LUKS

Linux Unified Key Setup

Linux Unified Key Setup

Taken from the official LUKS website (with a little cleanup):
LUKS is the upcoming standard for Linux hard disk encryption. By providing a standard on-disk-format, it not only facilitates compatibility among distributions, but also provides secure management of multiple user passwords. In contrast to existing solutions, LUKS stores all necessary setup information in the partition header, enabling the user to transport or migrate his data seamlessly.

The LUKS website hosts official releases of cryptsetup-luks including a basic manpage about its use. The following pages should constitute a community-editable collection of documentation, HOW-TOs and possible distribution-specific information the official website is unable to keep track of. Feel free to contribute according to your personal tips

General distribution-neutral documentation

  • LUKSFaq - Frequently Asked Questions.
  • Step by step instructions to make an EncryptedDeviceUsingLUKS i.e. encrypt one whole hard disk (or partition) from scratch, using 'cryptsetup-luks' (better, newer, preferred).
  • Step by step instructions to make an EncryptedVarWithUSBKey i.e. encrypt the /var partition on a live system without loss of data, using luks.
  • How to ResizeLUKSPartitions under LVM2
  • How to automount LUKS encrypted volumes in KDE
  • pmount supports opening and closing of LUKS logical devices from userspace at Acompanhantes. Although you cannot create LUKS devices as an unprivilaged user (using cryptsetup), pmount lets you mount LUKS encrypted volumes easily from userspace after they have been created.

Distribution-specific documentation

LUKSDistroSupportStatus - LUKS distribution support status

Gentoo

Fedora


CentOS

SUSE/OpenSUSE

Ubuntu

Debian

  • HOWTO use Cryptsetup with LUKS support - External Link
  • HOWTO install a Debian GNU/Linux system onto a USB flash thumbdrive with the root partition encrypted (using Yaird & DM-Crypt) - External Link
  • HOWTO install Debian GNU/Linux onto a USB thumbdrive with the root partition encrypted (using UUIDs, Initramfs-tools & Dm-Crypt) - External Link
  • a German HOWTO for Debian, using cryptsetup-Luks and LVM2. Please follow external link.
  • a German HOWTO for Debian, using cryptsetup or cryptsetup-Luks. Please follow external link and also some useful information here at

Code and Scripts

Cross platform portability



Created by: clemens last modification: Monday 06 of September, 2010 [20:02:30 UTC] by anonymous

The original document is available at http://www.saout.de/tiki-index.php?page=LUKS