[dm-crypt] Can I encrypt an already existing, non-empty partition to use LUKS?
gmazyland at gmail.com
Mon Sep 9 21:36:30 CEST 2013
On 09/09/2013 08:26 PM, Enda wrote:
> The FAQ says "there is no converter, and it is not really needed."
> I already have a backup of my data, and I could wipe all the files on
> the drive with luks and then restore from backup but I would prefer
> to keep the files on the drive in case something happened to the
> backup files.>
> Is it possible to encrypt an already existing, non-empty partition to use LUKS?
Well, there is a way. It is not in-place encryption (the data are shifted) so you need
reserve some space in the end of device (either by increasing partition or
by shrinking the filesystem a little bit).
and man page of cryptsetup-reencrypt.
And do not try it without backup, reencrypting is still experimental thing.
More information about the dm-crypt