On 14/11/2021 20.06, Andrei Borzenkov wrote:
On 14.11.2021 21:32, Carlos E. R. wrote:
On 14/11/2021 17.27, Marco Calistri wrote:
Hello,
I collected very few documentation regarding file-system encryption on Linux.
I understand that it must be done at format stage and not after the FS has been sized and installed, in order to prevent data loss.
I would BTW like to ask here if, in case I decide to encrypt just my /home dir (separated partition) with the existing data it contains, which risks I'm gonna to face.
Can not be done.
Actually it can. LUKS2 even supports in place encryption natively (cryptsetup reencrypt), for LUKS1 there were external tools. Of course, using them without full backup is strongly not recommended.
:-o -- Cheers / Saludos, Carlos E. R. (from oS Leap 15.2 x86_64 (Minas Tirith))