LUKS (Linux Unified Key Setup) is a disk-encryption specification. It is the standard for Linux hard disk encryption.
3
votes
1answer
23 views
Determine if LUKS/dmcrypt key is present
I am writing a Chef LWRP to add a key to a LUKS container and I'm having difficulty coming up with a way to determine whether or not my key already exists. cryptsetup luksAddKey will happily add the ...
0
votes
2answers
65 views
Very poor performance on LUKS/LVM/RAID combination under Debian Squeeze
I have the following issue: I have an encrypted partition on a lvm on a plain partition on the hd. Now I craeted a RAID array to increase the performance. That means, that I have the following stack: ...
1
vote
1answer
25 views
How to skip the luksFormat prompt?
If I setup a new luks volume with "cryptsetup --verbose --cipher=aes-cbc-essiv:sha256 --key-size=256 luksFormat /dev/foo /my/keyfile" it requires me to enter "YES" to actually do anything. Is there a ...
0
votes
0answers
94 views
Export a ZFS pool that is on top of LUKS?
I thought I had the perfect setup for incremental, encrypted backups, while still being able to use rsync's ability to restart an interrupted transfer.
I have an Ubuntu 12.04 system with ZFSonLinux. ...
1
vote
1answer
56 views
Recover Crypt password on Partition - RHEL 6
I'm new around here and I'm not sure if this is the right place to post. I was recently asked to bring in a used server from another site of ours. On booting, I found that it has been encrypted using ...
0
votes
1answer
62 views
Move an LXC container to a dm-crypt/LUKS filesystem
I need to move a container to a different filesystem, specifically a subdir of an already mounted LUKS/dm-crypt home dir. I tried moving it there and then bind mounting or symlinking it to ...
2
votes
1answer
96 views
Possible to set encryption block size in LUKS?
When I do a benchmark test
modprobe tcrypt sec=2 mode=200
I see that different encryption block sizes are used
test 0 (128 bit key, 16 byte blocks): 4460604 operations in 2 seconds (71369664 ...
1
vote
1answer
99 views
Does cryptsetup “Plain mode” store the hashed passphrase in each sector?
When I read the manpage for cryptsetup on Linux about "Plain mode" it says:
Plain dm-crypt encrypts the device sector-by-sector with a single,
non-salted hash of the passphrase.
and the -c ...
1
vote
1answer
161 views
Why are these dmsetup commands there?
On this page are there examples of LUKS encryptions. Example below.
Why are the dmsetup commands there?
What do they do?
dd if=/dev/zero of=./volumes/vol_default.vol bs=1M count=1
losetup ...
3
votes
1answer
570 views
High I/O latency with software RAID, LUKS encrypted and LVM partitioned KVM setup
I found out a performance problems with a Mumble server, which I described in a previous question are caused by an I/O latency problem of unknown origin. As I have no idea what is causing this and how ...
0
votes
1answer
169 views
Restoring data from a failed and possibly partly overwritten mdadm raid1
I have a failing hard disk (let's call it sda) which contains, among other things, a 1.5 TB partition (let's call it sda3). There is another disk (sdb), which has a 1.5 TB partition (sdb1) as well. ...
1
vote
1answer
151 views
How to verify that a physical volume is encrypted? (Ubuntu 10.04 w/ LUKS) [closed]
I am very new to LUKS.
During installation, I tried to set up an encrypted physical volume so that everything underneath it would be encrypted. I chose "Use as: physical volume for encryption," the ...
1
vote
1answer
268 views
Disable asking for a passphrase without having to re-make the encrypted partition
I have a server which I set up with its root partition totally encrypted. I urgently need to disable the passphrase dialog at startup because it is not letting the server boot up after an electricity ...
1
vote
2answers
279 views
Change LUKS UUID (without cryptsetup > 1.2)
According to the cryptsetup changelog (1.2.0):
Allow explicit UUID setting in luksFormat and allow change it later
in luksUUID (--uuid parameter).
My problem is that the current Debian ...
0
votes
0answers
67 views
Cryptsetup usb key ioctl failed writeprotect
I create a second partition ext4 encrypted with disk-utility on my usb key.
Inadvertently, I deleted a hidden file in my /home/user while the second partition was in use
Now, I can no longer access to ...
3
votes
1answer
421 views
Why is mkfs overwriting the LUKS encryption header on LVM on RAID partitions on Ubuntu 12.04?
I'm trying to setup a couple of LUKS-encrypted partitions to be mounted after boot-time on a new Ubuntu server which was installed with LVM on top of software RAID. After running cryptsetup ...
5
votes
1answer
133 views
Does LUKS also encrypt free space?
I have moved to Ubuntu 12 and chosen to use full disk encryption (encrypted LVM).
So now I'm wondering: should I shred (eg: with secure-delete package, srm) the free disk space to remove any remnant ...
2
votes
1answer
905 views
Resizing a LUKS encrypted volume
I have a 500GiB ext4 filesystem on top of LUKS on top of an LVM LV. I want to resize the LV to 100GiB. I know how to resize ext4 on top of an LVM LV, but how do I deal with the LUKS volume?
...
-1
votes
1answer
787 views
LUKS with LVM, mount is not persistent after reboot
I have created a Logical vol and used luks to encrypt it. But while rebooting the server. I get a error message (below), therefore I would have to enter the root pass and disable the /etc/fstab entry. ...
1
vote
0answers
579 views
network-mapped file system drops to read-only mid-stream, buffer I/O error with device mapper
Under linux 2.6 (CentOS 5.3 actually), I have a file system that works okay for a few minutes, then drops to read-only mode, while I am trying to read/write data to it.
It is an ext3 file system ...
2
votes
2answers
1k views
Using fsck to check and repair LUKS encrypted disk?
My Ubuntu 11.04 machine uses LUKS encryption for root, swap and home. A routine fsck -n revealed a set of errors I need to repair. fsck requires to unmount the partitions. Before luks I would simply ...
3
votes
1answer
214 views
What partition is my LVM with LUKS using?
I'm trying to figure out what partition dm-X is on. It's on /dev/sdaX, but which X?
What am I missing? I know there has to be a way to find this out. I need to grow my physical volume, but can't do ...
3
votes
1answer
661 views
Recover files from LUKS-encrypted partition
I have a partition encrypted with LUKS. I used it without problems every day until suddenly the password stopped working. Is there anything I can do?
I have tried with a different keyboard and from a ...
5
votes
3answers
482 views
On Ubuntu 11.10, is it possible to decrypt 2 hard disks encrypted with LUKS / LVM by entering only one passphrase at boot?
here the configuration I have :
- 2 hard drives,
- first one is encrypted using LUKS and LVM.
I'd like to add in the volume group encrypted a second hard drive.
I have successfully installed it and ...
0
votes
4answers
289 views
What RAID Level Should Be Used
I am working on a server build project for work and have inherited the following items that I need to figure out the best way to handle and configure.
2 of these: I/O Crest SY-PEX40008 PCI-e SATA ...
5
votes
2answers
1k views
Is it possible to hardware accelerate LUKS encryption?
My Linux server spends a lot of time computing LUKS encryption. Is there any way to hardware accelerate it (with a PCI express card for example)?
0
votes
1answer
650 views
Adding a disk to an encrypted LVM under Debian 6
I installed a Debian 6 with the "use LVM and encrypt" option.
Now I would like to add a second disk and also encrypt it.
This is what I did so far:
pvcreate /dev/sdb
vgextend [vgname] /dev/sdb
...
