Questions tagged [dmcrypt]
The dmcrypt tag has no usage guidance.
27
questions
1
vote
1
answer
516
views
Disable read/write workqueue for Ubuntu Full-Disk-Encryption
I am currently trying to set up multiple devices with Ubuntu (20.04.5 LTS) and the drive must be encrypted, so I used LUKS during the installation. (I checked "Use LVM with the new Ubuntu ...
- 11
5
votes
1
answer
1k
views
How to unlock multiple luks-devices using dropbear-initramfs
My system setup is as following:
One single SSD with LUKS and LVM (and of course an unencrypted boot partition). The debian system is installed there.
Two HDDs assembled as RAID0 with LUKS and LVM ...
- 211
0
votes
0
answers
129
views
Is it safe to use dmcrypt on top of software raid?
I'm designing a machine, to serve as a NAS. My interest is hobby-level.
I would use mdadm to software raid a couple of same-size hdds. At first I'd use raid1, but in the future I'd add another disk ...
- 101
2
votes
1
answer
346
views
ext4 errors with dm-crypt / LUKS on top of an iSCSI device
I have two oldish "NAS" devices, specifically Buffalo TeraStation Rackmount iSCSI ("TS-RIXL/R5"). Those are basically embedded computers running Linux with four SATA slots and two ...
- 91
1
vote
2
answers
3k
views
How do I know a LUKS header is corrupt?
My computer froze for a long time and I pressed the reset button. After reboot, all FIVE luks-encrypted (LUKS 1) file systems will no longer open. The message I get is "No key available with this ...
- 11
3
votes
1
answer
2k
views
LUKS high transfer rates followed by high io wait
I'm currently setting up a server on Proxmox VE. I wanted all drives to be encrypted so i chose to setup luks on all disks and on top of luks i set up LVM.
Now when I'm transferring data from a fast ...
- 208
-1
votes
1
answer
186
views
When was LUKS first released?
When was Linux Unified Key Setup (LUKS) first released--both as an open standard and later made available as an implementation with cryptsetup?
- 759
0
votes
1
answer
50
views
raid1 will not work when I physically remove "removed" disk in Ubuntu 18.04
/dev/sdc1 and /dev/sdd1 is raided (RAID1) into /dev/md3. /dev/md3 is encrypted with luksSetup.
Last night I got DegradedArray events for /dev/sdc1. I shutdown the system, physically removed the disk,...
- 11
0
votes
2
answers
168
views
How to monitor dm-crypt on unreliable external hard disk?
I have an external USB drive, which - for whatever reason - sometimes drops out unrecoverably. Probably due to faulty cables or something. On this I have a LUKS partition.
dmesg reports
Buffer I/O ...
- 111
4
votes
1
answer
2k
views
Encrypt/Decrypt filesystem container file with smartcard on linux
I want to encrypt and decrypt a file system container file with luks and a smartcard on debian linux.
The smartcard is a Nitrokey Start which is basically a compact smartcard in a usb reader.
I know ...
- 141
2
votes
0
answers
620
views
Linux dm-crypt slowness with fast SSD
I'm experiencing slowness with an encrypted filesystem. Here are the details:
# /dev/sdd: TOSHIBA PX05SVQ192B AX02 /dev/sdd
# gdisk -l /dev/sdd
GPT fdisk (gdisk) version 0.7.1
Partition ...
1
vote
1
answer
24
views
Restore back-up from pre-encrypted drive into newly encrypted drive
It sounds like I am going to be reinstalling CentOS 7 on a server this weekend.
The original installation didn't have the drive encrypted and it needs to be done. My understanding is that this will ...
- 127
0
votes
2
answers
604
views
Troubles with swap on dm-crypt/LUKS partition
I have created two dm-crypt partitions during Debian install:
sda2 sda2_crypt swap
sda3 sda3_crypt /
I used 7.8.1 netinstall ISO. Later I have added additional dm-crypted drive sdb:
# ...
- 35
2
votes
0
answers
123
views
Is there a "TRIM" command for dmcrypt devices?
When using an encrypted drive in a virtual machine, the VM image starts very small if you do not initialize the drive with random data. When you fill the drive, it grows, but when you delete files it ...
- 1,643
2
votes
2
answers
110
views
Best filesystem setup for 'partial data loss: ok' scenario
I'm searching for the best way to set up filesystems/partitions for a storage server with the specialty that partial data loss is not a problem.
Lets say I got 4x3TB disks and I want to arrange them ...
- 33
0
votes
1
answer
842
views
Ubuntu 12.04 LUKS/dmcrypt disk to disk copy freezes
I have 2 external USB hard drives encrypted with LUKS in Ubuntu 12.04. Generally, the both drives are very slow with LUKS/dmcrypt, e.g. 7 MB/s for both read/write, but I could live with this.
However,...
- 1,211
1
vote
2
answers
1k
views
LUKS/dm-crypt security in the case of a break-in
This is an encryption topic I've been confused by for a while now. From what I understand of LUKS, once the LUKS volume is opened with a passphrase and the resulting device mapper device is mounted, ...
- 113
0
votes
1
answer
1k
views
Running python to unlock luks full disk encryption
I wish to make use of full disk encryption using Luks on ubuntu 14.04. However, i wish to make use of my own python script to carry out the functionality of generating the decryption key during device ...
- 273
1
vote
1
answer
646
views
How can I grow an ext4 filesystem inside a dm-crypt/LVM volume?
I have a disk with this format:
sdc 8:32 0 1,8T 0 disk
└─sdc1 8:33 0 1,8T 0 part
├─vg-lv1 (dm-0) 254:0 0 900G 0 lvm /...
3
votes
1
answer
2k
views
How do you repair a Ubuntu 14.04 RAID-LVM-DM-CRYPT-LUKS Physical to Virtual system that won't boot?
I can't get a Ubuntu 14.04 Virtual server to boot correctly.
It's recently been cloned "dd if=/dev/sda of=vmimage"
The Physical has a RAID1-LVM-DMCRYPT-LUKS configuration,
The boot sequence aborts and ...
- 227
4
votes
1
answer
1k
views
ZFS on LUKS not recognized at boot
I've got 6 physical drives in RAID-Z2, which I intend to one-by-one convert to dm-crypt devices.
My process was roughly:
dd if=/dev/zero of=/dev/sdf
Create keyfile /etc/crypttab.d/crypt-1.key
...
- 475
1
vote
1
answer
459
views
ID_FS_LABEL empty for luks volume
I have an LUKS encrypted partition on a disk. I would like to label it and have it available at /dev/disk/by-label.
The value used is ID_FS_LABEL to create the link in /dev/disk/by-label. That value ...
- 183
0
votes
1
answer
1k
views
dmcrypt container on nfs
I'm setting up an encrypted file storage on a remote server and I want to be able to use it transparently on my system. I want to be able to de-/encrypt them locally so that the server hosting the ...
5
votes
3
answers
4k
views
Find out which loop device is behind a dev mapper block device
I'm using cryptsetup with loopback devices. I'm looking for a way, given a device mapping, to identify which loopback device is used by this device.
i.e.
get /dev/loop1 as a result of an operation on /...
- 161
4
votes
1
answer
2k
views
Anybody experiencing full system lockups with LUKS?
I've recently setup a couple of new servers. This time I'm encrypting most of my partitions using dmcrypt+LUKS. However these new servers crash very often, every few days. Full lockups, kernel does ...
- 2,222
1
vote
1
answer
5k
views
how to mount a luks-encrypted file?
I had a good-working system. Cent OS 6. But after I made a reboot luks-partition has been unmounted. And our system administrator have a weekends now :(
Please help me to mount a luks partition again....
- 13
10
votes
2
answers
16k
views
How to non-interactively supply a passphrase to 'dmcrypt luksFormat'?
I'm writing a script which automatically sets up testing environment virtual machines. This script should automatically format a dmcrypt+LUKS partition for me, with a certain passphrase. Because this ...
- 2,222