All questions relating to LUKS (the disk-encryption specification) for Linux

learn more… | top users | synonyms

30
votes
1answer
27k views

How can I install Ubuntu encrypted with LUKS with dual-boot?

Ubuntu 13.04 installation disk has an option to install Ubuntu encrypted using LUKS. However, there is no option to perform an encrypted installation along-side existing partitions for a dual-boot ...
19
votes
3answers
54k views

Can I disable full-disk encryption?

I recently installed Ubuntu 12.10 and it requires a passphrase to boot up (I installed it with an encrypted file system). Do I have to reinstall to change to a standard unencrypted file system?
103
votes
1answer
5k views

How do I enable Ubuntu (using full disk encryption) to call LUKSsupend before sleeping/suspending to RAM?

This question is related to another one by @Stefan, but it is not a duplicate of it. The questions are slightly different: the author simply wanted to know if this had been implemented, while I'm ...
15
votes
3answers
26k views

How to configure LVM & LUKS to autodecrypt partition?

I have recently installed ubuntu server 11.04 with the full lvm encryption(installed from the setup) . I wish now to use a key file to do automatic unlock. I have tried to follow this guide http://...
6
votes
1answer
3k views

Full Disk Encryption with LUKS: auto mount second volume

TrueCrypt on Windows can auto mount volumes that use the same passphrase as the boot volume. You enter the passphrase only once. Is there a way to do this with LUKS? Background: I'm currently ...
24
votes
3answers
47k views

How to change LUKS passphrase?

Having installed Ubuntu 11.10 with whole disk encryption and LVM, I need to provide a way for users to easily change LUKS passphrase. Preferably, this should be done using GUI tools, thus, enabling ...
12
votes
4answers
34k views

How secure is an encrypted LUKS filesystem?

I recently installed 11.10 on a fresh disk using entire disk encryption. Can someone tell me how secure the encryption algorithm is? Has there been any recent breaches with said algorithm? I use a ...
9
votes
1answer
3k views

Are there any known vulnerabilities to Ubuntu's full disk encryption feature?

Are there any known vulnerabilities to Ubuntu's full disk encryption feature? I have some storage devices (thumbdrive and a few external hard drives used for backups) that I use with full disk ...
2
votes
2answers
3k views

Pam_mount won't automount encrypted partiton

As usual, when I install a new version of Ubuntu I install pam_mount to automount my with LUKS encrypted partition on login. However, for Ubuntu 11.10, I followed the same procedure as usual, but I ...
18
votes
2answers
20k views

Mount a LUKS partition at boot

I have installed an Ubuntu machine with two encrypted LUKS partitions: one for / and one for /home. I've reinstalled the machine to upgrade to 10.04. Again, the / is installed using LUKS, and I'm ...
16
votes
4answers
20k views

Mount LUKS encrypted hard drive at boot

I have Xubuntu 14.04 on a SSD device (the HOME was encrypted correctly during intallation), additionally I have a HDD with a encrypted partition with extra data which I would like to mount in /mnt/hdd....
14
votes
2answers
6k views

How do I get passwords from the keyring in the terminal for usage in scripts?

When you have a LUKS encrypted drive in your computer, Nautilus or Nemo will show it under Devices as a drive with a little lock on it. When you click it, you need to enter a password. If you choose ...
4
votes
3answers
873 views

What is the proper way to install Ubuntu 15.04 with LVM, LUKS, and manual partitioning?

I am trying to install Xubuntu 15.04 with LVM and LUKS, manually partitioning in order to have a separate /home partition. So far I have booted the Xubuntu live CD and went through these steps: ...
5
votes
1answer
1k views

Clone encrypted HDD to smaller drive

For my work Laptop I use full HDD encryption and I need to upgrade my 500GB HDD to a 250 SSD drive, my HDD has only around 100GB of data and is created via encrypted LVM. GParted does not support ...
7
votes
2answers
8k views

stop crypttab asking for password for swap

I instaled a fresh 11.04 system when it was released and set up full disk encryption with LUKS. At first it asked me for a password for my three encrypted partitions: / /home swap Typing in the ...
3
votes
0answers
509 views

Possible to make “Forget password immediately” the default when opening LUKS encrypted partition?

When a LUKS encrypted partition pops up the unlock window it gives 3 options for how to remember the password. The "Remember password until you logout" is always ticked by default. Is there a way to ...
7
votes
1answer
2k views

How can I encrypt the entire disk on alternate installation?

Is it possible to install Ubuntu 11.04 with full disk encryption? Previously versions have had an alternate install cd with a text interface where you could enable encryption for your drives. This ...
2
votes
1answer
296 views

Merge LUKS-partition with partition on another HDD

I just bought a 2 TB hard disk because the home partition on the old one is almost full. What I want to do is to extend the home partition on hard disk 1 (sda2) to also include all the space on the ...
12
votes
2answers
5k views

Yubikey Two-factor Authentication Full-disk Encryption via LUKS

I recently acquired a Yubikey Neo - a nifty little hardware second factor authentication device. It's primarily intended for use with One Time Passwords, and the emerging U2F protocol - but since ...
6
votes
1answer
5k views

how to mount / with encrypted lvm root during installation?

In order to understand Linux better, I'm trying to manually configure an encrypted root lvm partition . I have already tried this with the Ubuntu server installer by choosing the lvm encrypted option ...
12
votes
3answers
2k views

Suspend to RAM and encrypted partitions

Normally I don't shutdown my notebook any more in favour of using suspend-to-RAM. The downside is that my encrypted home partition is completely accessible after resume without entering the passphrase....
1
vote
3answers
1k views

No Swap Partition!

I'm in dire need of help. My system has become incredibly laggy and hardly usable. I have realised that this is because for some reason I'm running without virtual memory (this is not intentional). ...
6
votes
2answers
1k views

How do I hide / remove a partition from the Nautilus left panel?

I have a luks setup with encrypted partition. And I don't want everyone on my computer to see that I have such partition. Unfortunately it shows up in the nautilus "devices" panel as "Encrypted ...
5
votes
4answers
5k views

How to check if TRIM is working for an encrypted volume?

You can easily check if TRIM works for a "normal" ext4 partition: http://askubuntu.com/a/19480/5920. How to do that for a LUKS-encrypted one? Let's assume the default LUKS setup made by 12.04 ...
4
votes
2answers
7k views

I'm so confused about full disk encryption. help :(

I've been running a live CD of Ubuntu 12.04 for more than a few days now, reading and reading, but I'm not really understanding things when it comes to setting up FDE on Ubuntu 12.04 Precise. I'm sure ...
3
votes
1answer
2k views

Reinstall with existing /home LUKS

My 10.04 machine uses three partitions: 5 GB for /boot, 25 GB for / and 120 GB for /home. / and /home are encrypted with LUKS passphrase. I've downloaded the alternate installer in order to reinstall ...
3
votes
2answers
6k views

GRUB2 failed with 'No video mode activated'

I've installed Ubuntu-Alternate 11.04 to use the encrypted feature. All works fine, but rebooting the system ended up in an error-message: Error: No video mode activated' Reading some threads I ...
3
votes
1answer
508 views

LUKS encryption, header on a dongle USBdrive?

I am going to install Linux the LUKS/LVM way, in order to have an encrypted disk. In addition, I would like to put the header and passphrase in a USB Key. Thus, instead of entering the passphrase, I ...
1
vote
1answer
788 views

Dual boot w/ UEFI and LUKS - What do I need to know/do?

I want to rebuild my mobile workstation (HP EliteBook 8560w) to dual boot CentOS 6.5 and Ubuntu 14.01LTS. I would like to protect both instances with LUKS. In my research I have come across a few ...
1
vote
2answers
3k views

Mounting encrypted LUKS partition from Live CD

Error to begin with, can't boot I had to do a hard reboot of my computer, and when booting up it (initramfs I think) gave an error: mount: mounting /dev/mapper/ubuntu--vg-root on /root failed: ...
3
votes
4answers
6k views

How to install in EFI mode with Encrypted LVM?

I'm trying to properly install Ubuntu 12.04.1 LTS 64-bit PC (AMD64) with the alternate install CD ".iso" on a lenovo Thinkpad X220. Default Hard Disk (with a pre-installed version of Windows 7) has ...
3
votes
1answer
9k views

LUKS initramfs boot problem: “/dev/mapper/ubuntu-root does not exist.” How can I fix it using a backup?

First time asker, relatively new to Ubuntu/Linux. Haven't had much luck with the search function. Please forgive the essay below - the problem is a bit unique, I think... I'm running 12.04 on a ...
3
votes
1answer
257 views

LUKS encrypted device gone missing

The 2TB disk that I use as an encrypted backup, is now reported by Ubuntu as being just free space. The encryption was setup as a LUKS encrypted device. The output of sudo fdisk -l reports: Disk /...
2
votes
2answers
2k views

Encrypting a non-linux partition with LUKS

I have a non-Linux partition I want to encrypt with LUKS. The goal is to be able to store it by itself on a device without Linux and access it from the device when needed with an Ubuntu Live CD. I ...
2
votes
3answers
6k views

How do I get Grub2 to boot a Truecrypt-encrypted MBR?

Given the following system: /dev/sda1 Windows, encrypted using TrueCrypt /dev/sda2 /boot /dev/sda3 /, encrypted (LUKS or how it is called) I now need GRUB2 to boot my truecrypt mbr ): Any hint on ...
1
vote
1answer
8k views

How to encrypt full disk after installing?

I found that we can encrypt full disk with old version of Ubuntu. I want to do the same with Ubuntu 12.10 but I don't understand the scripts that run when starting with initramfs. So anyone is ever ...
1
vote
1answer
858 views

Initramfs + Luks - only one password prompt

What I want to achieve: Being asked for a password, only once during boot time; The other (non-root) partitions to use the keyfile inside the /root/ directory. What I have achieved so far: (A) ...
1
vote
2answers
3k views

Convert from EFI to BIOS boot

I have a Samsung Notebook NP900X4C with an LUKS encrypted installation of Linux Mint 15 on it. The system is booting in UEFI mode. The problem is that the samsung-notebook kernel module is disabled ...
0
votes
4answers
8k views

Encrypted disk won't unlock anymore: Not authorized to perform operation (udisks-error-quark, 4)

In 2012 I used Ubuntu's gnome-disks utility to encrypt an external drive. Last year I was still being able to unlock it. But today I tried again on Ubuntu 2012.04 and gnome-disks says: Error ...
0
votes
1answer
670 views

Can Luks Be Used To Encrypt an NTFS Partition in Ubuntu?

(And then Boot into Full Windows With Luks Running Silently In the Background) I have a client that is completely unable to use Linux, but I was thinking maybe there was a way to setup their computer ...
0
votes
2answers
2k views

How to reinstall kernels after accidental deletion with a separate boot partition and an encrypted LVM volume?

My installation is a Ubuntu 12.04 64 bits (Classic "legacy" MBR - No EFI/UEFI here) with two partition : A separate boot partition An encrypted LUKS volume that contains the system Logical Volumes ...
0
votes
1answer
452 views

Mount external hard drive with LUKS Encryption + LVM

I recently switched to a bigger Hard Drive by running dd if=/dev/old of=/dev/new However now I am trying to get some files that changed after copying, so I connected the old Hard Drive over USB. The ...