4

Automount LUKS encrypted NTFS USB disk in RHEL 5.3

view full story
linux-howto

http://www.linuxforums.org – Hi I have an external 300GB (Toshiba) disk which I encrypted (using cryptsetup luksFormat) and then installed an NTFS filesystem on (need to be able to use it in both Linux and Windows - using FreeOTFE). The disk mounts fine in windows and on my Fedora 10 system it automounts. I can manually mount it on the RHEL5.3 system, and gnome-mount gets as far as recognising that it is encrypted and asking for the key, but it doesn't then mount it - I then have to manually mount the /dev/mapper/luks... device. Does anyone know how to do this - if it works in Fedora 10 it ought to be possible to get it to work in EL5.3 I'd have thought. Thanks for your help. (HowTos)

linuxguru's picture
Submitted by linuxguru on 12/23/2009 – Made popular on 12/23/2009

Stories similar to Automount LUKS encrypted NTFS USB disk in RHEL 5.3

Hello,

I have a luks encrypted device that I mount on demand by clicking on it in the places menu (yes I am using Gnome fallback mode). In Fedora 16 everything worked fine but in Fedora 17 I am facing two issues.

First root password is asked to unlock the luks system.

I created an encrypted container via

#!/bin/bash dd if=/dev/zero of=$1 bs=1 count=0 seek=1G MAPPER=$(mktemp -up /dev/mapper) LOOPDEV=$(losetup --find --show dm1) cryptsetup luksFormat $LOOPDEV cryptsetup luksOpen $LOOPDEV $(basename $MAPPER) mkfs.ext3 $MAPPER cryptsetup luksClose $MAPPER losetup -d $LOOPDEV

i.e. a file e.g.

I think I figured out where I went wrong. When I did cryptsetup on this disk I did a luksFormat on /dev/sdc1 instead of /dev/sdc. When I first got the device it was most likely partitioned as FAT32, so a /dev/sdc1 existed in the /dev directory. Is there a difference between luksFormat'ing /dev/sdc or /dev/sdc1 in that situation? I'm guessing yes.

I am in progress of resizing a LUKS encrypted partition that contains a single ext4 filesystem (no LVM or something). The cryptsetup FAQ recommends to remove the old partition and recreate it, but that sounds like wasting a lot time. Therefore I want to proceeed by manually, carefully resizing the partition.

So far, I think that I need to do:

Unmount the existing ext4 filesystem (e.g.

under Ubuntu there are several mount helpers to support easy mounting of encrypted (cryptsetup/luks) removable media such as USB drives. Under Gnome/Unity/XFCE a requester is opend, just enter the password, and everything is going well.

I have a System76 Lemur Ultra Thin (lemu4) with Ubuntu 12.04.1 64 bit Long Term Service installed as the primary and default operating system. I also have an older Seagate FreeAgent Desk 1.50 terabyte USB 2.0 external desktop hard disk drive. I launched the Disks utility and I formatted this hard disk drive using GPT.

My google-fu is not strong. Can't find answers on this one. Maybe I'm googling the wrong stuff.

Okay, so I just redid the server. Installed it something like this: /dev/sda1, /boot, ext2 (unencrypted) /dev/sda2, /, ext3 on luks (Planning on a swapfile if needed.)

Since some recent update one of my LUKS-encrypted volumes is not being mounted correctly.I used to have this .mount file as the volume actually is a multi-device btrfs volume:[Unit] Description=/mnt/archive Wants=cryptsetup.target After=cryptsetup.target

[Mount] What=/dev/mapper/archive1 Where=/mnt/archive Type=btrfs Options=defaults,noatime,nodiratimeThe error I get when I try to manually start

Is there a way to mount (read/write) an encrypted file system on Windows? By "encrypted" I mean whatever it is that Ubuntu does to encrypt a file system when you choose that option during formatting. The underlying file system is in NTFS format.

A related question: is it correct to assume that encrypting and the file system format are completely independent things?