All questions relating to LUKS (the disk-encryption specification) for Linux
11
votes
3answers
2k views
Is AES-NI fully supported?
Has support for the Intel AES-NI hardware crypto acceleration been added to Ubuntu (LUKS, kernel, OpenSSL libs, etc)? If so, starting with which version?
Here is a list of Intel processors supporting ...
8
votes
1answer
2k views
How can one unlock a fully encrypted Ubuntu 11.10 system over SSH at boot?
In previous versions of Ubuntu, and current versions of Debian, you can unlock a fully encrypted system (using dmcrypt and LUKS) at boot time over SSH.
It was as easy as:
Installing the encrypted ...
7
votes
1answer
1k views
How can I encrypt the entire disk on alternate installation?
Is it possible to install Ubuntu 11.04 with full disk encryption?
Previously versions have had an alternate install cd with a text interface where you could enable encryption for your drives.
This ...
7
votes
2answers
6k views
Mount a LUKS partition at boot
I have installed an Ubuntu machine with two encrypted LUKS partitions: one for / and one for /home.
I've reinstalled the machine to upgrade to 10.04. Again, the / is installed using LUKS, and I'm ...
5
votes
2answers
2k views
How secure is an encrypted LUKS filesystem?
I recently installed 11.10 on a fresh disk using entire disk encryption. Can someone tell me how secure the encryption algorithm is? Has there been any recent breaches with said algorithm? I use a ...
5
votes
1answer
5k views
How to change LUKS passphrase?
Having installed Ubuntu 11.10 with whole disk encryption and LVM, I need to provide a way for users to easily change LUKS passphrase.
Preferably, this should be done using GUI tools, thus, enabling ...
5
votes
1answer
3k views
How to configure LVM & LUKS to autodecrypt partition?
I have recently installed ubuntu server 11.04 with the full lvm encryption(installed from the setup) . I wish now to use a key file to do automatic unlock. I have tried to follow this guide ...
5
votes
1answer
320 views
why is it a risk to clone a LUKS container?
I recently installed Ubuntu onto an encrypted partition using the LUKS+LVM combination that the 'alternate' installer offers. Now I want to create backups of my HD.
From the LUKS FAQ:
6.15 Can I ...
5
votes
1answer
720 views
How do I hide / remove a partition from the Nautilus left panel?
I have a luks setup with encrypted partition. And I don't want everyone on my computer to see that I have such partition. Unfortunately it shows up in the nautilus "devices" panel as "Encrypted ...
4
votes
2answers
6k views
I'm so confused about full disk encryption. help :(
I've been running a live CD of Ubuntu 12.04 for more than a few days now, reading and reading, but I'm not really understanding things when it comes to setting up FDE on Ubuntu 12.04 Precise. I'm sure ...
4
votes
1answer
2k views
how to mount / with encrypted lvm root during installation?
In order to understand Linux better, I'm trying to manually configure an encrypted root lvm partition .
I have already tried this with the Ubuntu server installer by choosing the lvm encrypted option ...
4
votes
2answers
2k views
stop crypttab asking for password for swap
I instaled a fresh 11.04 system when it was released and set up full disk encryption with LUKS. At first it asked me for a password for my three encrypted partitions:
/
/home
swap
Typing in the ...
4
votes
1answer
707 views
Can I disable full-disk encryption?
I recently installed Ubuntu 12.10 and it requires a passphrase to boot up (I installed it with an encrypted file system).
Do I have to reinstall to change to a standard unencrypted file system?
4
votes
3answers
3k views
Do you recommend LUKS encryption on a SSD (TRIM support)?
I have a laptop (Dell Inspiron 11z) and and SSD (Samsung 128GB) on order.
On my current laptop, I have a spinning HDD and use LVM and LUKS encryption.
I would like to use LUKS on the SSD but from ...
4
votes
1answer
143 views
How do I get passwords from the keyring in the terminal for usage in scripts?
When you have a LUKS encrypted drive in your computer, Nautilus or Nemo will show it under Devices as a drive with a little lock on it.
When you click it, you need to enter a password. If you choose ...
4
votes
1answer
429 views
Suspend to RAM and encrypted partitions
Normally I don't shutdown my notebook any more in favour of using suspend-to-RAM. The downside is that my encrypted home partition is completely accessible after resume without entering the ...
4
votes
1answer
804 views
Slow SSD + dm-crypt with Luks encryption in Ubuntu 12.10
I have an 128 GB SSD installed in my laptop (Samsung 840 Pro) on a Sata 3 interface. This laptop also has an i5 3210m Ivy Bridge Intel processor and 8 GB of RAM.
I installed Ubuntu 12.10, using the ...
4
votes
1answer
1k views
Full Disk Encryption with LUKS: auto mount second volume
TrueCrypt on Windows can auto mount volumes that use the same passphrase as the boot volume. You enter the passphrase only once. Is there a way to do this with LUKS?
Background: I'm currently ...
4
votes
3answers
468 views
Luks two-factor authentication
is it possible to create a crypted partition with a two-factor authentication ( decryption with password and keyfile ) with LUKS, like in truecrypt?
3
votes
1answer
1k views
LUKS initramfs boot problem: “/dev/mapper/ubuntu-root does not exist.” How can I fix it using a backup?
First time asker, relatively new to Ubuntu/Linux. Haven't had much luck with the search function. Please forgive the essay below - the problem is a bit unique, I think...
I'm running 12.04 on a ...
3
votes
1answer
805 views
Does dmcrypt/LUKS full disk encryption in kernel 3.0 have multi-core/multi-thread support?
I've read a lot about how fast TrueCrypt 7.0 is with it's support for AES hardware acceleration and multi-core/multi-thread support. Will dmcrypt/LUKS offer the same performance enhancing features on ...
3
votes
1answer
3k views
GRUB2 failed with 'No video mode activated'
I've installed Ubuntu-Alternate 11.04 to use the encrypted feature.
All works fine, but rebooting the system ended up in an error-message:
Error: No video mode activated'
Reading some threads I ...
3
votes
1answer
146 views
MD + LUKS + LVM will not cleanly shutdown
My setup is currently raid1 + luks on each md partition and lvm on top to stripe between the arrays. There is only one volume group with one logical volume currently.
sdc ...
3
votes
3answers
2k views
How to install in EFI mode with Encrypted LVM?
I'm trying to properly install Ubuntu 12.04.1 LTS 64-bit PC (AMD64) with the alternate install CD ".iso" on a lenovo Thinkpad X220.
Default Hard Disk (with a pre-installed version of Windows 7) has ...
2
votes
3answers
664 views
How to enlarge encrypted swap partition?
I have added some RAM to my netbook. I'd like to save an option to hibernate my computer, so I have to increase my SWAP from 2GiB to 4GiB.
My /etc/fstab looks like this:
...
2
votes
1answer
1k views
Reinstall with existing /home LUKS
My 10.04 machine uses three partitions: 5 GB for /boot, 25 GB for / and 120 GB for /home. / and /home are encrypted with LUKS passphrase.
I've downloaded the alternate installer in order to reinstall ...
2
votes
1answer
469 views
How can I install Ubuntu encrypted with LUKS with dual-boot?
Ubuntu 13.04 installation disk has an option to install Ubuntu encrypted using LUKS. However, there is no option to perform an encrypted installation along-side existing partitions for a dual-boot ...
2
votes
0answers
42 views
Encrypted LVM on multiple drives [duplicate]
Possible Duplicate:
Full Disk Encryption with LUKS: auto mount second volume
I want to set up encrypted LVM when I install Ubuntu. I have an SSD and an HDD and I would like to put /boot, ...
2
votes
1answer
183 views
Ubuntu 12.04 not Locking Encrypted Hard Drive on Log Out
I'm running Ubuntu 12.04 with Gnome 3.4. I have two external hard drives. I encrypted both using Ubuntu's Disk Utility. When I use Nautilus to mount them, I'm asked for my decryption password. ...
2
votes
0answers
93 views
Merge LUKS-partition with partition on another HDD
I just bought a 2 TB hard disk because the home partition on the old one is almost full.
What I want to do is to extend the home partition on hard disk 1 (sda2) to also include all the space on the ...
2
votes
0answers
236 views
how to disable luks partition from showing up in nautlus panel
I have a luks setup with encrypted partition. And I don't want everyone on my computer to see that I have such partition. Unfortunately it shows up in the nautilus "devices" panel as "Encrypted ...
2
votes
0answers
268 views
Can dmcrypt/LUKS setup Full-Disk-Encryption on a disk with a GUID partition table? [closed]
Does dmcrypt/LUKS require an MBR partitioned disk in order for the user to be able to use Full Disk Encryption? or can FDE be setup with no problems on a GUID partitioned disk?
2
votes
1answer
132 views
How do i stop Ubuntu from asking for a password to decrypt my drive on start up?
Ubuntu keeps asking for me to decrypt my drive on start up. This is expected, because I had set up full-disk encryption.
How do I stop this now?
1
vote
1answer
69 views
Can I add LUKS/LVM to an already installed Ubuntu system?
I know how to install a LUKS/LVM Ubuntu system using the alternative CD. Is it possible to do this with an already installed normal system? Meaning that I have an unecrypted system now and don't want ...
1
vote
2answers
511 views
Cannot mount LUKS encrypted USB on boot after 12.10 upgrade
I use a USB disk to backup my Ubuntu machine and store the video files I work with. It is formated to ext4 and uses LUKS encription. When I was using 12.04 it was working flawlessly and would mount ...
1
vote
2answers
4k views
“Guided - use entire disk and set up encrypted LVM” LUKS or plain dm-crypt?
Does the alternate installer's "Guided - use entire disk and set up encrypted LVM" use LUKS or plain dm-crypt?
1
vote
1answer
517 views
LUKS on >2TB disk
I have a 3TB disk which I want to encrypt. As soon as I create a file system (mkfs.xfs or ext2-4) in the encrypted partition it outputs "Attempt to read block from file-system resulted in short read ...
1
vote
1answer
155 views
Clone encrypted HDD to smaller drive
For my work Laptop I use full HDD encryption and I need to upgrade my 500GB HDD to a 250 SSD drive, my HDD has only around 100GB of data and is created via encrypted LVM.
GParted does not support ...
1
vote
1answer
88 views
12.10 suddenly bricked luks ssd
There is luks-encrypted instance, no raid, no lvm. I often look through logs and that allows me to state that everything worked fine until reboot. However, laptop had ~3 days uptime. The drive is SSD ...
1
vote
1answer
319 views
Ubuntu12.10 “Disks” Pendrive 64GB format LUKS+ext4
I just bought Pendrive / Flshdrive 64GB and need to archive on it file bigger than 10GB so i believe FAT32 is not an good option since it can handle only 4GB file in size. Next thing is that i though ...
1
vote
1answer
149 views
How to resize a LUKS partition by moving its start?
I have a LUKS partition (sdb2) on a drive which previously contained another Partition (sdb1). Now that I deleted sdb1, I want sdb2 to use this space, too.
All tutorials I could find seem to depend ...
1
vote
1answer
224 views
Run fstrim from LiveCD
A few years ago I installed Ubuntu 10.04 with LVM + LUKS on a system with SSD, TRIM was not enabled. Now I want to install Ubuntu 12.04 on the same SSD.
I have found a guide explaining how to enable ...
1
vote
3answers
2k views
How to check if TRIM is working for an encrypted volume?
You can easily check if TRIM works for a "normal" ext4 partition: http://askubuntu.com/a/19480/5920.
How to do that for a LUKS-encrypted one? Let's assume the default LUKS setup made by 12.04 ...
1
vote
2answers
717 views
How do I get Grub2 to boot a Truecrypt-encrypted MBR?
Given the following system:
/dev/sda1 Windows, encrypted using TrueCrypt
/dev/sda2 /boot
/dev/sda3 /, encrypted (LUKS or how it is called)
I now need GRUB2 to boot my truecrypt mbr ): Any hint on ...
1
vote
1answer
312 views
How to script a mount command involving a dm-crypt / luks volume
I am trying to make a script that will mount an encrypted volume (dm-crypt / luks) with a password that is passed as argument to that script.
My trouble is that I can't find a way to make that script ...
1
vote
1answer
630 views
Encrypting a non-linux partition with LUKS
I have a non-Linux partition I want to encrypt with LUKS. The goal is to be able to store it by itself on a device without Linux and access it from the device when needed with an Ubuntu Live CD.
I ...
1
vote
0answers
168 views
Questions about full disk encryption
Completely new user here, I've been reading for a couple of hours about ubuntu's full disk encryption but I just don't understand some basic points.
When installing ubuntu's full disk encryption, ...
1
vote
0answers
50 views
How to update cryptsetup till version 1.6.1?
Hello current version of cryptsetup is not capable working with truecrypt partitions.
Versions after 1.5.x are capable.(http://code.google.com/p/cryptsetup/wiki/Cryptsetup160)
So here is the latest ...
1
vote
1answer
160 views
Use LUKS and LVM on install to external drive
So I have a laptop running Backtrack 5 R3 using LUKS and LVM, manually configured, and I'm trying to install Ubuntu 12.10 to a USB 3 external drive and use LUKS and LVM on that as well, but I can't ...
1
vote
1answer
115 views
ext4 filesystem wrongly detected as jmicron_raid_member
I have an installation of Ubuntu 12.04 on an SSD disk that I'm unable to boot after a kernel upgrade and a reboot. Additional things that might be a possible cause is that I did some cleanup (dpkg -r) ...
