Unix and Linux Stack Exchange
Unix and Linux Stack Exchange

Questions tagged [whole-drive-encryption]

38 questions
3
votes
0 answers

Ignoring the SED encrypted drives until after booting is completed

I have an Ubuntu system which boots from a small NVME disk using software encryption, TPM, etc. to mitigate against data loss in case of theft. The system is interfaced with customised PCIe hardware to record data (possibly very large quantities of…
fishter
  • 131
  • 1
3
votes
0 answers

IO Error but badblocks and fsck are happy

I have an ext4 partition with the following underlaying stack: sda1 and sdb1 are together in a RAID1, resulting in md0 md0 is LUKS-encrypted, resulting in md0_crypt on top of md0_crypt is a single LVM volume mv0_vg_media, mounted under…
Kalsan
  • 173
  • 1
  • 1
  • 5
3
votes
1 answer

Migrate Arch from encrypt to sd-encrypt

I recently installed Antergos (which is basically Arch) and set it to use full disk encryption. Now, I want to migrate from encrypt to sd-encrypt because I want to be able to hibernate and I couldn't put swap partition in the same LUKS…
Mateusz Kubuszok
  • 143
  • 1
  • 8
3
votes
1 answer

How can I manually replicate Manjaro Setup's automatic full-system encryption setup?

When I install Manjaro (16.10.3) from the LiveCD using the erase drive + encrypted option, it seems to create a setup like the following: Encrypted /dev/sda1 holding / and encrypted /dev/sda2 used as swap Unknown process prompts for decryption…
user212900
  • 31
  • 2
2
votes
1 answer

Detached LUKS header (on USB) for an existing full-disk encryption device with Ubuntu

I already have a /boot partition on a USB stick and a LUKS partition on my computer, which correspond to a fulldisk encryption scheme with Ubuntu 21 I want to put the header of my LUKS partition onto the USB (either on the /boot partition or on…
Ben W
  • 93
  • 2
  • 7
2
votes
0 answers

Seagate/LaCie NasOS - enable volume encryption on non-supported device?

According to the guide at https://www.seagate.com/gb/en/support/kb/nas-os-4x-setting-up-volume-encryption-006007en/ there should be an option to encrypt a volume on devices running NAS OS 4.0. That option is missing from my LaCie 5big Pro although…
d-b
  • 1,703
  • 2
  • 17
  • 26
2
votes
1 answer

CentOS7 full disk encryption

I have one physical server and would like to configure full disk encryption for it. First I was playing around with an virtual machines (CentOS7) and have enabled it during installation: On reboot I get the following prompt and can successfully…
blabla_trace
  • 345
  • 2
  • 5
  • 19
2
votes
2 answers

Linux full-disk encryption without initramfs

Are there any full-disk encryption schemes that can be done without an initramfs, rather getting the encryption key from the kernel cmdline? I know this sounds insecure, as an attacker could just read the bootloader files; but due this device's boot…
Billy
  • 615
  • 3
  • 11
  • 29
2
votes
2 answers

Cloned a smaller hard drive onto a larger one. Need to expand an encrypted partition

As mentioned I bought myself a bigger hard drive (1TB to 2TB, keeping my old one for backups). I dd the small one to the big one so I have all my data on my new drive. The only issue I have that 1TB of now unallocated space. Can I extend /dev/sda3…
shmink
  • 43
  • 1
  • 10
2
votes
1 answer

System updates in arch linux with /boot in separate partition?

Sometimes, certain packages updating in Arch Linux will edit certain files in the /boot directory. For example: $ sudo pacman -S linux ... ==> Creating gzip-compressed initcpio image: /boot/initramfs-linux-fallback.img ... If the boot partition was…
owen
  • 119
  • 1
  • 4
1
vote
1 answer

Second disk encryption using LUKS

I'm looking for a clear tutorial on how to do this but I'm encountering insufficient information everywhere. Namely, I have a laptop with the following disk configuration: Drive one has Fedora 38 installed and the drive is encrypted. However, I…
kubatron
  • 11
  • 1
1
vote
1 answer

Linux Hard drive encryption password invalid after memory size change

I have an almost fresh Kali linux installation in an Hyper-V virtual machine. It is configured with hard disk encryption during installation. After some working days, I reduced the amount of RAM memory reserved for the VM, but when I boot up the…
MarMarAba
  • 13
  • 2
1
vote
2 answers

How to install encrypted Debian/Mint on external drive and not overwrite internal ubuntu's grub?

I would like to install new encrypted debian or mint on external flash disk while already having windows and ubuntu installed in dual boot on internal drives. For booting I use ubuntu's grub on internal drives and I worry about possibility of…
Many
  • 111
  • 2
1
vote
0 answers

Fully encrypted Linux Mint install over multiple drives

I want to fully encrypt a fresh install of Linux Mint Cinnamon 19.X, including the boot-loader. I need a fully secure system. My current setup is as follows, which is pretty much how I'd like the future setup to be: 250GB SSD as main OS…
Lightworker
  • 11
  • 2
1
vote
1 answer

How to encrypt an external disk without backing-up/restoring the existing data?

I have an external USB disk with ext4 unencrypted: /dev/sda1 3.6T 2.9T 613G 83% /data I wish to encrypt this disk without losing data. I migrated this disk from Raspberry3 to Raspberry4, because of better performance I now wish to…
Sybil
  • 1,653
  • 5
  • 19
  • 37
1
2 3