Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [luks]

LUKS (Linux Unified Key Setup) is a disk-encryption specification. It is the standard for Linux hard disk encryption.

LUKS (Linux Unified Key Setup) is a disk-encryption specification. It is the standard for Linux hard disk encryption. LUKS stores all setup necessary setup information in the partition header, enabling the user to transport or migrate his data seamlessly.

Website: http://code.google.com/p/cryptsetup/

Wikipedia: http://en.wikipedia.org/wiki/Linux_Unified_Key_Setup

157 questions
1
vote
1 answer

How do I replace a disk with LUKS on LVM2 - no raid, no span

I have LUKS on LVM (LVM Partitions created first, then each partition is encrypted separately, following this guide on Arch Wiki). I am using two volume groups, and each is isolated to a drive. This is because I have one SSD and one platter, and I…
Damon
  • 131
  • 8
1
vote
1 answer

LUKS and /etc/crypttab on centos 7 - hang at startup

I have a problem with following crypttab echo "secret /dev/sdb8 none" > /etc/crypttab When I do it by hand, following way everything is ok, disk is mounted: cryptsetup luksFormat /dev/sdb8 cryptsetup luksOpen /dev/sdb8 secret ll…
bastiat
  • 197
  • 1
  • 8
1
vote
0 answers

Snapshot of BTRFS Device on top of luks Volume

I have the following problem: I can't figure out, how to create a snapshot of a btrfs volume residing on a crypted disk. This is the setup: /dev/sdb is a 1TB USB 3 disk. it has a partition /dev/sdb1, which fills the whole space. This partition was…
Stephan Richter
  • 191
  • 11
1
vote
1 answer

encrypted (luks) partition had some damage - any chance?

I was trying to run Debian installer on top of an already luks-encrypted partition (I tried to do use cryptsetup in the console). I don't remember ever saying "yes, destroy" data, but what I see now, is that encrypted turned into a PV (LVM). Do I…
inger
  • 111
  • 2
1
vote
1 answer

Encrypted partition on Debian requiring multiple keys to unlock

The title pretty much sums it up, but I want to create a second data partition on a web-facing server which is encrypted and requires two people to provide passphrases before it can be unlocked. Is this even possible?
alanbeard
  • 141
  • 9
1
vote
2 answers

Ubuntu 13.10 - How to disable LVM and cryptsetup? cryptsetup: evms_activate is not available

EDIT: This issue is now resolved. For detailed instruction how to remove full disk encryption, please see the "Can I disable full-disk encryption?" topic, there you can find a step by step instruction how to remove full-disk…
Tom Raganowicz
  • 183
  • 1
  • 1
  • 9
1
vote
1 answer

ID_FS_LABEL empty for luks volume

I have an LUKS encrypted partition on a disk. I would like to label it and have it available at /dev/disk/by-label. The value used is ID_FS_LABEL to create the link in /dev/disk/by-label. That value can be extracted with vol_id. The problem is that…
user300811
  • 183
  • 2
  • 10
1
vote
1 answer

how to mount a luks-encrypted file?

I had a good-working system. Cent OS 6. But after I made a reboot luks-partition has been unmounted. And our system administrator have a weekends now :( Please help me to mount a luks partition again. I know the path to encrypted file and…
Vasvas
  • 13
  • 1
  • 4
1
vote
1 answer

Does cryptsetup "Plain mode" store the hashed passphrase in each sector?

When I read the manpage for cryptsetup on Linux about "Plain mode" it says: Plain dm-crypt encrypts the device sector-by-sector with a single, non-salted hash of the passphrase. and the -c option says: --cipher, -c Set the…
Sandra
  • 10,303
  • 38
  • 112
  • 165
1
vote
1 answer

Why are these dmsetup commands there?

On this page are there examples of LUKS encryptions. Example below. Why are the dmsetup commands there? What do they do? dd if=/dev/zero of=./volumes/vol_default.vol bs=1M count=1 losetup /dev/loop0 ./volumes/vol_default.vol echo…
Sandra
  • 10,303
  • 38
  • 112
  • 165
1
vote
1 answer

How to verify that a physical volume is encrypted? (Ubuntu 10.04 w/ LUKS)

I am very new to LUKS. During installation, I tried to set up an encrypted physical volume so that everything underneath it would be encrypted. I chose "Use as: physical volume for encryption," the installation completed and I have a working…
Bob B.
  • 37
  • 3
  • 7
1
vote
0 answers

network-mapped file system drops to read-only mid-stream, buffer I/O error with device mapper

Under linux 2.6 (CentOS 5.3 actually), I have a file system that works okay for a few minutes, then drops to read-only mode, while I am trying to read/write data to it. It is an ext3 file system referencing a luks (cryptsetup) device via…
slarocque
  • 11
  • 3
1
vote
0 answers

RAID + LUKS + LVM + BCACHE + BTRFS

I want build new structure for my data store (NAS - Ubuntu). Data storage will be 4TB at first. Then up to 8TB. My old structure is simple: RAID 1 -> LUKS -> FS I need some wishes to new structure: Save data (RAID 1 or 10). Encryption. Cache SSD +…
Jo K
  • 111
  • 2
1
vote
1 answer

Disable read/write workqueue for Ubuntu Full-Disk-Encryption

I am currently trying to set up multiple devices with Ubuntu (20.04.5 LTS) and the drive must be encrypted, so I used LUKS during the installation. (I checked "Use LVM with the new Ubuntu installation" + "Encrypt the new Ubuntu installation for…
Pascal Diu
  • 11
  • 1
1
vote
0 answers

Why does cdrecord alter my image when writing to CD ROM and how can I avoid it?

I want to use optical media for backups and hence created a luks image equivalent to that of a 80 min CD-ROM and recorded it twice using the cdrecord # first run $ cdrecord -v dev=0,0,0 image.luks # second run $ cdrecord -v speed=2 dev=0,0,0 -date…
Benj
  • 117
  • 4
1 2 3
…
10 11