Questions tagged [luks]
All questions relating to LUKS (the disk-encryption specification) for Linux
598
questions
-1
votes
0
answers
10
views
Autoinstall with LUKS and specifiying partition sizes
I see we can now specify LUKS during autoinstall in the storage: section like this:
storage:
layout:
name: lvm
password: LUKSPASSWORD
But it's not clear whether we can go further and ...
0
votes
0
answers
36
views
LUKS + TPM2 + auto unlock at boot (systemd-cryptenroll)
Please, help me to finish setup LUKS + TPM2 + auto unlock at boot.
I have installed clean Ubuntu 22.04.2 I have encrypted partition in GUI while installing OS. I have installed all updates.
Ubuntu 22....
- 1
0
votes
0
answers
25
views
Plymouth not asking for LUKS password without ESC in Ubuntu 22.04
On Ubuntu 22.04 and BGRT plymouth theme, the plymouth turns black. The ESC key shows me that I need to enter the LUKS password of my home partition. Entering ESC key again shows my plymouth with a ...
- 214
0
votes
0
answers
46
views
LUKS decrypted partition mapped name
I've successfully configured LUKS encryption on various partitions (root, home, extra) on ubuntu 22.04. I've to insert a password for decrypting the root part and after other partitions are decrypted ...
0
votes
0
answers
21
views
Is it possible to recover this LUKS-encrypted SD card?
I have a large size SD card that was encrypted with LUKS using the GNOME Disk Utility running on Ubuntu. I had some cherished photos on it. I've managed to accidentally format the SD card and wish to ...
- 1,190
0
votes
1
answer
93
views
Ubuntu encryption during installation
For the first time while installing Ubuntu 23.04 I clicked the button for encryption. For bad luck the installation got stuck, so now I have an encrypted Lenovo laptop and I can't decrypt mmcblk0 even ...
0
votes
0
answers
254
views
Installing Ubuntu 22.04 with full disk encryption (LUKS) and swap partitions
I`m just trying to install Ubuntu 22.04 in my notebook, but I need to have full disk encryption enabled and I would like to define the size of my swap partition.
When searching for answers I saw ...
- 111
0
votes
0
answers
96
views
Initial Ubuntu Server 22.04.2 LTS Install - LUKS - headless/remote decrypt
Installing Ubuntu Server 22.04.2 LTS for the first time ever on a Beelink Mini PC (SEi12). Went for the most standard installation possible. Configured using a guided storage layout; i.e.
Use entire ...
- 1
-2
votes
0
answers
34
views
Remotely Unlock A computer that has LUK Partition, The computer has been setup up with Dropbear SSH
I Have been looking online for a solution and so far not been able to get any help online, perphaps someone can help me.
I Have a computer that encrypted via LUKS and i use dropbear-initramfs to ...
0
votes
0
answers
355
views
How do I install Ubuntu 23.04 on an encrypted Btrfs filesystem?
I currently use an encrypted Btrfs filesystem (cryptsetup+luks), which I could set up easily using the Ubuntu 22.10 setup. With Ubuntu 23.04, I only managed to install it on an encrypted LVM+ext4 ...
- 183
0
votes
0
answers
28
views
Encrypt hard disc on ubuntu server 18.04 with luks and yubikey
This https://askubuntu.com/a/599826/1068251 do not work for ubuntu server 18.04.
Ubuntu ask about touching yubikey and repeat again question. I can login only with passphrase.
I found other solution ...
- 37
0
votes
1
answer
70
views
Mount encrypted volume in read/write mode
The canonical method to mount encrypted volumes from the command line on later Ubuntu editions involves udisksctl. However, that recipe mounts the volume in read-only mode.
$ udisksctl unlock -b /dev/...
- 13k
1
vote
0
answers
60
views
Can I view the progress of a LUKS encryption that was initiated in the GUI? Alternately can I calculate it?
I am encrypting a 2TB internal hard drive with LUKS using the default Disks app (see image). I am aware that these things are supposed to take time (I've seen days, even weeks, in my cursory googling),...
- 11
0
votes
0
answers
38
views
Full disk encryption with 'fire and forget' autoinstall in 20.04+?
I have a small problem. I'm trying to do a 'fire-and-forget' install of Ubuntu 20.04 with full disk encryption. And I keep getting prompted for the disk password during the process. (I believe this is ...
0
votes
0
answers
110
views
cryptsetup: Device /dev/sda4 is not a valid LUKS device
chatGPT could not solve this one :-)
I mistakenly erased my username from /etc/sudoers
I need to rescue the system, which has full disk encryption.
I rebooted on a bootable usb drive (Finnix) and ...
- 325
0
votes
1
answer
220
views
Yubikey Two-factor Authentication Encryption via LUKS - Spare Yubikeys how to create an additional key
My main question is how to create an additional key (instructions Yubikey Two-factor Authentication Full-disk Encryption via LUKS ) to use if I lost the key. Should I create an additional new code on ...
- 1
0
votes
1
answer
657
views
how to restore btrfs snapshot backup of root partition with subvolume for home
I have btrfs over luks over lvm on a physical ssd drive.
I've done some crap with apt and break my system. I want to reverse it to previous state.
When i boot on a live usb and decipher my luks drive ...
- 101
1
vote
1
answer
390
views
How to get old LUKS-encrypted Ubuntu version back into Grub menu after installing new Ubuntu version in new LUKS partition
I had a LUKS-encrypted Ubuntu 20.04 setup. I followed my own instructions here to shrink the LUKS partition and install Ubuntu 22.04, also LUKS-encrypted. Now, my grub boot menu no longer gives me the ...
- 7,517
0
votes
0
answers
104
views
Invalid encrypted volume
Something went wrong when I unplugged the external USB drive. When I manually mount the encrypted volume which was used on my QNAP NAS (QNAP HS-210) it throws an error:
LUKS keyslot 0 is invalid
QNAP ...
- 1
2
votes
0
answers
40
views
Native laptop keyboard not recognised when asked for disk encryption upon reboot
Linux amateur here, I have a Microsoft Surface laptop 2, running Ubuntu 22.4 with the organic ubuntu disk encryption (LUKs I believe) disk encryption. When the device is rebooted, it asks to unlock ...
0
votes
0
answers
55
views
How to expand an encrypted disk? (22.10) LUKS full disk encryption
The SSD, originally 128GB ,was copied to a 256GB SSD.
That part works fine, the problem is that the "home" or / is still only 128GB
$ df
Filesystem 1K-blocks Used ...
- 1,379
0
votes
0
answers
120
views
Problem in tang/clevis (NBDE) Setup
I am trying to have NBDE on Ubunutu LTS 22.04.1 . basically i want my compute-1 node to auto decrypt on boot when it's able to ping controller (tang server) node. the problem is i encrypted every ...
- 121
0
votes
0
answers
213
views
LUKS full disk encryption fails from boot but live-CD is able to unlock partition - Kubuntu 22.04.1 LTS
When trying to boot with Kubuntu I can't get the root to decrypt. That is an old installation that worked for months. I can't remember what was updated before it stopped working.
I've verified that it ...
- 1
0
votes
0
answers
74
views
Make cryptsetup prompt at boot time ignorable
I have a machine with multiple users. Home directory for one user is encrypted with LUKS. There is a crypttab entry for opening the LUKS partition at boot time.
When the system boots up, it asks for ...
- 1
0
votes
0
answers
70
views
Ubuntu Server setup fails for Luks root partition
I am trying to install Ubuntu Server 22.04 onto a disk with the following partition layout:
500MB /boot/efi
500MB /boot
200GB / with LUKS
After the installer starts I go to the console and set up the ...
- 101
0
votes
1
answer
95
views
Allow user to change luks password
Disk Utility allow to change hard disk encryption password with a simple GUI.
I would like to allow non-admin/non-root user to change their luks password (IT have another slot for recovery).
...
- 143
0
votes
0
answers
73
views
Read-only LUKS partition
I have a LUKS encrypted partition on a second hard drive that I use on my computer. When I turn on my computer, it is encrypted unless I go to it and try to open it, an operation that the system then ...
- 21
1
vote
3
answers
106
views
Recovering LUKS partition with shred disk
I have Ubuntu 18.04 LTS encrypted on my SSD and I ran the command:
sudo shred -vfn 1 /dev/sda
and have overwritten 8-10 GB I guess.
Furthermore, my computer could not load the password input window ...
- 13
0
votes
0
answers
14
views
Encrypted disk/home is not resized after resizing LUKS
I cloned a 128GB SSD to 256GB SSD, and resized it proportionally.
LUKV Volume grew, the mounted root is still limited to 128GB
Please advise how to make it "discover" more space.
- 1,379
1
vote
0
answers
128
views
grub efi luks encryption, how avoid "decrypt master key"
because I accidentally deleted the luks key slot saved in the keyfile the system (lubuntu 22.04, grub efi) started as normal with password to decrypt master key, which takes very long because of grub ...
- 11
0
votes
0
answers
65
views
After update Ubuntu cryptsetup password is incorrect
I have Ubuntu 20.04. It was encrypted during installation. It is a virtual machine on ESXi host. Today I tried to run ubuntu but my password was not accepted, I saw the error:
"cryptsetup: error:...
- 111
0
votes
0
answers
42
views
LUKs backup drive shows as "free space" on Ubuntu 20.04....can someone help?
I am on Ubuntu 20.04. I have a backup hard drive that is encrypted with LUKs. I recently installed a third drive and installed Win11. I was trying to access the LUKs drive from within Win11, and ...
0
votes
0
answers
175
views
Unable to unlock LUKS encrypted drive after latest updates
So, I have an external USB drive encrypted using LUKS and it has been working perfectly fine for several months and I haven't rebooted this machine for quite some time. After the most recent reboot I'...
4
votes
2
answers
160
views
Change encrypted 18.04 install to dual-boot along side 22.04?
I'm trying to install Jammy in a dual-boot, side-by-side on laptops with an existing LUKS-encrypted Bionic install.
(We need access to both on the same PC for development purposes, and VMs aren't ...
- 79
0
votes
0
answers
115
views
sda3_crypt: cryptsetup failed after regular upgrade (ubuntu 22.10)
I'm stuck at boot time after a regular upgrade which seems to have messed up with encryption and/or boot... No key available with this passphrase.
This is not a problem of keyboard or special ...
- 1
0
votes
0
answers
58
views
Did I reformat my drive to LUKS correctly?
I reinstalled/upgraded Ubuntu LTS (22.04.1) from a thumb drive and chose the option to encrypt my drive, LUKS format. Later on, I restored some of my old files via Backup (f/k/a dejadup).
When I look ...
- 11
0
votes
0
answers
48
views
Disk image mounter defaults to read-only
when I try to mount a LUKS encrypted volume in the disks GUI it defaults to "Setup read only loop device".
Also, when I open an image file from the file manger I get prompted for the ...
0
votes
0
answers
236
views
dracut didn't auto mount luks rootfs and stuck at Reached target Initrd Root Device for Ubuntu 20.04 LTS
I spent the past few days trying to make dracut running on Ubuntu 20.04 since I wanted to use the masterkey and integrity dracut module to automatically add key to kernel keyring for EVM HMAC purpose. ...
- 1
0
votes
0
answers
66
views
LUKS disks fail to auto mount with key file on boot intermittently
I'm having an intermittent issue on boot where some hard drives don't decrypt using the specified key file and I'm prompted for that drive's key on boot.
To dive a bit deeper, I'm running Ubuntu 22.04....
- 1
2
votes
1
answer
1k
views
Encrypted partitions (LUKS) with login password + hibernate
on my company laptop I have Windows 11, that has encrypted disk, working hibernate, at I need to provide password just once at log-in. I would like to have same on my personal laptop with Ubuntu. RN I ...
- 124
0
votes
0
answers
140
views
Disable read/write workqueue for Ubuntu Full-Disk-Encryption
I am currently trying to set up multiple devices with Ubuntu (20.04.5 LTS) and the drive must be encrypted, so I used LUKS during the installation. (I checked "Use LVM with the new Ubuntu ...
0
votes
1
answer
101
views
LUKS: Decrypt home directory
I have Ubuntu with encrypted home directory. Today I worked with Ubuntu but free space was running out. After reboot laptop, on the half progress of encryption I start see balck screen with steady ...
- 111
1
vote
1
answer
428
views
Enable Bluetooth Keyboard before LUKS decryption - Ubuntu 20.04
I need to have my Keychron K8 Bluetooth keyboard working to write
my boot-time LUKS disk decryption password.
At the moment, I can only use the laptop keyboard as the Bluetooth stack
is not enabled ...
- 11
0
votes
0
answers
119
views
How to backup LUKS drive, compressed?
I had a working Ubuntu LUKS installation on a 120Gb SATA SSD and I have just cloned it using dd to a larger, faster 240Gb NVME SSD (I haven't expanded the partitions yet).
lsblk:
nvme0n1 ...
- 243
1
vote
0
answers
33
views
Ubuntu downgrade on encrypted drive
On my laptop I have dualboot with win10. Win10 partition is encrypted with Bitlocker and Ubuntu partition is installed on encrypted LUKS partition (boot is not encrypted, home and other folders are in ...
- 11
1
vote
0
answers
443
views
How to run fsck on encrypted (luks) disk from a bootable usb?
I have encrypted my disk using LUKS.
After every boot up, my machine throws "DISK IS LIKELY TO FAIL SOON" message. To fix this, I am trying to run fsck on the root partition. I tried running ...
- 11
0
votes
1
answer
93
views
How can I have two Ubuntu installations, one with full disk encryption?
I want to fully segregate my work and personal OS, so I have installed two disks in my PC, because my work demands full disk encryption.
I have successfully installed Windows and Kubuntu on the one ...
- 773
1
vote
0
answers
86
views
Is there any discernable changes on modified LUKS system files that are checkable for changes before reboot?
UBUNTU 20.04LTS LUKS PASSPHRASE FAIL
UBUNTU 20.04 LTS (FULL DISC ENCRYPTION) INITIAL SITUATION:
Upon rebooting my 20.04 LTS the LUKS passphrase was not accepted, with these messages.
reboot ….
please ...
- 11
0
votes
0
answers
212
views
Problems with encrypted and lvm partitioning Ubuntu 22.04
I just installed Ubuntu 22.04 and I have a problem. it did not automatically install cryptsetup and cryptsetup-initramfs packages. That means when I boot it jumps automatically to (initramfs) and it ...
0
votes
1
answer
53
views
LUKS partition much larger than filesystem (LVM)
I recently installed Ubuntu on a laptop with 256 GB SSD. I chose the recommended layout (use entire disk) and selected LUKS, but although the installer created a sufficiently large partition –
jan:~$ ...
- 103