How to put VeraCrypt onto Persistent USB drive with Linux-Lite for total noobs
Open source disk encryption with strong security for the Paranoid
Brought to you by:
idrassi
Menu
▾
▴
is it even possible to run VeraCrypt from a persistent Linux USB drive? Sure would be nice to carry around in your pocket a bootable Linux USb stick with VeraCrypt and your
encrypted files. I have tried but don't know what the heck I'm doing in the console.
Something(veracrypt) was placed in the /tmp directory but how to make that run and
make encrypted containers is beyond me. Maybe some other friendly Linux would be easier?
Or is it not possible and Veracrypt can only run from spinning media?
Thank you for any ideas!
Karrson
Hi Karrson,
VeraCrypt for Linux comes in two flavors: GUI and console.
The GUI version is targeted towards Desktops so it is easier to use.
VeraCrypt runs on all Linux distributions and it has been tested on portable Linux ones like TAILS.
Did you try to install the latest beta? It adds compatibility with some less common Linux systems with the graphical install was not working. You can get it from the Nightly Builds folder on the following URL: http://sourceforge.net/projects/veracrypt/files/VeraCrypt%20Nightly%20Builds/veracrypt-1.0f-2-Beta-setup.tar.bz2/download
Decompress the archive and then launch the file following file depending on your architecture:
64-bit Linux: veracrypt-1.0f-2-Beta-setup-gui-x64
32-bit Linux: veracrypt-1.0f-2-Beta-setup-gui-x86
If the graphical installer doesn't work, you still have the option to manually install. Don't choose extract to /tmp if you need to install VeraCrypt permanently on your system.
Don't hesitate to give your feedback.
By the way, what Linux flavor are you using?
Last point: I noticed that some anonymous posts tend to give no follow up after my answers. I think this is due to people not coming back here to check if there are any answers. By creating an account on Sourceforge, posters get a notification when an answer is available. So, if possible, I recommend to use a Sourceforge account to post in order for the forum discussion to remain alive.
Hi IDRASSI
Thank you for the ideas.
Linux-Lite 2.2 is what I was trying it on for a persistent USB portable carry around,
leave no trace, Live booting stick and never involve the system disk. Never install anything into the system disk. Hope this is possible.
My goal is trying to add Veracrypt into ANY Linux 'persistent' USB. Installing onto a system is NOT an option.
I have used TAILS but have not tried to put Veracrypt on it yet. I will try now.
Tails, we know, has its own persistent option but I have crashed??corrupted it a few times and made me annoyed.
Slax Linux has a Truecrypt .sb module but would not open containers after creating them. Some error about open 'loop'(?) For a while I thought to make a Slax .sb for Veracrypt to run on a Slax persistent USB but the complexity stopped me.
Veracrypt adds an excellent sense of security I really like. I want to carry it on a Live USB and never involve the system disk in any way. Just the USB stick, the motherboard and an internet connection. Persistent Veracrypt containers seem like a
good idea to have.
Learning Linux is fun but a challenge.
If I ever succeed I will post the most basic 'do this, type these words' instructions
for others with my limited skills.
karrson
Was unable to get the Veracrypt window to launch in TAILS. First tried that new 1.0f-2-Beta version and got 'cannot convert string' errors in the console.
A 1.0e version seemed to go better. Got past the point where it asked for my administrator password but no Veracrypt window would launch. And btw 'launch' is not a valid console command. Haha!
Searched for all files named veracrypt and changed directories 'cd' and typed the word
veracrypt but no application launches.
Of course I'm doing some basic blunder. Missing some obvious keystroke or action that no one thinks to mention. Like performing the load on just one of the 4 setups inside the file rather than all of them at once. Figuring that out took awhile.
I understand Tails is not 'Persistent' with any applications like veracrypt.
My goal is veracrypt being persistent on a live Linux USB stick without
the work of reloading it every time. I mean its not really an 'Install' if its gone after a reboot.
I'll keep working on this. Any ideas of hints are most welcome.
Thank you.
karrson
I have just tested veraCrypt 1.0f-2-Beta under TAILS 1.3 and it works perfectly.
The requirements are that you have to set a root password in TAILS (by clicking "more options" when it starts) and you have to use the file veracrypt-1.0f-2-Beta-setup-gui-x86 for the installation since TAILS is 32-bit.
The message 'cannot convert string' is a warning that has no effect.
Once installed, you can type launch VeraCrypt by typing 'veracrypt' in terminal.
Here is a screenshot showing a mounted volume under TAILS 1.3:
Linux Lite 2.2 is based on Ubuntu 14.04 LTS so it should work out of the box. For it work on your live USB, just copy the binary 'veracrypt' from /usr/bin and put it anywhere you want on the live USB.
Last edit: Mounir IDRASSI 2015-03-16
Hello IDRASSI. Thank you for the help and good ideas.
Earlier some partial success.
I was in error using 32-bit Linux-Lite 2.2 on a 64bit system AND trying to load veracrypt gui 64bit. Corrected to all 64bit. Such a noob error.
With Linux - Lite 2.2 x64
Placed a copy of veracrypt-1.0f-1-setup.tar.bz2 onto the desktop.
Right clicked it and chose 'extract here' and another veracrypt file
appears on the desktop.
It has a different color icon named veracrypt-1.0f-1-setup.
I click this one open and copy the veracrypt-1.0f-1-setup-gui-x64
onto the Desktop and close it leaving them available for future use.
I open a console window.
$ cd Desktop
$ ./veracrypt-1.0f-1-setup-gui-x64
this seems to run ok. I accept Terms of Use, etc.
I them type
$ veracrypt
and the normal veracrypt gui window opens. Victory!!!
But still problems. I create a container. For some reason it gets located
in the /media directory but its file icon shows up on the Desktop also.
(at this point I believe Linux operates outside the known laws of the universe!)
I try to click the new VC container open from within the Veracrypt window
but get pop-up error 'No such file or Directory: nautilus.'
I try to click open the new VC container icon on the Desktop: nothing happens.
I open a 2nd console window (the 1st is locked to VC and nonresponsive).
$ cd /media
I then can click open the new VC container on the desktop by clicking on the desktop icon.
I can transfer files into it. I can close its window. I can dismount it from inside the Veracrypt gui window.
... But I can never get it back open doing the same process. So still problems.
Note again my goal is for Veracrypt to be carryed and used on a 'live USB” stick with Linux. As long as it is 'persistent' and I do
not have to recreate the wheel every time I boot it, to open veracrypt containers and , of course, leave no trace on the system disk.
Again thank you for the help. Such fun should be enjoyed by all!
karrson
TWO 'how to' Linux Live Boot Veracrypt Tricks.
IDRASSI Thank you again for the support.
Total Success! I'm live booting Linux -Lite 2.2 x64 persistent mode on a 8Gb
USB stick. I can now reboot and Veracrypt is still on it and functional plus
all my files.
(working in a weird way...see below)
Containers I copied in from other media made on other systems ALSO work.
The 1st 'trick' in getting VC to live load onto the USB using a new i3 core
(april 2014) pc was to right click on the desk top file 'veracrypt-1.0f-1-
setup-console-x64' and click 'execute' in the pop up menu.
This avoided having to open the console myself and misdirecting the loading
process INTO THE WRONG DIRECTORY. Clicking 'execute' placed the console into
the directory it@it:~$ .
Now to make the veracrypt window gui appear I need only type the word
veracrypt when I open the console. The encrypted containers I maKe are also
placed into this directory so no need to do any cd 'ing
when I open the console.
Simple. Easy. Quick. Victory!
The 'execute' is at the top of the pop up window when I right clicked on the
extracted veracrypt-1.0f-1-setup-console-x64 file.
This may be a Linux-Lite 2.2 only thing. Maybe other distro's
will not have this or another word.
Perhaps the below is normal for a Linux veracrypt operation. It is so
different from Windows I will explain. It had me very confused.
2nd trick.
An explanation on the different 'weird' way Veracypt runs on this live booting
persistent Linux Lite 2.2 USB.
After typing in the password to open a VC container in the gui window and
clicking ok …...an 'icon' for that container will appear on the desktop.
Hover the mouse pointer over that new desktop icon and it says 'Removable
volume not mounted yet'. Right click on it and there is NO option to mount it.
But there is an option to 'Unmount Volume'. Do that. Unmount the Volume. Then
right click the container icon again and the option to 'Mount Volume' is now
available! Do that. Mount Volume. Now I can right click open that container
volume. Its opens and I can read the encrypted files in the normal way of an
open veracrypt container.
Important to note clicking 'open' inside the veracrypt widow on a numbered file container 'WILL NOT OPEN IT' as it would in Windows.
I have to 'UNMOUNT VOLUME' on the new desktop container icon then 'MOUNT
VOLUME'. And then right click the icon open. This is OUTSIDE of the veracrypt
gui window. Very different from Windows. But hey it works and is fast and
simple but an extra step. I can live with it. Still it is a trick and if you
don't know it very frustrating. I'll consider it a security feature. Haha.
karrson