All questions relating to LUKS (the disk-encryption specification) for Linux

learn more… | top users | synonyms

47
votes
0answers
2k views

How do I enable Ubuntu (using full disk encryption) to call LUKSsupend before sleeping/suspending to RAM?

This question is related to another one by @Stefan, but it is not a duplicate of it. The questions are slightly different: the author simply wanted to know if this had been implemented, while I'm ...
17
votes
1answer
13k views

How can I install Ubuntu encrypted with LUKS with dual-boot?

Ubuntu 13.04 installation disk has an option to install Ubuntu encrypted using LUKS. However, there is no option to perform an encrypted installation along-side existing partitions for a dual-boot ...
12
votes
3answers
22k views

How to change LUKS passphrase?

Having installed Ubuntu 11.10 with whole disk encryption and LVM, I need to provide a way for users to easily change LUKS passphrase. Preferably, this should be done using GUI tools, thus, enabling ...
12
votes
2answers
13k views

Mount a LUKS partition at boot

I have installed an Ubuntu machine with two encrypted LUKS partitions: one for / and one for /home. I've reinstalled the machine to upgrade to 10.04. Again, the / is installed using LUKS, and I'm ...
11
votes
3answers
3k views

Is AES-NI fully supported?

Has support for the Intel AES-NI hardware crypto acceleration been added to Ubuntu (LUKS, kernel, OpenSSL libs, etc)? If so, starting with which version? Here is a list of Intel processors supporting ...
10
votes
2answers
2k views

How do I get passwords from the keyring in the terminal for usage in scripts?

When you have a LUKS encrypted drive in your computer, Nautilus or Nemo will show it under Devices as a drive with a little lock on it. When you click it, you need to enter a password. If you choose ...
10
votes
3answers
17k views

Can I disable full-disk encryption?

I recently installed Ubuntu 12.10 and it requires a passphrase to boot up (I installed it with an encrypted file system). Do I have to reinstall to change to a standard unencrypted file system?
10
votes
2answers
937 views

Suspend to RAM and encrypted partitions

Normally I don't shutdown my notebook any more in favour of using suspend-to-RAM. The downside is that my encrypted home partition is completely accessible after resume without entering the ...
9
votes
2answers
13k views

How to configure LVM & LUKS to autodecrypt partition?

I have recently installed ubuntu server 11.04 with the full lvm encryption(installed from the setup) . I wish now to use a key file to do automatic unlock. I have tried to follow this guide ...
8
votes
1answer
2k views

How can one unlock a fully encrypted Ubuntu 11.10 system over SSH at boot?

In previous versions of Ubuntu, and current versions of Debian, you can unlock a fully encrypted system (using dmcrypt and LUKS) at boot time over SSH. It was as easy as: Installing the encrypted ...
7
votes
3answers
13k views

How secure is an encrypted LUKS filesystem?

I recently installed 11.10 on a fresh disk using entire disk encryption. Can someone tell me how secure the encryption algorithm is? Has there been any recent breaches with said algorithm? I use a ...
7
votes
1answer
2k views

How can I encrypt the entire disk on alternate installation?

Is it possible to install Ubuntu 11.04 with full disk encryption? Previously versions have had an alternate install cd with a text interface where you could enable encryption for your drives. This ...
6
votes
3answers
7k views

Do you recommend LUKS encryption on a SSD (TRIM support)?

I have a laptop (Dell Inspiron 11z) and and SSD (Samsung 128GB) on order. On my current laptop, I have a spinning HDD and use LVM and LUKS encryption. I would like to use LUKS on the SSD but from ...
5
votes
2answers
4k views

Slow SSD + dm-crypt with Luks encryption in Ubuntu 12.10

I have an 128 GB SSD installed in my laptop (Samsung 840 Pro) on a Sata 3 interface. This laptop also has an i5 3210m Ivy Bridge Intel processor and 8 GB of RAM. I installed Ubuntu 12.10, using the ...
5
votes
1answer
3k views

how to mount / with encrypted lvm root during installation?

In order to understand Linux better, I'm trying to manually configure an encrypted root lvm partition . I have already tried this with the Ubuntu server installer by choosing the lvm encrypted option ...
5
votes
4answers
4k views

How to check if TRIM is working for an encrypted volume?

You can easily check if TRIM works for a "normal" ext4 partition: http://askubuntu.com/a/19480/5920. How to do that for a LUKS-encrypted one? Let's assume the default LUKS setup made by 12.04 ...
5
votes
1answer
720 views

why is it a risk to clone a LUKS container?

I recently installed Ubuntu onto an encrypted partition using the LUKS+LVM combination that the 'alternate' installer offers. Now I want to create backups of my HD. From the LUKS FAQ: 6.15 Can I ...
5
votes
1answer
1k views

How do I hide / remove a partition from the Nautilus left panel?

I have a luks setup with encrypted partition. And I don't want everyone on my computer to see that I have such partition. Unfortunately it shows up in the nautilus "devices" panel as "Encrypted ...
4
votes
1answer
870 views

MD + LUKS + LVM will not cleanly shutdown

My setup is currently raid1 + luks on each md partition and lvm on top to stripe between the arrays. There is only one volume group with one logical volume currently. sdc ...
4
votes
2answers
7k views

I'm so confused about full disk encryption. help :(

I've been running a live CD of Ubuntu 12.04 for more than a few days now, reading and reading, but I'm not really understanding things when it comes to setting up FDE on Ubuntu 12.04 Precise. I'm sure ...
4
votes
2answers
5k views

stop crypttab asking for password for swap

I instaled a fresh 11.04 system when it was released and set up full disk encryption with LUKS. At first it asked me for a password for my three encrypted partitions: / /home swap Typing in the ...
4
votes
1answer
2k views

Full Disk Encryption with LUKS: auto mount second volume

TrueCrypt on Windows can auto mount volumes that use the same passphrase as the boot volume. You enter the passphrase only once. Is there a way to do this with LUKS? Background: I'm currently ...
4
votes
3answers
1k views

Luks two-factor authentication

is it possible to create a crypted partition with a two-factor authentication ( decryption with password and keyfile ) with LUKS, like in truecrypt?
3
votes
1answer
822 views

Clone encrypted HDD to smaller drive

For my work Laptop I use full HDD encryption and I need to upgrade my 500GB HDD to a 250 SSD drive, my HDD has only around 100GB of data and is created via encrypted LVM. GParted does not support ...
3
votes
1answer
6k views

LUKS initramfs boot problem: “/dev/mapper/ubuntu-root does not exist.” How can I fix it using a backup?

First time asker, relatively new to Ubuntu/Linux. Haven't had much luck with the search function. Please forgive the essay below - the problem is a bit unique, I think... I'm running 12.04 on a ...
3
votes
1answer
1k views

Reinstall with existing /home LUKS

My 10.04 machine uses three partitions: 5 GB for /boot, 25 GB for / and 120 GB for /home. / and /home are encrypted with LUKS passphrase. I've downloaded the alternate installer in order to reinstall ...
3
votes
4answers
3k views

Mount LUKS encrypted hard drive at boot

I have Xubuntu 14.04 on a SSD device (the HOME was encrypted correctly during intallation), additionally I have a HDD with a encrypted partition with extra data which I would like to mount in ...
3
votes
1answer
1k views

Does dmcrypt/LUKS full disk encryption in kernel 3.0 have multi-core/multi-thread support?

I've read a lot about how fast TrueCrypt 7.0 is with it's support for AES hardware acceleration and multi-core/multi-thread support. Will dmcrypt/LUKS offer the same performance enhancing features on ...
3
votes
1answer
5k views

GRUB2 failed with 'No video mode activated'

I've installed Ubuntu-Alternate 11.04 to use the encrypted feature. All works fine, but rebooting the system ended up in an error-message: Error: No video mode activated' Reading some threads I ...
3
votes
0answers
3k views

device-mapper: remove ioctl on luks-xxxx failed: Device or resource busy

While I was away from my computer, my encrypted USB drive got accidentally unmounted somehow (although it was still physically connected at the time). I haven't been able to recover (haven't tried a ...
3
votes
0answers
436 views

How to create dm-crypt device in LXC?

On one LXC container I need to put sensitive data, preferrably stored in dm-crypt encrypted filesystem. When I write sudo cryptsetup luksFormat --cipher aes-xts-plain --size 512 ...
3
votes
3answers
4k views

How to install in EFI mode with Encrypted LVM?

I'm trying to properly install Ubuntu 12.04.1 LTS 64-bit PC (AMD64) with the alternate install CD ".iso" on a lenovo Thinkpad X220. Default Hard Disk (with a pre-installed version of Windows 7) has ...
3
votes
0answers
311 views

how to disable luks partition from showing up in nautlus panel

I have a luks setup with encrypted partition. And I don't want everyone on my computer to see that I have such partition. Unfortunately it shows up in the nautilus "devices" panel as "Encrypted ...
2
votes
3answers
1k views

Cannot mount LUKS encrypted USB on boot after 12.10 upgrade

I use a USB disk to backup my Ubuntu machine and store the video files I work with. It is formated to ext4 and uses LUKS encription. When I was using 12.04 it was working flawlessly and would mount ...
2
votes
3answers
952 views

How to enlarge encrypted swap partition?

I have added some RAM to my netbook. I'd like to save an option to hibernate my computer, so I have to increase my SWAP from 2GiB to 4GiB. My /etc/fstab looks like this: ...
2
votes
2answers
6k views

“Guided - use entire disk and set up encrypted LVM” LUKS or plain dm-crypt?

Does the alternate installer's "Guided - use entire disk and set up encrypted LVM" use LUKS or plain dm-crypt?
2
votes
1answer
205 views

Expanding an encrypted xfs volume

I am working on expanding a currently attached volume to one of my Ubuntu Amazon AWS servers, but I am having some problems. I already created a new volume from a snapshot, then attached the newly ...
2
votes
1answer
2k views

How do I use dm-crypt (LUKS) with GnuPG to use two-factor for FDE?

When using full disk encryption with Ubuntu (opposed to homedir encryption), dm-crypt with LUKS is used for encrypting the volume. In the installer (at least on 12.04 alternate) you can choose between ...
2
votes
2answers
2k views

Pam_mount won't automount encrypted partiton

As usual, when I install a new version of Ubuntu I install pam_mount to automount my with LUKS encrypted partition on login. However, for Ubuntu 11.10, I followed the same procedure as usual, but I ...
2
votes
1answer
213 views

Merge LUKS-partition with partition on another HDD

I just bought a 2 TB hard disk because the home partition on the old one is almost full. What I want to do is to extend the home partition on hard disk 1 (sda2) to also include all the space on the ...
2
votes
0answers
25 views

Recover Data from Encrypted LUKS HDD

Hei, I really need help with this! Yesterday my Kubutnu wouldnt boot anymore so I booted with a Live CD and could fix the problem with this Tutorial: ...
2
votes
0answers
131 views

How to restore a LUKS partition?

My /home partition disappeared on my main HDD. I changed SATA slots, then I got strange "no lvm available" errors during boot when usually the password would be entered (I do not have any lvm setup at ...
2
votes
0answers
125 views

Add second disk to encrypted laptop [duplicate]

I have installed cleanly 14.04 AMD64 onto my laptop which has two (SSD) disks. I used the default install with full disk encryption option on the first disk. However I'd now like to add a second disk ...
2
votes
0answers
2k views

ubuntu 14.04 not booting, update-initramfs “nothing to do, exiting”

I did a mess while installing ubuntu 14.04 on my XPS 15 (9530 haswell) and I need help to rebuild boot partition. My computer has one miniSATA SSD 32 GB and a 1TB HDD. I crypted both with LUKS with ...
2
votes
0answers
1k views

What is the correct way to use key file LUKS authorization?

Before filing new bug reports i decided to try to get support on my situation here. Sorry for my english (it may sound frustrating) in advance, feel free to ask about additional details and thanks!! ...
2
votes
0answers
49 views

Encrypted LVM on multiple drives [duplicate]

Possible Duplicate: Full Disk Encryption with LUKS: auto mount second volume I want to set up encrypted LVM when I install Ubuntu. I have an SSD and an HDD and I would like to put /boot, ...
2
votes
1answer
315 views

Ubuntu 12.04 not Locking Encrypted Hard Drive on Log Out

I'm running Ubuntu 12.04 with Gnome 3.4. I have two external hard drives. I encrypted both using Ubuntu's Disk Utility. When I use Nautilus to mount them, I'm asked for my decryption password. ...
2
votes
1answer
684 views

How do i stop Ubuntu from asking for a password to decrypt my drive on start up?

Ubuntu keeps asking for me to decrypt my drive on start up. This is expected, because I had set up full-disk encryption. How do I stop this now?
2
votes
5answers
2k views

encrypted 13.10 will not reliably boot

EDIT: SOLVED! see http://askubuntu.com/a/403876/212688 i re-installed ubuntu 13.10 x64 on my vaio pro, in legacy, bios mode. the installation is lvm/luks encrypted and thus asks me for the encryption ...
2
votes
3answers
308 views

Home encryption [duplicate]

I have just installed fresh 13.04. I've chosen to encrypt the entire installation, but the installer later asked me whether I wanted to encrypt personal folder under /home. What should I choose?