Questions tagged [cryptsetup]
cryptsetup is a command-line utility for managing disk volumes encrypted using the dm-crypt kernel subsystem (Linux versions 2.6 up and DragonFly BSD).
263 questions
1
vote
1
answer
86
views
Damaged LUKS encrypted HHD - need help recovering
I have a 2 TB Western Digital MyBook I encrypted with LUKS over a year ago. Today was the day I decided to be reckless and accidentally formatted the disk in Windows when trying to create a boot-able ...
- 11
0
votes
1
answer
31
views
Ubuntu: fully disabling cryptswap
I wanted to disable cryptswap on my PopOS (an Ubuntu derivative).
Used mkswap to re-initialize the swap partition
Edited /etc/fstab to directly reference it (as opposed to a crypto device)
Removed ...
- 131
2
votes
1
answer
198
views
How to automatically mount external BitLocker encrypted drives at boot on Linux
How do I ensure that an external, BitLocker encrypted NTFS drive is automatically decrypted and mounted at boot time on a Linux system?
- 201
3
votes
1
answer
101
views
Debian: cryptsetup fails to unlock volume since kernel 6.1.0-29
I have Debian 12 with full disk encryption. Cryptsetup unlocks the volume with linux kernel version 6.1.0-28, but fails with any later version as follows.
Please unlock disk sdXY_crypt: **********
No ...
- 1,024
0
votes
0
answers
84
views
Recovering encrypted LVM on top fo RAIDs but LUKS header offset by 2MB
I am trying to recover my data from a 8 year old configuration. 8 years is the last time I tried to mount this configuration but the computer died. The configuration is thus:
LUKS encryption on top ...
2
votes
1
answer
91
views
Cryptsetup reports "Not enough space in header json area for new keyslot"
I'm using Almalinux in case that's relevant here.
We use LUKS2 on the local disk, with LVM on top - so /dev/sda1 and 2 are unencrypted, but /dev/sda3 is encrypted and used for the OS.
We also use ...
- 4,524
0
votes
0
answers
167
views
Systemd shutdown hanging for 90 seconds due to luks/btrfs
ver since I set up my LUKS-encrypted BTRFS RAID1 between my two NVMe drives on Debian 12, the shutdown process has taken way too long, about a minute and a half.
I had to get a video of the shutdown ...
- 1
0
votes
0
answers
46
views
How to only suppress warning outputs from cryptsetup?
In Linux in Bash i run a script with some cryptsetup calls like
--luks2-metadata-size=16k --luks2-keyslots-size=256k .... luksFormat ....
that brings Warning outputs.
I know and understand, but i ...
- 543
0
votes
0
answers
48
views
cryptsetup - luks header
i will create some write once read many files.
i need only one key for open the file and for me, there is no reason to change in the future the key.
the header will stored on a different place, and ...
- 543
0
votes
0
answers
62
views
Converting LUKS to LUKS2 breaks password
I've got a system with LUKS partitions. I'd like to convert them to LUKS2 to see if I can simplify my setup using partition labels.
When I run cryptsetup convert <partitionNode> --type LUKS2 it ...
- 827
0
votes
0
answers
124
views
Encrypted multiboot usb / adding cryptsetup to initrd
I'm trying to create a multiboot usb drive for Debian images including a live system, netinst, and DVD-1 iso.
I've got as far as creating the partitions
EFI fat32
Boot luks2
ISOs luks2
Then I ...
- 131
1
vote
1
answer
69
views
How to protect contects of /boot when using full disk ecnryption?
When using a full disk encryption, an unencrypted /boot partition is usually required to store bootloader and pre-boot environment.
These initcpio or initramfs images need to be loaded before ...
- 73
1
vote
1
answer
197
views
Minimizing the size of the LUKS Header
With cryptsetup I will create some LUKS encrypted files with detached header. In the files I will write once and read repeatedly. I do not need to change any key.
How can the size of the header be ...
- 543
0
votes
0
answers
134
views
rhel 7.9 luks on lvm Cryptsetup-reencrypt --decrypt /path/to/device failing
Oh wise and powerful linux gurus, bless this humble wannabe linux admin with your knowledge!
I am attempting to remove the luks encryption on my rhel 7.9 device in order to facilitate upgrading to 8....
0
votes
0
answers
94
views
what is the smallest possible size when creating a luks2 header
What is the smallest possible size when creating a luks2 header?
How to create one under 16 Mib?
- 543