All Questions
Tagged with encryption luks
122
questions
0
votes
1
answer
106
views
Managing LUKS encrypted swap files/volumes. Manual mounting on remote dedicated servers, boot behavior, and fstab settings
I would like to setup an as simple as possible encryption at rest solution for a remote dedicated server. The host I am using will provide physical disks and there is no off the shelf solution for ...
4
votes
1
answer
409
views
Is there a way to move a LUKS-encrypted btrfs volume to the right?
I want to move a LUKS-encrypted btrfs volume to the right. GParted is telling me it knows how to move the LUKS layer to the right, but it doesn’t know how to move the btrfs layer to the right. Can I ...
0
votes
3
answers
254
views
Hard time understanding LUKS encryption
I'm reading and studying for my LPI-1 exam, when I came across LUKS for disk encryption. I found it super cool and went to try it on my home lab, in my Debian machine. Installed everything, encrypted ...
2
votes
1
answer
650
views
How to permanently delete a LUKS encrypted partition?
I have been using a LUKS encrypted partition as my /home directory on Manjaro. However, as I have to resize and move a few of my disk partitions, I would like to get rid of it. On Manjaro, I have ...
0
votes
1
answer
157
views
Converting Linux partition to crypto_LUKS
I'm currently working on RHEL 8.9 and attempting to harden a VM of mine, and looking into applying the crypto_LUKS encryption to my active partitions. When I check my partitions using the blkid ...
0
votes
0
answers
35
views
Can I dd from one opened luks container to another?
I want to migrate my encrypted data from one drive to another. Both source and target should be encrypted. I've read in some other question, that I should create a new container, so that the superkey ...
0
votes
0
answers
243
views
How to encrypt with LUKS a live Ubuntu usb stick that has been customized with Cubic?
I'm using Cubic (https://github.com/PJ-Singh-001/Cubic) to create a custom Ubuntu. So far so good, everything is going smoothly.
However, I would like to encrypt the USB stick that contains my custom ...
0
votes
0
answers
253
views
Unable to unlock luks from crypttab or key-file
My home is stored in a luks partiton whose passphrase is stored on a usb key.
I have been using this setup for a few years and my home usually unlocks itself at boot from the following crypttab :
user@...
1
vote
0
answers
855
views
Reset password of an unlocked LUKS encrypted drive
I have a machine running Pop!_OS 22.04 LTS, with an encrypted drive using LUKS encryption.
The machine is running and the drive is unlocked. However, I forgot the passphrase to the drive.
I tried ...
1
vote
1
answer
1k
views
How can I authenticate LUKS encryption, on boot, with Yubikey, on KDE Neon 5.27?
I have a LUKS encrypted drive on Kdeo Neon 5.27. The LUKS password is long and tedious to type in. Given how much KDE reboots, I'm tired of typing in my password so I bought a Yubikey to speed up the ...
1
vote
0
answers
477
views
When mounting luks-encrypted disk-containers remotely, how to recover from loss of connection?
I keep sensitive data encrypted via luks, in container files. Those files are usually stored remotely (SMB, sshfs etc).
So my current workflow is as follows:
sudo mount $remoteshare /mnt
sudo ...
0
votes
1
answer
818
views
`cryptsetup open` fails with correct passphrase - "No key available with this passphrase."
I recently ran (essentially) rm -rf / --no-preserve-root on my LUKS encrypted BTRFS root filesystem. I'm trying to mount the drive from an endeavouros (arch) liveusb, without success.
I created a ...
1
vote
0
answers
272
views
LUKS2 master passphrase in kernel keyring: Token unusable error
I'm trying to follow the documentation on how to pass a key to LUKSv2 via the kernel key ring: https://fossies.org/linux/cryptsetup/docs/Keyring.txt
This does not work for me at all:
# dd if=/dev/zero ...
1
vote
1
answer
1k
views
Other ways to login and decrypt LUKS volumen when dropbear-initramfs is installed
I'm new to this site and after searching for a couple of hours already, I couldn't find a similar topic or figure out a solution, so I'm going to ask here.
I have setup a new remote server with Ubuntu ...
0
votes
1
answer
1k
views
Extending encrypted partition (LVM, LUKS)
I'm running a dual boot (Win 10 Pro, Ubuntu 20.04) system on a single NVMe harddisk. Linux contains one encrypted root partition, an encrypted boot partition and a swap partition. As the root ...
0
votes
1
answer
205
views
Unsure if I encrypted external HDD correctly with LUKS
I followed the instruction from this page.
I was unable to encrypt the the disk, but was able to encrypt its partition. I don't if it was the correct thing to do, but i did it anyway because it's not ...
0
votes
1
answer
157
views
SUDO asks for "Encryption passphrase" on new setup with LUKS
SUDO keeps asking for Encryption passphrase on my latest setup. I'm not sure what encryption the passphrase is for, except that I suspect that it is related to LUKS encryption. Also I noted it doesn't ...
0
votes
0
answers
1k
views
Automatic unlock of LUKS external data drive when plugged in
I have set up LUKS for an external USB HDD with two protectors: a passphrase and a file key. I would like to automatically both unlock the drive and automount when the drive is plugged in.
I've set up ...
1
vote
1
answer
4k
views
LUKS with separate /home within encrypted volume
First time using full disk encryption with LUKS. Sorry for a lot of novice questions.
Before using full disk encryption, I used to have separate partitions /boot, /, home which allow to to reinstall ...
1
vote
1
answer
3k
views
LUKS using clevis TPM2.0
Hi I'm trying to encrypt a secondary data disk. I want this disk to be decrypted during boot of my machine. I currently have RAID setup, with an LVM volume on top which is already encrypted with LUKS.
...
3
votes
2
answers
5k
views
difference between passphrase and key file in LUKS
I'm trying to understand with no success the difference between a passphrase and a key file in LUKS. At first I thought they were the same thing, with the difference of a key file being a passphrase ...
0
votes
0
answers
3k
views
Luks "No key available with this passphrase" but seemingly at random
I've been having the strangest of experiences with my encrypted Luks volume and was hoping maybe someone could help me shed some light on it. Let me walk you through it.
When installing my OS (vanilla ...
0
votes
0
answers
637
views
Fix For Blanked Out UUID On Luks Encrypted Drive?
Problem:
When I mount a Luks Encrypted drive, the drive mounts, but I can't access the files.
The drive is the root drive. It has ElementaryOS installed on it.
It booted fine, until after doing some ...
0
votes
1
answer
844
views
Mount/Use LUKS .img file with Header and Key file
This is for a cybersecurity school challenge.
I need to get into a .img file that was encrypted using LUKS. They have provided a header file and a key file to open it as well.
I am brand new to Linux ...
0
votes
0
answers
282
views
Protect USB key against formatting? Avoid unfortunate formatting of LUKS encrypted pen-drive
I notice that when I insert my LUKS-encrypted pen-drive into Windows (which is not meant to work), I get a message inviting me to format the pen-drive, and the option to format the disk is preselected:...
0
votes
1
answer
447
views
Boot Linux off a BitLocker protected drive
I have a bootable USB drive with Clonezilla installed, which I use to take images of drives from various computers. Is there a way to install BitLocker on it, so that during boot I get prompted for a ...
0
votes
0
answers
777
views
Linux LUKS encrypted root: fstrim always trims all empty space
I have a Manjaro system with a LUKS encrypted root filesystem on an NVME SSD. It is set up to decrypt / on boot via the kernel.
$ cat /proc/cmdline
initrd=\amd-ucode.img initrd=\initramfs-5.11-x86_64....
0
votes
4
answers
3k
views
Increase Time to Brute Force Luks Full Disk Encryption
I want to increase the time it would take to brute force my full disc encryption. I’m on Ubuntu and encrypted with Luks on installation. I have read that I would use the following command to make it ...
3
votes
1
answer
765
views
How to default nemo to forget LUKS password?
I just finished encrypting all my drives with LUKS. Right now I boot Mint 20.1 off an ssd and have a 6TB hdd. Both drives are now encrypted with LUKS. In the nemo file browser when I click on my ...
2
votes
2
answers
2k
views
My luks encrypted image unlocks but fails to mount
I have a LUKS image which I decrypt, mount and save important documents to. Until recently, this was running fine, on an Ubuntu 19 machine. I shut this machine down, while the image was mounted, ...