[opensuse] Does LUKS volume info survive upgrade
To be more specific, I have a LUKS volume on /dev/sda3. I am about to reinstall LEAP 15.0 on /, which is on an entirely different disk. I will only redo /, and leave /home, etc. untouched. Question is: will the "passphrase", etc. continue to work after the reinstall of the OS on /, or which of the following steps, (copied from SDB[0]) cryptsetup luksFormat /dev/sda3 cryptsetup luksOpen /dev/sda3 my_secure_partion Will need to be done? Or will I need to back the partition up and redo it from scratch? Thanks. [0] https://en.opensuse.org/SDB:Encrypted_filesystems Michael -- Michael Fischer michael@visv.net -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
14.02.2020 18:20, Michael Fischer пишет:
To be more specific, I have a LUKS volume on /dev/sda3.
I am about to reinstall LEAP 15.0 on /, which is on an entirely different disk. I will only redo /, and leave /home, etc. untouched.
Question is: will the "passphrase", etc. continue to work after the reinstall of the OS on /,
It is not clear what "etc" includes. The encrypted volume will not be changed if you won't tell installer to format it (sans installer bugs), so all keys will remain valid.
or which of the following steps, (copied from SDB[0])
cryptsetup luksFormat /dev/sda3
I would not expect content of any volume to be preserved after anything that has "format" in its name is performed on this volume.
cryptsetup luksOpen /dev/sda3 my_secure_partion
This opens encrypted volume. If you want it to be available automatically on boot (which was probably implied by "etc" above) you will need to add corresponding line to /etc/crypttab. You can just copy it from current /etc/crypttab.
Will need to be done?
Or will I need to back the partition up and redo it from scratch?
Backup makes sense always.
Thanks.
[0] https://en.opensuse.org/SDB:Encrypted_filesystems
Michael
-- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On 14/02/2020 16.20, Michael Fischer wrote:
To be more specific, I have a LUKS volume on /dev/sda3.
I am about to reinstall LEAP 15.0 on /, which is on an entirely different disk. I will only redo /, and leave /home, etc. untouched.
Question is: will the "passphrase", etc. continue to work after the reinstall of the OS on /, or which of the following steps, (copied from SDB[0])
Unless you "initialize" the encrypted volume, it remains usable with the same password. The installer may detect it and add it during the installation; otherwise, you have to add it to /etc/crypttab and fstab.
cryptsetup luksFormat /dev/sda3
This destroys the volume and everything inside is lost. If you do this, you need a backup to restore data. -- Cheers / Saludos, Carlos E. R. (from 15.1 x86_64 at Telcontar)
On Sat, Feb 15, Carlos E. R. wrote:
On 14/02/2020 16.20, Michael Fischer wrote:
To be more specific, I have a LUKS volume on /dev/sda3.
I am about to reinstall LEAP 15.0 on /, which is on an entirely different disk. I will only redo /, and leave /home, etc. untouched.
Question is: will the "passphrase", etc. continue to work after the reinstall of the OS on /, or which of the following steps, (copied from SDB[0])
Unless you "initialize" the encrypted volume, it remains usable with the same password. The installer may detect it and add it during the installation; otherwise, you have to add it to /etc/crypttab and fstab.
Yes, I discovered that the installer process has a case for handling these volumes (it prompted me to supply the passphrase). That part went smoothly anyway. Thanks.
cryptsetup luksFormat /dev/sda3
This destroys the volume and everything inside is lost. If you do this, you need a backup to restore data.
Michael -- Michael Fischer michael@visv.net -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
participants (3)
-
Andrei Borzenkov -
Carlos E. R. -
Michael Fischer