Questions tagged [cryptsetup]
cryptsetup - setup cryptographic volumes for dm-crypt (including LUKS extension). cryptsetup is used to conveniently setup dm-crypt managed device-mapper mappings.
158
questions
0
votes
1
answer
297
views
Ubuntu encryption during installation
For the first time while installing Ubuntu 23.04 I clicked the button for encryption. For bad luck the installation got stuck, so now I have an encrypted Lenovo laptop and I can't decrypt mmcblk0 even ...
0
votes
0
answers
1k
views
How do I install Ubuntu 23.04 on an encrypted Btrfs filesystem?
I currently use an encrypted Btrfs filesystem (cryptsetup+luks), which I could set up easily using the Ubuntu 22.10 setup. With Ubuntu 23.04, I only managed to install it on an encrypted LVM+ext4 ...
- 183
0
votes
2
answers
324
views
Preventing Ubuntu from asking for password for encrypted data partition at startup (Ubuntu 20.04)
I'm using Ubuntu 20.04.
I have a (LUKS) encrypted partition that I do not want to be prompted to mount on startup (at minimum, not providing a password for it on startup should not block the system ...
- 117
0
votes
0
answers
200
views
Kubuntu update-initramfs results in: ERROR: Couldn't resolve device /swapfile
Lately, I did a fresh install of kubuntu (coming from linux mint) where I also encypted the drive and swapfile. During booting I got the error:
Cryptsetup waiting for encrytped source device /...
- 71
0
votes
0
answers
220
views
cryptsetup: Device /dev/sda4 is not a valid LUKS device
chatGPT could not solve this one :-)
I mistakenly erased my username from /etc/sudoers
I need to rescue the system, which has full disk encryption.
I rebooted on a bootable usb drive (Finnix) and ...
- 349
0
votes
0
answers
35
views
Dell laptop hangw on "cryptsetup: sda3_crypt set up successfully"
Yesterday I had some packages updated in Ubuntu 18.04 and today I boot up my machine, then I'm asked for my passphrase, I successfully enter it and I get a cryptsetup: sda3_crypt set up successfully ...
0
votes
0
answers
186
views
Problem in tang/clevis (NBDE) Setup
I am trying to have NBDE on Ubunutu LTS 22.04.1 . basically i want my compute-1 node to auto decrypt on boot when it's able to ping controller (tang server) node. the problem is i encrypted every ...
- 131
0
votes
0
answers
339
views
LUKS full disk encryption fails from boot but live-CD is able to unlock partition - Kubuntu 22.04.1 LTS
When trying to boot with Kubuntu I can't get the root to decrypt. That is an old installation that worked for months. I can't remember what was updated before it stopped working.
I've verified that it ...
- 1
0
votes
0
answers
120
views
How to unlock encrypted drives on a headless server?
I'm planning a homemade NAS-build with the following features:
Standard Ubuntu server installation with SSH server
Two Btrfs RAID1 drives on encrypted HDDs with dm-crypt
NFS shared folders from ...
- 910
0
votes
0
answers
89
views
Ubuntu Server setup fails for Luks root partition
I am trying to install Ubuntu Server 22.04 onto a disk with the following partition layout:
500MB /boot/efi
500MB /boot
200GB / with LUKS
After the installer starts I go to the console and set up the ...
- 101
1
vote
1
answer
225
views
missing cryptsetup-reencrypt command in packages
I'm encrypting my home partition in laptop. I need to exec "cryptsetup-reencrypt /dev/sda5 --new --reduce-device-size 16M --type=luks1" but system says that the command isn't installed and I ...
0
votes
0
answers
210
views
Disable read/write workqueue for Ubuntu Full-Disk-Encryption
I am currently trying to set up multiple devices with Ubuntu (20.04.5 LTS) and the drive must be encrypted, so I used LUKS during the installation. (I checked "Use LVM with the new Ubuntu ...
0
votes
1
answer
572
views
Help error states “ Please Unlock Disk nvmeOn1p3_crypt “
I’m not the tech savvy girl here, I had this laptop given to me and it was working ok tell now, it updated today and now won’t let me log back in after restart, it’s prompting that “unlock disk ...
1
vote
1
answer
1k
views
How can I rebuild etc crypttab?
tldr: My /etc/crypttab went missing and I do not know how to rebuild it.
I tried to upgrade from 20.04 to 22.04 and something wrong. When booting I just landed in initramfs. Never heard of that. After ...
- 75
2
votes
2
answers
835
views
LUKS/Cryptsetup possibly corrupted after hard shutdown
My laptop is a a Dell Precision 5560 running Ubuntu 20.04.3. It has LUKS disk encryption set up on it.
About a week ago, it completely froze (I'm not sure why) such that my only recourse to get it ...
- 25
0
votes
1
answer
333
views
How to encrypt a partition and protect the key file
A Linux machine has a partition with sensitive data. The goal is to prevent one from booting up from a live usb and mounting the machine's hard drive and copying the data.
The partition is encrypted ...
- 1
7
votes
2
answers
4k
views
Configure Ubuntu 22.04 (ZFS) for automatic LUKS unlock on-boot via USB drive
I've freshly installed Ubuntu 22.04 and used the ZFS+LUKS full drive encryption option from the installer.
I've been searching around on the web for a way to configure the drive to unlock ...
- 91
2
votes
1
answer
435
views
Why are there multiple LUKS partitions?
I'm new to using LUKS. After installing it on /dev/sda successfully I don't understand what the /dev/sda1, /dev/sda2 partitions on the HDD represent. I expect to see the only one encrypted partition.
...
- 45
0
votes
0
answers
21
views
What does cryptsetup-bin does
If cryptsetup-bin is missing in cryptsetup can we be assured that our device is encrypted.please let me know
0
votes
1
answer
137
views
If cryptsetup-bin is missing does it means that file inside device is not encrypted?
Please help me with the working of cryptsetup and how does the missing of cryptsetup-bin affect cryptsetup
0
votes
1
answer
2k
views
Device /dev/sda3 is not a valid LUKS device
I have created a LUKS encrypted partition according to documentation. But after a reboot I cannot access the drive any more. The error message is very short:
Device /dev/sda3 is not a valid LUKS ...
- 101
2
votes
1
answer
554
views
LUKS password randomly not working on boot
I have an odd problem and I am not sure what the reason might be. Sometimes, randomly my encryption password is not accepted and I get the following error message while booting up my computer:
...
- 21
1
vote
0
answers
994
views
Problem : Custom linux kernel and crypto
I followed this topic to build the new kernel 5.15 on my laptop dell with Ubuntu 20.04.3 and its kernel 5.14.0-1008-oem. Unfortunately, I have some difficulties to build my new kernel because of my ...
- 139
0
votes
4
answers
2k
views
Unlock root disk with TPM2 on Impish Indri
Background:
Using the information in the manpages:
http://manpages.ubuntu.com/manpages/impish/man1/systemd-cryptenroll.1.html
I have successfully added a TPM2.0 key to the LUKS disk with the command: ...
- 41
0
votes
0
answers
315
views
Stuck on cryptsetup while upgrading to Ubuntu 21.10
I had enabled Full Disk Encryption on my Ubuntu 21.04 Desktop, now while upgrading to 21.10 and now the system is stuck on cryptsetup once i entered the correct password. What do i do next as it has ...
1
vote
1
answer
1k
views
cryptsetup: Waiting for encrypted source device after the motherboard has been replacement
I have a dell xps laptop: the ram was faulty and the motherboard has been replaced.
The problem: My hard drive was encrypted and now I am not able to recover it. I am using Ubuntu 20.04.
Booting ...
-3
votes
1
answer
185
views
cryptmount and cryptsetup difference
dm-crypt have a two frontends are currently available: cryptsetup and cryptmount.
Who know about cryptmount and cryptsetup difference?
- 1
1
vote
0
answers
174
views
Does LUKS' luksAddKey have a problem with passwords being exactly 64 characters long?
Ubuntu: 20.04.3 LTS
LUKS Version: 1
Cipher name: aes
Cipher mode: xts-plain64
Hash spec: sha256
I noticed some weird behaviour when using luksAddKey, when the password is exactly 64 characters long. ...
- 447
1
vote
0
answers
82
views
Recover my data from an encrypted luks disk, error while analyse
I tried to encrypt my external hard disk with LUKS but the disk header is buggy.
So I followed the method described here
https://unix.stackexchange.com/questions/281349/mount-error-when-automounting-a-...
- 11
1
vote
2
answers
1k
views
Cryptsetup "Warning" that shows up on boot
I'm getting this warning every time my computer boots up and the encryption password screen shows up:
crytsetup: WARNING: cryptdata: Ignoring unknown option 'nofail'
Is there a way to disable it, or &...
- 233
8
votes
1
answer
6k
views
cryptsetup: Waiting for encrypted source device problem
I know this has been asked before,but I don't have the technical know-how to perform any of the fixes nor do I know where to start. I turn my laptop on and it boots up to the GNU Grub whereas before ...
- 81
0
votes
0
answers
1k
views
Full Disk Encryption (/boot included) - Ubuntu 18.04 LTS
Trying to do "Full Disk Encryption" using LUKS/dm-crypt on Ubuntu 18.04 LTS with "/boot" partition encrypted as well.
I've found this tutorial that is explaining quite well how to ...
0
votes
0
answers
211
views
Stuck in cryptsetup
I have installed xfce Desktop once, more or less as a second desktop. Today I wanted to uninstall it. It worked. But now, after I entered my password correctly in cryptsetup, nothing happens. I have ...
- 1
0
votes
1
answer
763
views
Problem with cryptsetup; Ubuntu doesn’t boot as usual
Until now, my computer was booting correctly. But after restarting it in the afternoon, something happened:
First, I get a message at booting, just before entering the cryptestup password: cryptsetup:...
- 392
1
vote
2
answers
874
views
With luks, when is the actual encryption or decryption performed, within the luksFormat, luksOpen, or during the filesystem creation on /dev/mapper?
I got curious to know when the encryption/decryption task actual starts, to get a better understanding of the inner workings of luks. I started wondering this when using detached headers, I tried (...
user832879
0
votes
1
answer
485
views
Can't open luks encrypted drive with bash
I try to mount an encrypted hdd. This works fine with this command in the terminal:
sudo cryptsetup luksOpen /dev/sda1 myDisk --key-file /root/keyfile
The hdd is decrypted and mounted after this ...
- 141
1
vote
0
answers
619
views
Configuring the GRUB cryptodisk unlock screen
I run GRUB with LUKS. So I have GRUB_ENABLE_CRYPTODISK=y and my /etc/crypttab all set-up.
When I start up it shows me a message like "Enter password to unlock [crypto disk name]:", at which ...
- 11
0
votes
0
answers
69
views
How to apply a nuke password for cryptsetup LUKS ubuntu 20.04? [duplicate]
I have problem to setup nuke password, in either ubuntu 18.04, or ubuntu 20.04
i think last version of cryptsetup patch failed to be applied in ubuntu
https://gitlab.com/kalilinux/packages/cryptsetup-...
1
vote
2
answers
2k
views
volume group not found after update with full encrypted disk - then boots anyway
Since some November update of my 20.04.1 Ubuntu , during startup I get the messages volume group "name" not found. I get the password prompt and can log in but some system settings (sound ...
- 136
0
votes
0
answers
237
views
Installing encrypted Kubuntu - no Key slots available?
While setting up a new computer with Kubuntu 20.04 (encrypted LVM) and Yubikey, I came across a problem I am not able to solve myself. I am looking for the 8 key slots, Kubuntu should show when ...
- 63
1
vote
1
answer
1k
views
Add second passphrase for FDE on Ubuntu (new luks keyslot w/ encrypted LVM)
How can I add a second passphrase to decrypt my laptop on-boot when I chose to install Ubuntu with FDE at install-time.
At the time of writing, there is only one way to choose to install Ubuntu with ...
- 287
2
votes
0
answers
832
views
How to install Ubuntu server with custom (non default) LUKS options?
I'm unable to install Ubuntu 20.04 server with custom LUKS options.
I tried the following:
Started the live installer
Went to help and selected Enter shell (or swtich to a different tty).
Ran the ...
- 306
1
vote
0
answers
503
views
Resume the LUKS decryption process
I've run an in-place decryption process using the following command
sudo cryptsetup-reencrypt --decrypt /dev/sdb1
But it was interrupted (The HDD was disconnected accidentally)
Is there a way to ...
- 162
0
votes
1
answer
2k
views
20.10 cryptsetup suddenly fails to open luks: Cannot use twofish-ecb cipher for keyslot encryption
Since the recent update from 20.04 to 20.10 cryptsetup fails to open luks container.
Message is:
> Cannot use twofish-ecb cipher for keyslot encryption. Keyslot open
> failed. No usable keyslot ...
- 965
0
votes
0
answers
655
views
How to encrypt second data-disk (not system disk) to be automaticaly unlocked at boot?
I have already encrypted whole system disk following these instructions: https://help.ubuntu.com/community/Full_Disk_Encryption_Howto_2019 (
Whis way, I was able to encrypt /root and /boot partition ...
- 23
2
votes
1
answer
8k
views
volume group vgubuntu not found in kernel 5.8.13
I have a new Lenovo ideapad 5 14AR05. I successfully installed Ubuntu 20.04 LTS with an encrypted harddisk. I then upgraded the kernel to 5.8.13, because I could not use an external monitor with the ...
- 63
0
votes
1
answer
644
views
Install Encrypted Ubuntu Server 20.04 on Proxmox
i am trying to install an encrypted Ubuntu 20.04 Server on Proxmox.
I used the LVM option aswell as the encryption option of the installer.
lsblk gives me:
NAME MAJ:MIN RM SIZE ...
- 19
0
votes
0
answers
238
views
cryptosetup fails with correct password
On Friday my laptop running Ubuntu 18 did a system update. Since then I have rebooted it and now it does not accept my password. It says crypsetup failed, bad password or options. I am sure the ...
3
votes
1
answer
438
views
Lock on "suspend", but do not lock on "suspend to swap" (hibernation)
I enabled "lock on suspend" (sleep). This works fine, however this will also trigger when I hibernate the laptop. When I resume from hibernation, I have to enter two passwords: On the ...
- 31
6
votes
2
answers
12k
views
After upgrade to 20.04: luks doesn't open my disk on boot; cryptroot/crypttab is empty, cryptsetup doesn't recognize the crypttab entry
after upgrading to 20.04, my encrypted disk doesn't get decrypted on boot. I'm not asked for any password, so it obviously can't find any partition and boots into initrd prompt.
What might be the ...
- 141