Questions tagged [luks]

LUKS stands for Linux Unified Key Setup, a disk-encryption specification. (It does not refer to Rodopi Luks cigarettes!)

Filter by
Sorted by
Tagged with
0
votes
0answers
30 views

Can't mount LUKS encrypted drive

Note: Cross-posted I have a LUKS encrypted disk that I can unlock, but not mount: $ sudo cryptsetup luksOpen /dev/sdb1 disk4tb # enter key $ sudo mkdir /mnt/disk4tb $ sudo mount /dev/mapper/disk4tb /...
0
votes
1answer
8 views

Backup ext4 on LUKS to an external drive if the size of the target drive is less than the size of the source drive

I have a few spare 1TB marked SSDs that I'd like to use for my primary NAND backup. I'd prefer to have dd for dumping everything as it is - but the tricky part is that my NAND has about 1.5 GB more ...
0
votes
1answer
71 views

Boot Linux off a BitLocker protected drive

I have a bootable USB drive with Clonezilla installed, which I use to take images of drives from various computers. Is there a way to install BitLocker on it, so that during boot I get prompted for a ...
0
votes
0answers
33 views

Linux LUKS encrypted root: fstrim always trims all empty space

I have a Manjaro system with a LUKS encrypted root filesystem on an NVME SSD. It is set up to decrypt / on boot via the kernel. $ cat /proc/cmdline initrd=\amd-ucode.img initrd=\initramfs-5.11-x86_64....
0
votes
0answers
17 views

RHEL 7 LUKS Encryption with LUKS on LVM

A RHEL 7 system I work on has the following partitioning: NAME TYPE MOUNTPOINT sda disk |--sda1 part | |--rhel-root ...
0
votes
1answer
23 views

Is the fastest open determined by preceeding key slots?

After installing LUKS (v1) devices with openSUSE LEap 15.2, it turned out that the iteration count was set so high that it takes more than 10 seconds for a successful decryption of the master key (bug ...
-1
votes
4answers
129 views

Increase Time to Brute Force Luks Full Disk Encryption

I want to increase the time it would take to brute force my full disc encryption. I’m on Ubuntu and encrypted with Luks on installation. I have read that I would use the following command to make it ...
0
votes
1answer
27 views

What is module aes-i586?

I'm using LMDE4 with LVM on LUKS and recently I've been getting these cryptic error messages at boot: modprobe: module aes-i586 not found in modules.dep Volume group "lvmlmde" not found ...
1
vote
1answer
93 views

cryptsetup, detach header on existing volume

Is there a way to detach/remove a header from a existing cryptsetup volume? So that I have to specify --header when I want to open (cryptsetup luksOpen ...) the volume? I haven't found a solution to &...
1
vote
0answers
292 views

systemd error message : Failed to start LVM event activation on device 253:0

I have an Acer Notebook with Debian Linux 10.0. As may be seen from lsblk output below, root partition is on 256GB SSD at /var/home and SWAP is located on an LVM2 volume located on two LUKS encrypted ...
1
vote
1answer
42 views

How to default nemo to forget LUKS password?

I just finished encrypting all my drives with LUKS. Right now I boot Mint 20.1 off an ssd and have a 6TB hdd. Both drives are now encrypted with LUKS. In the nemo file browser when I click on my ...
0
votes
0answers
35 views

Hide Plymouth message “cryptsetup: luks-…: set up successfully” at boot

I am using Debian 10. I encrypted partitions (root and boot) and added the luks-keys to the initramfs so that the decryption happens automatically. When the system booting, the message "...
0
votes
2answers
113 views

Luks header overwritten with dd

I've copy and pasted too fast from a tutorial and overwritten the LUKS header from one of my drives with dd. The used command was: dd if=/dev/urandom of=/dev/sdb bs=512 seek=1 count=100 And now: ...
0
votes
0answers
21 views

Accidentally Overwrite LUKS2 Volume With Veracrypt Header

So I made a big mistake where I accidentally overwrote a LUKS2 volume using Veracrypt Restore Header Tool. After realizing what I've done, I did following step and still cannot decrypt my LUKS2 ...
0
votes
0answers
78 views

Dual Boot Debian with BTRFS & LUKS

I have Windows 10, existing Debian installation (which is dead). I want to install Debian 10 with LUKS on BTRFS keeping my Windows 10 intact. There are a few good writeups about it which i've followed ...
0
votes
0answers
48 views

Yubikey as 2nd Factor to open luks-encrypted disk on OpenSuse

How do I set up a Yubikey as a 2nd factor, in addition to my password, to open my LUKS-encrypted disk on Opensuse? All the information I've found so far seem to be geared at Arch Linux and Debian and ...
1
vote
2answers
108 views

My luks encrypted image unlocks but fails to mount

I have a LUKS image which I decrypt, mount and save important documents to. Until recently, this was running fine, on an Ubuntu 19 machine. I shut this machine down, while the image was mounted, ...
0
votes
1answer
40 views

GRUB: Reboot PC after typing wrong password to decrypt OS partition

I have encrypted with LUKS the OS and swap partition on my laptop. When I boot if I type the wrong password it stops at the first attempt. This seems strange, but it's all right for me. The trouble is ...
0
votes
0answers
22 views

How do I troubleshoot an encrypted SSD I am connecting externally via USB adapter?

My previous laptop suffered some hardware failure, one morning it just wouldn't power on (not even to BIOS). I have removed the SSD and am attempting to recover its contents via a Kingwin USB 3.0 to ...
1
vote
2answers
60 views

Login bypass in linux?

I have installed CentOS on my 1U server with LUKS encryption. My question is - is there any possibility for someone to access any of the files on the hard disks if the machine is running and he's on ...
-1
votes
1answer
30 views

LUKS fails to mount drive after reinstalling Linux

I had to reinstall linux on my laptop and had my previous installation backed up to a luks encrypted drive. After the reinstall I am unabled to mount the drive. Instead it throws an error. Error ...
0
votes
0answers
43 views

I accidentally ran accidentally mke2fs on luks device

Well I'm an idiot, i screwed i was trying to fix superblock issue following this thread can't read superblock on /dev/mapper/veracrypt1 when i found myself digging a bigger hole than the one I'm in in ...
0
votes
0answers
39 views

Fedora: whole-disk MD, LUKS, and partitions

Fedora pre 30. Months ago, I set up an entire 5TB drive as a single-device RAID1 md volume (md100), LUKS-encrypted it with cryptsetup, and created partitions on it. However, coming back to it now, I ...
0
votes
1answer
68 views

Expand VirtualBox vdi for Encrypted Ubuntu Guest OS

Background I created a server inside Oracle VirtualBox with an HD size of 500GB. The host is Windows 10 Pro x64 2004 19041.572. The guest OS is Ubuntu 18.04 and I encrypted the installation using LUKS(...
2
votes
2answers
140 views

Is it safe to move a LUKS encrypted partition to another system and be able to use the same passphrase?

If I have a LUKS encrypted partition with a passphrase, is all the information to unlock the partition contained in the header? Is the following correct: The passphrase allows access to the header ...
0
votes
0answers
36 views

Files on encrypted LUKS take up more space

I have 2 drives (both the same size). One of them just has a simple ext4 partition on it. The other drive is encrypted with LUKS, opened and also formatted with ext4. However, when I copy files from ...
0
votes
0answers
25 views

Restore fstab with correct UUID so that I can boot with crypto_LUKS partition

I ended up with this error upon boot: Welcome to GRUB! error: no such cryptodisk found. error: disk 'cryptouuid/6e0637...' not found. Entering rescue mode... grub rescue> _ And when I boot live ...
1
vote
1answer
109 views

Multi user full disk encryption - larger than 8 user threshold. i.e. Not luks

I know Luks has a maximum of 8 I need something that does what LUKS does but allows multiple keys more than the maximum of 8. All users will need to be able to access root. It will be used regularly ...
0
votes
1answer
113 views

Can I open a file by its inode in a ext4 LUKS partition?

I have an ext4 LUKS partition where I "deleted" a file. (I moved one into other: mv /media/HDD/file1.txt /media/HDD/file2.txt where both file1.txt and file2.txt already existed). Files in ...
0
votes
0answers
44 views

Accidentally converted my linux partition to crypto_LUKS

The problem I have dualboot between Windows 8.1. and OpenSUSE TumbleWeed with encrypted harddisk. And now, when I try to boot the laptop - I get this error: Welcome to GRUB! error: no such cryptodisk ...
1
vote
1answer
600 views

Add new LUKS passphrase or key using existing keyfile for LUKS2 encrypted partition

I have two partitions in my laptop where EFI and /boot resides on the first partition and the rest of linux directories including root resides in second partition which is encrypted with dm-crypt and ...
0
votes
1answer
12 views

What are the configs to change after you decrypt a LUKS encrypted partition?

I just decrypted my root partition encrypted with LUKS2. But the fstab still shows the root with the /dev/mapper/secret entry with a different UUID than the partition. Do I have to generate the fstab ...
0
votes
0answers
27 views

Unlock LUKS parition using Qr code (within initramfs)

I try to unlock a fulldisk encryption (LUKS) without typing the password through the keyboard but using a Qr code. For that purpose, I need to use the usb webcam stream (and some python scripts) to ...
4
votes
2answers
1k views

btrfs, LUKS, swapfile: How to hibernate on swapfile?

I'm using btrfs encrypted by LUKS on fedora 32 silverblue, kernel version 5.7.7 with anaconda installer default setting. Because fedora installer automatic partition does not add swap partition or ...
0
votes
1answer
35 views

How do I recover data from a Logical Volume on Linux after deleting it?

Yesterday I was trying to shrink my Gentoo Linux partition with LUKS encryption to make place for another distribution, but because it was an LVM partition I was just trying random commands from the ...
0
votes
1answer
141 views

File-based backup of encrypted Linux systems?

I learned that tools such as clonezilla cannot omit free blocks when the disk is encrypted, which is a huge problem, since the backup drive always needs to have at least the same size as the source ...
1
vote
1answer
1k views

What is LUKS and LVM2 PV in Gnome-Disk?

After a standard installation of Linux Mint Debian Edition 4, this is how the hard drive is partitioned according to gnome-disk: Ext4 is the standard file system for current Linux systems AFAIK. But ...
0
votes
0answers
22 views

Is it necessary to protect GRUB with a password if your volumes are encrypted with LUKS?

I understand there are vulnerabilities around somebody using grub to boot into single user mode and escalate privilages on your machine. But is there any purpose in doing this if your volume is fully ...
0
votes
0answers
27 views

Unlocking luks1 Ubuntu and Booting into it Automatically from Arch Grub

sda1 luks1 encrypted ubuntu sda2 luks1 encrypted arch arch grub is installed in /dev/sda ubuntu is added to arch grub menu. (copied from ubuntu partition's boot/grub/grub.cfg) When I start the ...
1
vote
1answer
135 views

Should I combine LUKS with SED?

So I have a few questions. 1) Would encrypting a SED-enabled drive with LUKS have no positive effects on a drrive? My guess is that it would provide a double-layered encryption as a positive, however ...
2
votes
1answer
589 views

Why does cryptsetup fail with container 10M in size?

I'm trying to create an encrypted volume 10M in size. I know this is possible because I have tombs that are 10M in size. I've run the following commands. fallocate -l 10M container cryptsetup -y -v ...
1
vote
0answers
418 views

Recover master key from active LUKS partition

I have an open LUKS partition (open meaning that it is decrypted and mounted) the passphrase to which I would like to recover. It used to be possible to just add a new key slot by recovering the ...
1
vote
1answer
650 views

Running cryptsetup commands without sudo permissions

I'm trying to figure out how to run cryptsetup commands without the use of sudo. This is so a non-root user could run a script to unlock and mount two luks-encrypted drives when they are needed, ...
6
votes
3answers
2k views

How can I reinstall Ubuntu focal 20.04 on an existing LUKS encrypted system?

I'm a very long time Ubuntu user (over a decade) but have not been here as I've had no issues with Ubuntu. With the arrival of Ubuntu 20.04 LTS I decided to encrypt my data (or system if needed). I'm ...
0
votes
0answers
105 views

Encrypting the hard drive without formatting

Is there a way to encrypt an hard drive in ubuntu after installation? I know we can encrypt while installing the OS but I dont want to re-install the OS. There are 300gb of files and applications ...
2
votes
1answer
320 views

sd-encrypt with keyfile on optional external partition

Context I have an encrypted /home partition, which can be unlocked with a passphrase and a keyfile. This keyfile is on a USB drive which I keep at home. This means that someone who steals my laptop ...
1
vote
0answers
72 views

SSD, HDD, lvm on luks, btrfs, efi

I want to install Ubuntu desktop 20.04 on my laptop (which has an SSD and an HDD) using this scheme: Create luks2 container on each drive and lvms inside them. Format ssd's lvm as btrfs for using ...
0
votes
1answer
55 views

Is there a easy way to encrypt my /home directory?

I'm running Arch Linux and would like to encrypt my personal files in my home directory /home/myusername. What is the recommended way of encrypting it? I've already read about dm-crypt and LUKS. But ...
1
vote
1answer
184 views

Security of Cryptsetup partition on Raspberry PI

I cannot open one of my LUKS partitions on Raspberry PI due to the memory restriction. I already found out that the suggestion in this case is to recreate the partition on the slowest device, which ...
1
vote
2answers
549 views

Can't read superblock on RAID 10 LUKS array after rsync freeze (Ubuntu Server 18.04.3 with Budgie desktop)

During an rsync from an external LUKS raid 10 array (connected by e-sata) to an internal drive, the OS froze. After rebooting, I can no longer access the external raid 10. When I click on it I get ...

1
2 3 4 5