Questions tagged [cryptsetup]
cryptsetup - setup cryptographic volumes for dm-crypt (including LUKS extension). cryptsetup is used to conveniently setup dm-crypt managed device-mapper mappings.
162
questions
-1
votes
1
answer
28
views
Going from full encrypted system to unencrypted /boot and encrypted / - how to be asked for the passphrase?
I had a fully encrypted system with /boot and / on the same device (/dev/sd8 is root). / contained a keyfile under /etc/luks/ so that I only needed to enter a passphrase when GRUB started, not ...
0
votes
0
answers
25
views
cryptsetup not recognizing `tries` option from `/etc/crypttab`
I've successfully set up Ubuntu (Kubuntu 22.04, to be more precise) as a secondary OS, next to Windows 10, on a LUKS-encrypted drive. (Single BTRFS partition in LUKS container)
I've not done this ...
0
votes
1
answer
138
views
Is there a way to enable or configure Full Disk Encryption (LUKS) after installing Ubuntu?
Is there a way to enable or configure Full Disk Encryption (LUKS) after installing Ubuntu?
1
vote
1
answer
155
views
Change keyboard layout for full disk encryption login
My work recently installed Ubuntu 22.04.3 LTS on a laptop of mine with full disk encryption using cryptsetup (I would have preferred to install it myself, but I wasn't given the choice...). The ...
0
votes
1
answer
277
views
Prompted for luks encryption password on boot despite specifying a keyfile
I have a working installation of Kubuntu 22.04 on a LUKS encrypted
ext4 partition of device nvme0n1. When I boot up my computer, it
prompts me for the encryption password before proceeding to boot ...
0
votes
0
answers
53
views
LUKS Container lost due to partitioning by Windows?
I plugged a HDD with a LUKS container on it into Windows and opened the Disk Manager. A dialog appeared where I clicked "Format as GPT", not knowing what I was doing. Apparently Windows wasn'...
0
votes
0
answers
89
views
ecryptfs-setup-swap made a swap that is in clear text to root
I am running Ubuntu 22.04 LTS on a MacBook Air, SSD, using LVM without encryption.
The original swap was mapped to /dev/dm-1.
After running ecryptfs-setup-swap, the new swap was mapped to /dev/dm-2 ...
1
vote
0
answers
227
views
I've deleted cryptsetup-initramfs
I'm running Ubuntu 20.04 (5.15.-10088.98) with LUKS LVM and have done something stupid.
I've tried sudo apt upgrade and get the following problem:
I: The initramfs will attempt to resume from /dev/dm-...
0
votes
1
answer
458
views
Ubuntu encryption during installation
For the first time while installing Ubuntu 23.04 I clicked the button for encryption. For bad luck the installation got stuck, so now I have an encrypted Lenovo laptop and I can't decrypt mmcblk0 even ...
0
votes
0
answers
1k
views
How do I install Ubuntu 23.04 on an encrypted Btrfs filesystem?
I currently use an encrypted Btrfs filesystem (cryptsetup+luks), which I could set up easily using the Ubuntu 22.10 setup. With Ubuntu 23.04, I only managed to install it on an encrypted LVM+ext4 ...
0
votes
2
answers
729
views
Preventing Ubuntu from asking for password for encrypted data partition at startup (Ubuntu 20.04)
I'm using Ubuntu 20.04.
I have a (LUKS) encrypted partition that I do not want to be prompted to mount on startup (at minimum, not providing a password for it on startup should not block the system ...
0
votes
0
answers
360
views
Kubuntu update-initramfs results in: ERROR: Couldn't resolve device /swapfile
Lately, I did a fresh install of kubuntu (coming from linux mint) where I also encypted the drive and swapfile. During booting I got the error:
Cryptsetup waiting for encrytped source device /...
0
votes
0
answers
291
views
cryptsetup: Device /dev/sda4 is not a valid LUKS device
chatGPT could not solve this one :-)
I mistakenly erased my username from /etc/sudoers
I need to rescue the system, which has full disk encryption.
I rebooted on a bootable usb drive (Finnix) and ...
0
votes
0
answers
460
views
LUKS full disk encryption fails from boot but live-CD is able to unlock partition - Kubuntu 22.04.1 LTS
When trying to boot with Kubuntu I can't get the root to decrypt. That is an old installation that worked for months. I can't remember what was updated before it stopped working.
I've verified that it ...
1
vote
0
answers
233
views
How to unlock encrypted drives on a headless server?
I'm planning a homemade NAS-build with the following features:
Standard Ubuntu server installation with SSH server
Two Btrfs RAID1 drives on encrypted HDDs with dm-crypt
NFS shared folders from ...
1
vote
0
answers
411
views
missing cryptsetup-reencrypt command in packages
I'm encrypting my home partition in laptop. I need to exec "cryptsetup-reencrypt /dev/sda5 --new --reduce-device-size 16M --type=luks1" but system says that the command isn't installed and I ...
0
votes
1
answer
1k
views
Help error states “ Please Unlock Disk nvmeOn1p3_crypt “
I’m not the tech savvy girl here, I had this laptop given to me and it was working ok tell now, it updated today and now won’t let me log back in after restart, it’s prompting that “unlock disk ...
2
votes
1
answer
2k
views
How can I rebuild etc crypttab?
tldr: My /etc/crypttab went missing and I do not know how to rebuild it.
I tried to upgrade from 20.04 to 22.04 and something wrong. When booting I just landed in initramfs. Never heard of that. After ...
2
votes
2
answers
1k
views
LUKS/Cryptsetup possibly corrupted after hard shutdown
My laptop is a a Dell Precision 5560 running Ubuntu 20.04.3. It has LUKS disk encryption set up on it.
About a week ago, it completely froze (I'm not sure why) such that my only recourse to get it ...
0
votes
1
answer
582
views
How to encrypt a partition and protect the key file
A Linux machine has a partition with sensitive data. The goal is to prevent one from booting up from a live usb and mounting the machine's hard drive and copying the data.
The partition is encrypted ...
7
votes
2
answers
5k
views
Configure Ubuntu 22.04 (ZFS) for automatic LUKS unlock on-boot via USB drive
I've freshly installed Ubuntu 22.04 and used the ZFS+LUKS full drive encryption option from the installer.
I've been searching around on the web for a way to configure the drive to unlock ...
2
votes
1
answer
561
views
Why are there multiple LUKS partitions?
I'm new to using LUKS. After installing it on /dev/sda successfully I don't understand what the /dev/sda1, /dev/sda2 partitions on the HDD represent. I expect to see the only one encrypted partition.
...
0
votes
0
answers
27
views
What does cryptsetup-bin does
If cryptsetup-bin is missing in cryptsetup can we be assured that our device is encrypted.please let me know
0
votes
1
answer
247
views
If cryptsetup-bin is missing does it means that file inside device is not encrypted?
Please help me with the working of cryptsetup and how does the missing of cryptsetup-bin affect cryptsetup
0
votes
1
answer
3k
views
Device /dev/sda3 is not a valid LUKS device
I have created a LUKS encrypted partition according to documentation. But after a reboot I cannot access the drive any more. The error message is very short:
Device /dev/sda3 is not a valid LUKS ...
2
votes
1
answer
675
views
LUKS password randomly not working on boot
I have an odd problem and I am not sure what the reason might be. Sometimes, randomly my encryption password is not accepted and I get the following error message while booting up my computer:
...
1
vote
0
answers
1k
views
Problem : Custom linux kernel and crypto
I followed this topic to build the new kernel 5.15 on my laptop dell with Ubuntu 20.04.3 and its kernel 5.14.0-1008-oem. Unfortunately, I have some difficulties to build my new kernel because of my ...
0
votes
4
answers
2k
views
Unlock root disk with TPM2 on Impish Indri
Background:
Using the information in the manpages:
http://manpages.ubuntu.com/manpages/impish/man1/systemd-cryptenroll.1.html
I have successfully added a TPM2.0 key to the LUKS disk with the command: ...
0
votes
0
answers
346
views
Stuck on cryptsetup while upgrading to Ubuntu 21.10
I had enabled Full Disk Encryption on my Ubuntu 21.04 Desktop, now while upgrading to 21.10 and now the system is stuck on cryptsetup once i entered the correct password. What do i do next as it has ...
1
vote
1
answer
2k
views
cryptsetup: Waiting for encrypted source device after the motherboard has been replacement
I have a dell xps laptop: the ram was faulty and the motherboard has been replaced.
The problem: My hard drive was encrypted and now I am not able to recover it. I am using Ubuntu 20.04.
Booting ...
-3
votes
1
answer
251
views
cryptmount and cryptsetup difference
dm-crypt have a two frontends are currently available: cryptsetup and cryptmount.
Who know about cryptmount and cryptsetup difference?
1
vote
0
answers
194
views
Does LUKS' luksAddKey have a problem with passwords being exactly 64 characters long?
Ubuntu: 20.04.3 LTS
LUKS Version: 1
Cipher name: aes
Cipher mode: xts-plain64
Hash spec: sha256
I noticed some weird behaviour when using luksAddKey, when the password is exactly 64 characters long. ...
1
vote
0
answers
107
views
Recover my data from an encrypted luks disk, error while analyse
I tried to encrypt my external hard disk with LUKS but the disk header is buggy.
So I followed the method described here
https://unix.stackexchange.com/questions/281349/mount-error-when-automounting-a-...
1
vote
2
answers
2k
views
Cryptsetup "Warning" that shows up on boot
I'm getting this warning every time my computer boots up and the encryption password screen shows up:
crytsetup: WARNING: cryptdata: Ignoring unknown option 'nofail'
Is there a way to disable it, or &...
10
votes
1
answer
8k
views
cryptsetup: Waiting for encrypted source device problem
I know this has been asked before,but I don't have the technical know-how to perform any of the fixes nor do I know where to start. I turn my laptop on and it boots up to the GNU Grub whereas before ...
0
votes
0
answers
1k
views
Full Disk Encryption (/boot included) - Ubuntu 18.04 LTS
Trying to do "Full Disk Encryption" using LUKS/dm-crypt on Ubuntu 18.04 LTS with "/boot" partition encrypted as well.
I've found this tutorial that is explaining quite well how to ...
0
votes
0
answers
230
views
Stuck in cryptsetup
I have installed xfce Desktop once, more or less as a second desktop. Today I wanted to uninstall it. It worked. But now, after I entered my password correctly in cryptsetup, nothing happens. I have ...
0
votes
1
answer
958
views
Problem with cryptsetup; Ubuntu doesn’t boot as usual
Until now, my computer was booting correctly. But after restarting it in the afternoon, something happened:
First, I get a message at booting, just before entering the cryptestup password: cryptsetup:...
1
vote
2
answers
2k
views
With luks, when is the actual encryption or decryption performed, within the luksFormat, luksOpen, or during the filesystem creation on /dev/mapper?
I got curious to know when the encryption/decryption task actual starts, to get a better understanding of the inner workings of luks. I started wondering this when using detached headers, I tried (...
0
votes
1
answer
671
views
Can't open luks encrypted drive with bash
I try to mount an encrypted hdd. This works fine with this command in the terminal:
sudo cryptsetup luksOpen /dev/sda1 myDisk --key-file /root/keyfile
The hdd is decrypted and mounted after this ...
1
vote
0
answers
839
views
Configuring the GRUB cryptodisk unlock screen
I run GRUB with LUKS. So I have GRUB_ENABLE_CRYPTODISK=y and my /etc/crypttab all set-up.
When I start up it shows me a message like "Enter password to unlock [crypto disk name]:", at which ...
0
votes
0
answers
73
views
How to apply a nuke password for cryptsetup LUKS ubuntu 20.04? [duplicate]
I have problem to setup nuke password, in either ubuntu 18.04, or ubuntu 20.04
i think last version of cryptsetup patch failed to be applied in ubuntu
https://gitlab.com/kalilinux/packages/cryptsetup-...
1
vote
2
answers
3k
views
volume group not found after update with full encrypted disk - then boots anyway
Since some November update of my 20.04.1 Ubuntu , during startup I get the messages volume group "name" not found. I get the password prompt and can log in but some system settings (sound ...
0
votes
0
answers
250
views
Installing encrypted Kubuntu - no Key slots available?
While setting up a new computer with Kubuntu 20.04 (encrypted LVM) and Yubikey, I came across a problem I am not able to solve myself. I am looking for the 8 key slots, Kubuntu should show when ...
1
vote
1
answer
1k
views
Add second passphrase for FDE on Ubuntu (new luks keyslot w/ encrypted LVM)
How can I add a second passphrase to decrypt my laptop on-boot when I chose to install Ubuntu with FDE at install-time.
At the time of writing, there is only one way to choose to install Ubuntu with ...
2
votes
0
answers
940
views
How to install Ubuntu server with custom (non default) LUKS options?
I'm unable to install Ubuntu 20.04 server with custom LUKS options.
I tried the following:
Started the live installer
Went to help and selected Enter shell (or swtich to a different tty).
Ran the ...
1
vote
0
answers
580
views
Resume the LUKS decryption process
I've run an in-place decryption process using the following command
sudo cryptsetup-reencrypt --decrypt /dev/sdb1
But it was interrupted (The HDD was disconnected accidentally)
Is there a way to ...
0
votes
1
answer
2k
views
20.10 cryptsetup suddenly fails to open luks: Cannot use twofish-ecb cipher for keyslot encryption
Since the recent update from 20.04 to 20.10 cryptsetup fails to open luks container.
Message is:
> Cannot use twofish-ecb cipher for keyslot encryption. Keyslot open
> failed. No usable keyslot ...
0
votes
0
answers
812
views
How to encrypt second data-disk (not system disk) to be automaticaly unlocked at boot?
I have already encrypted whole system disk following these instructions: https://help.ubuntu.com/community/Full_Disk_Encryption_Howto_2019 (
Whis way, I was able to encrypt /root and /boot partition ...
2
votes
1
answer
9k
views
volume group vgubuntu not found in kernel 5.8.13
I have a new Lenovo ideapad 5 14AR05. I successfully installed Ubuntu 20.04 LTS with an encrypted harddisk. I then upgraded the kernel to 5.8.13, because I could not use an external monitor with the ...