When dealing with LUKS-encrypted partitions in Linux, performing filesystem checks requires special handling. Unlike standard partitions where you can simply unmount and run fsck, encrypted partitions need additional steps to access the underlying filesystem.

• A bootable Ubuntu Live USB (same or newer version than your installed system)
• Root access on the live environment
• Knowledge of your LUKS passphrase

Insert your Ubuntu Live USB and boot from it. Select "Try Ubuntu" to enter the live session without installing.

Open terminal and identify your encrypted partitions:

sudo lsblk -f
sudo cryptsetup luksDump /dev/sdXY

Look for partitions with crypto_LUKS type and note their device paths (typically /dev/sdXY).

For each encrypted partition you need to check:

sudo cryptsetup open --type luks /dev/sdXY encrypted_root

Replace sdXY with your actual partition and encrypted_root with a meaningful name.

After unlocking, the decrypted device will appear in /dev/mapper/. Verify with:

ls -l /dev/mapper/

Now you can run filesystem check on the mapped device:

sudo fsck -y /dev/mapper/encrypted_root

Use -y to automatically repair errors or -n for a dry run first.

After completing the checks, properly close the LUKS device:

sudo cryptsetup close encrypted_root

• If fsck reports "clean" but you suspect issues, try fsck -f to force checking
• For advanced recovery, consider debugfs or testdisk tools
• Always backup your LUKS header before major operations

For frequent checks, create a script like this:

#!/bin/bash
set -e

DEVICE="/dev/sda2"
MAPPER_NAME="temp_crypt"

cryptsetup open --type luks "$DEVICE" "$MAPPER_NAME"
fsck -y "/dev/mapper/$MAPPER_NAME"
cryptsetup close "$MAPPER_NAME"

---

When dealing with LUKS-encrypted partitions in Linux, running filesystem checks requires special consideration because:

• You cannot run fsck on mounted partitions
• The encryption layer adds complexity to the repair process
• Standard recovery methods don't work out of the box

Before attempting any repairs, ensure you have:

sudo apt-get install cryptsetup
sudo apt-get install lvm2

And a Ubuntu live USB (or any Linux live environment with cryptsetup support).

1. Boot into Live Environment

Start your system using a Ubuntu live USB. Select "Try Ubuntu" rather than installing.

2. Identify Encrypted Partitions

First, list all available block devices:

sudo fdisk -l
sudo lsblk -f

3. Open the LUKS Container

For each encrypted partition (e.g., /dev/sda5):

sudo cryptsetup luksOpen /dev/sda5 crypt_sda5

You'll be prompted for your LUKS passphrase.

4. Check for LVM Volumes

If using LVM (common with Ubuntu's default LUKS setup):

sudo vgscan --mknodes
sudo vgchange -ay

5. Run Filesystem Check

Now you can run fsck on the decrypted devices:

sudo fsck -fy /dev/mapper/ubuntu--vg-root
sudo fsck -fy /dev/mapper/ubuntu--vg-home

The -f flag forces checking even if the filesystem appears clean, while -y automatically answers "yes" to repair prompts.

After repairs:

sync
sudo cryptsetup luksClose crypt_sda5

Reboot your system normally.

To enable periodic filesystem checks on encrypted partitions:

sudo tune2fs -c 30 /dev/mapper/ubuntu--vg-root

This sets a check every 30 mounts.

• Cryptdevice not found: Ensure you're using the correct device path
• Passphrase rejected: Try different keyboard layouts
• Superblock errors: Use alternate superblocks with fsck -b 8193