DM-Crypt Archive on lore.kernel.org
 help / color / mirror / Atom feed
* [dm-crypt] Can I encrypt an already existing, non-empty partition to use LUKS?
@ 2013-09-09 18:26 Enda
  2013-09-09 19:36 ` Milan Broz
  0 siblings, 1 reply; 2+ messages in thread
From: Enda @ 2013-09-09 18:26 UTC (permalink / raw)
  To: dm-crypt@saout.de

https://code.google.com/p/cryptsetup/wiki/FrequentlyAskedQuestions

The FAQ says "there is no converter, and it is not really needed."


I already have a backup of my data, and I could wipe all the files on the drive with luks and then restore from backup but I would prefer to keep the files on the drive in case something happened to the backup files.

Is it possible to encrypt an already existing, non-empty partition to use LUKS?



-- Enda

^ permalink raw reply	[flat|nested] 2+ messages in thread

* Re: [dm-crypt] Can I encrypt an already existing, non-empty partition to use LUKS?
  2013-09-09 18:26 [dm-crypt] Can I encrypt an already existing, non-empty partition to use LUKS? Enda
@ 2013-09-09 19:36 ` Milan Broz
  0 siblings, 0 replies; 2+ messages in thread
From: Milan Broz @ 2013-09-09 19:36 UTC (permalink / raw)
  To: Enda; +Cc: dm-crypt@saout.de

On 09/09/2013 08:26 PM, Enda wrote:
> https://code.google.com/p/cryptsetup/wiki/FrequentlyAskedQuestions
> 
> The FAQ says "there is no converter, and it is not really needed."
> 
> 
> I already have a backup of my data, and I could wipe all the files on
> the drive with luks and then restore from backup but I would prefer
> to keep the files on the drive in case something happened to the
> backup files.>
> Is it possible to encrypt an already existing, non-empty partition to use LUKS?

Well, there is a way. It is not in-place encryption (the data are shifted) so you need
reserve some space in the end of device (either by increasing partition or
by shrinking the filesystem a little bit).

Read http://asalor.blogspot.cz/2012/08/re-encryption-of-luks-device-cryptsetup.html
and man page of cryptsetup-reencrypt.

And do not try it without backup, reencrypting is still experimental thing.

Milan

^ permalink raw reply	[flat|nested] 2+ messages in thread

end of thread, other threads:[~2013-09-09 19:36 UTC | newest]

Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2013-09-09 18:26 [dm-crypt] Can I encrypt an already existing, non-empty partition to use LUKS? Enda
2013-09-09 19:36 ` Milan Broz

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox