Is it possible to do full disk encryption after install?
I denied it during the install but now I change my mind and want to do a full disk encryption!
I denied it during the install but now I change my mind and want to do a full disk encryption!
Fedora uses LUKS for providing encrypted partitions.
LUKS itself suggest you to backup the desired partitions, create a LUKS partition on top of it using cryptsetup luksFormat
, and restore the backup on it: https://gitlab.com/cryptsetup/cryptse... (section 2.5)
However, if you look for inplace encryption with LUKS ( https://www.google.com/search?q=inpla... ), you will find a number of tools like luksipc: http://www.johannes-bauer.com/linux/l... which may make your life easier.
Yes it is possible, as it's documented on the official documentation:
Also a good read on the Storage Administration Guide
Please note "The commands below will destroy any existing data on the device." . So yes you can create a new crypt, you can not convert your current install as encryption is destructive to the data.
You can migrate /home with ecryptfs, but you can not encrypt all of / without backup / restore. As this is a fresh install IMO it is much easier, faster, and more reliable to reinstall.
Asked: 2015-10-18 20:06:20 -0600
Seen: 14,869 times
Last updated: Oct 19 '15
Two Questions on Full Disk Encryption
os-prober doesn't seem to find windows 7.
Encrypting drives during installation + doubt with swap area.
seahorse-nautilus GnomeKeyring file encryption?
Systemd disk errors, booting fails with certain kernels
kernel panic after grub menu selection
How can I get ecryptfs to mount ~/Private?