
1
answer
1k
views
Linux - accidentally used dd on a LUKS encrypted drive, is there a way to recover?
I accidentally ran dd bs=4M if=image.iso of=/dev/sda oflag=sync when creating a bootable drive instead of targeting the USB stick.
I am fairly certain most of the files would be fine - the iso is only ...
- 161