Questions tagged [luks]
All questions relating to LUKS (the disk-encryption specification) for Linux
611
questions
0
votes
0
answers
18
views
Automount encrypted Luks USB device when connected
how can I automount an encrypted USB device (e.g. USB stick) via key file, when connected.
What I did so far
It works during boot time. The device will be encrypted via keyfile and mounted in /mnt/usb,...
- 1
-1
votes
0
answers
88
views
How to setup RAID1 with TPM based FDE on Ubuntu 24 (LTS)
My goal is to have a Debian/Ubuntu machine using RAID level 1 and TPM-based Full Disk Encryption (FDE).
Ubuntu 24.04 Desktop was installed using graphical setup wizard. I did not find a suitable ...
- 99
-1
votes
4
answers
95
views
Migrate all my data to new computer without OS reinstall
I run ubuntu 22 with LUKS full disk encryption on my old laptop
nvme0n1 disk 476.9G
├─nvme0n1p1 /boot/efi part ...
- 255
0
votes
0
answers
20
views
How can I retrieve (or replace) one LUKS password, given a second one
The good news is that I can unlock my LUKS encrypted home partition. Keyslot 1 ties to a file on a USB stick that my /etc/crypttab uses to automatically unlock. And so as long as a cheap USB stick ...
- 121
1
vote
0
answers
80
views
unlocking LUKS root partition with FIDO2 Yubikey (and ideally without dracut)
I enrolled my FIDO2 Yubikey device as a way to unlock my encrypted partition:
/etc/crypttab
dm_crypt-0 UUID=78768999-69dd-44ba-8858-dd0c2ecbc2b5 none luks
dm_crypt-0 UUID=78768999-69dd-44ba-8858-...
- 739
0
votes
0
answers
74
views
LUKS decryption of root disk during boot with key over wifi
The setup is a laptop connected to my local network via wifi, and a tang server in the same network providing decryption keys.
The laptop runs Ubuntu 22.04 and has its root disk encrypted with LUKS. ...
- 115
0
votes
0
answers
67
views
cryptsetup unlock skips pressed keys - first attempt fails
I have a strange problem. When I try to unlock my LUKS volume at boot, the first unlock attempt almost always fails, even though I enter the correct password.
It turns out some key presses are not ...
- 164
0
votes
0
answers
27
views
Booting into recovery mode turns my screen into "Braille" hieroglyphs?
I am running a Ubuntu 22.04 with LUX full disk encryption in a VM. I just finished configuring GRUB to require a password using this answer, and to only require a password when changing settings using ...
2
votes
0
answers
149
views
Move /boot/efi and /boot to a separate disk
I would like to encrypt my root partition with the help of luks. For that I am thinking to move my boot partition to a smaller disk.
My current layout of the disk is:
$ lsblk -f
/dev/sdc
|-/dev/sdc1
|-...
- 320
0
votes
1
answer
149
views
How to encrypt partition using LUKS-2?
I have an empty partition (say /dev/sda1) that I want to encrypt with LUKS-2 and be able to open it with passphrase from commonly used file managers (Dolphin, PCManFM-Qt, etc). I prefer a GUI like KDE ...
- 2,313
0
votes
1
answer
2k
views
Ubuntu 24.04 (Nomble Numbat) hangs on installation
I've been trying to install the new Ubuntu 24.04 (Nomble Numbat) on a PC that's been running 22.04 for a while. Observations:
Upon boot from the USB stick it errors out quickly (IIRC "Oh no ...
- 11
8
votes
3
answers
4k
views
Ubuntu 24.04 installer not showing encrypted lvm partitions (luks)
I want to replace my ubuntu 22.04 install which is in an encrypted lvm with new Ubuntu 24.04.
I unlocked to crypted partition :
sudo cryptsetup luksOpen /dev/nvme0n1p3 nvme0n1p3_crypt
password: ok
...
0
votes
0
answers
22
views
Move LUKSHeader from /dev/sdx1 to /dev/sdx
I've got a machine running ubuntu 23.10 with some LUKS-Encrypted disks attached. Unfortunately I think I made some mistakes when creating the Filesystems, as some of the luksHeaders are in /dev/sdX ...
0
votes
1
answer
93
views
Do not ask for LUKS password at boot
LUKS is used on a Ubuntu 22 PC to encrypt the whole disk.
So, each time the PC is booted, 2 passwords are requested: LUKS password to decrypt the disk, then the login password to log in.
Is it ...
- 1
0
votes
0
answers
90
views
stuck at grub. cant repair boot - LUKS encryption
this is my first time installing a linux system. I wanted to use Kubuntu and also use LUKS Encryption.
I used this guide to install KUbuntu including LUKS Encryption:
https://help.ubuntu.com/community/...
- 101
1
vote
0
answers
92
views
How to recover a deleted LUKS partition
I have created a LUKS encrypted pen drive with the gnome-disks tool, but a time ago I have accidentally formatted the disk, losing the partition.
I tried to recuperate the partition stored on sda1 ...
- 11
0
votes
0
answers
45
views
Inaccessible Data after LUKS2 encryption
I tried to encrypt a HDD with an exisiting EXT4 partition on it using Luks2.
First I made room for the LUKS2 header (probably the issue I assume...):
resize2fs / dev/sdc1 2929710000
Then I started ...
- 1
0
votes
0
answers
75
views
Move Ubuntu 22.04 to hardware hp p410i RAID1 with encrypted volumes on BIOS
I have an old hp n40l microserver with Ubuntu 22.04 on board with quite old BIOS as of 2012.
Now my SSD 256GB disk is split to 2 partitions: /boot/efi and /.
I've bought hp p410i RAID card, and 3 more ...
- 320
0
votes
1
answer
2k
views
Is there a way to enable or configure Full Disk Encryption (LUKS) after installing Ubuntu?
Is there a way to enable or configure Full Disk Encryption (LUKS) after installing Ubuntu?
- 11
-1
votes
1
answer
117
views
How do I install Ubuntu to a new disk on a system that already has a disk with Windows installed on it with BitLocker enabled?
I'm creating this question because I wasn't able to find existing questions after searching that described the issue I ran into. Existing questions dealt with the scenario where you want to install ...
- 163
1
vote
0
answers
91
views
Is there a manual process to reseal TPM FDE keys based on current system measurements in Ubuntu 23.10?
There are a couple similar questions out there, but here is what I'm trying to figure out... In Ubuntu 23.10, if you change the system config or firmware, then unsealing the TPM isn't going to work, ...
- 11
0
votes
0
answers
255
views
My ubuntu 22.04.2 wont boot after successful LUKS decryption
my disk is encrypted using LUKS and everytime I open my pc I always need to provide the write password before I can log in into my device, so as usual I open my pc ready to work, and as usual I was ...
- 11
1
vote
0
answers
299
views
How do I image a LUKS system disk with Clonezilla without including all the empty space?
I have a 1 TB NVMe disk with Ubuntu 22 installed with vanilla options, except I used LVM, and enabled LUKS. I'd like to image the disk for easy restores. Simply backing up the files is not enough ...
- 139
0
votes
0
answers
85
views
LUKS Container lost due to partitioning by Windows?
I plugged a HDD with a LUKS container on it into Windows and opened the Disk Manager. A dialog appeared where I clicked "Format as GPT", not knowing what I was doing. Apparently Windows wasn'...
- 101
1
vote
0
answers
306
views
How do I enable hibernation on Ubuntu 22 on a LUKS system disk with a swapfile?
I have an Ubuntu 22.04.3 LTS desktop. The only swap is a swap file (I removed the swap partition that came as default with the instalation). I followed these instructions to enable suspend to disk, ...
- 139
0
votes
0
answers
435
views
Manually Binding TPM2 For FDE In Ubuntu 23.10
In Ubuntu 23.10, you can use TPM2 to unlock LUKS; however, after a firmware update, the system asks for the recovery key in every boot. I was expecting it to refresh TPM2 after entering the key, just ...
2
votes
0
answers
1k
views
Install Ubuntu 22.04 Server with RAID 1 and LVM on machine with UEFI BIOS?
I followed the instructions here - Install Ubuntu 20.04 desktop with RAID 1 and LVM on machine with UEFI BIOS but used the Ubuntu Server Installer to configure the partition layout and added an extra ...
- 203
0
votes
0
answers
116
views
LUKS LVM installation not booting
I can't get ubuntu 23.10 to boot in the following LUKS & LVM setup. Booting fails after entering the password and going to initramfs console.
Devices:
root@ubuntu:/# sudo blkid
/dev/nvme0n1: UUID=&...
- 67
0
votes
0
answers
141
views
Mount external LUKS hard drive
I recently updated my laptop's hard drive to a bigger one. The previous one I mounted it in an external case to transform it in to an external drive. The old drive was encrypted with LUKS. When I plug ...
- 301
0
votes
0
answers
24
views
extracting data from fully encrypted ubuntu hard drive from other ubuntu operating system
I installed Ubuntu in an hard drive with encryption but there was a problem in loading opreating system. So, I'm trying to copy my data from that hard drive by connecting it with another system having ...
- 1
1
vote
0
answers
303
views
I've deleted cryptsetup-initramfs
I'm running Ubuntu 20.04 (5.15.-10088.98) with LUKS LVM and have done something stupid.
I've tried sudo apt upgrade and get the following problem:
I: The initramfs will attempt to resume from /dev/dm-...
1
vote
1
answer
271
views
Is it possible to retrofit TPM based disk encryption on system upgraded to 23.10?
There was a lot of rumour about TPM base disk encryption available on Ubuntu 23.10, but looks like all articles meant installation process.
Is it possible to retrofit TPM based encryption (effectively ...
- 121
0
votes
0
answers
210
views
Can't access LUKS device after cloning
I cloned a partition that is encrypted with LUKS using clonezilla (partclone.org)
Now I get the following error when I try to access the LUKS data on the device.
sudo cryptsetup luksDump /dev/sde3 --...
- 123
0
votes
0
answers
18
views
Predecryption + File name encryption
I am using ubuntu server on an old 2011 imac. I want to encrypt a directory i use frequently with a method that hides the file names (like cryfs), but the encryption is only important for when the ...
0
votes
0
answers
111
views
Does disk encryption or key ring store anything in hardware?
I am running Ubuntu 20.04 (soon 22.04), and am wondering if Ubuntu by default stores any key material in a hardware store like TPM. Specifically I am using standard LUKS disk encryption during setup, ...
- 163
0
votes
0
answers
83
views
Uncryptroot-unlock with dropbear doesn't launch my ubuntu
I am facing an issue with a computer with Ubuntu 22.04 LTS.
My SSD Disk is uncrypt with LUKS. I have no access to this computer and I only do SSH connexion.
Normaly I uncrypt the computer using ...
0
votes
0
answers
67
views
Black screen after passphrase LUKS encryption
I have a problem with ubuntu 22.04.
when i put passphrase to LUKS disk the screen becomes all black and I can't do anything. I am completely stuck.
What should I do?
Thanks for your consideration and ...
1
vote
1
answer
336
views
LUKS encrypted USB: "Operation cancelled" error on correct passphrase
I'm asking as a new question because I don't have enough rep to comment on answers, and the drive in question here is removable.
I've set up an encrypted USB drive using cryptsetup luksFormat, but I'm ...
- 56
1
vote
0
answers
300
views
Decrypt LUKS partition automatically if part of a defined network?
I do have an Ubuntu 22.04 server running at home with LUKS-encrypted root and data partition. At the moment I have to type in the passphrase to unlock the partitions which prevents unattended reboots (...
- 11
1
vote
0
answers
632
views
Gave up waiting for root file system device upon reboot
This question has been asked several times already, but there does not appear to be a generic solution. I have tried multiple solutions but can't seem to get anything to work. I have an Ubuntu Server ...
- 111
1
vote
1
answer
798
views
No prompt to decrypt luks partition on boot
Fresh install of Ubuntu 22.04.2 LTS to a LUKS partition. When I boot, it never prompts me for my LUKS password, fails to load the system, and instead puts me at a command prompt. If I type
cryptsetup ...
- 121
1
vote
1
answer
304
views
Extends encrypted partition to new SSD
I have added a 1TB disk to my ubuntu 22.04 install.
I have installed it using LVM+LUKS. lsblk gives this
...
nvme1n1 259:0 0 931,5G 0 disk
nvme0n1 259:1 0 476,9G ...
- 253
0
votes
0
answers
81
views
kubuntu: kwallet forgot my luks passwords after upgrade to 22.04
upgraded from 20.04 to 22.04.
mostly went fine.
however, i had an encrypted partition which i just could click the folder in dolphin and it would autofill the password but since the upgrade it keeps ...
- 1
1
vote
0
answers
105
views
LUKS FDE password policy not enforced?
I am noticing that on a vanilla Ubuntu 22.04 LTS installation, there is no password policy whatsoever enforced when changing the LUKS FDE password using cryptsetup luksChangeKey or luksAddKey.
In the ...
- 11
0
votes
1
answer
217
views
Minimal BASH-like on LUKS-encrypted install after format of secondary SSD
I can't load ubuntu after I formatted the old SSD I used to have Windows on and that I thought had nothing to do with Ubuntu's boot. The Ubuntu partition is LUKS encrypted and in GRUB I am able to ...
- 11
4
votes
2
answers
7k
views
LUKS + TPM2 + auto unlock at boot (systemd-cryptenroll)
Please, help me to finish setup LUKS + TPM2 + auto unlock at boot.
I have installed clean Ubuntu 22.04.2 I have encrypted partition in GUI while installing OS. I have installed all updates.
Ubuntu 22....
- 41
0
votes
0
answers
552
views
LUKS decrypted partition mapped name
I've successfully configured LUKS encryption on various partitions (root, home, extra) on ubuntu 22.04. I've to insert a password for decrypting the root part and after other partitions are decrypted ...
0
votes
1
answer
487
views
Ubuntu encryption during installation
For the first time while installing Ubuntu 23.04 I clicked the button for encryption. For bad luck the installation got stuck, so now I have an encrypted Lenovo laptop and I can't decrypt mmcblk0 even ...
0
votes
1
answer
5k
views
Installing Ubuntu 22.04 with full disk encryption (LUKS) and swap partitions
I`m just trying to install Ubuntu 22.04 in my notebook, but I need to have full disk encryption enabled and I would like to define the size of my swap partition.
When searching for answers I saw ...
- 131
0
votes
0
answers
1k
views
Initial Ubuntu Server 22.04.2 LTS Install - LUKS - headless/remote decrypt
Installing Ubuntu Server 22.04.2 LTS for the first time ever on a Beelink Mini PC (SEi12). Went for the most standard installation possible. Configured using a guided storage layout; i.e.
Use entire ...
- 1