Skip to main content

Questions tagged [luks]

All questions relating to LUKS (the disk-encryption specification) for Linux

Filter by
Sorted by
Tagged with
-1 votes
0 answers
71 views

How to setup RAID1 with TPM based FDE on Ubuntu 24 (LTS)

My goal is to have a Debian/Ubuntu machine using RAID level 1 and TPM-based Full Disk Encryption (FDE). Ubuntu 24.04 Desktop was installed using graphical setup wizard. I did not find a suitable ...
stb's user avatar
  • 99
-1 votes
4 answers
91 views

Migrate all my data to new computer without OS reinstall

I run ubuntu 22 with LUKS full disk encryption on my old laptop nvme0n1 disk 476.9G ├─nvme0n1p1 /boot/efi part ...
n0tis's user avatar
  • 237
0 votes
0 answers
19 views

How can I retrieve (or replace) one LUKS password, given a second one

The good news is that I can unlock my LUKS encrypted home partition. Keyslot 1 ties to a file on a USB stick that my /etc/crypttab uses to automatically unlock. And so as long as a cheap USB stick ...
Rgaddi's user avatar
  • 121
1 vote
0 answers
75 views

unlocking LUKS root partition with FIDO2 Yubikey (and ideally without dracut)

I enrolled my FIDO2 Yubikey device as a way to unlock my encrypted partition: /etc/crypttab dm_crypt-0 UUID=78768999-69dd-44ba-8858-dd0c2ecbc2b5 none luks dm_crypt-0 UUID=78768999-69dd-44ba-8858-...
bluppfisk's user avatar
  • 729
0 votes
0 answers
69 views

LUKS decryption of root disk during boot with key over wifi

The setup is a laptop connected to my local network via wifi, and a tang server in the same network providing decryption keys. The laptop runs Ubuntu 22.04 and has its root disk encrypted with LUKS. ...
Boldewyn's user avatar
  • 115
0 votes
0 answers
65 views

cryptsetup unlock skips pressed keys - first attempt fails

I have a strange problem. When I try to unlock my LUKS volume at boot, the first unlock attempt almost always fails, even though I enter the correct password. It turns out some key presses are not ...
user1768761's user avatar
0 votes
0 answers
26 views

Booting into recovery mode turns my screen into "Braille" hieroglyphs?

I am running a Ubuntu 22.04 with LUX full disk encryption in a VM. I just finished configuring GRUB to require a password using this answer, and to only require a password when changing settings using ...
SuperDialga's user avatar
2 votes
0 answers
138 views

Move /boot/efi and /boot to a separate disk

I would like to encrypt my root partition with the help of luks. For that I am thinking to move my boot partition to a smaller disk. My current layout of the disk is: $ lsblk -f /dev/sdc |-/dev/sdc1 |-...
Oleksa's user avatar
  • 320
0 votes
1 answer
139 views

How to encrypt partition using LUKS-2?

I have an empty partition (say /dev/sda1) that I want to encrypt with LUKS-2 and be able to open it with passphrase from commonly used file managers (Dolphin, PCManFM-Qt, etc). I prefer a GUI like KDE ...
CluelessNoob's user avatar
  • 2,313
0 votes
1 answer
2k views

Ubuntu 24.04 (Nomble Numbat) hangs on installation

I've been trying to install the new Ubuntu 24.04 (Nomble Numbat) on a PC that's been running 22.04 for a while. Observations: Upon boot from the USB stick it errors out quickly (IIRC "Oh no ...
Mike's user avatar
  • 11
8 votes
3 answers
4k views

Ubuntu 24.04 installer not showing encrypted lvm partitions (luks)

I want to replace my ubuntu 22.04 install which is in an encrypted lvm with new Ubuntu 24.04. I unlocked to crypted partition : sudo cryptsetup luksOpen /dev/nvme0n1p3 nvme0n1p3_crypt password: ok ...
Pasquale Turner's user avatar
0 votes
0 answers
22 views

Move LUKSHeader from /dev/sdx1 to /dev/sdx

I've got a machine running ubuntu 23.10 with some LUKS-Encrypted disks attached. Unfortunately I think I made some mistakes when creating the Filesystems, as some of the luksHeaders are in /dev/sdX ...
derelektrischemoench's user avatar
0 votes
1 answer
84 views

Do not ask for LUKS password at boot

LUKS is used on a Ubuntu 22 PC to encrypt the whole disk. So, each time the PC is booted, 2 passwords are requested: LUKS password to decrypt the disk, then the login password to log in. Is it ...
Mimi's user avatar
  • 1
0 votes
0 answers
86 views

stuck at grub. cant repair boot - LUKS encryption

this is my first time installing a linux system. I wanted to use Kubuntu and also use LUKS Encryption. I used this guide to install KUbuntu including LUKS Encryption: https://help.ubuntu.com/community/...
MrJami's user avatar
  • 101
1 vote
0 answers
87 views

How to recover a deleted LUKS partition

I have created a LUKS encrypted pen drive with the gnome-disks tool, but a time ago I have accidentally formatted the disk, losing the partition. I tried to recuperate the partition stored on sda1 ...
Romu_W's user avatar
  • 11
0 votes
0 answers
42 views

Inaccessible Data after LUKS2 encryption

I tried to encrypt a HDD with an exisiting EXT4 partition on it using Luks2. First I made room for the LUKS2 header (probably the issue I assume...): resize2fs / dev/sdc1 2929710000 Then I started ...
Leo's user avatar
  • 1
0 votes
0 answers
74 views

Move Ubuntu 22.04 to hardware hp p410i RAID1 with encrypted volumes on BIOS

I have an old hp n40l microserver with Ubuntu 22.04 on board with quite old BIOS as of 2012. Now my SSD 256GB disk is split to 2 partitions: /boot/efi and /. I've bought hp p410i RAID card, and 3 more ...
Oleksa's user avatar
  • 320
0 votes
1 answer
2k views

Is there a way to enable or configure Full Disk Encryption (LUKS) after installing Ubuntu?

Is there a way to enable or configure Full Disk Encryption (LUKS) after installing Ubuntu?
ASA's user avatar
  • 11
-1 votes
1 answer
112 views

How do I install Ubuntu to a new disk on a system that already has a disk with Windows installed on it with BitLocker enabled?

I'm creating this question because I wasn't able to find existing questions after searching that described the issue I ran into. Existing questions dealt with the scenario where you want to install ...
Matt Welke's user avatar
1 vote
0 answers
88 views

Is there a manual process to reseal TPM FDE keys based on current system measurements in Ubuntu 23.10?

There are a couple similar questions out there, but here is what I'm trying to figure out... In Ubuntu 23.10, if you change the system config or firmware, then unsealing the TPM isn't going to work, ...
user1766309's user avatar
0 votes
0 answers
246 views

My ubuntu 22.04.2 wont boot after successful LUKS decryption

my disk is encrypted using LUKS and everytime I open my pc I always need to provide the write password before I can log in into my device, so as usual I open my pc ready to work, and as usual I was ...
Lowe Andaya's user avatar
1 vote
0 answers
294 views

How do I image a LUKS system disk with Clonezilla without including all the empty space?

I have a 1 TB NVMe disk with Ubuntu 22 installed with vanilla options, except I used LVM, and enabled LUKS. I'd like to image the disk for easy restores. Simply backing up the files is not enough ...
Duncan Marshall's user avatar
0 votes
0 answers
82 views

LUKS Container lost due to partitioning by Windows?

I plugged a HDD with a LUKS container on it into Windows and opened the Disk Manager. A dialog appeared where I clicked "Format as GPT", not knowing what I was doing. Apparently Windows wasn'...
Philipp Murry's user avatar
1 vote
0 answers
298 views

How do I enable hibernation on Ubuntu 22 on a LUKS system disk with a swapfile?

I have an Ubuntu 22.04.3 LTS desktop. The only swap is a swap file (I removed the swap partition that came as default with the instalation). I followed these instructions to enable suspend to disk, ...
Duncan Marshall's user avatar
0 votes
0 answers
431 views

Manually Binding TPM2 For FDE In Ubuntu 23.10

In Ubuntu 23.10, you can use TPM2 to unlock LUKS; however, after a firmware update, the system asks for the recovery key in every boot. I was expecting it to refresh TPM2 after entering the key, just ...
Shiraishi's user avatar
2 votes
0 answers
1k views

Install Ubuntu 22.04 Server with RAID 1 and LVM on machine with UEFI BIOS?

I followed the instructions here - Install Ubuntu 20.04 desktop with RAID 1 and LVM on machine with UEFI BIOS but used the Ubuntu Server Installer to configure the partition layout and added an extra ...
Bob R's user avatar
  • 203
0 votes
0 answers
115 views

LUKS LVM installation not booting

I can't get ubuntu 23.10 to boot in the following LUKS & LVM setup. Booting fails after entering the password and going to initramfs console. Devices: root@ubuntu:/# sudo blkid /dev/nvme0n1: UUID=&...
exaveal's user avatar
  • 67
0 votes
0 answers
135 views

Mount external LUKS hard drive

I recently updated my laptop's hard drive to a bigger one. The previous one I mounted it in an external case to transform it in to an external drive. The old drive was encrypted with LUKS. When I plug ...
Apostolos's user avatar
  • 301
0 votes
0 answers
24 views

extracting data from fully encrypted ubuntu hard drive from other ubuntu operating system

I installed Ubuntu in an hard drive with encryption but there was a problem in loading opreating system. So, I'm trying to copy my data from that hard drive by connecting it with another system having ...
Gum Naam's user avatar
1 vote
0 answers
293 views

I've deleted cryptsetup-initramfs

I'm running Ubuntu 20.04 (5.15.-10088.98) with LUKS LVM and have done something stupid. I've tried sudo apt upgrade and get the following problem: I: The initramfs will attempt to resume from /dev/dm-...
Lio Steinbacher's user avatar
1 vote
1 answer
269 views

Is it possible to retrofit TPM based disk encryption on system upgraded to 23.10?

There was a lot of rumour about TPM base disk encryption available on Ubuntu 23.10, but looks like all articles meant installation process. Is it possible to retrofit TPM based encryption (effectively ...
Michał F's user avatar
  • 121
0 votes
0 answers
206 views

Can't access LUKS device after cloning

I cloned a partition that is encrypted with LUKS using clonezilla (partclone.org) Now I get the following error when I try to access the LUKS data on the device. sudo cryptsetup luksDump /dev/sde3 --...
forgetso's user avatar
  • 123
0 votes
0 answers
18 views

Predecryption + File name encryption

I am using ubuntu server on an old 2011 imac. I want to encrypt a directory i use frequently with a method that hides the file names (like cryfs), but the encryption is only important for when the ...
James Smith's user avatar
0 votes
0 answers
110 views

Does disk encryption or key ring store anything in hardware?

I am running Ubuntu 20.04 (soon 22.04), and am wondering if Ubuntu by default stores any key material in a hardware store like TPM. Specifically I am using standard LUKS disk encryption during setup, ...
bernd feinman's user avatar
0 votes
0 answers
81 views

Uncryptroot-unlock with dropbear doesn't launch my ubuntu

I am facing an issue with a computer with Ubuntu 22.04 LTS. My SSD Disk is uncrypt with LUKS. I have no access to this computer and I only do SSH connexion. Normaly I uncrypt the computer using ...
Théo Estienne's user avatar
0 votes
0 answers
67 views

Black screen after passphrase LUKS encryption

I have a problem with ubuntu 22.04. when i put passphrase to LUKS disk the screen becomes all black and I can't do anything. I am completely stuck. What should I do? Thanks for your consideration and ...
linoremmi's user avatar
1 vote
1 answer
330 views

LUKS encrypted USB: "Operation cancelled" error on correct passphrase

I'm asking as a new question because I don't have enough rep to comment on answers, and the drive in question here is removable. I've set up an encrypted USB drive using cryptsetup luksFormat, but I'm ...
EnronEvolved's user avatar
1 vote
0 answers
296 views

Decrypt LUKS partition automatically if part of a defined network?

I do have an Ubuntu 22.04 server running at home with LUKS-encrypted root and data partition. At the moment I have to type in the passphrase to unlock the partitions which prevents unattended reboots (...
Michael's user avatar
  • 11
1 vote
0 answers
625 views

Gave up waiting for root file system device upon reboot

This question has been asked several times already, but there does not appear to be a generic solution. I have tried multiple solutions but can't seem to get anything to work. I have an Ubuntu Server ...
Harry Stuart's user avatar
1 vote
1 answer
784 views

No prompt to decrypt luks partition on boot

Fresh install of Ubuntu 22.04.2 LTS to a LUKS partition. When I boot, it never prompts me for my LUKS password, fails to load the system, and instead puts me at a command prompt. If I type cryptsetup ...
causative's user avatar
  • 121
1 vote
1 answer
298 views

Extends encrypted partition to new SSD

I have added a 1TB disk to my ubuntu 22.04 install. I have installed it using LVM+LUKS. lsblk gives this ... nvme1n1 259:0 0 931,5G 0 disk nvme0n1 259:1 0 476,9G ...
Rob Audenaerde's user avatar
0 votes
0 answers
80 views

kubuntu: kwallet forgot my luks passwords after upgrade to 22.04

upgraded from 20.04 to 22.04. mostly went fine. however, i had an encrypted partition which i just could click the folder in dolphin and it would autofill the password but since the upgrade it keeps ...
geegee's user avatar
  • 1
1 vote
0 answers
105 views

LUKS FDE password policy not enforced?

I am noticing that on a vanilla Ubuntu 22.04 LTS installation, there is no password policy whatsoever enforced when changing the LUKS FDE password using cryptsetup luksChangeKey or luksAddKey. In the ...
fastraul's user avatar
0 votes
1 answer
213 views

Minimal BASH-like on LUKS-encrypted install after format of secondary SSD

I can't load ubuntu after I formatted the old SSD I used to have Windows on and that I thought had nothing to do with Ubuntu's boot. The Ubuntu partition is LUKS encrypted and in GRUB I am able to ...
default's user avatar
  • 11
4 votes
2 answers
7k views

LUKS + TPM2 + auto unlock at boot (systemd-cryptenroll)

Please, help me to finish setup LUKS + TPM2 + auto unlock at boot. I have installed clean Ubuntu 22.04.2 I have encrypted partition in GUI while installing OS. I have installed all updates. Ubuntu 22....
Vasiliy's user avatar
  • 41
0 votes
0 answers
540 views

LUKS decrypted partition mapped name

I've successfully configured LUKS encryption on various partitions (root, home, extra) on ubuntu 22.04. I've to insert a password for decrypting the root part and after other partitions are decrypted ...
Francesco's user avatar
0 votes
1 answer
487 views

Ubuntu encryption during installation

For the first time while installing Ubuntu 23.04 I clicked the button for encryption. For bad luck the installation got stuck, so now I have an encrypted Lenovo laptop and I can't decrypt mmcblk0 even ...
Blackwebstudio's user avatar
0 votes
1 answer
5k views

Installing Ubuntu 22.04 with full disk encryption (LUKS) and swap partitions

I`m just trying to install Ubuntu 22.04 in my notebook, but I need to have full disk encryption enabled and I would like to define the size of my swap partition. When searching for answers I saw ...
Justcurious's user avatar
0 votes
0 answers
1k views

Initial Ubuntu Server 22.04.2 LTS Install - LUKS - headless/remote decrypt

Installing Ubuntu Server 22.04.2 LTS for the first time ever on a Beelink Mini PC (SEi12). Went for the most standard installation possible. Configured using a guided storage layout; i.e. Use entire ...
NRR's user avatar
  • 1
0 votes
0 answers
1k views

How do I install Ubuntu 23.04 on an encrypted Btrfs filesystem?

I currently use an encrypted Btrfs filesystem (cryptsetup+luks), which I could set up easily using the Ubuntu 22.10 setup. With Ubuntu 23.04, I only managed to install it on an encrypted LVM+ext4 ...
Torsten Bronger's user avatar

1
2 3 4 5
13