My experience with #FlashDrives recently has been mixed. I have no problem in encrypting them with #LUKS, using #cryptsetup or with formatting a partition with #Btrfs, for instance, using #gparted and doing other tinkering with #Gnome #disks. But the problem has been with the actual drives themselves. The cheaper ones seem to have quite a few bad sectors, etc. and so they’re not really reliable for medium term storage.

1/2

Does someone have a working #nixos setup where they decrypt their drive via #cryptsetup that they access remotely via #tailscale?

That's what I am building for my new working machine.

Also WakeOnLan (via local network though).

#followerpower

Does someone have a working #nixos setup where they decrypt their drive via #cryptsetup that they access remotely via #tailscale?

That's what I am building for my new working machine.

Also WakeOnLan (via local network though).

#followerpower

TIL: If you want to `cryptsetup open` a BitLocker encrypted drive using the recovery key (8 blocks of 6 digits each), make sure to enter it _with_ the dashes between each block of digits, else it won't be recognized.

hey neat, Linux 6.10 improved disk encryption performance on my system by ~42% https://gist.github.com/lucaswerkmeister/965d312193362ccfea6378006ce8cb81

Quick guide on encrypting an external drive. Assuming the drive is at /dev/sda with a /dev/sda1 partition

Set up encrypted volume (-y for verifying the password)
# cryptsetup luksFormat -y -v /dev/sda1

Unlock the encrypted volume and create a mapping to /dev/mapper/DUDE
# cryptsetup luksOpen /dev/sda1 DUDE

Create a file system
# mkfs.ext4 /dev/mapper/DUDE

Mount the partition
# mkdir /mnt/DUDE
# mount /dev/mapper/DUDE /mnt/DUDE

Mit Agent Shredder kannst du unterwegs verschlüsselte Backups von SD Karten erstellen und diese unwiederbringlich löschen.

tragbar
offline
off grid
LUKS
passt in die Hosentasche

@AgentShredder nutzt Open Source Software nach aktuellem Stand der Technik.

#Cryptsetup 2.7.0 Unveils Advanced #OPAL Hardware Encryption Support

https://linuxiac.com/cryptsetup-2-7-0-unveils-advanced-opal-hardware-encryption-support/

Cómo formatear y cifrar un disco externo usb con LUKS usando el rol de Ansible gcoop-libre.luks

#Ansible #AnsibleRole #Backup #Crypt #CryptSetup #Disk #LUKS #LuksFormat #Pass #PasswordStore #Privacy #Restore #USB

https://osiux.com/2021-01-25-ansible-luks-format-external-usb-disk.html

@campuscodi: A few notes and thoughts on CVE-2023-2283 in #libssh:

* libssh (libssh-4 in Debian and derivatives) ≠ libssh2 (libssh2-1 in Debian and derivatives)

* Obviously only servers using libssh to let users log in should be affected by any authentication bypass. Most libssh reverse dependencies though seem to be client-side applications.

The only potential libssh server-side reverse dependencies I found so far are:

* #cryptsetup-ssh
* #tmate-ssh-server
* maybe #cockpit-bridge

#cryptsetup #benchmark results on #orangepi5 running #armbian with bsp kernel. Maybe somebody's interested.

https://p.na4.eu/?0909d52216fa4695#DjuXLDN5hMTfxX1Mw7yzdcEb7VBWbkQgY6rETs5X11zS

LUKS: Alte verschlüsselte Container unsicher? Ein Ratgeber für Updates

Angeblich konnte die französische Polizei einen LUKS-Container knacken. Kein Grund zur Panik, aber ein Anlass, Passwörter und LUKS-Parameter zu hinterfragen.

https://www.heise.de/news/Alte-LUKS-Container-unsicher-Ein-kleiner-Update-Ratgeber-8981054.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege

Letting #cryptsetup upstream know how much their work is appreciated → https://gitlab.com/cryptsetup/cryptsetup/-/issues/802#note_1367867393

mjg59 | PSA: upgrade your LUKS key derivation function
https://mjg59.dreamwidth.org/66429.html #LUKS #cryptsetup #Linux #Security #Privacy #rr #encryption