From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <gmazyland@gmail.com>
Received: from mail.saout.de ([127.0.0.1])
 by localhost (mail.saout.de [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id 8xUUl3vebkeo for <dm-crypt@saout.de>;
 Mon,  9 Sep 2013 21:36:34 +0200 (CEST)
Received: from mail-ea0-x22e.google.com (mail-ea0-x22e.google.com
 [IPv6:2a00:1450:4013:c01::22e])
 (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits))
 (No client certificate requested)
 by mail.saout.de (Postfix) with ESMTPS
 for <dm-crypt@saout.de>; Mon,  9 Sep 2013 21:36:34 +0200 (CEST)
Received: by mail-ea0-f174.google.com with SMTP id z15so3389574ead.33
 for <dm-crypt@saout.de>; Mon, 09 Sep 2013 12:36:33 -0700 (PDT)
Message-ID: <522E233E.4010702@gmail.com>
Date: Mon, 09 Sep 2013 21:36:30 +0200
From: Milan Broz <gmazyland@gmail.com>
MIME-Version: 1.0
References: <1378751179.84311.YahooMailNeo@web163103.mail.bf1.yahoo.com>
In-Reply-To: <1378751179.84311.YahooMailNeo@web163103.mail.bf1.yahoo.com>
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Subject: Re: [dm-crypt] Can I encrypt an already existing,
 non-empty partition to use LUKS?
List-Id: <dm-crypt.saout.de>
List-Unsubscribe: <http://www.saout.de/mailman/options/dm-crypt>,
 <mailto:dm-crypt-request@saout.de?subject=unsubscribe>
List-Archive: <http://www.saout.de/pipermail/dm-crypt/>
List-Post: <mailto:dm-crypt@saout.de>
List-Help: <mailto:dm-crypt-request@saout.de?subject=help>
List-Subscribe: <http://www.saout.de/mailman/listinfo/dm-crypt>,
 <mailto:dm-crypt-request@saout.de?subject=subscribe>
To: Enda <enda_k2@yahoo.com>
Cc: "dm-crypt@saout.de" <dm-crypt@saout.de>

On 09/09/2013 08:26 PM, Enda wrote:
> https://code.google.com/p/cryptsetup/wiki/FrequentlyAskedQuestions
> 
> The FAQ says "there is no converter, and it is not really needed."
> 
> 
> I already have a backup of my data, and I could wipe all the files on
> the drive with luks and then restore from backup but I would prefer
> to keep the files on the drive in case something happened to the
> backup files.>
> Is it possible to encrypt an already existing, non-empty partition to use LUKS?

Well, there is a way. It is not in-place encryption (the data are shifted) so you need
reserve some space in the end of device (either by increasing partition or
by shrinking the filesystem a little bit).

Read http://asalor.blogspot.cz/2012/08/re-encryption-of-luks-device-cryptsetup.html
and man page of cryptsetup-reencrypt.

And do not try it without backup, reencrypting is still experimental thing.

Milan