LUKS (Linux Unified Key Setup) is a disk-encryption specification. It is the standard for Linux hard disk encryption.

learn more… | top users | synonyms

2
votes
2answers
527 views

Best way to secure Kickstart encrypted partition passwords

I have a CentOS 6.5 environment that boots up servers using Kickstart. One of the requirements of our Kickstart is that the partitions are encrypted. Since Anaconda can only take plain text passwords ...
1
vote
2answers
1k views

How do you repair a Ubuntu 14.04 RAID-LVM-DM-CRYPT-LUKS Physical to Virtual system that won't boot?

I can't get a Ubuntu 14.04 Virtual server to boot correctly. It's recently been cloned "dd if=/dev/sda of=vmimage" The Physical has a RAID1-LVM-DMCRYPT-LUKS configuration, The boot sequence aborts and ...
4
votes
1answer
464 views

ZFS on LUKS not recognized at boot

I've got 6 physical drives in RAID-Z2, which I intend to one-by-one convert to dm-crypt devices. My process was roughly: dd if=/dev/zero of=/dev/sdf Create keyfile /etc/crypttab.d/crypt-1.key ...
2
votes
1answer
320 views

how do I plan partitions for LUKS encryption of a CentOS 7 server?

A CentOS 7 web server needs encryption at rest. I would like to use LUKS encryption for this, but I need direction to plan how. Can I use LUKS encryption to encrypt the entire drive as one unit on a ...
1
vote
1answer
95 views

Can cryptsetup read mappings from /etc/crypttab?

I have a virtualized CentOS 7 server that needs to mount multiple password-protected encrypted volumes. I cannot automatically map the devices on boot, because I don't have access to the console ...
1
vote
1answer
134 views

How do I replace a disk with LUKS on LVM2 - no raid, no span

I have LUKS on LVM (LVM Partitions created first, then each partition is encrypted separately, following this guide on Arch Wiki). I am using two volume groups, and each is isolated to a drive. This ...
1
vote
1answer
114 views

Encrypted partition on Debian requiring multiple keys to unlock

The title pretty much sums it up, but I want to create a second data partition on a web-facing server which is encrypted and requires two people to provide passphrases before it can be unlocked. Is ...
0
votes
1answer
27 views

Shrink non-bootable LUKS LVM

I'm importing a VMWare OVA whose second disk uses LUKS and configured to use 1TB of space, although its VMDK is only 30GB. I want to shrink this down. I am following the instructions here (https://...
3
votes
0answers
58 views

Can servers with encrypted root filesystems be made reasonably highly available?

I have some servers I'd like to keep on encrypted disks, but I don't want to have to manually type a passphrase at every boot. I also don't want to keep the key on the machine unencrypted. TPM would ...
3
votes
0answers
34 views

How secure is information on a LUKS encrypted backup media?

Imagine confidential information (certificates, keys, whatever) stored on an LUKS encrypted backup disk containing for example an ext4 file-system. AFAIK such a device contains a key file which is in ...
2
votes
0answers
59 views

Dual primary DRBD with LUKS encryption

Is it possible to create a LUKS encrypted filesystem that is accessible by both nodes of a dual primary DRBD system? Here is what I tried to do: Create two nodes and establish a partition on each ...
1
vote
0answers
754 views

How to open unmounted luks volume which believes it is open

I took a snapshot of a (live) luks encrypted block device, copied it to another system and am now trying to open it, but am unable to do so. Any help with solving this problem would be much ...
1
vote
0answers
131 views

Snapshot of BTRFS Device on top of luks Volume

I have the following problem: I can't figure out, how to create a snapshot of a btrfs volume residing on a crypted disk. This is the setup: /dev/sdb is a 1TB USB 3 disk. it has a partition /dev/...
1
vote
0answers
1k views

network-mapped file system drops to read-only mid-stream, buffer I/O error with device mapper

Under linux 2.6 (CentOS 5.3 actually), I have a file system that works okay for a few minutes, then drops to read-only mode, while I am trying to read/write data to it. It is an ext3 file system ...
0
votes
0answers
11 views

Luks, Device mapper failed to open temporary keystore device or hang on boot

In my boot partition I installed grub2 from my existing Debian installation, and I built a custom initramfs to boot Ubuntu with encrypted root, then I put that initramfs in that /boot. I then added ...
0
votes
0answers
21 views

What is LUKS's process for decryption?

LUKS allows multiple passphrases for a single device, however adding or revoking a passphrase doesn't take long. So the passphrases seem to only decrypt some master key which is then used for the rest ...
0
votes
0answers
51 views

serial console luks passphrase

I access my Dell r320 server console with IPMI (serial over lan) or with ssh on the iDRAC and with the command "console com2". It works well, i see the console output but i can't enter my luks ...
0
votes
0answers
50 views

Encrypted LVM stops when mounting swap

I have configured a disk with LUKS this way (Ubuntu server 15.10): Boot partition Rest partition (LVM group) LVM data -> Encrypted (pass) -> ext4 /data LVM root -> Encrypted (pass) -> ext4 / LVM ...
0
votes
0answers
7 views

Get timestamp of last luks encryption key slot change

I cannot find anything related in the documentation of luks. Is it possible to see when the given Key Slot was last changed (ie. when the user changed his password)?
-2
votes
0answers
16 views

How to clone a partition of LUKS disk?

I have cloned a LUKS drive whose volume is 16012804096 bytes ( on a kingstone sd card). I want to recover it to another SD card ( another sandisk SD card ). But the volume of sandisk card is ...