[dm-crypt] cryptsetup without sudo

[dm-crypt] cryptsetup without sudo

[Henry Jenkins]

[-- Attachment #1: Type: text/plain, Size: 424 bytes --]

Is there some method using Ubuntu to set up a luks drive without root/sudo
access from the cli?

Currently I can use either `sudo cryptsetup luksOpen <drive> <name>` then
udisks or I can use gnome-disks to which does not requite sudo. So I'm
assuming there is a existing application that does not require using sudo
or the use of a GUI.

Motive - mounting a usb key without requiring elevated privs.

Thanks,

Henry Jenkins

[-- Attachment #2: Type: text/html, Size: 517 bytes --]

Re: [dm-crypt] cryptsetup without sudo

[.. ink ..]

[-- Attachment #1: Type: text/plain, Size: 1492 bytes --]

On Mon, Feb 24, 2014 at 3:29 PM, Henry Jenkins <henry@henryjenkins.name>wrote:

> Is there some method using Ubuntu to set up a luks drive without root/sudo
> access from the cli?
>
> Currently I can use either `sudo cryptsetup luksOpen <drive> <name>` then
> udisks or I can use gnome-disks to which does not requite sudo. So I'm
> assuming there is a existing application that does not require using sudo
> or the use of a GUI.
>
> Motive - mounting a usb key without requiring elevated privs.
>
> Thanks,
>
> Henry Jenkins
>
>
Your statements are a bit ambiguous to me.

you want to unlock a LUKS volumes without using sudo or manually elevate
privileges.This part is clear,the part that is not is if you want this
functionality from CLI or from GUI.

If you want to unlock the volume on the CLI without manually elevating,just
call udisks CLI from the terminal with the LUKS device and udisks will
unlock it for you and mount it.

If you want to unlock the volume from the GUI without manually
elevating,you can use gnome-disks directly to access the device and
gnome-disks will unlock it for you and mount it.

If you want to unlock the volume from another GUI,your file manager should
also be able to unlock it,just look for the device entry somewhere on the
device panel on the file manager,click the drive and the file manager will
unlock it for you and mount it.

udisks and a few of its GUI front ends should allow you to do what you want
without you manually elevating privileges.

[-- Attachment #2: Type: text/html, Size: 2166 bytes --]

Re: [dm-crypt] cryptsetup without sudo

[Clay Wells]

[-- Attachment #1: Type: text/plain, Size: 2098 bytes --]

If I understand the question, I think he wants to set up a volume without
being root.

What I have done in the past is setup the volume (say a USB drive) as root
but then chown myuser
and chmod +s myuser. Now I plug in the USB and unlock the device as my
user. I hope this addresses
your question, Henry.

Cheers,
Clay


On Mon, Feb 24, 2014 at 4:17 PM, .. ink .. <mhogomchungu@gmail.com> wrote:

>
> On Mon, Feb 24, 2014 at 3:29 PM, Henry Jenkins <henry@henryjenkins.name>wrote:
>
>> Is there some method using Ubuntu to set up a luks drive without
>> root/sudo access from the cli?
>>
>> Currently I can use either `sudo cryptsetup luksOpen <drive> <name>` then
>> udisks or I can use gnome-disks to which does not requite sudo. So I'm
>> assuming there is a existing application that does not require using sudo
>> or the use of a GUI.
>>
>> Motive - mounting a usb key without requiring elevated privs.
>>
>> Thanks,
>>
>> Henry Jenkins
>>
>>
> Your statements are a bit ambiguous to me.
>
> you want to unlock a LUKS volumes without using sudo or manually elevate
> privileges.This part is clear,the part that is not is if you want this
> functionality from CLI or from GUI.
>
> If you want to unlock the volume on the CLI without manually
> elevating,just call udisks CLI from the terminal with the LUKS device and
> udisks will unlock it for you and mount it.
>
> If you want to unlock the volume from the GUI without manually
> elevating,you can use gnome-disks directly to access the device and
> gnome-disks will unlock it for you and mount it.
>
> If you want to unlock the volume from another GUI,your file manager should
> also be able to unlock it,just look for the device entry somewhere on the
> device panel on the file manager,click the drive and the file manager will
> unlock it for you and mount it.
>
> udisks and a few of its GUI front ends should allow you to do what you
> want without you manually elevating privileges.
>
>
>
> _______________________________________________
> dm-crypt mailing list
> dm-crypt@saout.de
> http://www.saout.de/mailman/listinfo/dm-crypt
>
>

[-- Attachment #2: Type: text/html, Size: 3274 bytes --]

Re: [dm-crypt] cryptsetup without sudo

[Thomas Bächler]

[-- Attachment #1: Type: text/plain, Size: 1287 bytes --]

Am 24.02.2014 21:29, schrieb Henry Jenkins:
> Is there some method using Ubuntu to set up a luks drive without
> root/sudo access from the cli?
> 
> Currently I can use either `sudo cryptsetup luksOpen <drive> <name>`
> then udisks or I can use gnome-disks to which does not requite sudo. So
> I'm assuming there is a existing application that does not require using
> sudo or the use of a GUI.
> 
> Motive - mounting a usb key without requiring elevated privs.

Assuming you have udisks2, this shouldn't be a problem:

$ udisksctl
Usage:
  udisksctl [OPTION...] COMMAND

Commands:
  help            Shows this information
  info            Shows information about an object
  dump            Shows information about all objects
  status          Shows high-level status
  monitor         Monitor changes to objects
  mount           Mount a filesystem
  unmount         Unmount a filesystem
  unlock          Unlock an encrypted device
  lock            Lock an encrypted device
  loop-setup      Set-up a loop device
  loop-delete     Delete a loop device
  power-off       Safely power off a drive
  smart-simulate  Set SMART data for a drive

Use "udisksctl COMMAND --help" to get help on each command.

The 'unlock' command seems useful to you.


[-- Attachment #2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 901 bytes --]

Re: [dm-crypt] cryptsetup without sudo

[Henry Jenkins]

[-- Attachment #1: Type: text/plain, Size: 1549 bytes --]

Perfect! I hadn't noticed the 'udisksctl' command.

Thanks you all for taking your time to reply.

Henry


On Wed, Feb 26, 2014 at 5:05 AM, Thomas Bächler <thomas@archlinux.org>wrote:

> Am 24.02.2014 21:29, schrieb Henry Jenkins:
> > Is there some method using Ubuntu to set up a luks drive without
> > root/sudo access from the cli?
> >
> > Currently I can use either `sudo cryptsetup luksOpen <drive> <name>`
> > then udisks or I can use gnome-disks to which does not requite sudo. So
> > I'm assuming there is a existing application that does not require using
> > sudo or the use of a GUI.
> >
> > Motive - mounting a usb key without requiring elevated privs.
>
> Assuming you have udisks2, this shouldn't be a problem:
>
> $ udisksctl
> Usage:
>   udisksctl [OPTION...] COMMAND
>
> Commands:
>   help            Shows this information
>   info            Shows information about an object
>   dump            Shows information about all objects
>   status          Shows high-level status
>   monitor         Monitor changes to objects
>   mount           Mount a filesystem
>   unmount         Unmount a filesystem
>   unlock          Unlock an encrypted device
>   lock            Lock an encrypted device
>   loop-setup      Set-up a loop device
>   loop-delete     Delete a loop device
>   power-off       Safely power off a drive
>   smart-simulate  Set SMART data for a drive
>
> Use "udisksctl COMMAND --help" to get help on each command.
>
> The 'unlock' command seems useful to you.
>
>

[-- Attachment #2: Type: text/html, Size: 2136 bytes --]