Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [luks]

LUKS stands for Linux Unified Key Setup, a disk-encryption specification. (It does not refer to Rodopi Luks cigarettes!)

0
votes
1answer
17 views

Setting up luks encrypted drive to automount

So I'm trying to setup my luks encrypted drive which holds the root partition to automount on server start. I'm having an issue where it doesn't automount and instead prompts for a passphrase. lsblk ...
0
votes
0answers
17 views

I have encrypted LVM2_member partition I want to mount and access the data on but I cannot

TLDR; I have a encrypted luks partition which is a VG member I cant access, I have the password for the volume. I just want to mount it so I can get some data off of it. All of this is running on ...
1
vote
0answers
71 views

Open LUKS volume using key stored in kernel keyring

Has anyone managed to have cryptsetup open a LUKS volume using a passphrase stored in the kernel keyring? According to this article (see towards the bottom) it should be possible. I have a passphrase ...
1
vote
1answer
82 views

Data access speed in LUKS encrypted partition

In Linux (Fedora 28) I have my home directory LUKS encryped, when using Gnome Disk (screenshot), I can benchmark separately the underlying LUKS partition (upper blue rectangle) and the decrypted home ...
0
votes
0answers
16 views

Recover LUKS partition after being overwritten by Windows

After trying to install Windows 7 on a different drive, it appears that the partition table of my data drive is broken. What the drive should contain instead is a LUKS-encrypted ext4 partition ...
0
votes
1answer
38 views

Luks encryption block name format

After disk encryption with LUKS I have chacked my disk with lsblk and found the bellow output. Here the luks id luks-95a00a58-7a6f-429a-a45f-02308d9b1b28 is not familiar to me . What is the meaning ...
-1
votes
0answers
113 views

How do I setup Xen with dom 0 Alpine Linux, LUKS LVM and GRUB on a UEFI platform?

I would like to have the following setup: a system in UEFI mode with a hard disk with GPT partitions. The disk should contain an (unencrypted) EFI System Partition, encrypted boot partition and ...
2
votes
0answers
39 views

HDD issue: Buffer I/O error on dev

One of my drives that's encrypted (LUKS + cryptsetup) ext4 seems to give strange errors when looking at dmesg / syslog: https://pastebin.com/RZdJK2qg And I can't ls into it (but I can cd into it) ...
0
votes
2answers
87 views

Accidentally Restored LUKS Header on Regular Filesystem

I am in really big trouble right now, so a VERY quick solution would be much appreciated. I was in an SSH session on my laptop that has LUKS encryption, and I thought I was restoring its header. But I ...
0
votes
1answer
35 views

Disk encryption utility does not start after emergency reboot during upgrade

I have Arch Linux and disk encryption installed. During an update, the system hung and I used a keyboard shortcut (Ctrl + Alt + Del), which was a big mistake on my part. A shutdown occurred during the ...
1
vote
0answers
21 views

LUKS2 - RAID0 - NVME : alignment issue

I have trouble while in top of this stack bellow: mkfs.ext4 /dev/mapper/raid0luks2 /dev/mapper/raid0luks2 alignement is offset by 147456 bytes This may result in very poor performance (re-) ...
0
votes
0answers
94 views

How to decrypt, create, and mount LUKS encrypted zfs raidz pool at startup?

I have an Ubuntu-18.04 box running the OS off an SSD which I do NOT want to encrypt. I have 3 additional 2TB drives which I would like to use as encrypted (via LUKS) RAID-Z1 additional storage. I ...
3
votes
2answers
72 views

How to properly clone a slightly damaged SSD onto a new one

So recently my old SSD (containing /root + /home partitions for my system) broke (details in this question) and I went to get a new one. Now I wanted to clone it but ran into the following issues: $ ...
0
votes
2answers
316 views

Error unlocking /dev/sda: Failed to activate device: Invalid argument

Occasionally, unlocking my luks encrypted disk errors with this: https://i.imgur.com/jcasTNG.png (posted link because not enough rep for images) Trying to mount /dev/sda returns mount: /dev/sda: can't ...
0
votes
0answers
200 views

How to reset user password on Linux install using LUKS full disk encryption?

I have a basic Linux Mint laptop that uses LUKS full disk encryption, but I do not remember the user password. I do remember the encryption passphrase and I am able to boot to the login screen but ...
1
vote
1answer
481 views

Read luks lvm volume from Windows 10 [duplicate]

I have a pendrive with the ubuntu root partition encrypted with LUKS, and it's inside a lvm volume. How could I read the data from Windows 10?
0
votes
1answer
85 views

how to encrypt an install unecrypted fedora installation with LVM

Now I know that you can choose to encrypt your system in the fedora installation options,but I have already installed my system and I want to encrypt it without loosing data and I do not know how to ...
1
vote
0answers
389 views

`cryptsetup luksOpen` as non-root user (via polkit)

I'm trying to get cryptsetup luksOpen permissions, without root (sudo) via polkit. I wrote this rule: // -*- mode: js; js-indent-level: 4; indent-tabs-mode: nil -*- polkit.addRule(function(action, ...
3
votes
1answer
197 views

Reading LUKS encrypted devices under FreeBSD

I have currently Debian installed. All my external devices a encrypted LUKS devices. Now I want to switch to FreeBSD, but my question is, is it possible to read my devices under FreeBSD?
0
votes
0answers
74 views

Lvm on luks: can unencrypted mbr be used to install malicious software if only a big partition that covers the entire device is encrypted?

In most guides out there, to made a stronger full disk encryption setup, it is proposed to place /boot on a separate usb device. However lvm on luks setup covers the first partition of the main disk (...
0
votes
0answers
570 views

LUKS encrypted external drive - explorer for windows

I need a transparently encrypted external drive which I will be able to use under windows and in Linux How is the easiest way to use LUKS encrypted external drive with EXT4 file system in Windows ? ...
5
votes
1answer
1k views

Error unlocking /dev/sdb1: Failed to activate device: Operation not permitted

After updating my PC to Ubuntu 18.04, I'm not able to mount my encrypted disk anymore. Error unlocking /dev/sdb1: Failed to activate device: Operation not permitted NAME ...
0
votes
0answers
35 views

2 passwords in grub with 1 encrypted partition

I recently installed Manjaro Linux to my laptop with encrypted root. Almost everything is the same like on my desktop, but when I turn it on, I have to enter the password twice. Once before selection ...
0
votes
0answers
365 views

cryptsetup - No key available with this passphrase when reading disk

I have my old system (x86 one where I have created encrypted partition). Now on same machine when I boot on different system (different kernel version and amd64 arch) I cannot open my encrypted disk. ...
0
votes
0answers
187 views

raspberrypi decrypt / partition on boot with usb key

I'm trying to encrypt my raspberrypi2 (headless with archarm) and decrypt it at boot with a keyfile in usb key.. I want to encrypt the / partiton and not add a third partion (that's what i'm using now ...
1
vote
0answers
171 views

Kali Encrypted Persistence opens wrong device (HDD instead of USB)

I have created the encrypted live USB as per Kali documentation. I have set up encrypted persistence with cryptsetup as mentioned in the documentation. I've verified that I'm able access the partition(...
0
votes
0answers
98 views

How to detach LUKS header on Ubuntu and embed it into /boot

I've installed encrypted Ubuntu 16 and placed boot partition on USB drive. But I'm a little bit confused how to detach LUKS header from system partition, erase header from it and embed that header ...
1
vote
0answers
153 views

What is the best encryption method to use with luks/LVM [closed]

I am doing a full disk encryption and I am wondering if aes-cbc-essiv:sha256 is the correct/best option to use, or if there are better options. Normally for anything I need to encrypt I use aes-gcm, ...
1
vote
1answer
68 views

Broken Debian boot when trying to auto-mount an encrypted partition

I've made a quite thoroughly encrypted, balanced and well functioning filesystem with dm-crypt/LUKS/cryptsetup, but I made the mistake of leaving the home folder unencrypted when first installing ...
0
votes
0answers
860 views

Resize LUKS Partition

Gparted image of my partitions. Have a 68G logical Luks partition at the very end of a drive, and to the left of that I have 60G of free unallocated space. Both of these partitions together make up an ...
0
votes
1answer
86 views

Filesystem recovery of dm-encrypted partition fails

I have a thumb drive that I keep LUKS-encrypted. Recently had a computer crash. I'm able to open the encrypted device without any apparent problems, but when I try to mount the drive (as root) I get ...
3
votes
1answer
348 views

How to find my LUKS encryption passphrase inside decrypted filesystem?

I have lost my encryption passphrase, however my computer is still on and I would like to know if there's a way to see my passphrase to avoid having to backup my data and reinstall. The hard drive was ...
0
votes
1answer
281 views

LUKS detached header on RHEL 6

Is there any version of cryptsetup which supports LUKS detached header on RHEL-6 ? cryptsetup provides detached header support on RHEL-7 (cryptsetup-1.4 onwards) but not on RHEL-6. I tried building ...
1
vote
1answer
128 views

decrypting LUKS with trezor/ ledger

With trezor it is possible to ecnrypt & decrypt encfs like this encfs --standard --extpass=./encfs_aes_getpass.py ~/.crypt ~/crypt the script is here https://github.com/trezor/python-trezor/...
0
votes
1answer
797 views

LUKS - change keyFile using cryptsetup

cryptsetup utility provides the option to change existing passphrase using luksChangeKey option. This requires the older key-file and other parameters as suggested on the man page. luksChangeKey &...
1
vote
1answer
405 views

LUKS - Detached header - where is encryption key stored?

I encrypted a disk using LUKS with detached header. The header was present on a removable disk. Once the mapped device (under /dev/mapper) was created, I removed the disk containing header. I was ...
0
votes
1answer
149 views

Luks encrypted external disk does not have any free space

I have a luks encrypted external disk that worked normally al the time. But suddenly, there is no free space at all. Even when I delete something with rm bigfile there is no freed space. I looked up ...
0
votes
1answer
97 views

Execute script as root with home folder decrypted

Is there a possibility to run a script as root on startup whilst also being able to access files in the encrypted home dir? I know of /etc/rc.local which can execute scripts as root but since the ...
0
votes
1answer
396 views

cryptsetup not unlocking at boot

I have these two files: /etc/crypttab: cry1 /dev/sda3 none luks cry2 /dev/sda4 /mounted/sda3/keyfile luks /etc/fstab: /dev/sda1 /boot ext2 ro 0 ...
1
vote
0answers
385 views

Restoring GRUB after Windows installation

My Windows 7 had troubles that cloud be fix only by reinstallation. But it was not only one system in my laptop, other one was Debian Jessie. Aware about incoming GRUB overwriting I did backup of my ...
0
votes
1answer
313 views

Passing keyfile to create LUKS header

The dm-crypt LUKS utility 'cryptsetup' allows us to specify the key-file in place of passphrase. Looking at the code for cryptsetup I understand that if key-file is specified, the passphrase is not ...
2
votes
1answer
137 views

Does LUKS encryption detect bit-rot / bit flips on HDD/SDD?

Suppose an underlying storage device has a undetected bit-flip without reporting an error. How does LUKS react to this? Does it detect as an error ? any kernel messages in dmesg/syslog? Does it ...
0
votes
2answers
681 views

Unable to mount UDF filesystem created with mkudffs inside a luks volume

I'm trying to create encrypted blu-ray backup. I've created and burned the image using the following crude script: imgsize=23000M imgfile=~/backup.img imgloop=`sudo losetup -f` truncate -s $imgsize $...
1
vote
0answers
106 views

LUKS keyfile lost

I lost the keyfile to open a LUKS partition. The command luksDump tell me that there is 2 key slots, so one them is certainly a passphrase that I left after adding the keyfile. Is there a way to know ...
1
vote
0answers
134 views

How to find corrupted files on LUKS encrypted disks by searching for unencrypted content

I have a full disk encrypted Ubuntu 16.04 system running at home on a SSD which had uncorrectable media errors and so had to be replaced. So I used ddrescue to copy all partitions to a new SSD, and ...
1
vote
0answers
687 views

Dualboot Windows on existing LUKS full encrypted hdd

So, I have a HDD with data on it, encrypted. I would like to install windows (8 or 10) on the same drive (allocate some space on it from that partition, it has 500+ GB free right now. I don't want to ...
0
votes
1answer
129 views

UUIDs: considerations for changing n characters of a version-4 to a word

36 character UUIDs are awesome. But my intuition is that in my personal, home-use, I do not need all the uniqueness that 36 characters provide. But I may not be thinking of all the situations in which ...
1
vote
0answers
271 views

LUKS encrypted drive not booting after modifying partition table with TestDIsk

I screwed up my partition table the other day but had recovered it with TestDisk. After re-writing the partition table, I'm able to boot up into GRUB and subsequently the interface for entering my ...
1
vote
0answers
271 views

dm-crypt/LUKS, won't mount encrypted drive. Requested offset is beyond real size of device

I screwed up my partition table the other day but had recovered it with TestDisk. After re-writing the partition table, I'm able to boot up into GRUB and subsequently the interface for entering my ...
1
vote
1answer
518 views

How to unlock keyfile-protected partition where keyfile is located on a password protected partition?

I would like to automatically decrypt /dev/sdb3 at boot with a keyfile located on /dev/sda5 which is a (passphrase-)encrypted partition. By "automatically", I mean "at boot, after being prompt for /...