Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [luks]

All questions relating to LUKS (the disk-encryption specification) for Linux

106
votes
2answers
6k views

How do I enable Ubuntu (using full disk encryption) to call LUKSsupend before sleeping/suspending to RAM?

This question is related to another one by @Stefan, but it is not a duplicate of it. The questions are slightly different: the author simply wanted to know if this had been implemented, while I'm ...
57
votes
1answer
58k views

How can I install Ubuntu encrypted with LUKS with dual-boot?

Ubuntu 13.04 installation disk has an option to install Ubuntu encrypted using LUKS. However, there is no option to perform an encrypted installation along-side existing partitions for a dual-boot ...
48
votes
3answers
91k views

How to change LUKS passphrase?

Having installed Ubuntu 11.10 with whole disk encryption and LVM, I need to provide a way for users to easily change LUKS passphrase. Preferably, this should be done using GUI tools, thus, enabling ...
38
votes
3answers
117k views

Can I disable full-disk encryption?

I recently installed Ubuntu 12.10 and it requires a passphrase to boot up (I installed it with an encrypted file system). Do I have to reinstall to change to a standard unencrypted file system?
25
votes
5answers
36k views

device-mapper: remove ioctl on luks-xxxx failed: Device or resource busy

While I was away from my computer, my encrypted USB drive got accidentally unmounted somehow (although it was still physically connected at the time). I haven't been able to recover (haven't tried a ...
25
votes
4answers
74k views

How secure is an encrypted LUKS filesystem?

I recently installed 11.10 on a fresh disk using entire disk encryption. Can someone tell me how secure the encryption algorithm is? Has there been any recent breaches with said algorithm? I use a ...
22
votes
1answer
22k views

Yubikey Two-factor Authentication Full-disk Encryption via LUKS

I recently acquired a Yubikey Neo - a nifty little hardware second factor authentication device. It's primarily intended for use with One Time Passwords, and the emerging U2F protocol - but since ...
22
votes
3answers
50k views

Mount LUKS encrypted hard drive at boot

I have Xubuntu 14.04 on a SSD device (the HOME was encrypted correctly during intallation), additionally I have a HDD with a encrypted partition with extra data which I would like to mount in /mnt/hdd....
21
votes
3answers
14k views

How do I get passwords from the keyring in the terminal for usage in scripts?

When you have a LUKS encrypted drive in your computer, Nautilus or Nemo will show it under Devices as a drive with a little lock on it. When you click it, you need to enter a password. If you choose ...
20
votes
4answers
45k views

How to configure LVM & LUKS to autodecrypt partition?

I have recently installed ubuntu server 11.04 with the full lvm encryption(installed from the setup) . I wish now to use a key file to do automatic unlock. I have tried to follow this guide http://...
19
votes
2answers
24k views

Mount a LUKS partition at boot

I have installed an Ubuntu machine with two encrypted LUKS partitions: one for / and one for /home. I've reinstalled the machine to upgrade to 10.04. Again, the / is installed using LUKS, and I'm ...
18
votes
0answers
907 views

Possible to make “Forget password immediately” the default when opening LUKS encrypted partition?

When a LUKS encrypted partition pops up the unlock window it gives 3 options for how to remember the password. The "Remember password until you logout" is always ticked by default. Is there a way to ...
16
votes
2answers
17k views

Cannot enter password to start Ubuntu

I'm running Ubuntu 14.10 with the system disk encrypted with luks. When I start the computer, it shows the Ubuntu logo and asks to enter the password to unlock the disk. However, I cannot enter the ...
13
votes
3answers
4k views

Suspend to RAM and encrypted partitions

Normally I don't shutdown my notebook any more in favour of using suspend-to-RAM. The downside is that my encrypted home partition is completely accessible after resume without entering the passphrase....
12
votes
4answers
8k views

Full Disk Encryption + Home folder encryption needed? Wouldn't Full Disk Encryption get the Home folder anyway?

I'm reinstalling Ubuntu, and want to do full disk encryption. After selecting it, I'm given a choice to also encrypt the Home folder. Since Ubuntu doesn't use a separate partition for the Home folder ...
12
votes
1answer
1k views

Can I view the password of a mounted encrypted volume?

First: yes, this was stupid, I know A couple weeks ago I set up a new Ubuntu 18.04 machine, and included full disk encryption. It's been running since then, just locked at night. Today I was about ...
11
votes
3answers
5k views

Is AES-NI fully supported?

Has support for the Intel AES-NI hardware crypto acceleration been added to Ubuntu (LUKS, kernel, OpenSSL libs, etc)? If so, starting with which version? Here is a list of Intel processors supporting ...
10
votes
2answers
18k views

Mounting encrypted LUKS partition from Live CD

Error to begin with, can't boot I had to do a hard reboot of my computer, and when booting up it (initramfs I think) gave an error: mount: mounting /dev/mapper/ubuntu--vg-root on /root failed: ...
10
votes
3answers
508 views

Will an external HDD encrypted with 17.10 be accessible with 18.04 after an upgrade?

I'm currently on 17.10 and don't use encryption on my internal drives but have an external USB disk which is encrypted. I use it for backups. Because I am was not sure whether I use ecryptfs or ...
9
votes
4answers
13k views

Do you recommend LUKS encryption on a SSD (TRIM support)?

I have a laptop (Dell Inspiron 11z) and and SSD (Samsung 128GB) on order. On my current laptop, I have a spinning HDD and use LVM and LUKS encryption. I would like to use LUKS on the SSD but from ...
9
votes
1answer
3k views

Are there any known vulnerabilities to Ubuntu's full disk encryption feature?

Are there any known vulnerabilities to Ubuntu's full disk encryption feature? I have some storage devices (thumbdrive and a few external hard drives used for backups) that I use with full disk ...
9
votes
2answers
9k views

Slow SSD + dm-crypt with Luks encryption in Ubuntu 12.10

I have an 128 GB SSD installed in my laptop (Samsung 840 Pro) on a Sata 3 interface. This laptop also has an i5 3210m Ivy Bridge Intel processor and 8 GB of RAM. I installed Ubuntu 12.10, using the ...
9
votes
1answer
5k views

How do I use dm-crypt (LUKS) with GnuPG to use two-factor for FDE?

When using full disk encryption with Ubuntu (opposed to homedir encryption), dm-crypt with LUKS is used for encrypting the volume. In the installer (at least on 12.04 alternate) you can choose between ...
8
votes
2answers
13k views

stop crypttab asking for password for swap

I instaled a fresh 11.04 system when it was released and set up full disk encryption with LUKS. At first it asked me for a password for my three encrypted partitions: / /home swap Typing in the ...
8
votes
1answer
8k views

Warnings about cryptsetup on new Ubuntu 17.10 installation?

I have just downloaded and installed a fresh Ubuntu 17.10 server system. Upon running sudo apt update and sudo apt upgrade I happened to notice these two warnings: WARNING: Setting CRYPTSETUP in /...
8
votes
1answer
2k views

Ubuntu with full disk encryption - bad password after upgrade to 18.04

A few months ago I set full disk encryption during installation of Ubuntu 17.10. Now, I've decided to upgrade. The upgrade ran to the end without any problems. However, after reboot I am not able to ...
8
votes
2answers
3k views

How can one unlock a fully encrypted Ubuntu 11.10 system over SSH at boot?

In previous versions of Ubuntu, and current versions of Debian, you can unlock a fully encrypted system (using dmcrypt and LUKS) at boot time over SSH. It was as easy as: Installing the encrypted ...
7
votes
2answers
6k views

Mounting USB disk with LUKS encrypted partion fails with a cryptsetup “Device already exists” error

I've got an external USB drive with an encrypted LUKS partition. I generally have no problems mounting the device; I click it from the xfce4 desktop and get a dialog where I enter the password. When ...
7
votes
4answers
5k views

How do I hide / remove a partition from the Nautilus left panel?

I have a luks setup with encrypted partition. And I don't want everyone on my computer to see that I have such partition. Unfortunately it shows up in the nautilus "devices" panel as "Encrypted ...
7
votes
1answer
2k views

How can I encrypt the entire disk on alternate installation?

Is it possible to install Ubuntu 11.04 with full disk encryption? Previously versions have had an alternate install cd with a text interface where you could enable encryption for your drives. This ...
7
votes
0answers
2k views

LUKS keyscript being ignored … asks for password

Let me begin by saying I'm not new to LUKS. I've set up LUKS with keyscripts numerous times with and without LVM. I'm not sure what is actually going on here though. I have a system that has a single ...
6
votes
3answers
13k views

Encrypted custom install

My computer runs Ubuntu. I want to install Ubuntu on another medium. I wish to enable encryption, yet as the ubuntu installer's default choices (erase/alongside/etc...) only concerns the default drive,...
6
votes
1answer
3k views

Opening LUKS encrypted drive in nautilus results in “operation cancelled”

I'm on a Ubuntu 16.04 computer with a LUKS encrypted drive trying to mount an old Ubuntu 16.04 LUKS encrypted drive. When I open the drive in Nautilus, after entering the correct password I get the ...
6
votes
1answer
3k views

MD + LUKS + LVM will not cleanly shutdown

My setup is currently raid1 + luks on each md partition and lvm on top to stripe between the arrays. There is only one volume group with one logical volume currently. sdc ...
6
votes
1answer
2k views

why is it a risk to clone a LUKS container?

I recently installed Ubuntu onto an encrypted partition using the LUKS+LVM combination that the 'alternate' installer offers. Now I want to create backups of my HD. From the LUKS FAQ: 6.15 Can I ...
6
votes
1answer
4k views

Full Disk Encryption with LUKS: auto mount second volume

TrueCrypt on Windows can auto mount volumes that use the same passphrase as the boot volume. You enter the passphrase only once. Is there a way to do this with LUKS? Background: I'm currently ...
6
votes
4answers
5k views

Luks two-factor authentication

is it possible to create an encrypted partition with a two-factor authentication ( decryption with password and keyfile ) with LUKS, like in truecrypt?
6
votes
1answer
6k views

how to mount / with encrypted lvm root during installation?

In order to understand Linux better, I'm trying to manually configure an encrypted root lvm partition . I have already tried this with the Ubuntu server installer by choosing the lvm encrypted option ...
5
votes
3answers
8k views

Cannot mount LUKS encrypted USB on boot after 12.10 upgrade

I use a USB disk to backup my Ubuntu machine and store the video files I work with. It is formated to ext4 and uses LUKS encription. When I was using 12.04 it was working flawlessly and would mount ...
5
votes
1answer
4k views

How do I automatically decrypt an encrypted filesystem on the next reboot?

Goal I am looking for non interactive way to decrypt a root file partition and a swap partition encrypted with LUKS the next time the system reboots. As well as this, I need a way to undo it after ...
5
votes
4answers
3k views

What is the proper way to install Ubuntu 15.04 with LVM, LUKS, and manual partitioning?

I am trying to install Xubuntu 15.04 with LVM and LUKS, manually partitioning in order to have a separate /home partition. So far I have booted the Xubuntu live CD and went through these steps: Used ...
5
votes
2answers
10k views

GRUB2 failed with 'No video mode activated'

I've installed Ubuntu-Alternate 11.04 to use the encrypted feature. All works fine, but rebooting the system ended up in an error-message: Error: No video mode activated' Reading some threads I ...
5
votes
1answer
2k views

Why does Ubuntu's full disk encryption require no time?

As far as I understand, the "Encrypt the new Ubuntu installation for security" option in the Ubuntu installer is meant to provide full disk encryption. However, when using that option, it seems like ...
5
votes
1answer
2k views

Clone encrypted HDD to smaller drive

For my work Laptop I use full HDD encryption and I need to upgrade my 500GB HDD to a 250 SSD drive, my HDD has only around 100GB of data and is created via encrypted LVM. GParted does not support ...
5
votes
4answers
6k views

How to check if TRIM is working for an encrypted volume?

You can easily check if TRIM works for a "normal" ext4 partition: https://askubuntu.com/a/19480/5920. How to do that for a LUKS-encrypted one? Let's assume the default LUKS setup made by 12.04 ...
5
votes
1answer
368 views

Change the default option to “Forget password immediately” when mounting a Luks usb drive

I would like to do exactly what this poster wants to do: When a LUKS encrypted partition pops up the unlock window it gives 3 options for how to remember the password. The "Remember password ...
4
votes
2answers
12k views

Convert from EFI to BIOS boot [closed]

I have a Samsung Notebook NP900X4C with an LUKS encrypted installation of Linux Mint 15 on it. The system is booting in UEFI mode. The problem is that the samsung-notebook kernel module is disabled ...
4
votes
1answer
1k views

How to disable “Remember forever” option in mounting encrypted disks

Whenever you mount an LUKS encrypted disk, Ubuntu gives you 3 options: Forget immediately Remember for this session Remember forever I wanted to know how to reset this choice after choosing the "...
4
votes
2answers
7k views

I'm so confused about full disk encryption. help :(

I've been running a live CD of Ubuntu 12.04 for more than a few days now, reading and reading, but I'm not really understanding things when it comes to setting up FDE on Ubuntu 12.04 Precise. I'm sure ...
4
votes
1answer
2k views

How to enable text-mode LUKS passphrase prompt on boot?

I'm on Ubuntu MATE 16.04.1 and I changed graphic card to GeForce 8600GT and now I can't enter LUKS password on boot after installing NVIDIA propriatary drivers (I tried 304.135 and 340.102). Keyboard ...