[dm-crypt] re-format existing luks partition

Ondrej Kozina okozina at redhat.com
Fri Nov 22 11:33:48 CET 2013


On 11/22/2013 09:26 AM, shmick at riseup.net wrote:
> can i re-format an existing luks partition (as the same /dev/sda[x] and
> simply re-copy an fsarchive operating system backup straight to it
> without anything further required ?

There's an offline cryptsetup-reencrypt tool in cryptsetup 1.5.0 and 
later. It's really offline so the device needs to umnouted before 
reencrypting.

Also you should consider shrinking the filesystem residing on the luks 
device (and after that also the device) before actual reencryption. It 
makes reencryption sector-by-sector no matter if it is used by 
filessytem or not.

Also there are some fixes ready for reencryption tool on the way so you 
may be also interested waiting for 1.6.3 release in coming weeks.

Regards
Ondrej


More information about the dm-crypt mailing list