All questions relating to LUKS (the disk-encryption specification) for Linux
11
votes
3answers
2k views
Is AES-NI fully supported?
Has support for the Intel AES-NI hardware crypto acceleration been added to Ubuntu (LUKS, kernel, OpenSSL libs, etc)? If so, starting with which version?
Here is a list of Intel processors supporting ...
0
votes
0answers
18 views
Migrating encrypted LVM to a new SSD
This question is related to How to migrate an encrypted LVM install to a new disk but I couldn't post it as a comment on the answer. Help is appreciated.
Anyway, regarding the solution on the ...
0
votes
0answers
24 views
LVM initramfs boot problem: “ALERT! /dev/mapper/vgcrypt-root does not exist. Dropping to a shell!”
I followed the guide linked below to create a clean install of Ubuntu on a LUKS-encrypted partition. The only differences are that I used Ubuntu 12.04 rather than 11.10 and I made less LVs than that ...
0
votes
1answer
98 views
Encrypting FAT32 with Luks
In previous versions of Ubuntu I was able to encrypt USB flashdrives using the disks tool in any format I pleased. Now unfortunately I am only able to encrypt a flash drive in EXT format. This is ...
1
vote
0answers
86 views
Questions about full disk encryption
Completely new user here, I've been reading for a couple of hours about ubuntu's full disk encryption but I just don't understand some basic points.
When installing ubuntu's full disk encryption, ...
2
votes
1answer
197 views
How can I install Ubuntu encrypted with LUKS with dual-boot?
Ubuntu 13.04 installation disk has an option to install Ubuntu encrypted using LUKS. However, there is no option to perform an encrypted installation along-side existing partitions for a dual-boot ...
7
votes
1answer
1k views
How can I encrypt the entire disk on alternate installation?
Is it possible to install Ubuntu 11.04 with full disk encryption?
Previously versions have had an alternate install cd with a text interface where you could enable encryption for your drives.
This ...
1
vote
0answers
33 views
How to update cryptsetup till version 1.6.1?
Hello current version of cryptsetup is not capable working with truecrypt partitions.
Versions after 1.5.x are capable.(http://code.google.com/p/cryptsetup/wiki/Cryptsetup160)
So here is the latest ...
1
vote
1answer
42 views
Can I add LUKS/LVM to an already installed Ubuntu system?
I know how to install a LUKS/LVM Ubuntu system using the alternative CD. Is it possible to do this with an already installed normal system? Meaning that I have an unecrypted system now and don't want ...
1
vote
2answers
631 views
How do I get Grub2 to boot a Truecrypt-encrypted MBR?
Given the following system:
/dev/sda1 Windows, encrypted using TrueCrypt
/dev/sda2 /boot
/dev/sda3 /, encrypted (LUKS or how it is called)
I now need GRUB2 to boot my truecrypt mbr ): Any hint on ...
4
votes
3answers
446 views
Luks two-factor authentication
is it possible to create a crypted partition with a two-factor authentication ( decryption with password and keyfile ) with LUKS, like in truecrypt?
0
votes
1answer
51 views
Mount LUKS Ext4 USB Pen Drive in Nautilus
I want to mount an encrypted USB Pen Drive under Nautilus, but I get Unable to open a folder for 16 GB Volume - No application is registered as handling this file. It works if I use the terminal.
0
votes
1answer
109 views
How to encrypt full disk after installing Ubuntu 12.10?
I found that we can encrypt full disk with old version of Ubuntu. I want to do the same with Ubuntu 12.10 but I don't understand the scripts that run when starting with initramfs. So anyone is ever ...
0
votes
0answers
35 views
“cryptsetup luksAddKey” without existing passphrase possible - why?
I want to change an existing password or add a new one. (Ubuntu 12.04)
After:
sudo cryptsetup luksAddKey /dev/sda5
I have to enter an existing password. But if I just hit the enter key I also can ...
0
votes
1answer
46 views
How can I change folder permissions in a luks encrypted partition
I have a folder in a luks encrypted partition /media/user/luks-partition/folder on Ubuntu 12.10.
I am not able to change folder's permissions. I tried using the nautilus gui and chroot both as ...
5
votes
1answer
5k views
How to change LUKS passphrase?
Having installed Ubuntu 11.10 with whole disk encryption and LVM, I need to provide a way for users to easily change LUKS passphrase.
Preferably, this should be done using GUI tools, thus, enabling ...
3
votes
3answers
2k views
How to install in EFI mode with Encrypted LVM?
I'm trying to properly install Ubuntu 12.04.1 LTS 64-bit PC (AMD64) with the alternate install CD ".iso" on a lenovo Thinkpad X220.
Default Hard Disk (with a pre-installed version of Windows 7) has ...
4
votes
1answer
1k views
how to mount / with encrypted lvm root during installation?
In order to understand Linux better, I'm trying to manually configure an encrypted root lvm partition .
I have already tried this with the Ubuntu server installer by choosing the lvm encrypted option ...
1
vote
2answers
497 views
Cannot mount LUKS encrypted USB on boot after 12.10 upgrade
I use a USB disk to backup my Ubuntu machine and store the video files I work with. It is formated to ext4 and uses LUKS encription. When I was using 12.04 it was working flawlessly and would mount ...
1
vote
1answer
138 views
How to resize a LUKS partition by moving its start?
I have a LUKS partition (sdb2) on a drive which previously contained another Partition (sdb1). Now that I deleted sdb1, I want sdb2 to use this space, too.
All tutorials I could find seem to depend ...
0
votes
0answers
16 views
mainline kernel and crypted boot
when trying one of the mainline kernels from http://kernel.ubuntu.com/~kernel-ppa/mainline/ i end up with a non-gui/non-starting system.
All i get is a system, that boots into the new kernel and when ...
1
vote
1answer
135 views
Clone encrypted HDD to smaller drive
For my work Laptop I use full HDD encryption and I need to upgrade my 500GB HDD to a 250 SSD drive, my HDD has only around 100GB of data and is created via encrypted LVM.
GParted does not support ...
0
votes
1answer
154 views
dm-crypt with LUKS - aes kernel module
Ubuntu documentation says that an aes kernel module needs to be enabled for using aes and dm-crypt with LUKS but when I run modprobe aes as the documentation says to, I get ERROR: could not insert ...
0
votes
0answers
72 views
Installing Ubuntu 12.10 with encrypted root and swap on the same encrypted partition
I fire up the installation and select something else.
I can make an encrypted partition, but then I can't break it into two parts to hold a swap and root. What am I doing wrong and how can I change ...
3
votes
1answer
676 views
Slow SSD + dm-crypt with Luks encryption in Ubuntu 12.10
I have an 128 GB SSD installed in my laptop (Samsung 840 Pro) on a Sata 3 interface. This laptop also has an i5 3210m Ivy Bridge Intel processor and 8 GB of RAM.
I installed Ubuntu 12.10, using the ...
4
votes
1answer
126 views
How do I get passwords from the keyring in the terminal for usage in scripts?
When you have a LUKS encrypted drive in your computer, Nautilus or Nemo will show it under Devices as a drive with a little lock on it.
When you click it, you need to enter a password. If you choose ...
1
vote
1answer
86 views
12.10 suddenly bricked luks ssd
There is luks-encrypted instance, no raid, no lvm. I often look through logs and that allows me to state that everything worked fine until reboot. However, laptop had ~3 days uptime. The drive is SSD ...
2
votes
0answers
106 views
MD + LUKS + LVM will not cleanly shutdown
My setup is currently raid1 + luks on each md partition and lvm on top to stripe between the arrays. There is only one volume group with one logical volume currently.
sdc ...
4
votes
1answer
472 views
Can I disable full-disk encryption?
I recently installed Ubuntu 12.10 and it requires a passphrase to boot up (I installed it with an encrypted file system).
Do I have to reinstall to change to a standard unencrypted file system?
2
votes
1answer
115 views
How do i stop Ubuntu from asking for a password to decrypt my drive on start up?
Ubuntu keeps asking for me to decrypt my drive on start up. This is expected, because I had set up full-disk encryption.
How do I stop this now?
4
votes
3answers
3k views
Do you recommend LUKS encryption on a SSD (TRIM support)?
I have a laptop (Dell Inspiron 11z) and and SSD (Samsung 128GB) on order.
On my current laptop, I have a spinning HDD and use LVM and LUKS encryption.
I would like to use LUKS on the SSD but from ...
1
vote
1answer
156 views
Use LUKS and LVM on install to external drive
So I have a laptop running Backtrack 5 R3 using LUKS and LVM, manually configured, and I'm trying to install Ubuntu 12.10 to a USB 3 external drive and use LUKS and LVM on that as well, but I can't ...
0
votes
1answer
508 views
Performance tuning/diagnotics help needed… (12.04LTS 64bit, LVM, & LUKS)
I just performed a fresh install of 12.04LTS 64-bit, using the alternate CD, with LVM and LUKS. Install went fine but I've noticed a few quirks and was hoping for some pointers/suggestions from the ...
1
vote
1answer
104 views
ext4 filesystem wrongly detected as jmicron_raid_member
I have an installation of Ubuntu 12.04 on an SSD disk that I'm unable to boot after a kernel upgrade and a reboot. Additional things that might be a possible cause is that I did some cleanup (dpkg -r) ...
5
votes
2answers
2k views
How secure is an encrypted LUKS filesystem?
I recently installed 11.10 on a fresh disk using entire disk encryption. Can someone tell me how secure the encryption algorithm is? Has there been any recent breaches with said algorithm? I use a ...
0
votes
1answer
90 views
My LUKS encrypted device works on one computer but not on another - why?
My LUKS encrypted device works on one computer, the one where I created it on, Ubuntu 12.04.
But when I attach it to another fairly fresh 12.04, syslog tells me "unknown partition".
Any ideas why ...
3
votes
1answer
787 views
Does dmcrypt/LUKS full disk encryption in kernel 3.0 have multi-core/multi-thread support?
I've read a lot about how fast TrueCrypt 7.0 is with it's support for AES hardware acceleration and multi-core/multi-thread support. Will dmcrypt/LUKS offer the same performance enhancing features on ...
1
vote
1answer
1k views
Mount encrypted home during boot (dm-crypt, luks)
I just installed Ubuntu 12.04 on my notebook having kept an old luks encrypted partition on my drive.
This partition shows up in the file manager an can be mounted from there into /media/[UUID].
Now I ...
4
votes
2answers
2k views
stop crypttab asking for password for swap
I instaled a fresh 11.04 system when it was released and set up full disk encryption with LUKS. At first it asked me for a password for my three encrypted partitions:
/
/home
swap
Typing in the ...
2
votes
0answers
42 views
Encrypted LVM on multiple drives [duplicate]
Possible Duplicate:
Full Disk Encryption with LUKS: auto mount second volume
I want to set up encrypted LVM when I install Ubuntu. I have an SSD and an HDD and I would like to put /boot, ...
3
votes
1answer
1k views
LUKS initramfs boot problem: “/dev/mapper/ubuntu-root does not exist.” How can I fix it using a backup?
First time asker, relatively new to Ubuntu/Linux. Haven't had much luck with the search function. Please forgive the essay below - the problem is a bit unique, I think...
I'm running 12.04 on a ...
5
votes
1answer
3k views
How to configure LVM & LUKS to autodecrypt partition?
I have recently installed ubuntu server 11.04 with the full lvm encryption(installed from the setup) . I wish now to use a key file to do automatic unlock. I have tried to follow this guide ...
1
vote
1answer
300 views
Ubuntu12.10 “Disks” Pendrive 64GB format LUKS+ext4
I just bought Pendrive / Flshdrive 64GB and need to archive on it file bigger than 10GB so i believe FAT32 is not an good option since it can handle only 4GB file in size. Next thing is that i though ...
2
votes
1answer
172 views
Ubuntu 12.04 not Locking Encrypted Hard Drive on Log Out
I'm running Ubuntu 12.04 with Gnome 3.4. I have two external hard drives. I encrypted both using Ubuntu's Disk Utility. When I use Nautilus to mount them, I'm asked for my decryption password. ...
0
votes
1answer
100 views
How to modify partitions after install?
I wanted to have Ubuntu with full disk encryption on one big partition, and Windows on a small one. In 12.04, only the Server Edition installer has full disk encryption, so I used that and then ...
4
votes
1answer
1k views
Full Disk Encryption with LUKS: auto mount second volume
TrueCrypt on Windows can auto mount volumes that use the same passphrase as the boot volume. You enter the passphrase only once. Is there a way to do this with LUKS?
Background: I'm currently ...
1
vote
1answer
218 views
Run fstrim from LiveCD
A few years ago I installed Ubuntu 10.04 with LVM + LUKS on a system with SSD, TRIM was not enabled. Now I want to install Ubuntu 12.04 on the same SSD.
I have found a guide explaining how to enable ...
1
vote
0answers
45 views
How do I encrypt my wubi installation with LUKS?
Wubi is installed on my PC, and I need to LUKS Encrypt it. But it is loop mounted, does anyone know how to use LUKS to encrypt the root.disk?
Thank you so much for your help!!!
1
vote
0answers
175 views
How to create dm-crypt device in LXC?
On one LXC container I need to put sensitive data, preferrably stored in dm-crypt encrypted filesystem.
When I write
sudo cryptsetup luksFormat --cipher aes-xts-plain --size 512 ...
2
votes
3answers
643 views
How to enlarge encrypted swap partition?
I have added some RAM to my netbook. I'd like to save an option to hibernate my computer, so I have to increase my SWAP from 2GiB to 4GiB.
My /etc/fstab looks like this:
...
