LUKS (Linux Unified Key Setup) is a disk-encryption specification. It is the standard for Linux hard disk encryption.

learn more… | top users | synonyms

0
votes
3answers
4k views

Very poor performance on LUKS/LVM/RAID combination under Debian Squeeze

I have the following issue: I have an encrypted partition on a lvm on a plain partition on the hd. Now I craeted a RAID array to increase the performance. That means, that I have the following stack: ...
5
votes
1answer
378 views

How to skip the luksFormat prompt?

If I setup a new luks volume with "cryptsetup --verbose --cipher=aes-cbc-essiv:sha256 --key-size=256 luksFormat /dev/foo /my/keyfile" it requires me to enter "YES" to actually do anything. Is there a ...
1
vote
1answer
123 views

Recover Crypt password on Partition - RHEL 6

I'm new around here and I'm not sure if this is the right place to post. I was recently asked to bring in a used server from another site of ours. On booting, I found that it has been encrypted using ...
0
votes
1answer
484 views

Move an LXC container to a dm-crypt/LUKS filesystem

I need to move a container to a different filesystem, specifically a subdir of an already mounted LUKS/dm-crypt home dir. I tried moving it there and then bind mounting or symlinking it to ...
2
votes
1answer
664 views

Possible to set encryption block size in LUKS?

When I do a benchmark test modprobe tcrypt sec=2 mode=200 I see that different encryption block sizes are used test 0 (128 bit key, 16 byte blocks): 4460604 operations in 2 seconds (71369664 ...
1
vote
1answer
734 views

Does cryptsetup “Plain mode” store the hashed passphrase in each sector?

When I read the manpage for cryptsetup on Linux about "Plain mode" it says: Plain dm-crypt encrypts the device sector-by-sector with a single, non-salted hash of the passphrase. and the -c ...
1
vote
1answer
765 views

Why are these dmsetup commands there?

On this page are there examples of LUKS encryptions. Example below. Why are the dmsetup commands there? What do they do? dd if=/dev/zero of=./volumes/vol_default.vol bs=1M count=1 losetup ...
5
votes
1answer
3k views

High I/O latency with software RAID, LUKS encrypted and LVM partitioned KVM setup

I found out a performance problems with a Mumble server, which I described in a previous question are caused by an I/O latency problem of unknown origin. As I have no idea what is causing this and how ...
0
votes
1answer
392 views

Restoring data from a failed and possibly partly overwritten mdadm raid1

I have a failing hard disk (let's call it sda) which contains, among other things, a 1.5 TB partition (let's call it sda3). There is another disk (sdb), which has a 1.5 TB partition (sdb1) as well. ...
1
vote
1answer
941 views

How to verify that a physical volume is encrypted? (Ubuntu 10.04 w/ LUKS) [closed]

I am very new to LUKS. During installation, I tried to set up an encrypted physical volume so that everything underneath it would be encrypted. I chose "Use as: physical volume for encryption," the ...
1
vote
1answer
2k views

Disable asking for a passphrase without having to re-make the encrypted partition

I have a server which I set up with its root partition totally encrypted. I urgently need to disable the passphrase dialog at startup because it is not letting the server boot up after an electricity ...
1
vote
2answers
1k views

Change LUKS UUID (without cryptsetup > 1.2)

According to the cryptsetup changelog (1.2.0): Allow explicit UUID setting in luksFormat and allow change it later in luksUUID (--uuid parameter). My problem is that the current Debian ...
3
votes
1answer
973 views

Why is mkfs overwriting the LUKS encryption header on LVM on RAID partitions on Ubuntu 12.04?

I'm trying to setup a couple of LUKS-encrypted partitions to be mounted after boot-time on a new Ubuntu server which was installed with LVM on top of software RAID. After running cryptsetup ...
6
votes
1answer
323 views

Does LUKS also encrypt free space?

I have moved to Ubuntu 12 and chosen to use full disk encryption (encrypted LVM). So now I'm wondering: should I shred (eg: with secure-delete package, srm) the free disk space to remove any remnant ...
8
votes
1answer
5k views

Resizing a LUKS encrypted volume

I have a 500GiB ext4 filesystem on top of LUKS on top of an LVM LV. I want to resize the LV to 100GiB. I know how to resize ext4 on top of an LVM LV, but how do I deal with the LUKS volume? ...
0
votes
1answer
2k views

LUKS with LVM, mount is not persistent after reboot

I have created a Logical vol and used luks to encrypt it. But while rebooting the server. I get a error message (below), therefore I would have to enter the root pass and disable the /etc/fstab entry. ...
1
vote
0answers
1k views

network-mapped file system drops to read-only mid-stream, buffer I/O error with device mapper

Under linux 2.6 (CentOS 5.3 actually), I have a file system that works okay for a few minutes, then drops to read-only mode, while I am trying to read/write data to it. It is an ext3 file system ...
5
votes
2answers
13k views

Using fsck to check and repair LUKS encrypted disk?

My Ubuntu 11.04 machine uses LUKS encryption for root, swap and home. A routine fsck -n revealed a set of errors I need to repair. fsck requires to unmount the partitions. Before luks I would simply ...
3
votes
1answer
368 views

What partition is my LVM with LUKS using?

I'm trying to figure out what partition dm-X is on. It's on /dev/sdaX, but which X? What am I missing? I know there has to be a way to find this out. I need to grow my physical volume, but can't do ...
3
votes
1answer
2k views

Recover files from LUKS-encrypted partition

I have a partition encrypted with LUKS. I used it without problems every day until suddenly the password stopped working. Is there anything I can do? I have tried with a different keyboard and from a ...
7
votes
4answers
1k views

On Ubuntu 11.10, is it possible to decrypt 2 hard disks encrypted with LUKS / LVM by entering only one passphrase at boot?

here the configuration I have : - 2 hard drives, - first one is encrypted using LUKS and LVM. I'd like to add in the volume group encrypted a second hard drive. I have successfully installed it and ...
0
votes
4answers
358 views

What RAID Level Should Be Used

I am working on a server build project for work and have inherited the following items that I need to figure out the best way to handle and configure. 2 of these: I/O Crest SY-PEX40008 PCI-e SATA ...
8
votes
3answers
5k views

Is it possible to hardware accelerate LUKS encryption?

My Linux server spends a lot of time computing LUKS encryption. Is there any way to hardware accelerate it (with a PCI express card for example)?
0
votes
1answer
1k views

Adding a disk to an encrypted LVM under Debian 6

I installed a Debian 6 with the "use LVM and encrypt" option. Now I would like to add a second disk and also encrypt it. This is what I did so far: pvcreate /dev/sdb vgextend [vgname] /dev/sdb ...