Skip to main content

Questions tagged [cryptsetup]

cryptsetup - setup cryptographic volumes for dm-crypt (including LUKS extension). cryptsetup is used to conveniently setup dm-crypt managed device-mapper mappings.

Filter by
Sorted by
Tagged with
1 vote
0 answers
107 views

unlocking LUKS root partition with FIDO2 Yubikey (and ideally without dracut)

I enrolled my FIDO2 Yubikey device as a way to unlock my encrypted partition: /etc/crypttab dm_crypt-0 UUID=78768999-69dd-44ba-8858-dd0c2ecbc2b5 none luks dm_crypt-0 UUID=78768999-69dd-44ba-8858-...
bluppfisk's user avatar
  • 779
0 votes
0 answers
71 views

cryptsetup unlock skips pressed keys - first attempt fails

I have a strange problem. When I try to unlock my LUKS volume at boot, the first unlock attempt almost always fails, even though I enter the correct password. It turns out some key presses are not ...
user1768761's user avatar
-1 votes
1 answer
170 views

Going from full encrypted system to unencrypted /boot and encrypted / - how to be asked for the passphrase?

I had a fully encrypted system with /boot and / on the same device (/dev/sd8 is root). / contained a keyfile under /etc/luks/ so that I only needed to enter a passphrase when GRUB started, not ...
Ph Sei's user avatar
  • 11
0 votes
0 answers
128 views

cryptsetup not recognizing `tries` option from `/etc/crypttab`

I've successfully set up Ubuntu (Kubuntu 22.04, to be more precise) as a secondary OS, next to Windows 10, on a LUKS-encrypted drive. (Single BTRFS partition in LUKS container) I've not done this ...
Zak's user avatar
  • 111
0 votes
1 answer
2k views

Is there a way to enable or configure Full Disk Encryption (LUKS) after installing Ubuntu?

Is there a way to enable or configure Full Disk Encryption (LUKS) after installing Ubuntu?
ASA's user avatar
  • 11
1 vote
1 answer
576 views

Change keyboard layout for full disk encryption login

My work recently installed Ubuntu 22.04.3 LTS on a laptop of mine with full disk encryption using cryptsetup (I would have preferred to install it myself, but I wasn't given the choice...). The ...
David M. Kaplan's user avatar
0 votes
1 answer
893 views

Prompted for luks encryption password on boot despite specifying a keyfile

I have a working installation of Kubuntu 22.04 on a LUKS encrypted ext4 partition of device nvme0n1. When I boot up my computer, it prompts me for the encryption password before proceeding to boot ...
Max's user avatar
  • 113
0 votes
0 answers
89 views

LUKS Container lost due to partitioning by Windows?

I plugged a HDD with a LUKS container on it into Windows and opened the Disk Manager. A dialog appeared where I clicked "Format as GPT", not knowing what I was doing. Apparently Windows wasn'...
Philipp Murry's user avatar
0 votes
0 answers
104 views

ecryptfs-setup-swap made a swap that is in clear text to root

I am running Ubuntu 22.04 LTS on a MacBook Air, SSD, using LVM without encryption. The original swap was mapped to /dev/dm-1. After running ecryptfs-setup-swap, the new swap was mapped to /dev/dm-2 ...
user1757959's user avatar
1 vote
0 answers
312 views

I've deleted cryptsetup-initramfs

I'm running Ubuntu 20.04 (5.15.-10088.98) with LUKS LVM and have done something stupid. I've tried sudo apt upgrade and get the following problem: I: The initramfs will attempt to resume from /dev/dm-...
Lio Steinbacher's user avatar
0 votes
1 answer
488 views

Ubuntu encryption during installation

For the first time while installing Ubuntu 23.04 I clicked the button for encryption. For bad luck the installation got stuck, so now I have an encrypted Lenovo laptop and I can't decrypt mmcblk0 even ...
Blackwebstudio's user avatar
0 votes
0 answers
1k views

How do I install Ubuntu 23.04 on an encrypted Btrfs filesystem?

I currently use an encrypted Btrfs filesystem (cryptsetup+luks), which I could set up easily using the Ubuntu 22.10 setup. With Ubuntu 23.04, I only managed to install it on an encrypted LVM+ext4 ...
Torsten Bronger's user avatar
0 votes
2 answers
1k views

Preventing Ubuntu from asking for password for encrypted data partition at startup (Ubuntu 20.04)

I'm using Ubuntu 20.04. I have a (LUKS) encrypted partition that I do not want to be prompted to mount on startup (at minimum, not providing a password for it on startup should not block the system ...
davidgo's user avatar
  • 127
0 votes
0 answers
503 views

Kubuntu update-initramfs results in: ERROR: Couldn't resolve device /swapfile

Lately, I did a fresh install of kubuntu (coming from linux mint) where I also encypted the drive and swapfile. During booting I got the error: Cryptsetup waiting for encrytped source device /...
Vincentvd's user avatar
0 votes
0 answers
543 views

LUKS full disk encryption fails from boot but live-CD is able to unlock partition - Kubuntu 22.04.1 LTS

When trying to boot with Kubuntu I can't get the root to decrypt. That is an old installation that worked for months. I can't remember what was updated before it stopped working. I've verified that it ...
blueSTAR's user avatar
1 vote
0 answers
340 views

How to unlock encrypted drives on a headless server?

I'm planning a homemade NAS-build with the following features: Standard Ubuntu server installation with SSH server Two Btrfs RAID1 drives on encrypted HDDs with dm-crypt NFS shared folders from ...
Prototype700's user avatar
1 vote
0 answers
505 views

missing cryptsetup-reencrypt command in packages

I'm encrypting my home partition in laptop. I need to exec "cryptsetup-reencrypt /dev/sda5 --new --reduce-device-size 16M --type=luks1" but system says that the command isn't installed and I ...
Manuel Castro Caamaño's user avatar
0 votes
1 answer
1k views

Help error states “ Please Unlock Disk nvmeOn1p3_crypt “

I’m not the tech savvy girl here, I had this laptop given to me and it was working ok tell now, it updated today and now won’t let me log back in after restart, it’s prompting that “unlock disk ...
Amy Marshall's user avatar
2 votes
1 answer
3k views

How can I rebuild etc crypttab?

tldr: My /etc/crypttab went missing and I do not know how to rebuild it. I tried to upgrade from 20.04 to 22.04 and something wrong. When booting I just landed in initramfs. Never heard of that. After ...
MDoe's user avatar
  • 115
2 votes
2 answers
1k views

LUKS/Cryptsetup possibly corrupted after hard shutdown

My laptop is a a Dell Precision 5560 running Ubuntu 20.04.3. It has LUKS disk encryption set up on it. About a week ago, it completely froze (I'm not sure why) such that my only recourse to get it ...
hasc's user avatar
  • 25
0 votes
1 answer
897 views

How to encrypt a partition and protect the key file

A Linux machine has a partition with sensitive data. The goal is to prevent one from booting up from a live usb and mounting the machine's hard drive and copying the data. The partition is encrypted ...
afar's user avatar
  • 21
7 votes
2 answers
6k views

Configure Ubuntu 22.04 (ZFS) for automatic LUKS unlock on-boot via USB drive

I've freshly installed Ubuntu 22.04 and used the ZFS+LUKS full drive encryption option from the installer. I've been searching around on the web for a way to configure the drive to unlock ...
Bob Arezina's user avatar
2 votes
1 answer
629 views

Why are there multiple LUKS partitions?

I'm new to using LUKS. After installing it on /dev/sda successfully I don't understand what the /dev/sda1, /dev/sda2 partitions on the HDD represent. I expect to see the only one encrypted partition. ...
kvdm.dev's user avatar
0 votes
0 answers
31 views

What does cryptsetup-bin does

If cryptsetup-bin is missing in cryptsetup can we be assured that our device is encrypted.please let me know
Bivut Poudel's user avatar
0 votes
1 answer
331 views

If cryptsetup-bin is missing does it means that file inside device is not encrypted?

Please help me with the working of cryptsetup and how does the missing of cryptsetup-bin affect cryptsetup
Bivut Poudel's user avatar
0 votes
1 answer
3k views

Device /dev/sda3 is not a valid LUKS device

I have created a LUKS encrypted partition according to documentation. But after a reboot I cannot access the drive any more. The error message is very short: Device /dev/sda3 is not a valid LUKS ...
ToBe_HH's user avatar
  • 101
2 votes
1 answer
734 views

LUKS password randomly not working on boot

I have an odd problem and I am not sure what the reason might be. Sometimes, randomly my encryption password is not accepted and I get the following error message while booting up my computer: ...
Bashi's user avatar
  • 21
1 vote
0 answers
1k views

Problem : Custom linux kernel and crypto

I followed this topic to build the new kernel 5.15 on my laptop dell with Ubuntu 20.04.3 and its kernel 5.14.0-1008-oem. Unfortunately, I have some difficulties to build my new kernel because of my ...
Matthmatth03's user avatar
0 votes
4 answers
2k views

Unlock root disk with TPM2 on Impish Indri

Background: Using the information in the manpages: http://manpages.ubuntu.com/manpages/impish/man1/systemd-cryptenroll.1.html I have successfully added a TPM2.0 key to the LUKS disk with the command: ...
Bregell's user avatar
  • 41
0 votes
0 answers
368 views

Stuck on cryptsetup while upgrading to Ubuntu 21.10

I had enabled Full Disk Encryption on my Ubuntu 21.04 Desktop, now while upgrading to 21.10 and now the system is stuck on cryptsetup once i entered the correct password. What do i do next as it has ...
Aditya Sharma's user avatar
1 vote
1 answer
2k views

cryptsetup: Waiting for encrypted source device after the motherboard has been replacement

I have a dell xps laptop: the ram was faulty and the motherboard has been replaced. The problem: My hard drive was encrypted and now I am not able to recover it. I am using Ubuntu 20.04. Booting ...
Quantum_Something's user avatar
-2 votes
1 answer
293 views

cryptmount and cryptsetup difference

dm-crypt have a two frontends are currently available: cryptsetup and cryptmount. Who know about cryptmount and cryptsetup difference?
Tsunani's user avatar
  • 11
1 vote
0 answers
220 views

Does LUKS' luksAddKey have a problem with passwords being exactly 64 characters long?

Ubuntu: 20.04.3 LTS LUKS Version: 1 Cipher name: aes Cipher mode: xts-plain64 Hash spec: sha256 I noticed some weird behaviour when using luksAddKey, when the password is exactly 64 characters long. ...
Sheldon's user avatar
  • 457
1 vote
0 answers
126 views

Recover my data from an encrypted luks disk, error while analyse

I tried to encrypt my external hard disk with LUKS but the disk header is buggy. So I followed the method described here https://unix.stackexchange.com/questions/281349/mount-error-when-automounting-a-...
Maxime Luce's user avatar
1 vote
2 answers
2k views

Cryptsetup "Warning" that shows up on boot

I'm getting this warning every time my computer boots up and the encryption password screen shows up: crytsetup: WARNING: cryptdata: Ignoring unknown option 'nofail' Is there a way to disable it, or &...
ItM's user avatar
  • 233
12 votes
1 answer
10k views

cryptsetup: Waiting for encrypted source device problem

I know this has been asked before,but I don't have the technical know-how to perform any of the fixes nor do I know where to start. I turn my laptop on and it boots up to the GNU Grub whereas before ...
Anthony's user avatar
  • 121
0 votes
0 answers
1k views

Full Disk Encryption (/boot included) - Ubuntu 18.04 LTS

Trying to do "Full Disk Encryption" using LUKS/dm-crypt on Ubuntu 18.04 LTS with "/boot" partition encrypted as well. I've found this tutorial that is explaining quite well how to ...
Cerclique's user avatar
0 votes
0 answers
235 views

Stuck in cryptsetup

I have installed xfce Desktop once, more or less as a second desktop. Today I wanted to uninstall it. It worked. But now, after I entered my password correctly in cryptsetup, nothing happens. I have ...
m2v's user avatar
  • 1
1 vote
1 answer
1k views

Problem with cryptsetup; Ubuntu doesn’t boot as usual

Until now, my computer was booting correctly. But after restarting it in the afternoon, something happened: First, I get a message at booting, just before entering the cryptestup password: cryptsetup:...
guillaume8375's user avatar
1 vote
2 answers
2k views

With luks, when is the actual encryption or decryption performed, within the luksFormat, luksOpen, or during the filesystem creation on /dev/mapper?

I got curious to know when the encryption/decryption task actual starts, to get a better understanding of the inner workings of luks. I started wondering this when using detached headers, I tried (...
user avatar
0 votes
1 answer
816 views

Can't open luks encrypted drive with bash

I try to mount an encrypted hdd. This works fine with this command in the terminal: sudo cryptsetup luksOpen /dev/sda1 myDisk --key-file /root/keyfile The hdd is decrypted and mounted after this ...
user2267367's user avatar
1 vote
0 answers
1k views

Configuring the GRUB cryptodisk unlock screen

I run GRUB with LUKS. So I have GRUB_ENABLE_CRYPTODISK=y and my /etc/crypttab all set-up. When I start up it shows me a message like "Enter password to unlock [crypto disk name]:", at which ...
iranon's user avatar
  • 11
1 vote
2 answers
4k views

volume group not found after update with full encrypted disk - then boots anyway

Since some November update of my 20.04.1 Ubuntu , during startup I get the messages volume group "name" not found. I get the password prompt and can log in but some system settings (sound ...
Carambakaracho's user avatar
0 votes
0 answers
260 views

Installing encrypted Kubuntu - no Key slots available?

While setting up a new computer with Kubuntu 20.04 (encrypted LVM) and Yubikey, I came across a problem I am not able to solve myself. I am looking for the 8 key slots, Kubuntu should show when ...
JES's user avatar
  • 63
1 vote
1 answer
2k views

Add second passphrase for FDE on Ubuntu (new luks keyslot w/ encrypted LVM)

How can I add a second passphrase to decrypt my laptop on-boot when I chose to install Ubuntu with FDE at install-time. At the time of writing, there is only one way to choose to install Ubuntu with ...
Michael Altfield's user avatar
2 votes
0 answers
993 views

How to install Ubuntu server with custom (non default) LUKS options?

I'm unable to install Ubuntu 20.04 server with custom LUKS options. I tried the following: Started the live installer Went to help and selected Enter shell (or swtich to a different tty). Ran the ...
sxkx's user avatar
  • 336
1 vote
0 answers
699 views

Resume the LUKS decryption process

I've run an in-place decryption process using the following command sudo cryptsetup-reencrypt --decrypt /dev/sdb1 But it was interrupted (The HDD was disconnected accidentally) Is there a way to ...
Ghilas BELHADJ's user avatar
0 votes
1 answer
2k views

20.10 cryptsetup suddenly fails to open luks: Cannot use twofish-ecb cipher for keyslot encryption

Since the recent update from 20.04 to 20.10 cryptsetup fails to open luks container. Message is: > Cannot use twofish-ecb cipher for keyslot encryption. Keyslot open > failed. No usable keyslot ...
opinion_no9's user avatar
  • 1,002
0 votes
0 answers
893 views

How to encrypt second data-disk (not system disk) to be automaticaly unlocked at boot?

I have already encrypted whole system disk following these instructions: https://help.ubuntu.com/community/Full_Disk_Encryption_Howto_2019 ( Whis way, I was able to encrypt /root and /boot partition ...
Ubusm's user avatar
  • 23
2 votes
1 answer
9k views

volume group vgubuntu not found in kernel 5.8.13

I have a new Lenovo ideapad 5 14AR05. I successfully installed Ubuntu 20.04 LTS with an encrypted harddisk. I then upgraded the kernel to 5.8.13, because I could not use an external monitor with the ...
Rosanne's user avatar
  • 63