From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <glkdd-dm-crypt@m.gmane.org>
Received: from mail.saout.de ([127.0.0.1])
 by localhost (mail.saout.de [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id PVYsK7G0CdHo for <dm-crypt@saout.de>;
 Thu, 21 Nov 2013 17:20:10 +0100 (CET)
Received: from plane.gmane.org (plane.gmane.org [80.91.229.3])
 (using TLSv1 with cipher AES256-SHA (256/256 bits))
 (No client certificate requested)
 by mail.saout.de (Postfix) with ESMTPS
 for <dm-crypt@saout.de>; Thu, 21 Nov 2013 17:20:09 +0100 (CET)
Received: from list by plane.gmane.org with local (Exim 4.69)
 (envelope-from <glkdd-dm-crypt@m.gmane.org>) id 1VjWzB-0002U8-9n
 for dm-crypt@saout.de; Thu, 21 Nov 2013 17:20:09 +0100
Received: from c-98-227-220-190.hsd1.il.comcast.net ([98.227.220.190])
 by main.gmane.org with esmtp (Gmexim 0.1 (Debian))
 id 1AlnuQ-0007hv-00
 for <dm-crypt@saout.de>; Thu, 21 Nov 2013 17:20:09 +0100
Received: from rnicholsNOSPAM by c-98-227-220-190.hsd1.il.comcast.net with
 local (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00
 for <dm-crypt@saout.de>; Thu, 21 Nov 2013 17:20:09 +0100
From: Robert Nichols <rnicholsNOSPAM@comcast.net>
Date: Thu, 21 Nov 2013 10:19:58 -0600
Message-ID: <l6lbr4$b78$1@ger.gmane.org>
References: <528D60FC.4050008@elso.mine.nu> <20131121015745.GA18997@tansi.org>
 <528DC045.2040000@elso.mine.nu>
Mime-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
In-Reply-To: <528DC045.2040000@elso.mine.nu>
Subject: Re: [dm-crypt] Restore a LUKS partition
List-Id: <dm-crypt.saout.de>
List-Unsubscribe: <http://www.saout.de/mailman/options/dm-crypt>,
 <mailto:dm-crypt-request@saout.de?subject=unsubscribe>
List-Archive: <http://www.saout.de/pipermail/dm-crypt/>
List-Post: <mailto:dm-crypt@saout.de>
List-Help: <mailto:dm-crypt-request@saout.de?subject=help>
List-Subscribe: <http://www.saout.de/mailman/listinfo/dm-crypt>,
 <mailto:dm-crypt-request@saout.de?subject=subscribe>
To: dm-crypt@saout.de

On 11/21/2013 02:11 AM, Michael Grosseck wrote:
> On 21.11.2013 02:57, Arno Wagner wrote:
>> hd /dev/sda6 | head
> thanks Arno for your reply, the command above gives me this output:
>
> 00000000  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00 |................|
> *
> 000001b0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 ef |................|
> 000001c0  ff ff 83 ef ff ff 3f 00  00 00 11 31 9c 00 00 00 |......?....1....|
> 000001d0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00 |................|
> *
> 000001f0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 55 aa |..............U.|
> 00000200  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00 |................|
> *
> 00007e00  4c 55 4b 53 ba be 00 01  62 6c 6f 77 66 69 73 68 |LUKS....blowfish|

For some reason /dev/sda6 starts with a partition table and looks like
a correctly partitioned whole disk. Did you perhaps use dd to copy an
image of an entire disk onto your current /dev/sda6?

Anyway, if you just want to get access to copy the data elsewhere, you
can do this (as root):

        losetup -o $((0x7e00)) -f --show /dev/sda6

That will display the name of the loop device it used, probably /dev/loop0.
You can then use cryptsetup to unlock /dev/loop0, and all your data should
be there.  You will want to run "losetup -d /dev/loop0" to release the loop
device after you've done a luksClose.

(AFAIK, cryptsetup does not support the "--offset" option for luksOpen.
  That would have been a lot simpler.)

-- 
Bob Nichols     "NOSPAM" is really part of my email address.
                 Do NOT delete it.