7

TrueCrypt on Windows can auto mount volumes that use the same passphrase as the boot volume. You enter the passphrase only once. Is there a way to do this with LUKS?

Background: I'm currently migrating from Windows to Ubuntu. I set up Ubuntu 11.10 with LUKS full disk encryption. I use a second hard drive that is still a TrueCrypt NTFS volume. I want to change that.

7
  • possible duplicate of Mount a LUKS partition at boot
    – Panther
    Mar 17, 2012 at 13:20
  • "possible duplicate of Mount a LUKS partition at boot" Not really, with that method you still have to enter your passphrase once for each disk.
    – user50910
    Mar 17, 2012 at 16:21
  • Yes you have to enter a password for each disk. If you want to enter a single password, use LVM.
    – Panther
    Mar 17, 2012 at 17:20
  • How exactly would this be done with LVM? Is there a specific howto on adding an addition drive to a logical volume? (responding to bodhi.zazen's last comment)
    – user58774
    Apr 30, 2012 at 15:55
  • 1
    Contrary to what has already been said, you CAN use password files that are on the first encrypted volume. Sep 5, 2012 at 23:32

1 Answer 1

6

You can use the decrypt_keyctl keyscript to securely cache the passphrase when mounting multiple encrypted volumes. The README describes how to do this on boot; there are some caveats with workarounds described in bug 1022815.

This should allow auto mounting of multiple encrypted volumes at boot with only one passphrase prompt. The same keyctl mechanism could be used to arrange the automounting of other volumes after boot time, but I'm not aware of a full solution.

1
  • This is the upstream repo; at this time it's more current than the cryptsetup/saucy package by one commit (other times the opposite is true).
    – Tobu
    Sep 29, 2013 at 9:16

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .