Is it possible to do full disk encryption after install?
I denied it during the install but now I change my mind and want to do a full disk encryption!
add a comment
2 Answers
Fedora uses LUKS for providing encrypted partitions.
LUKS itself suggest you to backup the desired partitions, create a LUKS partition on top of it using cryptsetup luksFormat , and restore the backup on it: https://gitlab.com/cryptsetup/cryptse... (section 2.5)
However, if you look for inplace encryption with LUKS ( https://www.google.com/search?q=inpla... ), you will find a number of tools like luksipc: http://www.johannes-bauer.com/linux/l... which may make your life easier.
Comments
Yes it is possible, as it's documented on the official documentation:
Also a good read on the Storage Administration Guide
Comments
2
Please note "The commands below will destroy any existing data on the device." . So yes you can create a new crypt, you can not convert your current install as encryption is destructive to the data.
1
You can migrate /home with ecryptfs, but you can not encrypt all of / without backup / restore. As this is a fresh install IMO it is much easier, faster, and more reliable to reinstall.
Stats
Asked: 2015-10-18 20:06:20 -0600
Seen: 14,869 times
Last updated: Oct 19 '15
