Questions tagged [cryptsetup]

cryptsetup - setup cryptographic volumes for dm-crypt (including LUKS extension). cryptsetup is used to conveniently setup dm-crypt managed device-mapper mappings.

Filter by
Sorted by
Tagged with
0
votes
1answer
27 views

Problem with cryptsetup; Ubuntu doesn’t boot as usual

Until now, my computer was booting correctly. But after restarting it in the afternoon, something happened: First, I get a message at booting, just before entering the cryptestup password: cryptsetup:...
0
votes
1answer
26 views

With luks, when is the actual encryption or decryption performed, within the luksFormat, luksOpen, or during the filesystem creation on /dev/mapper?

I got curious to know when the encryption/decryption task actual starts, to get a better understanding of the inner workings of luks. I started wondering this when using detached headers, I tried (...
0
votes
1answer
35 views

Can't open luks encrypted drive with bash

I try to mount an encrypted hdd. This works fine with this command in the terminal: sudo cryptsetup luksOpen /dev/sda1 myDisk --key-file /root/keyfile The hdd is decrypted and mounted after this ...
0
votes
0answers
18 views

Configuring the GRUB cryptodisk unlock screen

I run GRUB with LUKS. So I have GRUB_ENABLE_CRYPTODISK=y and my /etc/crypttab all set-up. When I start up it shows me a message like "Enter password to unlock [crypto disk name]:", at which ...
0
votes
0answers
54 views

How to apply a nuke password for cryptsetup LUKS ubuntu 20.04? [duplicate]

I have problem to setup nuke password, in either ubuntu 18.04, or ubuntu 20.04 i think last version of cryptsetup patch failed to be applied in ubuntu https://gitlab.com/kalilinux/packages/cryptsetup-...
0
votes
0answers
21 views

Can TrueCrypt Volume use the luks password entered at boot

To boot into grub and Ubuntu, computer asks to decrypt the master key at sda2. sda2 is luks1 encrypted Ubuntu partition. I am also mounting a truecrypt volume at boot. If truecrypt paraphrase is the ...
0
votes
0answers
255 views

volume group not found after update with full encrypted disk - then boots anyway

Since some November update of my 20.04.1 Ubuntu , during startup I get the messages volume group "name" not found. I get the password prompt and can log in but some system settings (sound ...
0
votes
0answers
36 views

Installing encrypted Kubuntu - no Key slots available?

while setting up a new computer with Kubuntu 20.04 (encrypted LVM) and Yubikey, I came across a problem I am not able to solve myself. I am looking for the 8 key slots, Kubuntu should show when ...
0
votes
1answer
105 views

Add second passphrase for FDE on Ubuntu (new luks keyslot w/ encrypted LVM)

How can I add a second passphrase to decrypt my laptop on-boot when I chose to install Ubuntu with FDE at install-time. At the time of writing, there is only one way to choose to install Ubuntu with ...
0
votes
0answers
293 views

How to install Ubuntu server with custom (non default) LUKS options?

I'm unable to install Ubuntu 20.04 server with custom LUKS options. I tried the following: Started the live installer Went to help and selected Enter shell (or swtich to a different tty). Ran the ...
1
vote
0answers
114 views

Resume the LUKS decryption process

I've run an in-place decryption process using the following command sudo cryptsetup-reencrypt --decrypt /dev/sdb1 But it was interrupted (The HDD was disconnected accidentally) Is there a way to ...
0
votes
1answer
358 views

20.10 cryptsetup suddenly fails to open luks: Cannot use twofish-ecb cipher for keyslot encryption

Since the recent update from 20.04 to 20.10 cryptsetup fails to open luks container. Message is: > Cannot use twofish-ecb cipher for keyslot encryption. Keyslot open > failed. No usable keyslot ...
0
votes
0answers
66 views

How to encrypt second data-disk (not system disk) to be automaticaly unlocked at boot?

I have already encrypted whole system disk following these instructions: https://help.ubuntu.com/community/Full_Disk_Encryption_Howto_2019 ( Whis way, I was able to encrypt /root and /boot partition ...
0
votes
0answers
211 views

crypttab and veracrypt: How to keep on ask for password until unlocking successful

I want to mount a Veracrypt partition /dev/sdb4 on boot so I followed this guide, which adds a line in crypttab ordering the block device to be unlocked and a line in fstab mounting that unlocked ...
1
vote
1answer
1k views

volume group vgubuntu not found in kernel 5.8.13

I have a new Lenovo ideapad 5 14AR05. I successfully installed Ubuntu 20.04 LTS with an encrypted harddisk. I then upgraded the kernel to 5.8.13, because I could not use an external monitor with the ...
0
votes
0answers
180 views

Upgrade from 18.04 LTS to 20.04 LTS Error

I get this error (Image) and can't get around it Error Message Bernhard
0
votes
1answer
270 views

Install Encrypted Ubuntu Server 20.04 on Proxmox

i am trying to install an encrypted Ubuntu 20.04 Server on Proxmox. I used the LVM option aswell as the encryption option of the installer. lsblk gives me: NAME MAJ:MIN RM SIZE ...
0
votes
0answers
55 views

cryptosetup fails with correct password

On Friday my laptop running Ubuntu 18 did a system update. Since then I have rebooted it and now it does not accept my password. It says crypsetup failed, bad password or options. I am sure the ...
1
vote
0answers
68 views

Lock on “suspend”, but do not lock on “suspend to swap” (hibernation)

I enabled "lock on suspend" (sleep). This works fine, however this will also trigger when I hibernate the laptop. When I resume from hibernation, I have to enter two passwords: On the ...
0
votes
0answers
91 views

LUKS using crypttab wont boot if disk is missing

I have setup disks in /etc/crypttab to be decrypted on boot. But, if one is missing I get a bunch of Failed to connect to lvmetad and I then get dropped into aninitramfs shell. I just want the ...
4
votes
2answers
2k views

After upgrade to 20.04: luks doesn't open my disk on boot; cryptroot/crypttab is empty, cryptsetup doesn't recognize the crypttab entry

after upgrading to 20.04, my encrypted disk doesn't get decrypted on boot. I'm not asked for any password, so it obviously can't find any partition and boots into initrd prompt. What might be the ...
0
votes
1answer
255 views

Encrypted root with a detached header in Ubuntu 20.04

I am trying to setup an encrypted root with a detached header in Ubuntu 20.04 I was able to get it to work successfully in Ubuntu 18.04. I created the file: /etc/initramfs-tools/conf.d/cryptroot with ...
1
vote
0answers
54 views

Cryptsetup waiting for encrytped source device /swapfile

I tried to comment on this post but I don't have enough reputation. I'm having the same issue as that user, except that I can't find my /etc/crypttab directory and I can't find my /etc/fstab directory ...
0
votes
1answer
2k views

Ubuntu 20.04 kernel upgrade -> encrypted Volume group cannot be found + crypttab empty

I updated today, then rebooted. The outcome is that the volume group cannot be found and it drops out to BusyBox. I tried: "vgchange -ay" out from the busybox -> did nothing. Booting ...
6
votes
1answer
883 views

cryptsetup: waiting for encrypted source device /swapfile, fstab empty

On the bootscreen I get the message: cryptsetup: waiting for encrypted source device /swapfile... which then leaves me hanging for about 2 minutes followed by Initramfs unpacking failed: Decoding ...
0
votes
0answers
44 views

Need help verifying partition table after accidentally deleting boot + efi partitions of (encrypted) Ubuntu installation

I made a mess today as the title says. I deleted the first two partitions on my hard drive containing my OS (Ubuntu 20.04). I realized what I've been doing before deleting the luks encrypted third ...
5
votes
1answer
341 views

How to install Ubuntu on an encrypted, error-correcting RAID 1 device with dm-crypt?

I would like to install Ubuntu on a two-disk RAID 1 with dm-integrity and LUKS2-encryption. Unfortunately, neither Ubiquity, nor the alternative textmode-installer offer such a solution. Although ...
0
votes
0answers
96 views

Change language on start

So I have disk encryption enabled and when I try to enter the passphrase (I am 100% it is correct) I get cryptsetup failed message.This lead me to believe it is from the language I'm using.I tried ...
1
vote
0answers
988 views

LUKS with encrypted /boot + GRUB -> rescue shell 50% of the time

I just setup xubuntu 20.04 according to the full disk encryption howto on a 32GB usb drive. I used 5000 iterations for the encryption, sha256. The first time, I restarted after installation, grub ...
1
vote
0answers
192 views

Problems with creating an encrypted livecd that works on USB/DVD/CD

Summary of the Problem I've created a custom ram-only Ubuntu image that refuses to boot over USB on any device. Before I encrypted it and used a loop device, it worked well. With the encryption setup,...
1
vote
1answer
422 views

Problem with update-initramfs and cryptsetup

I am trying to update my initramfs but I get this error: cryptsetup: WARNING: could not determine root device from /etc/fstab I am not really sure why this is happening because this is my fstab: ...
0
votes
1answer
109 views

Ubuntu - encrypted root, logistics

I am attempting to boot Ubuntu on a LUKS encrypted device - In a prior life, I specified the UUID as a kernel cmdline option and then the initramfs opened up that device with the credentials I ...
1
vote
0answers
458 views

I messed up something with the initramfs configuration and now I can't get the cryptsetup unlock prompt on boot

I've been trying to setup Ubuntu server (current attempt with 18.04.3) to receive LUKS passphrase from dropbear, I was mostly successful, but then I tried a few things to get the passphrase from ...
0
votes
1answer
990 views

Mounting a Luks partition

ORIGINAL POST: I have backed up a drive with all its partitions using the command dd if=/dev/sda of=/media/oshirowanen/external-drive/backups-2019/ubuntu.img /dev/sda is an ssd which has Ubuntu 18....
0
votes
0answers
153 views

Unable to mount unencrypted drive from live USB

My son kindly crashed my laptop and when I restarted it, cryptsetup did not accept my password (going into 60 minute delay). I cannot launch Ubuntu 18.04 that I have installed on my laptop SSD, but I ...
1
vote
1answer
375 views

How can I run a sudo command as sudo (!) without password? (cryptsetup needs to be run as sudo in order to use kernel module 'device-mapper')

Solved Besides not commenting the #includedir line in /etc/sudoers out, editing sudoers.d/myOverrides with sudo visudo -f /etc/sudoers.d/myOverrides, and using the syntax I first tried, did the ...
1
vote
0answers
100 views

Decrypt Volume while bootup with keyfile OR password

A dynamically growing .img-file is mounted to my user's home directory. Its file system is btrfs and it's encrypted via LUKS. Keyslot 0: A file created by dd if=/dev/urandom of=<some file> bs=...
6
votes
1answer
5k views

Missing amdgpu firmware file named vega20_ta.bin | Kubuntu 19.04

Recently, after each upgrade I get these lines at the end of the process: Processing triggers for initramfs-tools (0.131ubuntu19) ... update-initramfs: Generating /boot/initrd.img-5.0.0-17-generic ...
2
votes
1answer
302 views

LUKS Nuke on Ubuntu 18.04?

So I've been searching through the Internet recently about a LUKS nuke patch from Offensoce Security for cryptsetup, but all of the places I've looked have the patch for cryptsetup 1.6.6 or earlier, ...
2
votes
0answers
205 views

Problem after packages upgrade

This morning I upgraded the following packages: libdevmapper1.02.1:amd64 (2:1.02.145-4.1ubuntu4, 2:1.02.145-4.1ubuntu4.1), libguestfs-hfsplus:amd64 (1:1.40.2-1ubuntu1, 1:1.40.2-1ubuntu1.1), ...
1
vote
1answer
6k views

“No key available with this passphrase” with a newly-created DM-CRYPT / LUKS partition

Doing searches, it appears that others are having more complex problems because of cipher settings, but my problem is when doing something straightforward. Using a mostly-fresh install of Lubuntu 18....
0
votes
0answers
3k views

Mounting LUKS encrypted drive

I have a LUKS encrypted drive which I can boot from on more modern UEFI bios machines but not older devices. Every machine in my house is an older device. Instead, I've tried to mount the thing in ...
1
vote
0answers
47 views

Cryptsetup language default bug during upgrade. How do I change it back?

I upgraded from 18.04 to 18.10 and the default language for cryptsetup was switched from English to French (which is usually my second language on this computer). I changed back the language and ...
0
votes
1answer
2k views

How to cryptsetup newly installed Ubuntu Server 18.10

I was wondering how to encrypt my harddrive on a newly installed Ubuntu Server 18.10. I tried this on Arch, which seemed to work fine, because I've done it during the installation fase. But with ...
0
votes
1answer
702 views

Encrypted drive cloning - resizing partitions problem

I'm trying to clone my SSD to a larger device so I will have a bootable backup in anticipation of doing a system upgrade on several desktop clients. I also want to model a known-correct procedure to ...
6
votes
2answers
4k views

Setting correct size for “cryptsetup: WARNING: Option 'size' missing in crypttab for plain dm-crypt mapping root” message

I have a full disk encryption using ecryptfs, after upgrading to 18.10 a warning message started to appearing at boot: cryptsetup: WARNING: Option 'size' missing in crypttab for plain dm-crypt ...
3
votes
0answers
165 views

How to make cryptsetup abandon a drive once password limit is reached?

I would like to set up my encrypted root partition so that it can decrypt automatically if my USB flash drive with a keyfile is present, but ask for a password otherwise. There is one thing preventing ...
0
votes
1answer
253 views

Encrypting Linux server for remote access VM

Use Case I have an Ubuntu server machine wrapped in a VM (vmdk file) that contains web application. I want to send this VM to someone and prevent him from accessing to the internal file system of the ...
0
votes
1answer
582 views

Boot taking minutes following upgrade to 18.10

Following the upgrade to 18.10, my laptop is taking about 3 minutes to boot up, previously it was about 15 seconds. The boot screen appears with the message "cryptsetup waiting for encrypted device / ...
4
votes
1answer
2k views

WARNING Option 'hash' missing in crypttab after upgrading Ubuntu

I upgraded Ubuntu from 18.04 to 18.10. I have full disk encryption enabled. When I boot up, I get this error message displayed above the password prompt for the full disk encryption: cryptsetup: ...