Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [luks]

LUKS (Linux Unified Key Setup) is a disk-encryption specification. It is the standard for Linux hard disk encryption.

LUKS (Linux Unified Key Setup) is a disk-encryption specification. It is the standard for Linux hard disk encryption. LUKS stores all setup necessary setup information in the partition header, enabling the user to transport or migrate his data seamlessly.

Website: http://code.google.com/p/cryptsetup/

Wikipedia: http://en.wikipedia.org/wiki/Linux_Unified_Key_Setup

157 questions
4
votes
2 answers

BTRFS and Luks integration

I would like to build a RAID1/BTRFS/Luks setup. What I found about it so far is: An encrypted Btrfs file system can be created on top of the dm_crypt disk encryption subsystem and Linux Unified Key Setup (LUKS) layer, which supports a variety of…
Doodle
  • 41
  • 1
  • 2
4
votes
1 answer

ZFS on LUKS not recognized at boot

I've got 6 physical drives in RAID-Z2, which I intend to one-by-one convert to dm-crypt devices. My process was roughly: dd if=/dev/zero of=/dev/sdf Create keyfile /etc/crypttab.d/crypt-1.key cryptsetup luksFormat /dev/sdf Append crypt-1…
Chris Tonkinson
  • 475
  • 2
  • 6
  • 19
4
votes
1 answer

Anybody experiencing full system lockups with LUKS?

I've recently setup a couple of new servers. This time I'm encrypting most of my partitions using dmcrypt+LUKS. However these new servers crash very often, every few days. Full lockups, kernel does not respond to keyboard, system does not ping.…
Hongli Lai
  • 2,222
  • 4
  • 23
  • 27
4
votes
1 answer

Possible to set encryption block size in LUKS?

When I do a benchmark test modprobe tcrypt sec=2 mode=200 I see that different encryption block sizes are used test 0 (128 bit key, 16 byte blocks): 4460604 operations in 2 seconds (71369664 bytes) test 1 (128 bit key, 64 byte blocks): 1747179…
Sandra
  • 10,303
  • 38
  • 112
  • 165
3
votes
1 answer

Mount LUKS-encrypted drive at boot, but only if drive is present

I have a series of drives that are are all encrypted with LUKS/dm-crypt. They are not all guaranteed to be plugged in at the time the system boots, but if they are, I would like to ensure they are mounted. At the moment, I can specify the devices in…
chimeracoder
  • 133
  • 5
3
votes
0 answers

ZFS over LUKS over (NBD or NFS)? Need encrypted replication solution

I am using ZFS(ZoL) over LUKS on home and on remote server. All is working perfectly and fast. I do snapshots by cron, but now I want to replicate them to some backup storage. I have a small 2-HDD dlink dns-323 nas, on which I have debian installed.…
Ural
  • 161
  • 6
3
votes
1 answer

How secure is information on a LUKS encrypted backup media?

Imagine confidential information (certificates, keys, whatever) stored on an LUKS encrypted backup disk containing for example an ext4 file-system. AFAIK such a device contains a key file which is in turn encrypted with some pass-phrase. Suppose…
pefu
  • 679
  • 1
  • 6
  • 24
3
votes
2 answers

cryptsetup luksOpen key-file does not work

I am getting "No key available with this passphrase." when trying: sudo cryptsetup open --type luks /dev/sdc storage --key-file=/path/to/keyfile The /path/to/keyfile file contains just the passphrase in plain text. If I enter the same passphrase…
Greendrake
  • 1,391
  • 2
  • 13
  • 22
3
votes
1 answer

LUKS full disk encryption use keyfile instead of passphrase

I have enabled LUKS full disk encryption on an LVM volume while installing centos6.6, however it asks for a passphrase every time the OS is rebooted. I am now trying to use a key file according to this post. Unfortunately it does not work...and…
krisdigitx
  • 629
  • 3
  • 18
  • 30
3
votes
1 answer

How do you repair a Ubuntu 14.04 RAID-LVM-DM-CRYPT-LUKS Physical to Virtual system that won't boot?

I can't get a Ubuntu 14.04 Virtual server to boot correctly. It's recently been cloned "dd if=/dev/sda of=vmimage" The Physical has a RAID1-LVM-DMCRYPT-LUKS configuration, The boot sequence aborts and drop to the BusyBox shell. Begin: Waiting for…
Marinus
  • 227
  • 1
  • 3
  • 10
3
votes
1 answer

Automounting encrypted filesystem (using random key), residing in regular file under CentOS 6.*

Task: in CentOS 6.x system, set up and mount automatically encrypted filesystem, residing within a regular file, using one-time (random) key. /etc/crypttab in CentOS 6.* doesn't allow using plain file as block device to mount and map…
Konstantin Boyandin
  • 283
  • 2
  • 5
  • 16
3
votes
1 answer

Disable asking for a passphrase without having to re-make the encrypted partition

I have a server which I set up with its root partition totally encrypted. I urgently need to disable the passphrase dialog at startup because it is not letting the server boot up after an electricity cut, it happened already. Is there any way to…
user134316
3
votes
1 answer

Why is mkfs overwriting the LUKS encryption header on LVM on RAID partitions on Ubuntu 12.04?

I'm trying to setup a couple of LUKS-encrypted partitions to be mounted after boot-time on a new Ubuntu server which was installed with LVM on top of software RAID. After running cryptsetup luksFormat, the LUKS header is clearly visible on the…
Starchy
  • 118
  • 1
  • 6
3
votes
1 answer

What partition is my LVM with LUKS using?

I'm trying to figure out what partition dm-X is on. It's on /dev/sdaX, but which X? What am I missing? I know there has to be a way to find this out. I need to grow my physical volume, but can't do it until I know which partition to touch. Here's…
zonkybonk
  • 31
  • 1
3
votes
1 answer

Recover files from LUKS-encrypted partition

I have a partition encrypted with LUKS. I used it without problems every day until suddenly the password stopped working. Is there anything I can do? I have tried with a different keyboard and from a different computer. I am 100% certain that I…
JackSTE
  • 39
  • 1
  • 3
1 2
3
…
10 11