Ask Your Question
1

Is it possible to do full disk encryption after install?

asked 2015-10-18 20:06:20 -0500

JonthueM87 gravatar image

updated 2015-10-20 20:48:26 -0500

mether gravatar image

I denied it during the install but now I change my mind and want to do a full disk encryption!

edit retag flag offensive close merge delete

2 Answers

Sort by ยป oldest newest most voted
1

answered 2015-10-19 14:36:53 -0500

hedayat gravatar image

Fedora uses LUKS for providing encrypted partitions.

LUKS itself suggest you to backup the desired partitions, create a LUKS partition on top of it using cryptsetup luksFormat , and restore the backup on it: https://gitlab.com/cryptsetup/cryptse... (section 2.5)

However, if you look for inplace encryption with LUKS ( https://www.google.com/search?q=inpla... ), you will find a number of tools like luksipc: http://www.johannes-bauer.com/linux/l... which may make your life easier.

edit flag offensive delete link more

Comments

Thank You. I need ya yo go easy on me lol!

JonthueM87 gravatar imageJonthueM87 ( 2015-10-19 19:09:48 -0500 )edit

You're welcome! :)

hedayat gravatar imagehedayat ( 2015-10-20 04:18:18 -0500 )edit
1

answered 2015-10-19 04:56:09 -0500

updated 2015-10-19 04:57:30 -0500

Yes it is possible, as it's documented on the official documentation:

Disk Encryption User Guide

Also a good read on the Storage Administration Guide

edit flag offensive delete link more

Comments

2

Please note "The commands below will destroy any existing data on the device." . So yes you can create a new crypt, you can not convert your current install as encryption is destructive to the data.

bodhi.zazen gravatar imagebodhi.zazen ( 2015-10-19 10:58:57 -0500 )edit

It seems that eCryptfs can do that.

lnxslck gravatar imagelnxslck ( 2015-10-19 12:47:04 -0500 )edit
1

You can migrate /home with ecryptfs, but you can not encrypt all of / without backup / restore. As this is a fresh install IMO it is much easier, faster, and more reliable to reinstall.

bodhi.zazen gravatar imagebodhi.zazen ( 2015-10-20 09:34:41 -0500 )edit

Thanks @bodhi.zazen for the clarification

lnxslck gravatar imagelnxslck ( 2015-10-21 04:10:47 -0500 )edit

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

2 followers

Stats

Asked: 2015-10-18 20:06:20 -0500

Seen: 14,694 times

Last updated: Oct 19 '15