Last call to make your voice heard! Our 2022 Developer Survey closes in less than a week. Take survey.

Questions tagged [cryptsetup]

cryptsetup - setup cryptographic volumes for dm-crypt (including LUKS extension). cryptsetup is used to conveniently setup dm-crypt managed device-mapper mappings.

Filter by
Sorted by
Tagged with
0 votes
0 answers
7 views

What does cryptsetup-bin does

If cryptsetup-bin is missing in cryptsetup can we be assured that our device is encrypted.please let me know
user avatar
0 votes
0 answers
9 views

If cryptsetup-bin is missing does it means that file inside device is not encrypted?

Please help me with the working of cryptsetup and how does the missing of cryptsetup-bin affect cryptsetup
user avatar
0 votes
1 answer
58 views

Device /dev/sda3 is not a valid LUKS device

I have created a LUKS encrypted partition according to documentation. But after a reboot I cannot access the drive any more. The error message is very short: Device /dev/sda3 is not a valid LUKS ...
user avatar
  • 101
1 vote
1 answer
88 views

LUKS password randomly not working on boot

I have an odd problem and I am not sure what the reason might be. Sometimes, randomly my encryption password is not accepted and I get the following error message while booting up my computer: ...
user avatar
  • 11
0 votes
0 answers
452 views

Problem : Custom linux kernel and crypto

I followed this topic to build the new kernel 5.15 on my laptop dell with Ubuntu 20.04.3 and its kernel 5.14.0-1008-oem. Unfortunately, I have some difficulties to build my new kernel because of my ...
user avatar
0 votes
0 answers
29 views

Can't mount encrypted drive, even after creating an FS on it

I have a USB flash drive with one partition:   ~ ↪ sudo sfdisk -l /dev/sdg The backup GPT table is corrupt, but the primary appears OK, so that will be used. Disk /dev/sdg: 1.93 TiB, 2097152000000 ...
user avatar
0 votes
3 answers
330 views

Unlock root disk with TPM2 on Impish Indri

Background: Using the information in the manpages: http://manpages.ubuntu.com/manpages/impish/man1/systemd-cryptenroll.1.html I have successfully added a TPM2.0 key to the LUKS disk with the command: ...
user avatar
  • 41
1 vote
0 answers
238 views

Stuck on cryptsetup while upgrading to Ubuntu 21.10

I had enabled Full Disk Encryption on my Ubuntu 21.04 Desktop, now while upgrading to 21.10 and now the system is stuck on cryptsetup once i entered the correct password. What do i do next as it has ...
user avatar
0 votes
0 answers
74 views

LUKS after or before LVM

Difference in approaches if i first do LVM, pvcreate - vgcreate - lvcreate, and after cryptosetup luksFormat - open, or i'll do it in reverse order (format - open and do LVM). LVM on LUKs or LUKS on ...
user avatar
0 votes
1 answer
483 views

cryptsetup: Waiting for encrypted source device after the motherboard has been replacement

I have a dell xps laptop: the ram was faulty and the motherboard has been replaced. The problem: My hard drive was encrypted and now I am not able to recover it. I am using Ubuntu 20.04. Booting ...
user avatar
-3 votes
1 answer
56 views

cryptmount and cryptsetup difference

dm-crypt have a two frontends are currently available: cryptsetup and cryptmount. Who know about cryptmount and cryptsetup difference?
user avatar
0 votes
0 answers
41 views

is it possible for decryption remotely to unlock disk sda5_crypt

I would like to know if its possible for remote decryption. i did setup a encryption password to my workstation for which i would like have it decryption remotely from my laptop. Any suggestions as in ...
user avatar
  • 1
1 vote
0 answers
70 views

Does LUKS' luksAddKey have a problem with passwords being exactly 64 characters long?

Ubuntu: 20.04.3 LTS LUKS Version: 1 Cipher name: aes Cipher mode: xts-plain64 Hash spec: sha256 I noticed some weird behaviour when using luksAddKey, when the password is exactly 64 characters long. ...
user avatar
  • 141
0 votes
0 answers
177 views

Different detection behavior of LUKS1 and LUKS2 encrypted external SSD

I wrote a udev-rule and an entry in fstab to auto-unlock the SSD as soon as it is connected to the system. The separate udev-rule file contains the following rule ACTION=="add", ENV{...
user avatar
0 votes
0 answers
417 views

Installing Ubuntu 21.04 with LVM on LUKS2 with integrity check returns errors when generating initramfs

TL;DR: I'm unable to generate initramfs after encrypting volumes with LUKS2 with integrity option and LVM on top of those volumes: cryptsetup: ERROR: first: Source mismatch cryptsetup: WARNING: target ...
user avatar
  • 1
1 vote
0 answers
28 views

Recover my data from an encrypted luks disk, error while analyse

I tried to encrypt my external hard disk with LUKS but the disk header is buggy. So I followed the method described here https://unix.stackexchange.com/questions/281349/mount-error-when-automounting-a-...
user avatar
1 vote
2 answers
445 views

Cryptsetup "Warning" that shows up on boot

I'm getting this warning every time my computer boots up and the encryption password screen shows up: crytsetup: WARNING: cryptdata: Ignoring unknown option 'nofail' Is there a way to disable it, or &...
user avatar
  • 133
0 votes
1 answer
513 views

cryptsetup: Waiting for encrypted source device problem

I know this has been asked before,but I don't have the technical know-how to perform any of the fixes nor do I know where to start. I turn my laptop on and it boots up to the GNU Grub whereas before ...
user avatar
0 votes
0 answers
581 views

Full Disk Encryption (/boot included) - Ubuntu 18.04 LTS

Trying to do "Full Disk Encryption" using LUKS/dm-crypt on Ubuntu 18.04 LTS with "/boot" partition encrypted as well. I've found this tutorial that is explaining quite well how to ...
user avatar
0 votes
0 answers
104 views

Stuck in cryptsetup

I have installed xfce Desktop once, more or less as a second desktop. Today I wanted to uninstall it. It worked. But now, after I entered my password correctly in cryptsetup, nothing happens. I have ...
user avatar
  • 1
0 votes
1 answer
210 views

Problem with cryptsetup; Ubuntu doesn’t boot as usual

Until now, my computer was booting correctly. But after restarting it in the afternoon, something happened: First, I get a message at booting, just before entering the cryptestup password: cryptsetup:...
user avatar
0 votes
2 answers
417 views

With luks, when is the actual encryption or decryption performed, within the luksFormat, luksOpen, or during the filesystem creation on /dev/mapper?

I got curious to know when the encryption/decryption task actual starts, to get a better understanding of the inner workings of luks. I started wondering this when using detached headers, I tried (...
user avatar
0 votes
1 answer
100 views

Can't open luks encrypted drive with bash

I try to mount an encrypted hdd. This works fine with this command in the terminal: sudo cryptsetup luksOpen /dev/sda1 myDisk --key-file /root/keyfile The hdd is decrypted and mounted after this ...
user avatar
1 vote
0 answers
254 views

Configuring the GRUB cryptodisk unlock screen

I run GRUB with LUKS. So I have GRUB_ENABLE_CRYPTODISK=y and my /etc/crypttab all set-up. When I start up it shows me a message like "Enter password to unlock [crypto disk name]:", at which ...
user avatar
  • 11
0 votes
0 answers
62 views

How to apply a nuke password for cryptsetup LUKS ubuntu 20.04? [duplicate]

I have problem to setup nuke password, in either ubuntu 18.04, or ubuntu 20.04 i think last version of cryptsetup patch failed to be applied in ubuntu https://gitlab.com/kalilinux/packages/cryptsetup-...
user avatar
1 vote
1 answer
1k views

volume group not found after update with full encrypted disk - then boots anyway

Since some November update of my 20.04.1 Ubuntu , during startup I get the messages volume group "name" not found. I get the password prompt and can log in but some system settings (sound ...
user avatar
0 votes
0 answers
138 views

Installing encrypted Kubuntu - no Key slots available?

While setting up a new computer with Kubuntu 20.04 (encrypted LVM) and Yubikey, I came across a problem I am not able to solve myself. I am looking for the 8 key slots, Kubuntu should show when ...
user avatar
  • 63
0 votes
1 answer
510 views

Add second passphrase for FDE on Ubuntu (new luks keyslot w/ encrypted LVM)

How can I add a second passphrase to decrypt my laptop on-boot when I chose to install Ubuntu with FDE at install-time. At the time of writing, there is only one way to choose to install Ubuntu with ...
user avatar
2 votes
0 answers
566 views

How to install Ubuntu server with custom (non default) LUKS options?

I'm unable to install Ubuntu 20.04 server with custom LUKS options. I tried the following: Started the live installer Went to help and selected Enter shell (or swtich to a different tty). Ran the ...
user avatar
  • 276
1 vote
0 answers
334 views

Resume the LUKS decryption process

I've run an in-place decryption process using the following command sudo cryptsetup-reencrypt --decrypt /dev/sdb1 But it was interrupted (The HDD was disconnected accidentally) Is there a way to ...
user avatar
0 votes
1 answer
806 views

20.10 cryptsetup suddenly fails to open luks: Cannot use twofish-ecb cipher for keyslot encryption

Since the recent update from 20.04 to 20.10 cryptsetup fails to open luks container. Message is: > Cannot use twofish-ecb cipher for keyslot encryption. Keyslot open > failed. No usable keyslot ...
user avatar
0 votes
0 answers
200 views

How to encrypt second data-disk (not system disk) to be automaticaly unlocked at boot?

I have already encrypted whole system disk following these instructions: https://help.ubuntu.com/community/Full_Disk_Encryption_Howto_2019 ( Whis way, I was able to encrypt /root and /boot partition ...
user avatar
  • 23
1 vote
1 answer
4k views

volume group vgubuntu not found in kernel 5.8.13

I have a new Lenovo ideapad 5 14AR05. I successfully installed Ubuntu 20.04 LTS with an encrypted harddisk. I then upgraded the kernel to 5.8.13, because I could not use an external monitor with the ...
user avatar
  • 53
0 votes
1 answer
456 views

Install Encrypted Ubuntu Server 20.04 on Proxmox

i am trying to install an encrypted Ubuntu 20.04 Server on Proxmox. I used the LVM option aswell as the encryption option of the installer. lsblk gives me: NAME MAJ:MIN RM SIZE ...
user avatar
  • 1
0 votes
0 answers
100 views

cryptosetup fails with correct password

On Friday my laptop running Ubuntu 18 did a system update. Since then I have rebooted it and now it does not accept my password. It says crypsetup failed, bad password or options. I am sure the ...
user avatar
2 votes
1 answer
252 views

Lock on "suspend", but do not lock on "suspend to swap" (hibernation)

I enabled "lock on suspend" (sleep). This works fine, however this will also trigger when I hibernate the laptop. When I resume from hibernation, I have to enter two passwords: On the ...
user avatar
  • 21
4 votes
2 answers
7k views

After upgrade to 20.04: luks doesn't open my disk on boot; cryptroot/crypttab is empty, cryptsetup doesn't recognize the crypttab entry

after upgrading to 20.04, my encrypted disk doesn't get decrypted on boot. I'm not asked for any password, so it obviously can't find any partition and boots into initrd prompt. What might be the ...
user avatar
0 votes
1 answer
430 views

Encrypted root with a detached header in Ubuntu 20.04

I am trying to setup an encrypted root with a detached header in Ubuntu 20.04 I was able to get it to work successfully in Ubuntu 18.04. I created the file: /etc/initramfs-tools/conf.d/cryptroot with ...
user avatar
1 vote
0 answers
106 views

Cryptsetup waiting for encrytped source device /swapfile

I tried to comment on this post but I don't have enough reputation. I'm having the same issue as that user, except that I can't find my /etc/crypttab directory and I can't find my /etc/fstab directory ...
user avatar
0 votes
1 answer
5k views

Ubuntu 20.04 kernel upgrade -> encrypted Volume group cannot be found + crypttab empty

I updated today, then rebooted. The outcome is that the volume group cannot be found and it drops out to BusyBox. I tried: "vgchange -ay" out from the busybox -> did nothing. Booting ...
user avatar
  • 1
6 votes
1 answer
2k views

cryptsetup: waiting for encrypted source device /swapfile, fstab empty

On the bootscreen I get the message: cryptsetup: waiting for encrypted source device /swapfile... which then leaves me hanging for about 2 minutes followed by Initramfs unpacking failed: Decoding ...
user avatar
  • 961
5 votes
1 answer
589 views

How to install Ubuntu on an encrypted, error-correcting RAID 1 device with dm-crypt?

I would like to install Ubuntu on a two-disk RAID 1 with dm-integrity and LUKS2-encryption. Unfortunately, neither Ubiquity, nor the alternative textmode-installer offer such a solution. Although ...
user avatar
0 votes
0 answers
155 views

Change language on start

So I have disk encryption enabled and when I try to enter the passphrase (I am 100% it is correct) I get cryptsetup failed message.This lead me to believe it is from the language I'm using.I tried ...
user avatar
2 votes
0 answers
1k views

LUKS with encrypted /boot + GRUB -> rescue shell 50% of the time

I just setup xubuntu 20.04 according to the full disk encryption howto on a 32GB usb drive. I used 5000 iterations for the encryption, sha256. The first time, I restarted after installation, grub ...
user avatar
  • 123
1 vote
0 answers
254 views

Problems with creating an encrypted livecd that works on USB/DVD/CD

Summary of the Problem I've created a custom ram-only Ubuntu image that refuses to boot over USB on any device. Before I encrypted it and used a loop device, it worked well. With the encryption setup,...
user avatar
1 vote
1 answer
798 views

Problem with update-initramfs and cryptsetup

I am trying to update my initramfs but I get this error: cryptsetup: WARNING: could not determine root device from /etc/fstab I am not really sure why this is happening because this is my fstab: ...
user avatar
  • 11
0 votes
1 answer
178 views

Ubuntu - encrypted root, logistics

I am attempting to boot Ubuntu on a LUKS encrypted device - In a prior life, I specified the UUID as a kernel cmdline option and then the initramfs opened up that device with the credentials I ...
user avatar
  • 201
1 vote
0 answers
574 views

I messed up something with the initramfs configuration and now I can't get the cryptsetup unlock prompt on boot

I've been trying to setup Ubuntu server (current attempt with 18.04.3) to receive LUKS passphrase from dropbear, I was mostly successful, but then I tried a few things to get the passphrase from ...
user avatar
  • 11k
0 votes
1 answer
2k views

Mounting a Luks partition

ORIGINAL POST: I have backed up a drive with all its partitions using the command dd if=/dev/sda of=/media/oshirowanen/external-drive/backups-2019/ubuntu.img /dev/sda is an ssd which has Ubuntu 18....
user avatar
  • 3,827
0 votes
0 answers
265 views

Unable to mount unencrypted drive from live USB

My son kindly crashed my laptop and when I restarted it, cryptsetup did not accept my password (going into 60 minute delay). I cannot launch Ubuntu 18.04 that I have installed on my laptop SSD, but I ...
user avatar