All questions relating to LUKS (the disk-encryption specification) for Linux

learn more… | top users | synonyms

18
votes
3answers
43k views

Can I disable full-disk encryption?

I recently installed Ubuntu 12.10 and it requires a passphrase to boot up (I installed it with an encrypted file system). Do I have to reinstall to change to a standard unencrypted file system?
27
votes
1answer
23k views

How can I install Ubuntu encrypted with LUKS with dual-boot?

Ubuntu 13.04 installation disk has an option to install Ubuntu encrypted using LUKS. However, there is no option to perform an encrypted installation along-side existing partitions for a dual-boot ...
23
votes
3answers
39k views

How to change LUKS passphrase?

Having installed Ubuntu 11.10 with whole disk encryption and LVM, I need to provide a way for users to easily change LUKS passphrase. Preferably, this should be done using GUI tools, thus, enabling ...
100
votes
1answer
5k views

How do I enable Ubuntu (using full disk encryption) to call LUKSsupend before sleeping/suspending to RAM?

This question is related to another one by @Stefan, but it is not a duplicate of it. The questions are slightly different: the author simply wanted to know if this had been implemented, while I'm ...
6
votes
1answer
3k views

Full Disk Encryption with LUKS: auto mount second volume

TrueCrypt on Windows can auto mount volumes that use the same passphrase as the boot volume. You enter the passphrase only once. Is there a way to do this with LUKS? Background: I'm currently ...
13
votes
3answers
21k views

How to configure LVM & LUKS to autodecrypt partition?

I have recently installed ubuntu server 11.04 with the full lvm encryption(installed from the setup) . I wish now to use a key file to do automatic unlock. I have tried to follow this guide ...
2
votes
2answers
3k views

Pam_mount won't automount encrypted partiton

As usual, when I install a new version of Ubuntu I install pam_mount to automount my with LUKS encrypted partition on login. However, for Ubuntu 11.10, I followed the same procedure as usual, but I ...
14
votes
2answers
18k views

Mount a LUKS partition at boot

I have installed an Ubuntu machine with two encrypted LUKS partitions: one for / and one for /home. I've reinstalled the machine to upgrade to 10.04. Again, the / is installed using LUKS, and I'm ...
11
votes
2answers
5k views

How do I get passwords from the keyring in the terminal for usage in scripts?

When you have a LUKS encrypted drive in your computer, Nautilus or Nemo will show it under Devices as a drive with a little lock on it. When you click it, you need to enter a password. If you choose ...
11
votes
4answers
27k views

How secure is an encrypted LUKS filesystem?

I recently installed 11.10 on a fresh disk using entire disk encryption. Can someone tell me how secure the encryption algorithm is? Has there been any recent breaches with said algorithm? I use a ...
5
votes
1answer
1k views

Clone encrypted HDD to smaller drive

For my work Laptop I use full HDD encryption and I need to upgrade my 500GB HDD to a 250 SSD drive, my HDD has only around 100GB of data and is created via encrypted LVM. GParted does not support ...
3
votes
0answers
453 views

Possible to make “Forget password immediately” the default when opening LUKS encrypted partition?

When a LUKS encrypted partition pops up the unlock window it gives 3 options for how to remember the password. The "Remember password until you logout" is always ticked by default. Is there a way to ...
3
votes
1answer
6k views

GRUB2 failed with 'No video mode activated'

I've installed Ubuntu-Alternate 11.04 to use the encrypted feature. All works fine, but rebooting the system ended up in an error-message: Error: No video mode activated' Reading some threads I ...
7
votes
1answer
2k views

How can I encrypt the entire disk on alternate installation?

Is it possible to install Ubuntu 11.04 with full disk encryption? Previously versions have had an alternate install cd with a text interface where you could enable encryption for your drives. This ...
6
votes
2answers
7k views

stop crypttab asking for password for swap

I instaled a fresh 11.04 system when it was released and set up full disk encryption with LUKS. At first it asked me for a password for my three encrypted partitions: / /home swap Typing in the ...
2
votes
1answer
268 views

Merge LUKS-partition with partition on another HDD

I just bought a 2 TB hard disk because the home partition on the old one is almost full. What I want to do is to extend the home partition on hard disk 1 (sda2) to also include all the space on the ...
6
votes
1answer
4k views

how to mount / with encrypted lvm root during installation?

In order to understand Linux better, I'm trying to manually configure an encrypted root lvm partition . I have already tried this with the Ubuntu server installer by choosing the lvm encrypted option ...
9
votes
1answer
3k views

Yubikey Two-factor Authentication Full-disk Encryption via LUKS

I recently acquired a Yubikey Neo - a nifty little hardware second factor authentication device. It's primarily intended for use with One Time Passwords, and the emerging U2F protocol - but since ...
13
votes
3answers
2k views

Suspend to RAM and encrypted partitions

Normally I don't shutdown my notebook any more in favour of using suspend-to-RAM. The downside is that my encrypted home partition is completely accessible after resume without entering the ...
7
votes
4answers
15k views

Mount LUKS encrypted hard drive at boot

I have Xubuntu 14.04 on a SSD device (the HOME was encrypted correctly during intallation), additionally I have a HDD with a encrypted partition with extra data which I would like to mount in ...
1
vote
3answers
799 views

No Swap Partition!

I'm in dire need of help. My system has become incredibly laggy and hardly usable. I have realised that this is because for some reason I'm running without virtual memory (this is not intentional). ...
5
votes
4answers
4k views

How to check if TRIM is working for an encrypted volume?

You can easily check if TRIM works for a "normal" ext4 partition: http://askubuntu.com/a/19480/5920. How to do that for a LUKS-encrypted one? Let's assume the default LUKS setup made by 12.04 ...
4
votes
2answers
7k views

I'm so confused about full disk encryption. help :(

I've been running a live CD of Ubuntu 12.04 for more than a few days now, reading and reading, but I'm not really understanding things when it comes to setting up FDE on Ubuntu 12.04 Precise. I'm sure ...
3
votes
2answers
504 views

What is the proper way to install Ubuntu 15.04 with LVM, LUKS, and manual partitioning?

I am trying to install Xubuntu 15.04 with LVM and LUKS, manually partitioning in order to have a separate /home partition. So far I have booted the Xubuntu live CD and went through these steps: ...
3
votes
1answer
280 views

LUKS encryption, header on a dongle USBdrive?

I am going to install Linux the LUKS/LVM way, in order to have an encrypted disk. In addition, I would like to put the header and passphrase in a USB Key. Thus, instead of entering the passphrase, I ...
3
votes
1answer
1k views

Reinstall with existing /home LUKS

My 10.04 machine uses three partitions: 5 GB for /boot, 25 GB for / and 120 GB for /home. / and /home are encrypted with LUKS passphrase. I've downloaded the alternate installer in order to reinstall ...
1
vote
1answer
657 views

Dual boot w/ UEFI and LUKS - What do I need to know/do?

I want to rebuild my mobile workstation (HP EliteBook 8560w) to dual boot CentOS 6.5 and Ubuntu 14.01LTS. I would like to protect both instances with LUKS. In my research I have come across a few ...
0
votes
2answers
1k views

Failed upgrade from 11.10 to 12.04 on an encrypted filesystem

Okay, so I was running Ubuntu 11.10 with a dm-crypt/LUKS encrypted file-system and just tried to update to 12.04 with the Update Manager. It downloaded all the necessary packages and started ...
3
votes
1answer
99 views

LUKS encrypted device gone missing

The 2TB disk that I use as an encrypted backup, is now reported by Ubuntu as being just free space. The encryption was setup as a LUKS encrypted device. The output of sudo fdisk -l reports: Disk ...
3
votes
1answer
9k views

LUKS initramfs boot problem: “/dev/mapper/ubuntu-root does not exist.” How can I fix it using a backup?

First time asker, relatively new to Ubuntu/Linux. Haven't had much luck with the search function. Please forgive the essay below - the problem is a bit unique, I think... I'm running 12.04 on a ...
3
votes
4answers
5k views

How to install in EFI mode with Encrypted LVM?

I'm trying to properly install Ubuntu 12.04.1 LTS 64-bit PC (AMD64) with the alternate install CD ".iso" on a lenovo Thinkpad X220. Default Hard Disk (with a pre-installed version of Windows 7) has ...
2
votes
3answers
5k views

How do I get Grub2 to boot a Truecrypt-encrypted MBR?

Given the following system: /dev/sda1 Windows, encrypted using TrueCrypt /dev/sda2 /boot /dev/sda3 /, encrypted (LUKS or how it is called) I now need GRUB2 to boot my truecrypt mbr ): Any hint on ...
2
votes
1answer
2k views

Encrypting a non-linux partition with LUKS

I have a non-Linux partition I want to encrypt with LUKS. The goal is to be able to store it by itself on a device without Linux and access it from the device when needed with an Ubuntu Live CD. I ...
1
vote
0answers
43 views

LUKS partition lost?

I'm starting to getting desperate about a partition encrypted with LUKS which is not recognized anymore. Here's what happend: Tried to resize partitions on sdb5 (lvm1 in crypt-container1). Made a ...
1
vote
1answer
488 views

Initramfs + Luks - only one password prompt

What I want to achieve: Being asked for a password, only once during boot time; The other (non-root) partitions to use the keyfile inside the /root/ directory. What I have achieved so far: (A) ...
1
vote
1answer
7k views

How to encrypt full disk after installing?

I found that we can encrypt full disk with old version of Ubuntu. I want to do the same with Ubuntu 12.10 but I don't understand the scripts that run when starting with initramfs. So anyone is ever ...
1
vote
1answer
1k views

Encrypting FAT32 with Luks

In previous versions of Ubuntu I was able to encrypt USB flashdrives using the disks tool in any format I pleased. Now unfortunately I am only able to encrypt a flash drive in EXT format. This is ...
0
votes
1answer
326 views

Mount external hard drive with LUKS Encryption + LVM

I recently switched to a bigger Hard Drive by running dd if=/dev/old of=/dev/new However now I am trying to get some files that changed after copying, so I connected the old Hard Drive over USB. The ...
0
votes
1answer
2k views

How to reinstall kernels after accidental deletion with a separate boot partition and an encrypted LVM volume?

My installation is a Ubuntu 12.04 64 bits (Classic "legacy" MBR - No EFI/UEFI here) with two partition : A separate boot partition An encrypted LUKS volume that contains the system Logical Volumes ...
0
votes
3answers
7k views

Encrypted disk won't unlock anymore: Not authorized to perform operation (udisks-error-quark, 4)

In 2012 I used Ubuntu's gnome-disks utility to encrypt an external drive. Last year I was still being able to unlock it. But today I tried again on Ubuntu 2012.04 and gnome-disks says: Error ...