mevdschee/bitlocker-luks-tools

bitlocker-luks-tools's Issues

Sharing usb key with more content

In your guide, you mention:

Technically it may contain any other content and may be followed by one or more partitions of any type. I prefer to leave them with only this single hidden partition as it prevents (non-technical) people from using the USB stick as a drive (I use key shaped USB drives). You can find some of my scripts on my GitHub

What is the problem you have found of having several other partitions available in such disk for content?

Ubuntu 22.04 issues

Hello, unfortunately I seem to have run into some troubles with Ubuntu 22.04. After using your scripts, Everything seems to set up fine but at the luks prompt It dosent seem to find/accept the key file on the usb.

I then tried following your step by step instructions https://tqdev.com/2022-luks-with-usb-unlock. At the luks screen it just loops continuously saying I've tried to many times unsuccessfully.

Is there and issue with 22.04 that you might be aware of? Could it be a hardware problem?

Thanks

Debian 11: `mount` fails with error "device does not exist."

@Rodgers13 I had this issue too, on Debian 11. mount was failing for the partition containing the key file, with an error message of "device does not exist."

I found this unlock-root.sh script. Instead of adding a filesystem and mounting it on boot, the keyfile is written directly to the first partition. The script just uses dd to read in the raw disk content.

Also, a big thank you to mevdschee for this repo and the very well-written blog post, I found it to be very helpful 🥇

---

# find your USB stick in /dev/disk/by-id/usb-*
export $KEY=/dev/disk/by-id/usb-THE-DEVICE-YOU-WANT-TO-USE-part1

# write the keyfile contents to the first partition
dd if=keyfile-you-created.lek of=$KEY bs=1 count=256

# use the script above, fill out $KEY and set $LEN=256

Originally posted by @mheppner in #1 (comment)