Questions tagged [luks]

LUKS (Linux Unified Key Setup) is a disk-encryption specification. It is the standard for Linux hard disk encryption.

54 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
7 votes
0 answers
2k views

Write performance is 5 times worse with LUKS on top of mdadm RAID10 than without LUKS

I have servers with many NVMe disks. I am testing disk performance with fio using the following: fio --name=asdf --rw=randwrite --direct=1 --ioengine=libaio --bs=16k --numjobs=8 --size=10G --runtime=...
tacos_tacos_tacos's user avatar
6 votes
1 answer
210 views

Can servers with encrypted root filesystems be made reasonably highly available?

I have some servers I'd like to keep on encrypted disks, but I don't want to have to manually type a passphrase at every boot. I also don't want to keep the key on the machine unencrypted. TPM would ...
librett0's user avatar
4 votes
0 answers
1k views

Dual primary DRBD with LUKS encryption

Is it possible to create a LUKS encrypted filesystem that is accessible by both nodes of a dual primary DRBD system? Here is what I tried to do: Create two nodes and establish a partition on each ...
Doug's user avatar
  • 49
4 votes
1 answer
1k views

ZFS on LUKS not recognized at boot

I've got 6 physical drives in RAID-Z2, which I intend to one-by-one convert to dm-crypt devices. My process was roughly: dd if=/dev/zero of=/dev/sdf Create keyfile /etc/crypttab.d/crypt-1.key ...
Chris Tonkinson's user avatar
3 votes
0 answers
2k views

xfs: can't read superblock

I get the following error: [root@mediaserv ~]# mount /dev/mapper/media1 /media mount: /media: can't read superblock on /dev/mapper/media1. This is Fedora 33. I have a RAID5 of 8x 8TB WD Red drives ...
Michael Wilkinson's user avatar
3 votes
0 answers
880 views

ZFS over LUKS over (NBD or NFS)? Need encrypted replication solution

I am using ZFS(ZoL) over LUKS on home and on remote server. All is working perfectly and fast. I do snapshots by cron, but now I want to replicate them to some backup storage. I have a small 2-HDD ...
Ural's user avatar
  • 161
2 votes
1 answer
396 views

ext4 errors with dm-crypt / LUKS on top of an iSCSI device

I have two oldish "NAS" devices, specifically Buffalo TeraStation Rackmount iSCSI ("TS-RIXL/R5"). Those are basically embedded computers running Linux with four SATA slots and two ...
ftc's user avatar
  • 91
2 votes
0 answers
687 views

Modprobe error at boot

I'm using LMDE4 with LVM on LUKS and recently I've been getting these cryptic error messages at boot: modprobe: module aes-i586 not found in modules.dep Volume group "lvmlmde" not found ...
janeyamatoshi's user avatar
1 vote
1 answer
82 views

Move DRBD device to different underlying device without need of re-sync?

I have a pretty large DRBD device connected through WAN. It is a bout 2TB in size and the change rate of the data is pretty low. It is configured on devices as follows: VirtIO disk (*.img) on QNAP ...
Christian's user avatar
1 vote
0 answers
322 views

RAID + LUKS + LVM + BCACHE + BTRFS

I want build new structure for my data store (NAS - Ubuntu). Data storage will be 4TB at first. Then up to 8TB. My old structure is simple: RAID 1 -> LUKS -> FS I need some wishes to new ...
Jo K's user avatar
  • 111
1 vote
0 answers
33 views

Why does cdrecord alter my image when writing to CD ROM and how can I avoid it?

I want to use optical media for backups and hence created a luks image equivalent to that of a 80 min CD-ROM and recorded it twice using the cdrecord # first run $ cdrecord -v dev=0,0,0 image.luks # ...
Benj's user avatar
  • 117
1 vote
0 answers
546 views

Recover encrypted LVM

I had Debian install running on LUKS encrypted LVM. This morning, I wanted to install OS on external disk to be used on another host, but mistakenly I chose the wrong disk... Few seconds in I noticed ...
jctest's user avatar
  • 11
1 vote
1 answer
589 views

LUKS encryption for mounted disk - how to decrypt cinder volume

I have a question about the possible decryption of LUKS volume. I'm testing currently barbican+cinder, but I'm just wondering if there is a way, to somehow decrypt my LUKS volume with payload ...
Jan Wasilewski's user avatar
1 vote
2 answers
3k views

How do I know a LUKS header is corrupt?

My computer froze for a long time and I pressed the reset button. After reboot, all FIVE luks-encrypted (LUKS 1) file systems will no longer open. The message I get is "No key available with this ...
JLMathis's user avatar
1 vote
0 answers
29 views

DD data of drive to new drive within VM

I inherited a CentOS 7 vm with a messy disk system. Here's a breakdown: The VM has 2 hard disks, and the OS has two LVs with luks-encryption on top. Output from lsblk: NAME ...
Cpt.Whale's user avatar
  • 412
1 vote
2 answers
242 views

Degraded soft raid1 not booting and showing raid0

I created a server setup with uefi boot and encrypted lvm partitions as you may can see here: root@debian:~# lsblk -o name,uuid,type,size NAME UUID ...
user543229's user avatar
1 vote
0 answers
205 views

Dismounting MD RAID1 LUKS-encrypted volume with partitions

Fedora 29. I created a 5TB RAID1 volume using mdadm. I then encrypted the volume with cryptsetup luksFormat. I then created ext4 partitions on the encrypted volume. (I did it this way so I can add ...
RoUS's user avatar
  • 141
1 vote
0 answers
104 views

How to set up LVM / LUKS to allow easy expansion / contraction of disk space?

Disclaimer: I've never used LVM or LUKS before. Context: I use CentOS 7 and have X disk space available. I want to set up this disk space to store some important data, hence why I want to use LUKS to ...
Radu Murzea's user avatar
1 vote
1 answer
236 views

Linux mount partition on encrypted drive (not encrypted partition!)

Instead of encrypting a partition I encrypted an entire drive (cryptsetup -luksFormat...). Don't ask why. I created a partition and a filesystem on that partition. Let's call the encrypted virtual ...
user2052153's user avatar
1 vote
1 answer
959 views

how do I plan partitions for LUKS encryption of a CentOS 7 server?

A CentOS 7 web server needs encryption at rest. I would like to use LUKS encryption for this, but I need direction to plan how. Can I use LUKS encryption to encrypt the entire drive as one unit on a ...
CodeMed's user avatar
  • 325
1 vote
1 answer
1k views

How do I replace a disk with LUKS on LVM2 - no raid, no span

I have LUKS on LVM (LVM Partitions created first, then each partition is encrypted separately, following this guide on Arch Wiki). I am using two volume groups, and each is isolated to a drive. This ...
Damon's user avatar
  • 131
1 vote
0 answers
309 views

Snapshot of BTRFS Device on top of luks Volume

I have the following problem: I can't figure out, how to create a snapshot of a btrfs volume residing on a crypted disk. This is the setup: /dev/sdb is a 1TB USB 3 disk. it has a partition /dev/...
Stephan Richter's user avatar
1 vote
1 answer
150 views

Encrypted partition on Debian requiring multiple keys to unlock

The title pretty much sums it up, but I want to create a second data partition on a web-facing server which is encrypted and requires two people to provide passphrases before it can be unlocked. Is ...
alanbeard's user avatar
  • 141
1 vote
0 answers
2k views

network-mapped file system drops to read-only mid-stream, buffer I/O error with device mapper

Under linux 2.6 (CentOS 5.3 actually), I have a file system that works okay for a few minutes, then drops to read-only mode, while I am trying to read/write data to it. It is an ext3 file system ...
slarocque's user avatar
0 votes
0 answers
109 views

LUKS: encrypting swap without requiring a passphrase on boot?

I have a setup where I have a logical volume (data) that should be LUKS-encrypted. However, my feeling is that the rest of the filesystem shouldn't be encrypted, which gives some advantages: The data ...
QF0's user avatar
  • 203
0 votes
0 answers
223 views

LUKS full disk encryption with decryption key on USB drive

I have alma9 setup with luks full disk encryption. I want to put a decryption key on a usb drive to boot up without a password. Picking through the various tutorials (mostly for debian), I have this: #...
dan's user avatar
  • 333
0 votes
0 answers
106 views

Repair a forced fsck-ed LUKS volume

In a moment of distraction, I'v managed to run: # fsck -Ty /dev/sda1, where /dev/sda1* was a LUKS encypted volume. I don't have a recent backup, so I can't restore. And the backup I have is for the ...
adi8fego's user avatar
0 votes
1 answer
397 views

Encrypting root partition with LUKS2 and TPM

I aim to encrypt the root partition and protect the key with TPM. Eventually, I want to lock the encryption key to the state of the TPM registers. I set up Fedora Workstation 38 - during the setup ...
AlexT's user avatar
  • 101
0 votes
0 answers
141 views

LUKS encrypted, fails to open with /etc/crypttab

#platform=x86, AMD64, or Intel EM64T #version=DEVEL text url --url=http://caching-proxy/repos/rhel8/8.5/rhn/base/unstable repo --name=cache-rhn-base --baseurl=http://caching-proxy/repos/rhel8/8.5/rhn/...
Bennelong Ryde's user avatar
0 votes
0 answers
26 views

Bootprocess stops after detaching raid member

I run following Setup in my Testlabor before migrating into production: Dm-crypt/luks Raid1 / btrfs EFI dracut / fedora Server GRUB2 Systemd I simulated a drive failure (the one without boot partition)...
marcelfoss's user avatar
0 votes
0 answers
61 views

Mounting an encrypted fs WITH prompt at boot time (LUKS, cryptsetup)

Per company policy my laptop has to be very secure in case of theft, so I have created an encrypted partition (LUKS) that I want to mount via /etc/fstab. However, I do NOT want to add passphrase to ...
LetMeSOThat4U's user avatar
0 votes
1 answer
433 views

Full disk encryption on CentOS 9 Stream with TPM2 decryption at boot time

I'm working on provisioning a server that requires full drive encryption and I want to automate the process of decrypting the drive at startup using the TPM2 module available on the motherboard, but I ...
Thomas Gonnot's user avatar
0 votes
1 answer
1k views

Rocky 9.1 dracut fails to boot

My rocky 9.1 vm kernel is not able to load/boot/decrypt a LVM Luks2 volume during boot. Booting with 5.14.0-162.6 works fine. But fails booting the latest 5.14.0-162.18 or 5.14.0-162.12 kernel, dracut ...
sherwood's user avatar
0 votes
0 answers
2k views

Unable to connect to dropbear SSH server to remotely unlock LUKS encrypted root partition on Arch Linux cloud server

I intended to setup encrypted LUKS arch linux system on a cloud server. I installed the latest arch linux version onto LUKS-encrypted partition, configured the initramfs (installed build hooks), then ...
user65412's user avatar
0 votes
0 answers
897 views

Volume group "luks" not found

OS: Parrot OS VM: Qemu Filesystem: Btrfs This is caused due to an improper reboot before full apt upgrade. After the reboot and entering in the Luks partition password. It successfully decrypts and ...
Zetsu's user avatar
  • 1
0 votes
0 answers
74 views

Perform backup of root directory in luks-container form initramfs

My server is running from a root directory in an encrypted luks container with lvm layout. To perform a backup of the root partition, it is usually the consensus that the filesystem can not be mounted,...
northcom's user avatar
0 votes
1 answer
169 views

Create RAID1 with luks without erase disks

I need to create a RAID1 arrange with an existing phisical disk. I buyed another hdd with same size and I want to create a RAID1 arrange without erasing the first one. My disk have luks encryption, I ...
ViktorWest77's user avatar
0 votes
0 answers
541 views

Create an Fully Automated Installer for Debian with FAI

I searched on Google about creating Fully Automated Installer for Debian. My aim is to have an ISO file, make it bootable in pendrive. So if I plug this pendrive in a computer, power on the physical ...
Kalib Zen's user avatar
  • 137
0 votes
0 answers
229 views

How to resize img file created with dd on LUKS-LVM partition?

I have installed a new Debian 10 on /dev/sda with LUKS + LVM. It has the following partition structure: NAME MAJ:MIN RM SIZE RO TYPE MOUNTPOINT sda 8:0 0 79G 0 disk ├─...
Kalib Zen's user avatar
  • 137
0 votes
1 answer
163 views

Expand XFS encrypted block device with no LVM

I need to expand my LUKS encrypted XFS volume but I'm not sure where to start as this is about a non-LVM device, its a simple block storage from a cloud provider that I extended from 150GB to 200GB ......
V O's user avatar
  • 101
0 votes
0 answers
83 views

Read files from an encrypted disk?

Is it possible to read from an LUKS-encrypted disk via the terminal, e.g. by booting from a live Linux system on a USB flash drive and accessing the encrypted host computer's hard drive?
david's user avatar
  • 101
0 votes
0 answers
314 views

Add keyfile for luks encrypted root

I have a server running ubuntu 18 and we added the standard LUKS encryption during install. It was fine for a while but its become a problem that we can't restart it remotely. I'd like to add a ...
tobben's user avatar
  • 1
0 votes
1 answer
352 views

LUKS hangs on CentOS running on Atom C3758 CPU

Whenever I try to setup LUKS on my CentOS install on a Supermicro A2SDi-8C-HLN4F motherboard (Intel ATOM CPU C3758), everything seems to work fine until the process completely freezes when creating ...
MWinther's user avatar
0 votes
0 answers
118 views

How to require a password/key/secret supplied by human sysadmin (via an ssh login) for every mount of a LUKS-based volume?

Summary We want to support this scenario: if we sense any security threat that might expose our core data (all stored on a /home NFS mount from our NFS server), we immediately "hard" power off the ...
Johnny Utahh's user avatar
0 votes
1 answer
492 views

LUKS encryption on which layer?

Option1: Linux Partition -> LUKS -> LVM Option2: Linux Partition -> LVM -> LUKS Which stack is better from system load aspects? Background: On my Linux server (CPU AMD Opteron 6338P, LSI 3ware SAS /...
questor's user avatar
0 votes
0 answers
528 views

Adding drive to extend root file system when using LVM on LUKS

I have an 18.04 ubuntu based system using their LVM on top of LUKS setup on one drive, and I want to add an additional drive /dev/sdb to extend root (i.e. /). VG name lubuntu-vg, LV name root, LV ...
Jan Nell's user avatar
0 votes
0 answers
585 views

guestmount a kvm domain with an encrypted partition

I have a VM running under KVM hypervisor on a CentOS 7.3 server that was created with a LUKS-encrypted root partition. There are two partitions in the VM: /dev/sda1 is the boot partition and is ...
sizzzzlerz's user avatar
0 votes
0 answers
944 views

Poor disk performance on KVM guest

I have a server running Proxmox and some Linux VMs running on it. On the host, I get 200+ MB/s write to the disk On a VM, I only get around 50-60 MB/s Caching is disabled for all VMs. I'm using ...
patrick7's user avatar
0 votes
2 answers
626 views

Troubles with swap on dm-crypt/LUKS partition

I have created two dm-crypt partitions during Debian install: sda2 sda2_crypt swap sda3 sda3_crypt / I used 7.8.1 netinstall ISO. Later I have added additional dm-crypted drive sdb: # ...
A_buddy's user avatar
  • 35
0 votes
1 answer
479 views

Guestfish - libguestfs copy-out to a Remote VM

I have a need to move a number of files from a snapshot of a LUKS encrypted virtual machine (CentOS) to another one on a different hypervisor. I can mount the partition in the guestfish interactive ...
Bob's user avatar
  • 103