Benjamin_Loison commented on issue Benjamin_Loison/linux#58 2025-01-18 17:47:01 +01:00
How to enable full disk encryption after install?

Create a initramfs hoock script which copies cryptestup via copy-exec

P.S The troubleshooting guide was written from memory, so there might be some missing pieces.

Should investigate:

Benjamin_Loison commented on issue Benjamin_Loison/linux#58 2025-01-18 17:05:17 +01:00
How to enable full disk encryption after install?

Screenshot_Linux_Mint_2025-01-18_16:55:36.png

![Screenshot_Linux_Mint_2025-01-18_17:04:47.png](/attachments/234dee66-cec5-4e01-baf1-386b5602…

Benjamin_Loison commented on issue Benjamin_Loison/linux#58 2025-01-18 16:56:46 +01:00
How to enable full disk encryption after install?
man resize2fs 
Benjamin_Loison commented on issue Benjamin_Loison/linux#58 2025-01-18 16:55:27 +01:00
How to enable full disk encryption after install?

Is not shrinking the most heavier than shrinking the least possible.

Benjamin_Loison commented on issue Benjamin_Loison/linux#58 2025-01-18 16:53:58 +01:00
How to enable full disk encryption after install?
2fsck 2>&1 
Benjamin_Loison commented on issue Benjamin_Loison/linux#58 2025-01-18 16:41:03 +01:00
How to enable full disk encryption after install?

[wiki.archlinux.org: dm-crypt/Device encryption#Encrypt an existing unencrypted file system (824010)](https://wiki.archlinux.org/index.php?title=Dm-crypt/Device_encryption&oldid=824010#Encrypt_an_e…

Benjamin_Loison commented on issue Benjamin_Loison/linux#58 2025-01-18 16:31:52 +01:00
How to enable full disk encryption after install?

Based on above Ask Ubuntu answer:

      --reduce-device-size=bytes        Reduce data device size (move data
                                        offset). DANGEROUS!
...
  -M,…
Benjamin_Loison commented on issue Benjamin_Loison/linux#58 2025-01-18 16:28:06 +01:00
How to enable full disk encryption after install?

On my Debian 12 GNOME work laptop:

cryptsetup reencrypt --help
Output:
cryptsetup 2.6.1 flags: UDEV BLKID KEYRING KERNEL_CAPI 
Usage:…
Benjamin_Loison commented on issue Benjamin_Loison/linux#58 2025-01-18 16:27:25 +01:00
How to enable full disk encryption after install?
cryptsetup reencrypt
Command requires device as argument.

even if sudo.

Benjamin_Loison commented on issue Benjamin_Loison/linux#58 2025-01-18 16:18:18 +01:00
How to enable full disk encryption after install?

On my Debian 12 GNOME work laptop:

command-not-found --ignore-installed cryptsetup-reencrypt
cryptsetup-reencrypt: command not found
Benjamin_Loison commented on issue Benjamin_Loison/linux#58 2025-01-18 16:17:15 +01:00
How to enable full disk encryption after install?

DuckDuckGo and Google search "cryptosetup-reencrypt".

Benjamin_Loison commented on issue Benjamin_Loison/linux#58 2025-01-18 16:16:55 +01:00
How to enable full disk encryption after install?
sudo apt install -y cryptosetup-reencrypt
...
E: Unable to locate package cryptosetup-reencrypt
Benjamin_Loison commented on issue Benjamin_Loison/linux#58 2025-01-18 16:15:56 +01:00
How to enable full disk encryption after install?

Let us figure out why I faced above in https://gitea.lemnoslife.com/attachments/f3fda48c-04fc-4a5c-ac80-d884d6cde31c:

cryptosetup-reencrypt /dev/vda3
cryptosetup-reencrypt:…
Benjamin_Loison commented on issue Benjamin_Loison/linux#58 2025-01-18 16:12:22 +01:00
How to enable full disk encryption after install?

I recommend switching to cryptsetup-reencrypt, which is properly maintained and tested upstream even when the format of the LUKS header changes (to my knowledge, this has at least happened twice…

Benjamin_Loison commented on issue Benjamin_Loison/linux#58 2025-01-18 16:09:32 +01:00
How to enable full disk encryption after install?

The Ask Ubuntu answer 369623 states quickly that it is not possible.