Questions tagged [luks]
LUKS (Linux Unified Key Setup) is a disk-encryption specification. It is the standard for Linux hard disk encryption.
54
questions with no upvoted or accepted answers
7
votes
0
answers
2k
views
Write performance is 5 times worse with LUKS on top of mdadm RAID10 than without LUKS
I have servers with many NVMe disks. I am testing disk performance with fio using the following:
fio --name=asdf --rw=randwrite --direct=1 --ioengine=libaio --bs=16k --numjobs=8 --size=10G --runtime=...
6
votes
1
answer
210
views
Can servers with encrypted root filesystems be made reasonably highly available?
I have some servers I'd like to keep on encrypted disks, but I don't want to have to manually type a passphrase at every boot. I also don't want to keep the key on the machine unencrypted. TPM would ...
4
votes
0
answers
1k
views
Dual primary DRBD with LUKS encryption
Is it possible to create a LUKS encrypted filesystem that is accessible by both nodes of a dual primary DRBD system?
Here is what I tried to do:
Create two nodes and establish a partition on each ...
4
votes
1
answer
1k
views
ZFS on LUKS not recognized at boot
I've got 6 physical drives in RAID-Z2, which I intend to one-by-one convert to dm-crypt devices.
My process was roughly:
dd if=/dev/zero of=/dev/sdf
Create keyfile /etc/crypttab.d/crypt-1.key
...
3
votes
0
answers
2k
views
xfs: can't read superblock
I get the following error:
[root@mediaserv ~]# mount /dev/mapper/media1 /media
mount: /media: can't read superblock on /dev/mapper/media1.
This is Fedora 33. I have a RAID5 of 8x 8TB WD Red drives ...
3
votes
0
answers
880
views
ZFS over LUKS over (NBD or NFS)? Need encrypted replication solution
I am using ZFS(ZoL) over LUKS on home and on remote server.
All is working perfectly and fast. I do snapshots by cron, but now I want to replicate them to some backup storage.
I have a small 2-HDD ...
2
votes
1
answer
396
views
ext4 errors with dm-crypt / LUKS on top of an iSCSI device
I have two oldish "NAS" devices, specifically Buffalo TeraStation Rackmount iSCSI ("TS-RIXL/R5"). Those are basically embedded computers running Linux with four SATA slots and two ...
2
votes
0
answers
687
views
Modprobe error at boot
I'm using LMDE4 with LVM on LUKS and recently I've been getting these cryptic error messages at boot:
modprobe: module aes-i586 not found in modules.dep
Volume group "lvmlmde" not found
...
1
vote
1
answer
82
views
Move DRBD device to different underlying device without need of re-sync?
I have a pretty large DRBD device connected through WAN. It is a bout 2TB in size and the change rate of the data is pretty low.
It is configured on devices as follows:
VirtIO disk (*.img) on QNAP ...
1
vote
0
answers
322
views
RAID + LUKS + LVM + BCACHE + BTRFS
I want build new structure for my data store (NAS - Ubuntu). Data storage will be 4TB at first. Then up to 8TB.
My old structure is simple:
RAID 1 -> LUKS -> FS
I need some wishes to new ...
1
vote
0
answers
33
views
Why does cdrecord alter my image when writing to CD ROM and how can I avoid it?
I want to use optical media for backups and hence created a luks image equivalent to that of a 80 min CD-ROM and recorded it twice using the cdrecord
# first run
$ cdrecord -v dev=0,0,0 image.luks
# ...
1
vote
0
answers
546
views
Recover encrypted LVM
I had Debian install running on LUKS encrypted LVM.
This morning, I wanted to install OS on external disk to be used on another host, but mistakenly I chose the wrong disk... Few seconds in I noticed ...
1
vote
1
answer
589
views
LUKS encryption for mounted disk - how to decrypt cinder volume
I have a question about the possible decryption of LUKS volume. I'm testing currently barbican+cinder, but I'm just wondering if there is a way, to somehow decrypt my LUKS volume with payload ...
1
vote
2
answers
3k
views
How do I know a LUKS header is corrupt?
My computer froze for a long time and I pressed the reset button. After reboot, all FIVE luks-encrypted (LUKS 1) file systems will no longer open. The message I get is "No key available with this ...
1
vote
0
answers
29
views
DD data of drive to new drive within VM
I inherited a CentOS 7 vm with a messy disk system. Here's a breakdown:
The VM has 2 hard disks, and the OS has two LVs with luks-encryption on top. Output from lsblk:
NAME ...
1
vote
2
answers
242
views
Degraded soft raid1 not booting and showing raid0
I created a server setup with uefi boot and encrypted lvm partitions as you may can see here:
root@debian:~# lsblk -o name,uuid,type,size
NAME UUID ...
1
vote
0
answers
205
views
Dismounting MD RAID1 LUKS-encrypted volume with partitions
Fedora 29. I created a 5TB RAID1 volume using mdadm. I then encrypted the volume with cryptsetup luksFormat. I then created ext4 partitions on the encrypted volume. (I did it this way so I can add ...
1
vote
0
answers
104
views
How to set up LVM / LUKS to allow easy expansion / contraction of disk space?
Disclaimer: I've never used LVM or LUKS before.
Context: I use CentOS 7 and have X disk space available. I want to set up this disk space to store some important data, hence why I want to use LUKS to ...
1
vote
1
answer
236
views
Linux mount partition on encrypted drive (not encrypted partition!)
Instead of encrypting a partition I encrypted an entire drive (cryptsetup -luksFormat...). Don't ask why. I created a partition and a filesystem on that partition. Let's call the encrypted virtual ...
1
vote
1
answer
959
views
how do I plan partitions for LUKS encryption of a CentOS 7 server?
A CentOS 7 web server needs encryption at rest. I would like to use LUKS encryption for this, but I need direction to plan how. Can I use LUKS encryption to encrypt the entire drive as one unit on a ...
1
vote
1
answer
1k
views
How do I replace a disk with LUKS on LVM2 - no raid, no span
I have LUKS on LVM (LVM Partitions created first, then each partition is encrypted separately, following this guide on Arch Wiki).
I am using two volume groups, and each is isolated to a drive. This ...
1
vote
0
answers
309
views
Snapshot of BTRFS Device on top of luks Volume
I have the following problem:
I can't figure out, how to create a snapshot of a btrfs volume residing on a crypted disk.
This is the setup:
/dev/sdb is a 1TB USB 3 disk.
it has a partition /dev/...
1
vote
1
answer
150
views
Encrypted partition on Debian requiring multiple keys to unlock
The title pretty much sums it up, but I want to create a second data partition on a web-facing server which is encrypted and requires two people to provide passphrases before it can be unlocked. Is ...
1
vote
0
answers
2k
views
network-mapped file system drops to read-only mid-stream, buffer I/O error with device mapper
Under linux 2.6 (CentOS 5.3 actually), I have a file system that works okay for a few minutes, then drops to read-only mode, while I am trying to read/write data to it.
It is an ext3 file system ...
0
votes
0
answers
109
views
LUKS: encrypting swap without requiring a passphrase on boot?
I have a setup where I have a logical volume (data) that should be LUKS-encrypted. However, my feeling is that the rest of the filesystem shouldn't be encrypted, which gives some advantages:
The data ...
0
votes
0
answers
223
views
LUKS full disk encryption with decryption key on USB drive
I have alma9 setup with luks full disk encryption. I want to put a decryption key on a usb drive to boot up without a password.
Picking through the various tutorials (mostly for debian), I have this:
#...
0
votes
0
answers
106
views
Repair a forced fsck-ed LUKS volume
In a moment of distraction, I'v managed to run:
# fsck -Ty /dev/sda1, where /dev/sda1* was a LUKS encypted volume.
I don't have a recent backup, so I can't restore. And the backup I have is for the ...
0
votes
1
answer
397
views
Encrypting root partition with LUKS2 and TPM
I aim to encrypt the root partition and protect the key with TPM. Eventually, I want to lock the encryption key to the state of the TPM registers.
I set up Fedora Workstation 38 - during the setup ...
0
votes
0
answers
141
views
LUKS encrypted, fails to open with /etc/crypttab
#platform=x86, AMD64, or Intel EM64T
#version=DEVEL
text
url --url=http://caching-proxy/repos/rhel8/8.5/rhn/base/unstable
repo --name=cache-rhn-base --baseurl=http://caching-proxy/repos/rhel8/8.5/rhn/...
0
votes
0
answers
26
views
Bootprocess stops after detaching raid member
I run following Setup in my Testlabor before migrating into production:
Dm-crypt/luks
Raid1 / btrfs
EFI
dracut / fedora Server
GRUB2
Systemd
I simulated a drive failure (the one without boot partition)...
0
votes
0
answers
61
views
Mounting an encrypted fs WITH prompt at boot time (LUKS, cryptsetup)
Per company policy my laptop has to be very secure in case of theft, so I have created an encrypted partition (LUKS) that I want to mount via /etc/fstab.
However, I do NOT want to add passphrase to ...
0
votes
1
answer
433
views
Full disk encryption on CentOS 9 Stream with TPM2 decryption at boot time
I'm working on provisioning a server that requires full drive encryption and I want to automate the process of decrypting the drive at startup using the TPM2 module available on the motherboard, but I ...
0
votes
1
answer
1k
views
Rocky 9.1 dracut fails to boot
My rocky 9.1 vm kernel is not able to load/boot/decrypt a LVM Luks2 volume during boot.
Booting with 5.14.0-162.6 works fine. But fails booting the latest 5.14.0-162.18 or 5.14.0-162.12 kernel, dracut ...
0
votes
0
answers
2k
views
Unable to connect to dropbear SSH server to remotely unlock LUKS encrypted root partition on Arch Linux cloud server
I intended to setup encrypted LUKS arch linux system on a cloud server.
I installed the latest arch linux version onto LUKS-encrypted partition, configured the initramfs (installed build hooks), then ...
0
votes
0
answers
897
views
Volume group "luks" not found
OS: Parrot OS
VM: Qemu
Filesystem: Btrfs
This is caused due to an improper reboot before full apt upgrade.
After the reboot and entering in the Luks partition password. It successfully decrypts and ...
0
votes
0
answers
74
views
Perform backup of root directory in luks-container form initramfs
My server is running from a root directory in an encrypted luks container with lvm layout.
To perform a backup of the root partition, it is usually the consensus that the filesystem can not be mounted,...
0
votes
1
answer
169
views
Create RAID1 with luks without erase disks
I need to create a RAID1 arrange with an existing phisical disk. I buyed another hdd with same size and I want to create a RAID1 arrange without erasing the first one. My disk have luks encryption, I ...
0
votes
0
answers
541
views
Create an Fully Automated Installer for Debian with FAI
I searched on Google about creating Fully Automated Installer for Debian. My aim is to have an ISO file, make it bootable in pendrive. So if I plug this pendrive in a computer, power on the physical ...
0
votes
0
answers
229
views
How to resize img file created with dd on LUKS-LVM partition?
I have installed a new Debian 10 on /dev/sda with LUKS + LVM. It has the following partition structure:
NAME MAJ:MIN RM SIZE RO TYPE MOUNTPOINT
sda 8:0 0 79G 0 disk
├─...
0
votes
1
answer
163
views
Expand XFS encrypted block device with no LVM
I need to expand my LUKS encrypted XFS volume but I'm not sure where to start as this is about a non-LVM device, its a simple block storage from a cloud provider that I extended from 150GB to 200GB ......
0
votes
0
answers
83
views
Read files from an encrypted disk?
Is it possible to read from an LUKS-encrypted disk via the terminal, e.g. by booting from a live Linux system on a USB flash drive and accessing the encrypted host computer's hard drive?
0
votes
0
answers
314
views
Add keyfile for luks encrypted root
I have a server running ubuntu 18 and we added the standard LUKS encryption during install.
It was fine for a while but its become a problem that we can't restart it remotely.
I'd like to add a ...
0
votes
1
answer
352
views
LUKS hangs on CentOS running on Atom C3758 CPU
Whenever I try to setup LUKS on my CentOS install on a Supermicro A2SDi-8C-HLN4F motherboard (Intel ATOM CPU C3758), everything seems to work fine until the process completely freezes when creating ...
0
votes
0
answers
118
views
How to require a password/key/secret supplied by human sysadmin (via an ssh login) for every mount of a LUKS-based volume?
Summary
We want to support this scenario: if we sense any security threat that might expose our core data (all stored on a /home NFS mount from our NFS server), we immediately "hard" power off the ...
0
votes
1
answer
492
views
LUKS encryption on which layer?
Option1: Linux Partition -> LUKS -> LVM
Option2: Linux Partition -> LVM -> LUKS
Which stack is better from system load aspects?
Background: On my Linux server (CPU AMD Opteron 6338P, LSI 3ware SAS /...
0
votes
0
answers
528
views
Adding drive to extend root file system when using LVM on LUKS
I have an 18.04 ubuntu based system using their LVM on top of LUKS setup on one drive, and I want to add an additional drive /dev/sdb to extend root (i.e. /).
VG name lubuntu-vg, LV name root, LV ...
0
votes
0
answers
585
views
guestmount a kvm domain with an encrypted partition
I have a VM running under KVM hypervisor on a CentOS 7.3 server that was created with a LUKS-encrypted root partition. There are two partitions in the VM: /dev/sda1 is the boot partition and is ...
0
votes
0
answers
944
views
Poor disk performance on KVM guest
I have a server running Proxmox and some Linux VMs running on it.
On the host, I get 200+ MB/s write to the disk
On a VM, I only get around 50-60 MB/s
Caching is disabled for all VMs.
I'm using ...
0
votes
2
answers
626
views
Troubles with swap on dm-crypt/LUKS partition
I have created two dm-crypt partitions during Debian install:
sda2 sda2_crypt swap
sda3 sda3_crypt /
I used 7.8.1 netinstall ISO. Later I have added additional dm-crypted drive sdb:
# ...
0
votes
1
answer
479
views
Guestfish - libguestfs copy-out to a Remote VM
I have a need to move a number of files from a snapshot of a LUKS encrypted virtual machine (CentOS) to another one on a different hypervisor. I can mount the partition in the guestfish interactive ...