Take the 2-minute tour ×
Ask Ubuntu is a question and answer site for Ubuntu users and developers. It's 100% free, no registration required.

TrueCrypt on Windows can auto mount volumes that use the same passphrase as the boot volume. You enter the passphrase only once. Is there a way to do this with LUKS?

Background: I'm currently migrating from Windows to Ubuntu. I set up Ubuntu 11.10 with LUKS full disk encryption. I use a second hard drive that is still a TrueCrypt NTFS volume. I want to change that.

share|improve this question
    
possible duplicate of Mount a LUKS partition at boot –  bodhi.zazen Mar 17 '12 at 13:20
    
"possible duplicate of Mount a LUKS partition at boot" Not really, with that method you still have to enter your passphrase once for each disk. –  user50910 Mar 17 '12 at 16:21
    
Yes you have to enter a password for each disk. If you want to enter a single password, use LVM. –  bodhi.zazen Mar 17 '12 at 17:20
    
How exactly would this be done with LVM? Is there a specific howto on adding an addition drive to a logical volume? (responding to bodhi.zazen's last comment) –  user58774 Apr 30 '12 at 15:55
1  
Contrary to what has already been said, you CAN use password files that are on the first encrypted volume. –  hbdgaf Sep 5 '12 at 23:32
show 2 more comments

1 Answer 1

You can use the decrypt_keyctl keyscript to securely cache the passphrase when mounting multiple encrypted volumes. The README describes how to do this on boot; there are some caveats with workarounds described in bug 1022815.

This should allow auto mounting of multiple encrypted volumes at boot with only one passphrase prompt. The same keyctl mechanism could be used to arrange the automounting of other volumes after boot time, but I'm not aware of a full solution.

share|improve this answer
    
This is the upstream repo; at this time it's more current than the cryptsetup/saucy package by one commit (other times the opposite is true). –  Tobu Sep 29 '13 at 9:16
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.