All questions relating to LUKS (the disk-encryption specification) for Linux

learn more… | top users | synonyms

23
votes
1answer
19k views

How can I install Ubuntu encrypted with LUKS with dual-boot?

Ubuntu 13.04 installation disk has an option to install Ubuntu encrypted using LUKS. However, there is no option to perform an encrypted installation along-side existing partitions for a dual-boot ...
21
votes
3answers
32k views

How to change LUKS passphrase?

Having installed Ubuntu 11.10 with whole disk encryption and LVM, I need to provide a way for users to easily change LUKS passphrase. Preferably, this should be done using GUI tools, thus, enabling ...
14
votes
3answers
32k views

Can I disable full-disk encryption?

I recently installed Ubuntu 12.10 and it requires a passphrase to boot up (I installed it with an encrypted file system). Do I have to reinstall to change to a standard unencrypted file system?
5
votes
1answer
3k views

Full Disk Encryption with LUKS: auto mount second volume

TrueCrypt on Windows can auto mount volumes that use the same passphrase as the boot volume. You enter the passphrase only once. Is there a way to do this with LUKS? Background: I'm currently ...
91
votes
0answers
4k views

How do I enable Ubuntu (using full disk encryption) to call LUKSsupend before sleeping/suspending to RAM?

This question is related to another one by @Stefan, but it is not a duplicate of it. The questions are slightly different: the author simply wanted to know if this had been implemented, while I'm ...
12
votes
3answers
18k views

How to configure LVM & LUKS to autodecrypt partition?

I have recently installed ubuntu server 11.04 with the full lvm encryption(installed from the setup) . I wish now to use a key file to do automatic unlock. I have tried to follow this guide ...
14
votes
2answers
16k views

Mount a LUKS partition at boot

I have installed an Ubuntu machine with two encrypted LUKS partitions: one for / and one for /home. I've reinstalled the machine to upgrade to 10.04. Again, the / is installed using LUKS, and I'm ...
10
votes
2answers
4k views

How do I get passwords from the keyring in the terminal for usage in scripts?

When you have a LUKS encrypted drive in your computer, Nautilus or Nemo will show it under Devices as a drive with a little lock on it. When you click it, you need to enter a password. If you choose ...
10
votes
3answers
21k views

How secure is an encrypted LUKS filesystem?

I recently installed 11.10 on a fresh disk using entire disk encryption. Can someone tell me how secure the encryption algorithm is? Has there been any recent breaches with said algorithm? I use a ...
5
votes
1answer
1k views

Clone encrypted HDD to smaller drive

For my work Laptop I use full HDD encryption and I need to upgrade my 500GB HDD to a 250 SSD drive, my HDD has only around 100GB of data and is created via encrypted LVM. GParted does not support ...
3
votes
1answer
6k views

GRUB2 failed with 'No video mode activated'

I've installed Ubuntu-Alternate 11.04 to use the encrypted feature. All works fine, but rebooting the system ended up in an error-message: Error: No video mode activated' Reading some threads I ...
2
votes
0answers
374 views

Possible to make “Forget password immediately” the default when opening LUKS encrypted partition?

When a LUKS encrypted partition pops up the unlock window it gives 3 options for how to remember the password. The "Remember password until you logout" is always ticked by default. Is there a way to ...
2
votes
2answers
3k views

Pam_mount won't automount encrypted partiton

As usual, when I install a new version of Ubuntu I install pam_mount to automount my with LUKS encrypted partition on login. However, for Ubuntu 11.10, I followed the same procedure as usual, but I ...
7
votes
1answer
2k views

How can I encrypt the entire disk on alternate installation?

Is it possible to install Ubuntu 11.04 with full disk encryption? Previously versions have had an alternate install cd with a text interface where you could enable encryption for your drives. This ...
6
votes
2answers
6k views

stop crypttab asking for password for swap

I instaled a fresh 11.04 system when it was released and set up full disk encryption with LUKS. At first it asked me for a password for my three encrypted partitions: / /home swap Typing in the ...
2
votes
1answer
252 views

Merge LUKS-partition with partition on another HDD

I just bought a 2 TB hard disk because the home partition on the old one is almost full. What I want to do is to extend the home partition on hard disk 1 (sda2) to also include all the space on the ...
6
votes
1answer
4k views

how to mount / with encrypted lvm root during installation?

In order to understand Linux better, I'm trying to manually configure an encrypted root lvm partition . I have already tried this with the Ubuntu server installer by choosing the lvm encrypted option ...
12
votes
3answers
1k views

Suspend to RAM and encrypted partitions

Normally I don't shutdown my notebook any more in favour of using suspend-to-RAM. The downside is that my encrypted home partition is completely accessible after resume without entering the ...
1
vote
3answers
588 views

No Swap Partition!

I'm in dire need of help. My system has become incredibly laggy and hardly usable. I have realised that this is because for some reason I'm running without virtual memory (this is not intentional). ...
6
votes
1answer
1k views

Yubikey Two-factor Authentication Full-disk Encryption via LUKS

I recently acquired a Yubikey Neo - a nifty little hardware second factor authentication device. It's primarily intended for use with One Time Passwords, and the emerging U2F protocol - but since ...
5
votes
4answers
10k views

Mount LUKS encrypted hard drive at boot

I have Xubuntu 14.04 on a SSD device (the HOME was encrypted correctly during intallation), additionally I have a HDD with a encrypted partition with extra data which I would like to mount in ...
5
votes
4answers
4k views

How to check if TRIM is working for an encrypted volume?

You can easily check if TRIM works for a "normal" ext4 partition: http://askubuntu.com/a/19480/5920. How to do that for a LUKS-encrypted one? Let's assume the default LUKS setup made by 12.04 ...
4
votes
2answers
7k views

I'm so confused about full disk encryption. help :(

I've been running a live CD of Ubuntu 12.04 for more than a few days now, reading and reading, but I'm not really understanding things when it comes to setting up FDE on Ubuntu 12.04 Precise. I'm sure ...
3
votes
1answer
72 views

LUKS encryption, header on a dongle USBdrive?

I am going to install Linux the LUKS/LVM way, in order to have an encrypted disk. In addition, I would like to put the header and passphrase in a USB Key. Thus, instead of entering the passphrase, I ...
3
votes
1answer
1k views

Reinstall with existing /home LUKS

My 10.04 machine uses three partitions: 5 GB for /boot, 25 GB for / and 120 GB for /home. / and /home are encrypted with LUKS passphrase. I've downloaded the alternate installer in order to reinstall ...
0
votes
2answers
1k views

Failed upgrade from 11.10 to 12.04 on an encrypted filesystem

Okay, so I was running Ubuntu 11.10 with a dm-crypt/LUKS encrypted file-system and just tried to update to 12.04 with the Update Manager. It downloaded all the necessary packages and started ...
3
votes
1answer
8k views

LUKS initramfs boot problem: “/dev/mapper/ubuntu-root does not exist.” How can I fix it using a backup?

First time asker, relatively new to Ubuntu/Linux. Haven't had much luck with the search function. Please forgive the essay below - the problem is a bit unique, I think... I'm running 12.04 on a ...
3
votes
4answers
5k views

How to install in EFI mode with Encrypted LVM?

I'm trying to properly install Ubuntu 12.04.1 LTS 64-bit PC (AMD64) with the alternate install CD ".iso" on a lenovo Thinkpad X220. Default Hard Disk (with a pre-installed version of Windows 7) has ...
2
votes
1answer
2k views

Encrypting a non-linux partition with LUKS

I have a non-Linux partition I want to encrypt with LUKS. The goal is to be able to store it by itself on a device without Linux and access it from the device when needed with an Ubuntu Live CD. I ...
1
vote
1answer
134 views

Initramfs + Luks - only one password prompt

What I want to achieve: Being asked for a password, only once during boot time; The other (non-root) partitions to use the keyfile inside the /root/ directory. What I have achieved so far: (A) ...
1
vote
1answer
7k views

How to encrypt full disk after installing Ubuntu 12.10?

I found that we can encrypt full disk with old version of Ubuntu. I want to do the same with Ubuntu 12.10 but I don't understand the scripts that run when starting with initramfs. So anyone is ever ...
0
votes
0answers
773 views

How to recover encrypted LUKS lubuntu data?

I installed lubuntu 13.10 with encryption from the CD and then updated to 14.04 when it became available. Now booting up fails. My hard drive has at least two partitions, one boot and one LUKS ...
0
votes
1answer
936 views

How to reinstall kernels after accidental deletion with a separate boot partition and an encrypted LVM volume?

My installation is a Ubuntu 12.04 64 bits (Classic "legacy" MBR - No EFI/UEFI here) with two partition : A separate boot partition An encrypted LUKS volume that contains the system Logical Volumes ...
0
votes
2answers
5k views

Encrypted disk won't unlock anymore: Not authorized to perform operation (udisks-error-quark, 4)

In 2012 I used Ubuntu's gnome-disks utility to encrypt an external drive. Last year I was still being able to unlock it. But today I tried again on Ubuntu 2012.04 and gnome-disks says: Error ...
0
votes
1answer
935 views

Encrypting FAT32 with Luks

In previous versions of Ubuntu I was able to encrypt USB flashdrives using the disks tool in any format I pleased. Now unfortunately I am only able to encrypt a flash drive in EXT format. This is ...