LUKS (Linux Unified Key Setup) is a disk-encryption specification. It is the standard for Linux hard disk encryption.

learn more… | top users | synonyms

2
votes
2answers
488 views

Best way to secure Kickstart encrypted partition passwords

I have a CentOS 6.5 environment that boots up servers using Kickstart. One of the requirements of our Kickstart is that the partitions are encrypted. Since Anaconda can only take plain text passwords ...
1
vote
2answers
1k views

How do you repair a Ubuntu 14.04 RAID-LVM-DM-CRYPT-LUKS Physical to Virtual system that won't boot?

I can't get a Ubuntu 14.04 Virtual server to boot correctly. It's recently been cloned "dd if=/dev/sda of=vmimage" The Physical has a RAID1-LVM-DMCRYPT-LUKS configuration, The boot sequence aborts and ...
4
votes
1answer
446 views

ZFS on LUKS not recognized at boot

I've got 6 physical drives in RAID-Z2, which I intend to one-by-one convert to dm-crypt devices. My process was roughly: dd if=/dev/zero of=/dev/sdf Create keyfile /etc/crypttab.d/crypt-1.key ...
1
vote
1answer
82 views

Can cryptsetup read mappings from /etc/crypttab?

I have a virtualized CentOS 7 server that needs to mount multiple password-protected encrypted volumes. I cannot automatically map the devices on boot, because I don't have access to the console ...
1
vote
1answer
107 views

How do I replace a disk with LUKS on LVM2 - no raid, no span

I have LUKS on LVM (LVM Partitions created first, then each partition is encrypted separately, following this guide on Arch Wiki). I am using two volume groups, and each is isolated to a drive. This ...
1
vote
1answer
114 views

Encrypted partition on Debian requiring multiple keys to unlock

The title pretty much sums it up, but I want to create a second data partition on a web-facing server which is encrypted and requires two people to provide passphrases before it can be unlocked. Is ...
0
votes
1answer
20 views

Shrink non-bootable LUKS LVM

I'm importing a VMWare OVA whose second disk uses LUKS and configured to use 1TB of space, although its VMDK is only 30GB. I want to shrink this down. I am following the instructions here ...
3
votes
0answers
51 views

Can servers with encrypted root filesystems be made reasonably highly available?

I have some servers I'd like to keep on encrypted disks, but I don't want to have to manually type a passphrase at every boot. I also don't want to keep the key on the machine unencrypted. TPM would ...
3
votes
0answers
30 views

How secure is information on a LUKS encrypted backup media?

Imagine confidential information (certificates, keys, whatever) stored on an LUKS encrypted backup disk containing for example an ext4 file-system. AFAIK such a device contains a key file which is in ...
2
votes
0answers
40 views

Dual primary DRBD with LUKS encryption

Is it possible to create a LUKS encrypted filesystem that is accessible by both nodes of a dual primary DRBD system? Here is what I tried to do: Create two nodes and establish a partition on each ...
2
votes
0answers
289 views

how do I plan partitions for LUKS encryption of a CentOS 7 server?

A CentOS 7 web server needs encryption at rest. I would like to use LUKS encryption for this, but I need direction to plan how. Can I use LUKS encryption to encrypt the entire drive as one unit on a ...
1
vote
0answers
654 views

How to open unmounted luks volume which believes it is open

I took a snapshot of a (live) luks encrypted block device, copied it to another system and am now trying to open it, but am unable to do so. Any help with solving this problem would be much ...
1
vote
0answers
129 views

Snapshot of BTRFS Device on top of luks Volume

I have the following problem: I can't figure out, how to create a snapshot of a btrfs volume residing on a crypted disk. This is the setup: /dev/sdb is a 1TB USB 3 disk. it has a partition ...
1
vote
0answers
1k views

network-mapped file system drops to read-only mid-stream, buffer I/O error with device mapper

Under linux 2.6 (CentOS 5.3 actually), I have a file system that works okay for a few minutes, then drops to read-only mode, while I am trying to read/write data to it. It is an ext3 file system ...
0
votes
0answers
19 views

What is LUKS's process for decryption?

LUKS allows multiple passphrases for a single device, however adding or revoking a passphrase doesn't take long. So the passphrases seem to only decrypt some master key which is then used for the rest ...
0
votes
0answers
36 views

serial console luks passphrase

I access my Dell r320 server console with IPMI (serial over lan) or with ssh on the iDRAC and with the command "console com2". It works well, i see the console output but i can't enter my luks ...
0
votes
0answers
50 views

Encrypted LVM stops when mounting swap

I have configured a disk with LUKS this way (Ubuntu server 15.10): Boot partition Rest partition (LVM group) LVM data -> Encrypted (pass) -> ext4 /data LVM root -> Encrypted (pass) -> ext4 / LVM ...
0
votes
0answers
7 views

Get timestamp of last luks encryption key slot change

I cannot find anything related in the documentation of luks. Is it possible to see when the given Key Slot was last changed (ie. when the user changed his password)?