Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [luks]

LUKS (Linux Unified Key Setup) is a disk-encryption specification. It is the standard for Linux hard disk encryption.

LUKS (Linux Unified Key Setup) is a disk-encryption specification. It is the standard for Linux hard disk encryption. LUKS stores all setup necessary setup information in the partition header, enabling the user to transport or migrate his data seamlessly.

Website: http://code.google.com/p/cryptsetup/

Wikipedia: http://en.wikipedia.org/wiki/Linux_Unified_Key_Setup

157 questions
0
votes
1 answer

Cannot get kernel to ask for LUKS password at boot after migrating the system from LVM to LVM on LUKS

I am running Linux Mint 18.3 on desktop system. I have migrated my workstation to LVM over LUKS, from plain LVM. The system does not boot and does not ask for LUKS password at boot. I can boot the system from LiveCD and properly unlock and mount…
SWilk
  • 181
  • 2
  • 7
0
votes
0 answers

Poor disk performance on KVM guest

I have a server running Proxmox and some Linux VMs running on it. On the host, I get 200+ MB/s write to the disk On a VM, I only get around 50-60 MB/s Caching is disabled for all VMs. I'm using Virtio-SCSI as storage controller Specs of the…
patrick7
  • 1
  • 2
0
votes
1 answer

Debian 9 fstab two mount points (uuid) same destination

I have encrypted luks partition. Key file is located on USB flash drive. I also created copy of that flash drive to another flash. How I can add two mount points in /etc/fstab that points to same target directory. Booth flash drives to server not…
Guntis
  • 683
  • 1
  • 10
  • 22
0
votes
1 answer

tar of pg_dump huge await. Do additional writes to a luks encrypted disk require additional entropy?

We have a postgres server with 6 SSDs in a raid10. backing up the postgres database with pg_dump works fine and causes almost 0 load to the disks or cpu. Tar'ing said pg_dump without any options other than -vcf seems to cause so much disk IO that…
Lookcrabs
  • 21
  • 6
0
votes
2 answers

Troubles with swap on dm-crypt/LUKS partition

I have created two dm-crypt partitions during Debian install: sda2 sda2_crypt swap sda3 sda3_crypt / I used 7.8.1 netinstall ISO. Later I have added additional dm-crypted drive sdb: # cryptsetup -h=sha256 -c=aes-xts-plain64:sha1 -s=256…
A_buddy
  • 35
  • 2
  • 11
0
votes
1 answer

Guestfish - libguestfs copy-out to a Remote VM

I have a need to move a number of files from a snapshot of a LUKS encrypted virtual machine (CentOS) to another one on a different hypervisor. I can mount the partition in the guestfish interactive shell and use copy-out to move the files to a…
Bob
  • 93
  • 1
  • 1
  • 8
0
votes
3 answers

Set LUKS password to user password

Is it possible to set the LUKS key of a specific slot to the user password? So if user bob has a password of 12345 I want to set slot#2 to 12345. I know I can set the key of a specific slot using cryptsetup luksAddKey /dev/sda5 -S 2, but how do I…
ChaChaPoly
  • 243
  • 1
  • 3
  • 16
0
votes
0 answers

What is LUKS's process for decryption?

LUKS allows multiple passphrases for a single device, however adding or revoking a passphrase doesn't take long. So the passphrases seem to only decrypt some master key which is then used for the rest of the device. Is this the case? What's the flow…
Sid
  • 101
0
votes
1 answer

Shrink non-bootable LUKS LVM

I'm importing a VMWare OVA whose second disk uses LUKS and configured to use 1TB of space, although its VMDK is only 30GB. I want to shrink this down. I am following the instructions here (https://wiki.archlinux.org/index.php/Resizing_LVM-on-LUKS),…
mellow-yellow
  • 441
  • 6
  • 15
0
votes
1 answer

how do I LUKS encrypt a drive that already has data?

On a CentOS 7 server, I would like to LUKS encrypt the entire hard drive, including a 50GB partition that has already received yum install and a few other updates, but nothing else. But this tutorial says that typing cryptsetup -y -v luksFormat…
CodeMed
  • 315
  • 1
  • 8
  • 21
0
votes
1 answer

Ubuntu 12.04 LUKS/dmcrypt disk to disk copy freezes

I have 2 external USB hard drives encrypted with LUKS in Ubuntu 12.04. Generally, the both drives are very slow with LUKS/dmcrypt, e.g. 7 MB/s for both read/write, but I could live with this. However, when I try to copy files from one encrypted disk…
Andrey Sapegin
  • 1,201
  • 2
  • 12
  • 27
0
votes
1 answer

Adding new physical volume in encrypted volume group (LUKS)

I have a CentOS 6.6 desktop and chose the encrypt option upon installation. This created a LUKS volume group. Everything works fine, but I want to add an additional drive to the volume group. From reading and loads of googling I believe the process…
Nikolaos Dimopoulos
  • 172
  • 1
  • 8
0
votes
1 answer

What are the Security Implications of not fully overwriting a fresh LUKS disk prior to use

I recently read this nice Howto tutorial about doing backups with whole disk encryption using LUKS. Surprisingly for me this tutorial contains as the first part of step #3 a command to overwrite the new disk partition with encrypted binary…
pefu
  • 679
  • 1
  • 6
  • 24
0
votes
1 answer

Running python to unlock luks full disk encryption

I wish to make use of full disk encryption using Luks on ubuntu 14.04. However, i wish to make use of my own python script to carry out the functionality of generating the decryption key during device boot, which it then sends to lukes to allow it…
Toby
  • 273
  • 5
  • 14
0
votes
1 answer

Move encrypted debian system on luks+lvm with dropbear from single SSD to SSD-RAID1

We have a debian linux server which has a single 120GB SSD and 2x2TB HDDs as RAID 1. We now have to move to another server which has 2x240GB SSD and a single 2TB HDD. The aim is to move the current 120GB system drive SSD to a 240GB RAID1 SSD and…
mr.simonski
  • 247
  • 4
  • 13
1 2 3
…
10 11