I already asked once about LUKS unlocking of multiple HDDs in Linux: LUKS and multiple hard drives.
Now I would like to know how to secure store the keyfile used for the automatic unlock of the associated partitions.
My plan is (if possible):
Encrypt a small USB drive with LUKS that requires a passphrase
Unlock it at boot as the first drive by using the passphrase
Mount it to a given mount poi
I have a machine with a brand new install of Fedora 11 with luks encryption. I've added a keyfile to luks and have put that keyfile on a usb stick. I'd like the machine to boot all the way in when it's powered on with the usb stick plugged in.
My google-fu is not strong. Can't find answers on this one. Maybe I'm googling the wrong stuff.
Okay, so I just redid the server. Installed it something like this:
/dev/sda1, /boot, ext2 (unencrypted)
/dev/sda2, /, ext3 on luks
(Planning on a swapfile if needed.)
I was battling with setting up a Mint install on an encrypted hard-drive, and I think I partially succeeded.
TrueCrypt on Windows can auto mount volumes that use the same passphrase as the boot volume. You enter the passphrase only once. Is there a way to do this with LUKS?
Background: I'm currently migrating from Windows to Ubuntu. I set up Ubuntu 11.10 with LUKS full disk encryption. I use a second hard drive that is still a TrueCrypt NTFS volume. I want to change that.
I must say i'm new to ubuntu and already burned my head today looking for information so I'm asking this through here.
I recently installed Ubuntu onto an encrypted partition using the LUKS+LVM combination that the 'alternate' installer offers. Now I want to create backups of my HD.
From the LUKS FAQ:
6.15 Can I clone a LUKS container?
You can, but it breaks security, because the cloned container has the
same header and hence the same master key.
I have a Debian Linux system (amd64) installed on a RAID-1 system encrypted device (LVM on LUKS) and will have a RAID-6 of >=4 disks where I'll put my data (LUKS and maybe LVM).
I think the basic idea is to unlock the system encrypted partition (at boot at local or via ssh) and to store a keyfile in /etc/crypttab for the RAID-6 encrypted partition. Does that pose a security risk ? I mean ...
Partition scheme:/dev/sda/ - /dev/sda1: /boot/efi, 512M - /dev/sda2: /boot, 100M - /dev/sda3: lvm partition (/, var, home)+ lvm on luks.install from usb: dd if=archlinux-2012-08-04.iso of=/dev/sdXInstallation steps:- boot from usb with noapic parameter- partition- encrypt /dev/sda3- partitioning on /dev/sda3 (/,var,home)- mkfs.vfat -F32 /dev/sda1; mkfs.ext2 /
Email this page
