All questions relating to LUKS (the disk-encryption specification) for Linux

learn more… | top users | synonyms

100
votes
1answer
5k views

How do I enable Ubuntu (using full disk encryption) to call LUKSsupend before sleeping/suspending to RAM?

This question is related to another one by @Stefan, but it is not a duplicate of it. The questions are slightly different: the author simply wanted to know if this had been implemented, while I'm ...
27
votes
1answer
23k views

How can I install Ubuntu encrypted with LUKS with dual-boot?

Ubuntu 13.04 installation disk has an option to install Ubuntu encrypted using LUKS. However, there is no option to perform an encrypted installation along-side existing partitions for a dual-boot ...
23
votes
3answers
39k views

How to change LUKS passphrase?

Having installed Ubuntu 11.10 with whole disk encryption and LVM, I need to provide a way for users to easily change LUKS passphrase. Preferably, this should be done using GUI tools, thus, enabling ...
18
votes
3answers
43k views

Can I disable full-disk encryption?

I recently installed Ubuntu 12.10 and it requires a passphrase to boot up (I installed it with an encrypted file system). Do I have to reinstall to change to a standard unencrypted file system?
14
votes
2answers
18k views

Mount a LUKS partition at boot

I have installed an Ubuntu machine with two encrypted LUKS partitions: one for / and one for /home. I've reinstalled the machine to upgrade to 10.04. Again, the / is installed using LUKS, and I'm ...
13
votes
3answers
21k views

How to configure LVM & LUKS to autodecrypt partition?

I have recently installed ubuntu server 11.04 with the full lvm encryption(installed from the setup) . I wish now to use a key file to do automatic unlock. I have tried to follow this guide ...
13
votes
3answers
2k views

Suspend to RAM and encrypted partitions

Normally I don't shutdown my notebook any more in favour of using suspend-to-RAM. The downside is that my encrypted home partition is completely accessible after resume without entering the ...
11
votes
4answers
27k views

How secure is an encrypted LUKS filesystem?

I recently installed 11.10 on a fresh disk using entire disk encryption. Can someone tell me how secure the encryption algorithm is? Has there been any recent breaches with said algorithm? I use a ...
11
votes
2answers
5k views

How do I get passwords from the keyring in the terminal for usage in scripts?

When you have a LUKS encrypted drive in your computer, Nautilus or Nemo will show it under Devices as a drive with a little lock on it. When you click it, you need to enter a password. If you choose ...
11
votes
3answers
4k views

Is AES-NI fully supported?

Has support for the Intel AES-NI hardware crypto acceleration been added to Ubuntu (LUKS, kernel, OpenSSL libs, etc)? If so, starting with which version? Here is a list of Intel processors supporting ...
9
votes
1answer
3k views

Yubikey Two-factor Authentication Full-disk Encryption via LUKS

I recently acquired a Yubikey Neo - a nifty little hardware second factor authentication device. It's primarily intended for use with One Time Passwords, and the emerging U2F protocol - but since ...
8
votes
1answer
3k views

How do I use dm-crypt (LUKS) with GnuPG to use two-factor for FDE?

When using full disk encryption with Ubuntu (opposed to homedir encryption), dm-crypt with LUKS is used for encrypting the volume. In the installer (at least on 12.04 alternate) you can choose between ...
8
votes
2answers
3k views

How can one unlock a fully encrypted Ubuntu 11.10 system over SSH at boot?

In previous versions of Ubuntu, and current versions of Debian, you can unlock a fully encrypted system (using dmcrypt and LUKS) at boot time over SSH. It was as easy as: Installing the encrypted ...
8
votes
3answers
8k views

device-mapper: remove ioctl on luks-xxxx failed: Device or resource busy

While I was away from my computer, my encrypted USB drive got accidentally unmounted somehow (although it was still physically connected at the time). I haven't been able to recover (haven't tried a ...
7
votes
2answers
5k views

Slow SSD + dm-crypt with Luks encryption in Ubuntu 12.10

I have an 128 GB SSD installed in my laptop (Samsung 840 Pro) on a Sata 3 interface. This laptop also has an i5 3210m Ivy Bridge Intel processor and 8 GB of RAM. I installed Ubuntu 12.10, using the ...
7
votes
4answers
15k views

Mount LUKS encrypted hard drive at boot

I have Xubuntu 14.04 on a SSD device (the HOME was encrypted correctly during intallation), additionally I have a HDD with a encrypted partition with extra data which I would like to mount in ...
7
votes
1answer
2k views

How can I encrypt the entire disk on alternate installation?

Is it possible to install Ubuntu 11.04 with full disk encryption? Previously versions have had an alternate install cd with a text interface where you could enable encryption for your drives. This ...
6
votes
4answers
9k views

Do you recommend LUKS encryption on a SSD (TRIM support)?

I have a laptop (Dell Inspiron 11z) and and SSD (Samsung 128GB) on order. On my current laptop, I have a spinning HDD and use LVM and LUKS encryption. I would like to use LUKS on the SSD but from ...
6
votes
2answers
7k views

stop crypttab asking for password for swap

I instaled a fresh 11.04 system when it was released and set up full disk encryption with LUKS. At first it asked me for a password for my three encrypted partitions: / /home swap Typing in the ...
6
votes
1answer
3k views

Full Disk Encryption with LUKS: auto mount second volume

TrueCrypt on Windows can auto mount volumes that use the same passphrase as the boot volume. You enter the passphrase only once. Is there a way to do this with LUKS? Background: I'm currently ...
6
votes
1answer
4k views

how to mount / with encrypted lvm root during installation?

In order to understand Linux better, I'm trying to manually configure an encrypted root lvm partition . I have already tried this with the Ubuntu server installer by choosing the lvm encrypted option ...
5
votes
1answer
2k views

MD + LUKS + LVM will not cleanly shutdown

My setup is currently raid1 + luks on each md partition and lvm on top to stripe between the arrays. There is only one volume group with one logical volume currently. sdc ...
5
votes
1answer
1k views

Clone encrypted HDD to smaller drive

For my work Laptop I use full HDD encryption and I need to upgrade my 500GB HDD to a 250 SSD drive, my HDD has only around 100GB of data and is created via encrypted LVM. GParted does not support ...
5
votes
4answers
4k views

How to check if TRIM is working for an encrypted volume?

You can easily check if TRIM works for a "normal" ext4 partition: http://askubuntu.com/a/19480/5920. How to do that for a LUKS-encrypted one? Let's assume the default LUKS setup made by 12.04 ...
5
votes
1answer
1k views

why is it a risk to clone a LUKS container?

I recently installed Ubuntu onto an encrypted partition using the LUKS+LVM combination that the 'alternate' installer offers. Now I want to create backups of my HD. From the LUKS FAQ: 6.15 Can I ...
5
votes
4answers
2k views

Luks two-factor authentication

is it possible to create a crypted partition with a two-factor authentication ( decryption with password and keyfile ) with LUKS, like in truecrypt?
5
votes
1answer
1k views

How do I hide / remove a partition from the Nautilus left panel?

I have a luks setup with encrypted partition. And I don't want everyone on my computer to see that I have such partition. Unfortunately it shows up in the nautilus "devices" panel as "Encrypted ...
5
votes
1answer
776 views

How do I get dropbear to actually work with initramfs?

Bounty Bounty Bounty Bounty! So I'm trying to unlock a headless server running an encrypted version of Ubuntu 14.04. It is a virgin 14.04.2 install with all updates as of writing. I went thtrough ...
4
votes
2answers
7k views

I'm so confused about full disk encryption. help :(

I've been running a live CD of Ubuntu 12.04 for more than a few days now, reading and reading, but I'm not really understanding things when it comes to setting up FDE on Ubuntu 12.04 Precise. I'm sure ...
3
votes
3answers
4k views

Cannot mount LUKS encrypted USB on boot after 12.10 upgrade

I use a USB disk to backup my Ubuntu machine and store the video files I work with. It is formated to ext4 and uses LUKS encription. When I was using 12.04 it was working flawlessly and would mount ...
3
votes
2answers
7k views

“Guided - use entire disk and set up encrypted LVM” LUKS or plain dm-crypt?

Does the alternate installer's "Guided - use entire disk and set up encrypted LVM" use LUKS or plain dm-crypt?
3
votes
1answer
281 views

LUKS encryption, header on a dongle USBdrive?

I am going to install Linux the LUKS/LVM way, in order to have an encrypted disk. In addition, I would like to put the header and passphrase in a USB Key. Thus, instead of entering the passphrase, I ...
3
votes
1answer
9k views

LUKS initramfs boot problem: “/dev/mapper/ubuntu-root does not exist.” How can I fix it using a backup?

First time asker, relatively new to Ubuntu/Linux. Haven't had much luck with the search function. Please forgive the essay below - the problem is a bit unique, I think... I'm running 12.04 on a ...
3
votes
2answers
1k views

Does dmcrypt/LUKS full disk encryption in kernel 3.0 have multi-core/multi-thread support?

I've read a lot about how fast TrueCrypt 7.0 is with it's support for AES hardware acceleration and multi-core/multi-thread support. Will dmcrypt/LUKS offer the same performance enhancing features on ...
3
votes
1answer
1k views

Reinstall with existing /home LUKS

My 10.04 machine uses three partitions: 5 GB for /boot, 25 GB for / and 120 GB for /home. / and /home are encrypted with LUKS passphrase. I've downloaded the alternate installer in order to reinstall ...
3
votes
2answers
504 views

What is the proper way to install Ubuntu 15.04 with LVM, LUKS, and manual partitioning?

I am trying to install Xubuntu 15.04 with LVM and LUKS, manually partitioning in order to have a separate /home partition. So far I have booted the Xubuntu live CD and went through these steps: ...
3
votes
2answers
524 views

Cannot enter password to start Ubuntu

I'm running Ubuntu 14.10 with the system disk encrypted with luks. When I start the computer, it shows the Ubuntu logo and asks to enter the password to unlock the disk. However, I cannot enter the ...
3
votes
1answer
6k views

GRUB2 failed with 'No video mode activated'

I've installed Ubuntu-Alternate 11.04 to use the encrypted feature. All works fine, but rebooting the system ended up in an error-message: Error: No video mode activated' Reading some threads I ...
3
votes
1answer
99 views

LUKS encrypted device gone missing

The 2TB disk that I use as an encrypted backup, is now reported by Ubuntu as being just free space. The encryption was setup as a LUKS encrypted device. The output of sudo fdisk -l reports: Disk ...
3
votes
0answers
453 views

Possible to make “Forget password immediately” the default when opening LUKS encrypted partition?

When a LUKS encrypted partition pops up the unlock window it gives 3 options for how to remember the password. The "Remember password until you logout" is always ticked by default. Is there a way to ...
3
votes
0answers
4k views

ubuntu 14.04 not booting, update-initramfs “nothing to do, exiting”

I did a mess while installing ubuntu 14.04 on my XPS 15 (9530 haswell) and I need help to rebuild boot partition. My computer has one miniSATA SSD 32 GB and a 1TB HDD. I crypted both with LUKS with ...
3
votes
0answers
619 views

How to create dm-crypt device in LXC?

On one LXC container I need to put sensitive data, preferrably stored in dm-crypt encrypted filesystem. When I write sudo cryptsetup luksFormat --cipher aes-xts-plain --size 512 ...
3
votes
0answers
316 views

how to disable luks partition from showing up in nautlus panel

I have a luks setup with encrypted partition. And I don't want everyone on my computer to see that I have such partition. Unfortunately it shows up in the nautilus "devices" panel as "Encrypted ...
3
votes
4answers
5k views

How to install in EFI mode with Encrypted LVM?

I'm trying to properly install Ubuntu 12.04.1 LTS 64-bit PC (AMD64) with the alternate install CD ".iso" on a lenovo Thinkpad X220. Default Hard Disk (with a pre-installed version of Windows 7) has ...
2
votes
1answer
102 views

Boot folder on external USB pendrive, how to boot to?

My machine is LUKS-encrypted and boot works a charm (asking the passphrase at launch). I want to use a keyfile on a USB pendrive, thus the user has a dongle that the user must plug to launch Linux ...
2
votes
1answer
24 views

How do I render Ubuntu unusable by deleting the full disk encryption key?

I have an old computer that I'm ready to get rid of that has been encrypted using LUKS full disk encryption. Is it possible to delete the encryption key from the LUKS metadata so that nobody will ever ...
2
votes
1answer
2k views

LUKS and LVM install: no boot (gave up waiting for root device)

I just finished installing 12.04 on my system, configuring it with LUKS and LVM. I can open the encrypted position just fine in a recovery disk, but I just can't seem to get it to boot. It waits ...
2
votes
3answers
5k views

How do I get Grub2 to boot a Truecrypt-encrypted MBR?

Given the following system: /dev/sda1 Windows, encrypted using TrueCrypt /dev/sda2 /boot /dev/sda3 /, encrypted (LUKS or how it is called) I now need GRUB2 to boot my truecrypt mbr ): Any hint on ...
2
votes
2answers
3k views

Pam_mount won't automount encrypted partiton

As usual, when I install a new version of Ubuntu I install pam_mount to automount my with LUKS encrypted partition on login. However, for Ubuntu 11.10, I followed the same procedure as usual, but I ...
2
votes
1answer
511 views

Expanding an encrypted xfs volume

I am working on expanding a currently attached volume to one of my Ubuntu Amazon AWS servers, but I am having some problems. I already created a new volume from a snapshot, then attached the newly ...