Lab
A Cloud Guru

Fix This Broken Encrypted Linux Block Device

In this activity you will resolve an issue that prevents a LUKS container from being opened successfully. You are working as a System Administrator and tasked with opening and mounting a corrupted LUKS container. Currently the device is not recognized as a LUKS container as shown by the isLuks command: ``` # cryptsetup -v isLuks /dev/loop0 Command failed with code -1 (wrong or missing parameters). ``` You will need to login to the remote system running CentOS Linux 7.7 and resolve the issue.

Try for free Contact sales

Path Info

Level

Intermediate

Duration

15m

Published

Jan 31, 2020

Challenge

Repair the Corruption

sudo cryptsetup luksHeaderRestore --header-backup-file /root/header.backup /dev/loop0

Challenge

Confirm the LUKS Container Is Intact
```
sudo cryptsetup -v isLuks /dev/loop0
```

Challenge

Open the LUKS container Using the Keyfile in /root/lukskey

sudo cryptsetup luksOpen /dev/loop0 encvol --key-file /root/lukskey

Challenge

Mount the Filesystem and Confirm the Data Is Readable
Mount the filesystem:
```
sudo mount /dev/mapper/encvol /mnt
```
Read data:
```
cat /mnt/secret
```

Author

A Cloud Guru

The Cloud Content team comprises subject matter experts hyper focused on services offered by the leading cloud vendors (AWS, GCP, and Azure), as well as cloud-related technologies such as Linux and DevOps. The team is thrilled to share their knowledge to help you build modern tech solutions from the ground up, secure and optimize your environments, and so much more!

What's a lab?

Hands-on Labs are real environments created by industry experts to help you learn. These environments help you gain knowledge and experience, practice without compromising your system, test without risk, destroy without fear, and let you learn from your mistakes. Hands-on Labs: practice your skills before delivering in the real world.