All questions relating to LUKS (the disk-encryption specification) for Linux

learn more… | top users | synonyms

91
votes
0answers
4k views

How do I enable Ubuntu (using full disk encryption) to call LUKSsupend before sleeping/suspending to RAM?

This question is related to another one by @Stefan, but it is not a duplicate of it. The questions are slightly different: the author simply wanted to know if this had been implemented, while I'm ...
23
votes
1answer
19k views

How can I install Ubuntu encrypted with LUKS with dual-boot?

Ubuntu 13.04 installation disk has an option to install Ubuntu encrypted using LUKS. However, there is no option to perform an encrypted installation along-side existing partitions for a dual-boot ...
21
votes
3answers
32k views

How to change LUKS passphrase?

Having installed Ubuntu 11.10 with whole disk encryption and LVM, I need to provide a way for users to easily change LUKS passphrase. Preferably, this should be done using GUI tools, thus, enabling ...
14
votes
3answers
32k views

Can I disable full-disk encryption?

I recently installed Ubuntu 12.10 and it requires a passphrase to boot up (I installed it with an encrypted file system). Do I have to reinstall to change to a standard unencrypted file system?
14
votes
2answers
16k views

Mount a LUKS partition at boot

I have installed an Ubuntu machine with two encrypted LUKS partitions: one for / and one for /home. I've reinstalled the machine to upgrade to 10.04. Again, the / is installed using LUKS, and I'm ...
12
votes
3answers
18k views

How to configure LVM & LUKS to autodecrypt partition?

I have recently installed ubuntu server 11.04 with the full lvm encryption(installed from the setup) . I wish now to use a key file to do automatic unlock. I have tried to follow this guide ...
12
votes
3answers
1k views

Suspend to RAM and encrypted partitions

Normally I don't shutdown my notebook any more in favour of using suspend-to-RAM. The downside is that my encrypted home partition is completely accessible after resume without entering the ...
11
votes
3answers
4k views

Is AES-NI fully supported?

Has support for the Intel AES-NI hardware crypto acceleration been added to Ubuntu (LUKS, kernel, OpenSSL libs, etc)? If so, starting with which version? Here is a list of Intel processors supporting ...
10
votes
3answers
21k views

How secure is an encrypted LUKS filesystem?

I recently installed 11.10 on a fresh disk using entire disk encryption. Can someone tell me how secure the encryption algorithm is? Has there been any recent breaches with said algorithm? I use a ...
10
votes
2answers
4k views

How do I get passwords from the keyring in the terminal for usage in scripts?

When you have a LUKS encrypted drive in your computer, Nautilus or Nemo will show it under Devices as a drive with a little lock on it. When you click it, you need to enter a password. If you choose ...
8
votes
1answer
3k views

How do I use dm-crypt (LUKS) with GnuPG to use two-factor for FDE?

When using full disk encryption with Ubuntu (opposed to homedir encryption), dm-crypt with LUKS is used for encrypting the volume. In the installer (at least on 12.04 alternate) you can choose between ...
8
votes
2answers
3k views

How can one unlock a fully encrypted Ubuntu 11.10 system over SSH at boot?

In previous versions of Ubuntu, and current versions of Debian, you can unlock a fully encrypted system (using dmcrypt and LUKS) at boot time over SSH. It was as easy as: Installing the encrypted ...
7
votes
2answers
5k views

Slow SSD + dm-crypt with Luks encryption in Ubuntu 12.10

I have an 128 GB SSD installed in my laptop (Samsung 840 Pro) on a Sata 3 interface. This laptop also has an i5 3210m Ivy Bridge Intel processor and 8 GB of RAM. I installed Ubuntu 12.10, using the ...
7
votes
1answer
2k views

How can I encrypt the entire disk on alternate installation?

Is it possible to install Ubuntu 11.04 with full disk encryption? Previously versions have had an alternate install cd with a text interface where you could enable encryption for your drives. This ...
6
votes
4answers
8k views

Do you recommend LUKS encryption on a SSD (TRIM support)?

I have a laptop (Dell Inspiron 11z) and and SSD (Samsung 128GB) on order. On my current laptop, I have a spinning HDD and use LVM and LUKS encryption. I would like to use LUKS on the SSD but from ...
6
votes
2answers
6k views

stop crypttab asking for password for swap

I instaled a fresh 11.04 system when it was released and set up full disk encryption with LUKS. At first it asked me for a password for my three encrypted partitions: / /home swap Typing in the ...
6
votes
1answer
1k views

Yubikey Two-factor Authentication Full-disk Encryption via LUKS

I recently acquired a Yubikey Neo - a nifty little hardware second factor authentication device. It's primarily intended for use with One Time Passwords, and the emerging U2F protocol - but since ...
6
votes
1answer
4k views

how to mount / with encrypted lvm root during installation?

In order to understand Linux better, I'm trying to manually configure an encrypted root lvm partition . I have already tried this with the Ubuntu server installer by choosing the lvm encrypted option ...
5
votes
1answer
1k views

MD + LUKS + LVM will not cleanly shutdown

My setup is currently raid1 + luks on each md partition and lvm on top to stripe between the arrays. There is only one volume group with one logical volume currently. sdc ...
5
votes
4answers
10k views

Mount LUKS encrypted hard drive at boot

I have Xubuntu 14.04 on a SSD device (the HOME was encrypted correctly during intallation), additionally I have a HDD with a encrypted partition with extra data which I would like to mount in ...
5
votes
1answer
3k views

Full Disk Encryption with LUKS: auto mount second volume

TrueCrypt on Windows can auto mount volumes that use the same passphrase as the boot volume. You enter the passphrase only once. Is there a way to do this with LUKS? Background: I'm currently ...
5
votes
1answer
1k views

Clone encrypted HDD to smaller drive

For my work Laptop I use full HDD encryption and I need to upgrade my 500GB HDD to a 250 SSD drive, my HDD has only around 100GB of data and is created via encrypted LVM. GParted does not support ...
5
votes
4answers
4k views

How to check if TRIM is working for an encrypted volume?

You can easily check if TRIM works for a "normal" ext4 partition: http://askubuntu.com/a/19480/5920. How to do that for a LUKS-encrypted one? Let's assume the default LUKS setup made by 12.04 ...
5
votes
1answer
935 views

why is it a risk to clone a LUKS container?

I recently installed Ubuntu onto an encrypted partition using the LUKS+LVM combination that the 'alternate' installer offers. Now I want to create backups of my HD. From the LUKS FAQ: 6.15 Can I ...
5
votes
4answers
2k views

Luks two-factor authentication

is it possible to create a crypted partition with a two-factor authentication ( decryption with password and keyfile ) with LUKS, like in truecrypt?
5
votes
1answer
1k views

How do I hide / remove a partition from the Nautilus left panel?

I have a luks setup with encrypted partition. And I don't want everyone on my computer to see that I have such partition. Unfortunately it shows up in the nautilus "devices" panel as "Encrypted ...
5
votes
1answer
179 views

How do I get dropbear to actually work with initramfs?

Bounty Bounty Bounty Bounty! So I'm trying to unlock a headless server running an encrypted version of Ubuntu 14.04. It is a virgin 14.04.2 install with all updates as of writing. I went thtrough ...
5
votes
1answer
6k views

device-mapper: remove ioctl on luks-xxxx failed: Device or resource busy

While I was away from my computer, my encrypted USB drive got accidentally unmounted somehow (although it was still physically connected at the time). I haven't been able to recover (haven't tried a ...
4
votes
2answers
7k views

I'm so confused about full disk encryption. help :(

I've been running a live CD of Ubuntu 12.04 for more than a few days now, reading and reading, but I'm not really understanding things when it comes to setting up FDE on Ubuntu 12.04 Precise. I'm sure ...
3
votes
1answer
78 views

LUKS encryption, header on a dongle USBdrive?

I am going to install Linux the LUKS/LVM way, in order to have an encrypted disk. In addition, I would like to put the header and passphrase in a USB Key. Thus, instead of entering the passphrase, I ...
3
votes
1answer
8k views

LUKS initramfs boot problem: “/dev/mapper/ubuntu-root does not exist.” How can I fix it using a backup?

First time asker, relatively new to Ubuntu/Linux. Haven't had much luck with the search function. Please forgive the essay below - the problem is a bit unique, I think... I'm running 12.04 on a ...
3
votes
2answers
1k views

Does dmcrypt/LUKS full disk encryption in kernel 3.0 have multi-core/multi-thread support?

I've read a lot about how fast TrueCrypt 7.0 is with it's support for AES hardware acceleration and multi-core/multi-thread support. Will dmcrypt/LUKS offer the same performance enhancing features on ...
3
votes
1answer
1k views

Reinstall with existing /home LUKS

My 10.04 machine uses three partitions: 5 GB for /boot, 25 GB for / and 120 GB for /home. / and /home are encrypted with LUKS passphrase. I've downloaded the alternate installer in order to reinstall ...
3
votes
1answer
6k views

GRUB2 failed with 'No video mode activated'

I've installed Ubuntu-Alternate 11.04 to use the encrypted feature. All works fine, but rebooting the system ended up in an error-message: Error: No video mode activated' Reading some threads I ...
3
votes
1answer
90 views

What is the proper way to install Ubuntu 15.04 with LVM, LUKS, and manual partitioning?

I am trying to install Xubuntu 15.04 with LVM and LUKS, manually partitioning in order to have a separate /home partition. So far I have booted the Xubuntu live CD and went through these steps: ...
3
votes
0answers
538 views

How to create dm-crypt device in LXC?

On one LXC container I need to put sensitive data, preferrably stored in dm-crypt encrypted filesystem. When I write sudo cryptsetup luksFormat --cipher aes-xts-plain --size 512 ...
3
votes
0answers
312 views

how to disable luks partition from showing up in nautlus panel

I have a luks setup with encrypted partition. And I don't want everyone on my computer to see that I have such partition. Unfortunately it shows up in the nautilus "devices" panel as "Encrypted ...
3
votes
4answers
5k views

How to install in EFI mode with Encrypted LVM?

I'm trying to properly install Ubuntu 12.04.1 LTS 64-bit PC (AMD64) with the alternate install CD ".iso" on a lenovo Thinkpad X220. Default Hard Disk (with a pre-installed version of Windows 7) has ...
2
votes
1answer
82 views

Boot folder on external USB pendrive, how to boot to?

My machine is LUKS-encrypted and boot works a charm (asking the passphrase at launch). I want to use a keyfile on a USB pendrive, thus the user has a dongle that the user must plug to launch Linux ...
2
votes
3answers
3k views

Cannot mount LUKS encrypted USB on boot after 12.10 upgrade

I use a USB disk to backup my Ubuntu machine and store the video files I work with. It is formated to ext4 and uses LUKS encription. When I was using 12.04 it was working flawlessly and would mount ...
2
votes
1answer
2k views

LUKS and LVM install: no boot (gave up waiting for root device)

I just finished installing 12.04 on my system, configuring it with LUKS and LVM. I can open the encrypted position just fine in a recovery disk, but I just can't seem to get it to boot. It waits ...
2
votes
2answers
7k views

“Guided - use entire disk and set up encrypted LVM” LUKS or plain dm-crypt?

Does the alternate installer's "Guided - use entire disk and set up encrypted LVM" use LUKS or plain dm-crypt?
2
votes
2answers
3k views

Pam_mount won't automount encrypted partiton

As usual, when I install a new version of Ubuntu I install pam_mount to automount my with LUKS encrypted partition on login. However, for Ubuntu 11.10, I followed the same procedure as usual, but I ...
2
votes
1answer
218 views

Cannot enter password to start Ubuntu

I'm running Ubuntu 14.10 with the system disk encrypted with luks. When I start the computer, it shows the Ubuntu logo and asks to enter the password to unlock the disk. However, I cannot enter the ...
2
votes
1answer
389 views

Expanding an encrypted xfs volume

I am working on expanding a currently attached volume to one of my Ubuntu Amazon AWS servers, but I am having some problems. I already created a new volume from a snapshot, then attached the newly ...
2
votes
3answers
1k views

How to enlarge encrypted swap partition?

I have added some RAM to my netbook. I'd like to save an option to hibernate my computer, so I have to increase my SWAP from 2GiB to 4GiB. My /etc/fstab looks like this: ...
2
votes
1answer
2k views

Encrypting a non-linux partition with LUKS

I have a non-Linux partition I want to encrypt with LUKS. The goal is to be able to store it by itself on a device without Linux and access it from the device when needed with an Ubuntu Live CD. I ...
2
votes
1answer
4k views

Full System encryption with LUKS on headless server - unlock with dropbear and busybox. How?

I encrypted a headless server with cryptsetup/LUKS. 2 HDDs with 512 MB /boot on /dev/md0 and 1,61 TB LUKS encrypted /dev/md1 with LVM containing /, swap, and others. I installed dropbear (and busybox ...
2
votes
1answer
252 views

Merge LUKS-partition with partition on another HDD

I just bought a 2 TB hard disk because the home partition on the old one is almost full. What I want to do is to extend the home partition on hard disk 1 (sda2) to also include all the space on the ...
2
votes
0answers
97 views

cryptsetup: unknown fstype, bad password, ect. Bug? Ubuntu 14.04.2

I can't log in to my system at first I had gotten the following error: cryptsetup: unknown fstype, bad password or options? Ubuntu spammed this at boot. Now I can't run the Ubuntu OS ...