All questions relating to LUKS (the disk-encryption specification) for Linux

learn more… | top users | synonyms

0
votes
0answers
12 views

How to fully encryped ubuntu on the Beaglebone Black

... or at least access LUKS partitions from a unencrypted system. In the past my BBB crashed during file copying on encryted SDHC that actually did mount. In the later versions from ...
0
votes
0answers
4 views

Different behavior of 2 encrypted LVMs

recently i created ext4 on top of luks on top of lvm. about 20gb. i also have similar configuration (900gb) created long time ago - i don't remember how exactly i created it. both are not mounted on ...
0
votes
0answers
27 views

cryptsetup-encrypted disks failing after restart (mb solved?)

I am using cryptsetup/luks (ETA: On 12.04) to encrypt partitions on external hard drives. Several times now, I've had disks fail to mount after an apparently normal restart (often a kernel upgrade, ...
0
votes
0answers
45 views

Unlocking Encrypted Root (LUKS on LVM) with “hidden” USB Keyfile

I have a Ubuntu Server 13.10 machine. Its root partition is encrypted with LUKS, which is then stored in a logical volume. On boot, the LV is mounted and then cryptsetup requests my passphrase; once ...
0
votes
1answer
28 views

LUKS and LVM install: no boot (gave up waiting for root device)

I just finished installing 12.04 on my system, configuring it with LUKS and LVM. I can open the encrypted position just fine in a recovery disk, but I just can't seem to get it to boot. It waits ...
1
vote
1answer
55 views

Cannot mount encrypted LUKS drive with “x-gvfs-show” option

I've used Linux Mint 16 Petra's Disks utility to format my external drive as an encrypted LUKS ext4 partition. The problem is that I can't mount it if I use the option "Show in user interface", that ...
1
vote
0answers
296 views

device-mapper: remove ioctl on luks-xxxx failed: Device or resource busy

While I was away from my computer, my encrypted USB drive got accidentally unmounted somehow (although it was still physically connected at the time). I haven't been able to recover (haven't tried a ...
0
votes
1answer
33 views

How can I hide encrypted volumes from Unity users?

Basically I want to make sure that users cannot mount or attempt to decrypt and mount local volumes. I figured for unencrypted volumes it is sufficient to create a noauto fstab entry that points to a ...
0
votes
0answers
111 views

luksFormart error Failed to setup dm-crypt key mapping for device

I'm trying to format a disk with LUKS and when I try the command cryptsetup luksFormat /dev/loop0 I put the passphrase and then this error message appear: device-mapper: reload ioctl on failed: ...
1
vote
0answers
47 views

LUKS decryption step missing during boot after upgrade

I upgraded my 12.10 installation that was residing on an LUKS encrypted EXT4 root partition. I did that with the 13.10 Iso standard on a DVD. I booted into the Test System, successfully mounted the ...
0
votes
0answers
43 views

cryptsetup passphrase prompt disappears too quickly (LUKS)

My problem is the passphrase prompt at boot (which is set up by cryptsetup) is disappearing too quickly. During boot the passphrase prompt is displayed for about 5 seconds and then the console ...
1
vote
1answer
49 views

/etc/crypttab timout option

I have created an encrypted flash drive named 'LUKSFlash'. I have tested with the following: $ sudo cryptdisks_start LUKSFlash /dev/mapper/LUKSFlash now exists $ sudo cryptdisks_stop ...
0
votes
1answer
246 views

Terrible Luks/dm-crypt performance on 13.10 (Asus Zenbook, SSD, AES-NI supported)

I have a Laptop (Asus Zenbook UX31A) with 124GB SSD. I installed Ubuntu on a encrypted partition and started facing moments of temporary or permanent unresponsiveness. I suspected I/O and did some ...
0
votes
0answers
33 views

Lost encrpytion passphrase for external HD

So I encrypted my external HD using the "LUKS + Ext4" type on ubuntu 13.04, on this computer and on this account, a couple of weeks ago. I know the point of encryption is that you cannot retrieve the ...
0
votes
1answer
173 views

/etc/crypttab ignored on boot

I wanted to setup encryption with dm-crypt and LUKS, but I set it up manually, not during installation process (I created LUKS partition and /etc/crypttab file properly). But the encrypted partition ...
0
votes
2answers
590 views

Encrypted disk won't unlock anymore: Not authorized to perform operation (udisks-error-quark, 4)

In 2012 I used Ubuntu's gnome-disks utility to encrypt an external drive. Last year I was still being able to unlock it. But today I tried again on Ubuntu 2012.04 and gnome-disks says: Error ...
1
vote
0answers
122 views

“No key available with this passphrase”

Error unlocking /dev/sdc1: Command-line `cryptsetup luksOpen "/dev/sdc1" "luks-a4726230-7903-4378-b7bc-c87472426a5f" ' exited with non-zero exit status 2: No key available with this passphrase. This ...
2
votes
4answers
380 views

encrypted 13.10 will not reliably boot

i re-installed ubuntu 13.10 x64 on my vaio pro, in legacy, bios mode. the installation is lvm/luks encrypted and thus asks me for the encryption password before booting. it does not reliably boot. i ...
1
vote
1answer
71 views

Access an encrypted drive from one to the other installation results in No key available with this passphrase"

Had a desktop and a laptop, both running Ubuntu 13.10. Decided to merge the two and plugged in laptop HD in tower's second slot. Both are seperately encrypted. Have no trouble booting one or the ...
0
votes
1answer
44 views

how to store data on a “secure” place so that nobody can access to it

I am building a "Kiosk-Computer"-Terminal for my client. At the moment the "Kiosk-Mode" is accessing into Ubuntu with the guest-user, this is enough for my costumer at the moment. ( btw. if somebody ...
0
votes
0answers
49 views

luks dev mapper

Can someone tell me why is blkid returning different results from what I can see in /dev/disk/by-uuid ? AM I missing something obvious or is this simply bug ? root@db01:~# blkid /dev/sda1: ...
1
vote
0answers
85 views

12.04, Kernel 3.2.0-55 & cryptsetup

I am running into a problem regarding the following setup: Partitions: /dev/sde1 cryptswap /dev/sde2 cryptroot |_ /dev/vg_root/lv_root / |_ /dev/vg_root/lv_usr /usr/local |_ ...
1
vote
2answers
463 views

Convert from EFI to BIOS boot

I have a Samsung Notebook NP900X4C with an LUKS encrypted installation of Linux Mint 15 on it. The system is booting in UEFI mode. The problem is that the samsung-notebook kernel module is disabled ...
1
vote
2answers
157 views

Unencrypted /boot partition can be infected from windows on dual-boot system?

I have dual-boot with windows 7 and ubuntu. /dev/sda1 ext4 (/boot) /dev/sda2 ntfs (windows partition) /dev/sda5 ext4 (root encrypted) I don't have any concern of adversaries gaining ...
-1
votes
1answer
146 views

Is LUKS key wiped out from RAM on shutdown, hibernation and suspend?

The question is basically whether Ubuntu is protected from cold boot attacks.
8
votes
0answers
408 views

How do I enable Ubuntu to suspend the machine using LUKSsuspend during sleep/hibernate

I'm on Ubuntu 13.04 using full disk encryption (LVM on top of LUKS). I would like to incorporate luksSuspend into the suspend procedure (and later use luksResume) so that I can suspend to RAM without ...
0
votes
1answer
1k views

mounting logical volume from .img containing a luks encrypted volume group

I'm having some trouble restoring a back-up I made of a encrypted filesystem. The back-up is a .img file containing a single disc partition. This partition is a luks container in which a logical ...
1
vote
1answer
1k views

Full System encryption with LUKS on headless server - unlock with dropbear and busybox. How?

I encrypted a headless server with cryptsetup/LUKS. 2 HDDs with 512 MB /boot on /dev/md0 and 1,61 TB LUKS encrypted /dev/md1 with LVM containing /, swap, and others. I installed dropbear (and busybox ...
2
votes
3answers
230 views

Home encryption [duplicate]

I have just installed fresh 13.04. I've chosen to encrypt the entire installation, but the installer later asked me whether I wanted to encrypt personal folder under /home. What should I choose?
2
votes
0answers
870 views

What is the correct way to use key file LUKS authorization?

Before filing new bug reports i decided to try to get support on my situation here. Sorry for my english (it may sound frustrating) in advance, feel free to ask about additional details and thanks!! ...
1
vote
0answers
85 views

Owner, xattr on encrypted remote backup

I am trying to configure an encrypted remote backup. My approach is to backup my data to a local drive which is encrypted using ecryptfs (mounted with mount -t ecryptfs /lower_folder /upper_folder) ...
2
votes
1answer
988 views

How do I use dm-crypt (LUKS) with GnuPG to use two-factor for FDE?

When using full disk encryption with Ubuntu (opposed to homedir encryption), dm-crypt with LUKS is used for encrypting the volume. In the installer (at least on 12.04 alternate) you can choose between ...
0
votes
0answers
1k views

LUKS device not recognized

I'm having trouble mounting my LUKS-encrypted backup partition which resides in /dev/sdb1 When I boot my PC, the mapper prompts for the key and mounts a /dev/mapper/backupdrive which I can ...
0
votes
1answer
585 views

cryptsetup luksAddKey pipe

I hope this is the correct place to make this question. Anyway... I was trying to create a script to add a passphrase by piping it to the command luksAddKey with a script. When i try to pipe the "old" ...
0
votes
0answers
140 views

How frequently is whole harddrive encryption corrupted?

In my previous Ubuntu installations (now using 13.04), I have had problems with home folder encryption. I would shutdown correctly, startup correctly but it would frequently (upon signing in) tell me ...
0
votes
0answers
115 views

Migrating encrypted LVM to a new SSD

This question is related to How to migrate an encrypted LVM install to a new disk but I couldn't post it as a comment on the answer. Help is appreciated. Anyway, regarding the solution on the ...
0
votes
0answers
2k views

LVM initramfs boot problem: “ALERT! /dev/mapper/vgcrypt-root does not exist. Dropping to a shell!”

I followed the guide linked below to create a clean install of Ubuntu on a LUKS-encrypted partition. The only differences are that I used Ubuntu 12.04 rather than 11.10 and I made less LVs than that ...
1
vote
0answers
465 views

Questions about full disk encryption

Completely new user here, I've been reading for a couple of hours about ubuntu's full disk encryption but I just don't understand some basic points. When installing ubuntu's full disk encryption, ...
10
votes
1answer
8k views

How can I install Ubuntu encrypted with LUKS with dual-boot?

Ubuntu 13.04 installation disk has an option to install Ubuntu encrypted using LUKS. However, there is no option to perform an encrypted installation along-side existing partitions for a dual-boot ...
1
vote
0answers
241 views

How to update cryptsetup till version 1.6.1?

Hello current version of cryptsetup is not capable working with truecrypt partitions. Versions after 1.5.x are capable.(http://code.google.com/p/cryptsetup/wiki/Cryptsetup160) So here is the latest ...
1
vote
2answers
258 views

Can I add LUKS/LVM to an already installed Ubuntu system?

I know how to install a LUKS/LVM Ubuntu system using the alternative CD. Is it possible to do this with an already installed normal system? Meaning that I have an unecrypted system now and don't want ...
1
vote
1answer
3k views

How to encrypt full disk after installing Ubuntu 12.10?

I found that we can encrypt full disk with old version of Ubuntu. I want to do the same with Ubuntu 12.10 but I don't understand the scripts that run when starting with initramfs. So anyone is ever ...
0
votes
0answers
712 views

“cryptsetup luksAddKey” without existing passphrase possible - why?

I want to change an existing password or add a new one. (Ubuntu 12.04) After: sudo cryptsetup luksAddKey /dev/sda5 I have to enter an existing password. But if I just hit the enter key I also can ...
0
votes
1answer
318 views

Mount LUKS Ext4 USB Pen Drive in Nautilus

I want to mount an encrypted USB Pen Drive under Nautilus, but I get Unable to open a folder for 16 GB Volume - No application is registered as handling this file. It works if I use the terminal.
1
vote
1answer
1k views

dm-crypt with LUKS - aes kernel module

Ubuntu documentation says that an aes kernel module needs to be enabled for using aes and dm-crypt with LUKS but when I run modprobe aes as the documentation says to, I get ERROR: could not insert ...
8
votes
2answers
873 views

How do I get passwords from the keyring in the terminal for usage in scripts?

When you have a LUKS encrypted drive in your computer, Nautilus or Nemo will show it under Devices as a drive with a little lock on it. When you click it, you need to enter a password. If you choose ...
3
votes
1answer
562 views

Clone encrypted HDD to smaller drive

For my work Laptop I use full HDD encryption and I need to upgrade my 500GB HDD to a 250 SSD drive, my HDD has only around 100GB of data and is created via encrypted LVM. GParted does not support ...
3
votes
1answer
533 views

MD + LUKS + LVM will not cleanly shutdown

My setup is currently raid1 + luks on each md partition and lvm on top to stripe between the arrays. There is only one volume group with one logical volume currently. sdc ...
2
votes
1answer
511 views

How do i stop Ubuntu from asking for a password to decrypt my drive on start up?

Ubuntu keeps asking for me to decrypt my drive on start up. This is expected, because I had set up full-disk encryption. How do I stop this now?
1
vote
1answer
122 views

12.10 suddenly bricked luks ssd

There is luks-encrypted instance, no raid, no lvm. I often look through logs and that allows me to state that everything worked fine until reboot. However, laptop had ~3 days uptime. The drive is SSD ...