Questions tagged [cryptsetup]
cryptsetup - setup cryptographic volumes for dm-crypt (including LUKS extension). cryptsetup is used to conveniently setup dm-crypt managed device-mapper mappings.
160
questions
7
votes
1
answer
5k
views
Missing amdgpu firmware file named vega20_ta.bin | Kubuntu 19.04
Recently, after each upgrade I get these lines at the end of the process:
Processing triggers for initramfs-tools (0.131ubuntu19) ...
update-initramfs: Generating /boot/initrd.img-5.0.0-17-generic
...
CommunityBot
- 1
7
votes
2
answers
6k
views
Configure Ubuntu 22.04 (ZFS) for automatic LUKS unlock on-boot via USB drive
I've freshly installed Ubuntu 22.04 and used the ZFS+LUKS full drive encryption option from the installer.
I've been searching around on the web for a way to configure the drive to unlock ...
- 91
-1
votes
1
answer
75
views
Going from full encrypted system to unencrypted /boot and encrypted / - how to be asked for the passphrase?
I had a fully encrypted system with /boot and / on the same device (/dev/sd8 is root). / contained a keyfile under /etc/luks/ so that I only needed to enter a passphrase when GRUB started, not ...
- 11
3
votes
2
answers
5k
views
Unlocking LUKS partition with keyfile on USB does not work
I partially followed this
What is /lib/cryptsetup/scripts/passdev actually doing?
/etc/crypttab
2tb UUID=... /dev/disk/by-label/STICK:/logfile luks,nofail,keyscript=/lib/cryptsetup/scripts/passdev,...
CommunityBot
- 1
0
votes
0
answers
31
views
cryptsetup not recognizing `tries` option from `/etc/crypttab`
I've successfully set up Ubuntu (Kubuntu 22.04, to be more precise) as a secondary OS, next to Windows 10, on a LUKS-encrypted drive. (Single BTRFS partition in LUKS container)
I've not done this ...
- 111
0
votes
1
answer
378
views
Is there a way to enable or configure Full Disk Encryption (LUKS) after installing Ubuntu?
Is there a way to enable or configure Full Disk Encryption (LUKS) after installing Ubuntu?
- 21
0
votes
1
answer
411
views
Prompted for luks encryption password on boot despite specifying a keyfile
I have a working installation of Kubuntu 22.04 on a LUKS encrypted
ext4 partition of device nvme0n1. When I boot up my computer, it
prompts me for the encryption password before proceeding to boot ...
- 11.3k
1
vote
1
answer
252
views
Change keyboard layout for full disk encryption login
My work recently installed Ubuntu 22.04.3 LTS on a laptop of mine with full disk encryption using cryptsetup (I would have preferred to install it myself, but I wasn't given the choice...). The ...
- 365
0
votes
0
answers
60
views
LUKS Container lost due to partitioning by Windows?
I plugged a HDD with a LUKS container on it into Windows and opened the Disk Manager. A dialog appeared where I clicked "Format as GPT", not knowing what I was doing. Apparently Windows wasn'...
- 101
0
votes
0
answers
93
views
ecryptfs-setup-swap made a swap that is in clear text to root
I am running Ubuntu 22.04 LTS on a MacBook Air, SSD, using LVM without encryption.
The original swap was mapped to /dev/dm-1.
After running ecryptfs-setup-swap, the new swap was mapped to /dev/dm-2 ...
1
vote
0
answers
240
views
I've deleted cryptsetup-initramfs
I'm running Ubuntu 20.04 (5.15.-10088.98) with LUKS LVM and have done something stupid.
I've tried sudo apt upgrade and get the following problem:
I: The initramfs will attempt to resume from /dev/dm-...
0
votes
2
answers
872
views
Preventing Ubuntu from asking for password for encrypted data partition at startup (Ubuntu 20.04)
I'm using Ubuntu 20.04.
I have a (LUKS) encrypted partition that I do not want to be prompted to mount on startup (at minimum, not providing a password for it on startup should not block the system ...
- 21
1
vote
0
answers
433
views
missing cryptsetup-reencrypt command in packages
I'm encrypting my home partition in laptop. I need to exec "cryptsetup-reencrypt /dev/sda5 --new --reduce-device-size 16M --type=luks1" but system says that the command isn't installed and I ...
- 76
2
votes
1
answer
9k
views
Ubuntu 20.04 kernel upgrade -> encrypted Volume group cannot be found + crypttab empty
I updated today, then rebooted. The outcome is that the volume group cannot be found and it drops out to BusyBox.
I tried:
"vgchange -ay" out from the busybox -> did nothing.
Booting ...
- 115k
0
votes
1
answer
470
views
Ubuntu encryption during installation
For the first time while installing Ubuntu 23.04 I clicked the button for encryption. For bad luck the installation got stuck, so now I have an encrypted Lenovo laptop and I can't decrypt mmcblk0 even ...
- 115k
0
votes
0
answers
1k
views
How do I install Ubuntu 23.04 on an encrypted Btrfs filesystem?
I currently use an encrypted Btrfs filesystem (cryptsetup+luks), which I could set up easily using the Ubuntu 22.10 setup. With Ubuntu 23.04, I only managed to install it on an encrypted LVM+ext4 ...
- 183
0
votes
0
answers
395
views
Kubuntu update-initramfs results in: ERROR: Couldn't resolve device /swapfile
Lately, I did a fresh install of kubuntu (coming from linux mint) where I also encypted the drive and swapfile. During booting I got the error:
Cryptsetup waiting for encrytped source device /...
- 81
11
votes
1
answer
9k
views
cryptsetup: Waiting for encrypted source device problem
I know this has been asked before,but I don't have the technical know-how to perform any of the fixes nor do I know where to start. I turn my laptop on and it boots up to the GNU Grub whereas before ...
- 1,017
7
votes
1
answer
4k
views
A start job for dev-mapper-cryptswap.device is never ending
I again have problems with my swap.
I using an encrypted swapfile. It worked until i rebooted my PC. When im trying to boot it is just showing this:
I disabled my swap in the recovery mode for now. ...
3
votes
1
answer
369
views
How to make cryptsetup abandon a drive once password limit is reached?
I would like to set up my encrypted root partition so that it can decrypt automatically if my USB flash drive with a keyfile is present, but ask for a password otherwise. There is one thing preventing ...
- 101
0
votes
0
answers
482
views
LUKS full disk encryption fails from boot but live-CD is able to unlock partition - Kubuntu 22.04.1 LTS
When trying to boot with Kubuntu I can't get the root to decrypt. That is an old installation that worked for months. I can't remember what was updated before it stopped working.
I've verified that it ...
- 1
1
vote
0
answers
255
views
How to unlock encrypted drives on a headless server?
I'm planning a homemade NAS-build with the following features:
Standard Ubuntu server installation with SSH server
Two Btrfs RAID1 drives on encrypted HDDs with dm-crypt
NFS shared folders from ...
- 970
1
vote
2
answers
2k
views
With luks, when is the actual encryption or decryption performed, within the luksFormat, luksOpen, or during the filesystem creation on /dev/mapper?
I got curious to know when the encryption/decryption task actual starts, to get a better understanding of the inner workings of luks. I started wondering this when using detached headers, I tried (...
0
votes
1
answer
1k
views
Help error states “ Please Unlock Disk nvmeOn1p3_crypt “
I’m not the tech savvy girl here, I had this laptop given to me and it was working ok tell now, it updated today and now won’t let me log back in after restart, it’s prompting that “unlock disk ...
- 496
10
votes
4
answers
8k
views
Setting correct size for "cryptsetup: WARNING: Option 'size' missing in crypttab for plain dm-crypt mapping root" message
I have a full disk encryption using ecryptfs, after upgrading to 18.10 a warning message started to appearing at boot:
cryptsetup: WARNING: Option 'size' missing in crypttab for plain
dm-crypt ...
- 51
0
votes
1
answer
268
views
If cryptsetup-bin is missing does it means that file inside device is not encrypted?
Please help me with the working of cryptsetup and how does the missing of cryptsetup-bin affect cryptsetup
- 115k
2
votes
1
answer
2k
views
How can I rebuild etc crypttab?
tldr: My /etc/crypttab went missing and I do not know how to rebuild it.
I tried to upgrade from 20.04 to 22.04 and something wrong. When booting I just landed in initramfs. Never heard of that. After ...
- 115
101
votes
7
answers
195k
views
How to change the password of an encrypted LVM system (previously alternate Installation, now advanced feature)?
I installed Ubuntu 11.10 with the alternate CD and encrypted the whole system (except boot) with the encrypted LVM. Update 2020: Encrypted LVM can be selected at the Installation type step of the ...
- 13k
0
votes
4
answers
2k
views
Unlock root disk with TPM2 on Impish Indri
Background:
Using the information in the manpages:
http://manpages.ubuntu.com/manpages/impish/man1/systemd-cryptenroll.1.html
I have successfully added a TPM2.0 key to the LUKS disk with the command: ...
- 11
2
votes
2
answers
1k
views
LUKS/Cryptsetup possibly corrupted after hard shutdown
My laptop is a a Dell Precision 5560 running Ubuntu 20.04.3. It has LUKS disk encryption set up on it.
About a week ago, it completely froze (I'm not sure why) such that my only recourse to get it ...
- 1,718
4
votes
3
answers
7k
views
cryptsetup: Cannot wipe header on device
I am trying to encrypt an external hard drive on Ubuntu 14.04 followig this guide. I started by formatting to ext4:
$ sudo mkfs.ext4 /dev/sde1
mke2fs 1.42.9 (4-Feb-2014)
Filesystem label=
OS type: ...
- 133
0
votes
1
answer
654
views
How to encrypt a partition and protect the key file
A Linux machine has a partition with sensitive data. The goal is to prevent one from booting up from a live usb and mounting the machine's hard drive and copying the data.
The partition is encrypted ...
- 62.4k
2
votes
1
answer
579
views
Why are there multiple LUKS partitions?
I'm new to using LUKS. After installing it on /dev/sda successfully I don't understand what the /dev/sda1, /dev/sda2 partitions on the HDD represent. I expect to see the only one encrypted partition.
...
- 457
1
vote
2
answers
3k
views
volume group not found after update with full encrypted disk - then boots anyway
Since some November update of my 20.04.1 Ubuntu , during startup I get the messages volume group "name" not found. I get the password prompt and can log in but some system settings (sound ...
- 136
0
votes
0
answers
28
views
What does cryptsetup-bin does
If cryptsetup-bin is missing in cryptsetup can we be assured that our device is encrypted.please let me know
7
votes
1
answer
20k
views
Ubuntu 18.04 - cryptsetup fails to recognize passphrase, unlocking from Live USB works
I recently bought a Ubuntu Edition Dell XPS 13 9370. The machine comes without full disk encryption enabled out of the box, but offers to create a recovery USB drive, when booted from that Ubuntu can ...
0
votes
1
answer
3k
views
Device /dev/sda3 is not a valid LUKS device
I have created a LUKS encrypted partition according to documentation. But after a reboot I cannot access the drive any more. The error message is very short:
Device /dev/sda3 is not a valid LUKS ...
- 101
0
votes
0
answers
253
views
Installing encrypted Kubuntu - no Key slots available?
While setting up a new computer with Kubuntu 20.04 (encrypted LVM) and Yubikey, I came across a problem I am not able to solve myself. I am looking for the 8 key slots, Kubuntu should show when ...
- 618
5
votes
2
answers
16k
views
How to fix a not booting Ubuntu setup with encrypted root disk?
Ubuntu is not booting but printing weird things, either
/run/lvm/lvmetad.socket: connect failed: No such file or directory
or /sbin/cryptsetup not found
then falls back to busybox after a few ...
- 51
1
vote
0
answers
200
views
Does LUKS' luksAddKey have a problem with passwords being exactly 64 characters long?
Ubuntu: 20.04.3 LTS
LUKS Version: 1
Cipher name: aes
Cipher mode: xts-plain64
Hash spec: sha256
I noticed some weird behaviour when using luksAddKey, when the password is exactly 64 characters long. ...
- 457
2
votes
1
answer
692
views
LUKS password randomly not working on boot
I have an odd problem and I am not sure what the reason might be. Sometimes, randomly my encryption password is not accepted and I get the following error message while booting up my computer:
...
- 442
1
vote
2
answers
2k
views
Cryptsetup "Warning" that shows up on boot
I'm getting this warning every time my computer boots up and the encryption password screen shows up:
crytsetup: WARNING: cryptdata: Ignoring unknown option 'nofail'
Is there a way to disable it, or &...
- 14.6k
1
vote
0
answers
1k
views
Problem : Custom linux kernel and crypto
I followed this topic to build the new kernel 5.15 on my laptop dell with Ubuntu 20.04.3 and its kernel 5.14.0-1008-oem. Unfortunately, I have some difficulties to build my new kernel because of my ...
- 139
0
votes
0
answers
354
views
Stuck on cryptsetup while upgrading to Ubuntu 21.10
I had enabled Full Disk Encryption on my Ubuntu 21.04 Desktop, now while upgrading to 21.10 and now the system is stuck on cryptsetup once i entered the correct password. What do i do next as it has ...
1
vote
1
answer
2k
views
cryptsetup: Waiting for encrypted source device after the motherboard has been replacement
I have a dell xps laptop: the ram was faulty and the motherboard has been replaced.
The problem: My hard drive was encrypted and now I am not able to recover it. I am using Ubuntu 20.04.
Booting ...
-3
votes
1
answer
261
views
cryptmount and cryptsetup difference
dm-crypt have a two frontends are currently available: cryptsetup and cryptmount.
Who know about cryptmount and cryptsetup difference?
- 1
4
votes
1
answer
480
views
Lock on "suspend", but do not lock on "suspend to swap" (hibernation)
I enabled "lock on suspend" (sleep). This works fine, however this will also trigger when I hibernate the laptop. When I resume from hibernation, I have to enter two passwords: On the ...
0
votes
0
answers
679
views
Forgot password or remove sda5_crypt password
I totally forgot my password and having no backups and all, is there a way to unlock this one?
or if I have no choice, I just want to get the files or create a backup.
Already tried cloning but ...
1
vote
0
answers
113
views
Recover my data from an encrypted luks disk, error while analyse
I tried to encrypt my external hard disk with LUKS but the disk header is buggy.
So I followed the method described here
https://unix.stackexchange.com/questions/281349/mount-error-when-automounting-a-...
- 11
2
votes
1
answer
634
views
LUKS Nuke on Ubuntu 18.04?
So I've been searching through the Internet recently about a LUKS nuke patch from Offensoce Security for cryptsetup, but all of the places I've looked have the patch for cryptsetup 1.6.6 or earlier, ...
