this post was submitted on 05 Jul 2025
19 points (95.2% liked)

Arch Linux

8868 readers
13 users here now

The beloved lightweight distro

founded 5 years ago
MODERATORS
 

Today, after decrypting my encrypted drive, the system failed to boot into it.

I forget what the error said. It maybe said that it could not fine new_root or something.

I tried something like the following, by I don't know what it does.

cryptsetup reencrypt --decrypt --header new_file device_path

I'm not sure what it does and what the --header part does. It was taking too long, so interrupted with a reboot. Now its saying their device is not a valid LUKS device.

top 11 comments
sorted by: hot top controversial new old
[–] HelloRoot@lemy.lol 20 points 1 day ago* (last edited 1 day ago) (2 children)

I think you might have fucked your data.

  1. when you get an error like on your boot, take a screenshot, write it down, search online, ask for help with the exact error online

  2. when you don't know what a command does, don't run it

Afaik the command tried to re-encrypt your drive. If you canceled it, well now you have a drive in some undetermined state and since it was reencrypting it your data is now mumho jumbo.

[–] MentalEdge@sopuli.xyz 6 points 1 day ago* (last edited 1 day ago)

The --decrypt option is used to remove LUKS encryption entirely and turn the partition into a normal storage volume.

Interrupting that process is still likely to have irreparably damaged the volume, making it impossible to recover.

[–] MyNameIsRichard@lemmy.ml 6 points 1 day ago

Still, you've got backups, haven't you?

[–] MentalEdge@sopuli.xyz 9 points 1 day ago

Interrupting hard drive operations is REALLY dangerous.

Add to that the sensitivities of encrypted volumes, and I'm 90% sure your data is gone. Hope you had backups.

You'll probably have to re-install.

[–] TheTechnician27@lemmy.world 5 points 1 day ago* (last edited 1 day ago) (1 children)

OP, I would seriously consider trying the Arch Wiki for this. I really hope you had a backup, but you probably need expert-level advice here (at least below "paid data recovery specialist") if you have any hope of unfucking this. Obviously you've learned your lesson about running random commands you don't understand in response to an error message, so I don't think people should be scolding you for that.

[–] dudesss@lemmy.ca 3 points 1 day ago* (last edited 1 day ago) (1 children)

The command had the --decrypt option so I thought that would make it decrypt.

I was following step 1.3 here, in trying to "decrypting LUKS2 devices in-place."

https://wiki.archlinux.org/title/Removing_system_encryption

[–] MentalEdge@sopuli.xyz 4 points 1 day ago* (last edited 1 day ago)

This seems reasonable. And you're right.

But there is absolutely no way that interrupting such an operation with a forced power-cycle can be safe. In fact it's an almost guaranteed way to put a data partition into a irrecoverable state.

When it comes to storage operations, you either let them fail, or complete. Interrupting file system modifications is a HUGE no-no.

[–] just_another_person@lemmy.world 4 points 1 day ago (1 children)

Seems like you really need to provide logs...

[–] Stanley_Pain@lemmy.dbzer0.com 7 points 1 day ago (1 children)

Stopped reading at. I don't know what the error was.

Perhaps that would be the first place to start?

"I'm trying to fly my plane, but all my instruments are dead, and I don't know where I took off from or how long I've been flying...plzhalp"

[–] 9tr6gyp3@lemmy.world 3 points 1 day ago

Why did you try to reencrypt your drive? Thats not typically a resolution for not being able to boot into your system.