Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [luks]

LUKS (Linux Unified Key Setup) is a disk-encryption specification. It is the standard for Linux hard disk encryption.

LUKS (Linux Unified Key Setup) is a disk-encryption specification. It is the standard for Linux hard disk encryption. LUKS stores all setup necessary setup information in the partition header, enabling the user to transport or migrate his data seamlessly.

Website: http://code.google.com/p/cryptsetup/

Wikipedia: http://en.wikipedia.org/wiki/Linux_Unified_Key_Setup

150 questions
4
votes
1 answer

Anybody experiencing full system lockups with LUKS?

I've recently setup a couple of new servers. This time I'm encrypting most of my partitions using dmcrypt+LUKS. However these new servers crash very often, every few days. Full lockups, kernel does not respond to keyboard, system does not ping.…
Hongli Lai
  • 2,112
  • 4
  • 22
  • 27
3
votes
1 answer

Encrypt/Decrypt filesystem container file with smartcard on linux

I want to encrypt and decrypt a file system container file with luks and a smartcard on debian linux. The smartcard is a Nitrokey Start which is basically a compact smartcard in a usb reader. I know how to create and mount a container file with dd,…
soulflyman
  • 131
  • 5
3
votes
0 answers

ZFS over LUKS over (NBD or NFS)? Need encrypted replication solution

I am using ZFS(ZoL) over LUKS on home and on remote server. All is working perfectly and fast. I do snapshots by cron, but now I want to replicate them to some backup storage. I have a small 2-HDD dlink dns-323 nas, on which I have debian installed.…
Ural
  • 161
  • 6
3
votes
1 answer

How secure is information on a LUKS encrypted backup media?

Imagine confidential information (certificates, keys, whatever) stored on an LUKS encrypted backup disk containing for example an ext4 file-system. AFAIK such a device contains a key file which is in turn encrypted with some pass-phrase. Suppose…
pefu
  • 629
  • 6
  • 20
3
votes
1 answer

LUKS full disk encryption use keyfile instead of passphrase

I have enabled LUKS full disk encryption on an LVM volume while installing centos6.6, however it asks for a passphrase every time the OS is rebooted. I am now trying to use a key file according to this post. Unfortunately it does not work...and…
krisdigitx
  • 609
  • 3
  • 18
  • 30
3
votes
1 answer

How do you repair a Ubuntu 14.04 RAID-LVM-DM-CRYPT-LUKS Physical to Virtual system that won't boot?

I can't get a Ubuntu 14.04 Virtual server to boot correctly. It's recently been cloned "dd if=/dev/sda of=vmimage" The Physical has a RAID1-LVM-DMCRYPT-LUKS configuration, The boot sequence aborts and drop to the BusyBox shell. Begin: Waiting for…
Marinus
  • 227
  • 1
  • 3
  • 10
3
votes
1 answer

Automounting encrypted filesystem (using random key), residing in regular file under CentOS 6.*

Task: in CentOS 6.x system, set up and mount automatically encrypted filesystem, residing within a regular file, using one-time (random) key. /etc/crypttab in CentOS 6.* doesn't allow using plain file as block device to mount and map…
Konstantin Boyandin
  • 263
  • 2
  • 4
  • 15
3
votes
1 answer

Possible to set encryption block size in LUKS?

When I do a benchmark test modprobe tcrypt sec=2 mode=200 I see that different encryption block sizes are used test 0 (128 bit key, 16 byte blocks): 4460604 operations in 2 seconds (71369664 bytes) test 1 (128 bit key, 64 byte blocks): 1747179…
Sandra
  • 9,973
  • 37
  • 104
  • 160
3
votes
1 answer

Disable asking for a passphrase without having to re-make the encrypted partition

I have a server which I set up with its root partition totally encrypted. I urgently need to disable the passphrase dialog at startup because it is not letting the server boot up after an electricity cut, it happened already. Is there any way to…
user134316
3
votes
1 answer

Why is mkfs overwriting the LUKS encryption header on LVM on RAID partitions on Ubuntu 12.04?

I'm trying to setup a couple of LUKS-encrypted partitions to be mounted after boot-time on a new Ubuntu server which was installed with LVM on top of software RAID. After running cryptsetup luksFormat, the LUKS header is clearly visible on the…
Starchy
  • 118
  • 1
  • 6
3
votes
1 answer

What partition is my LVM with LUKS using?

I'm trying to figure out what partition dm-X is on. It's on /dev/sdaX, but which X? What am I missing? I know there has to be a way to find this out. I need to grow my physical volume, but can't do it until I know which partition to touch. Here's…
zonkybonk
  • 31
  • 1
3
votes
1 answer

Recover files from LUKS-encrypted partition

I have a partition encrypted with LUKS. I used it without problems every day until suddenly the password stopped working. Is there anything I can do? I have tried with a different keyboard and from a different computer. I am 100% certain that I…
JackSTE
  • 39
  • 1
  • 3
3
votes
0 answers

xfs: can't read superblock

I get the following error: [root@mediaserv ~]# mount /dev/mapper/media1 /media mount: /media: can't read superblock on /dev/mapper/media1. This is Fedora 33. I have a RAID5 of 8x 8TB WD Red drives running on an Adaptec 7805Q RAID controller, this…
Michael Wilkinson
  • 31
  • 3
2
votes
1 answer

Mount LUKS-encrypted drive at boot, but only if drive is present

I have a series of drives that are are all encrypted with LUKS/dm-crypt. They are not all guaranteed to be plugged in at the time the system boots, but if they are, I would like to ensure they are mounted. At the moment, I can specify the devices in…
chimeracoder
  • 123
  • 5
2
votes
1 answer

Is it possible to partially recover files from a btrfs RAID-0 filesystem with a missing disk?

I've got a bit of a quite terrible situation on my hands and I'm just looking for a bit of insight before calling this a lost cause. To put things into context, I'll just give you my partitioning scheme first. I've got a server with a four-disk…
Tristan
  • 21
  • 2
1 2
3
…
9 10