Re: fs encryption after install
On Tue, Feb 25, 2014 at 15:50:55 +0100,
"Pal, Laszlo" <vlad(a)vlad.hu> wrote:
Hi All,
For the last few days I'm trying to find a way to encrypt at least my
home directory (preferably everything except boot) without re-install
Fedora. Unfortunately google does not help in this case... Someone
suggested to use encrypt-fs but I'm not sure this is the best way to
achieve this
Do you have any quick and preferably painless idea?
Is /home on a separate partition? If so, you can use dmcrypt/luks to encrypt
a file system on that partition. But I don't think there is an easy
way to do this after an install. You'll need to run some low level commands
to set up the encrypted file system and you'll need to edit some config
files. I've done this, but I don't remember the exact steps to do it and
usually need to do a bit of futzing around to get it working. You also
need to have room to move /home's contents somewhere while you are making
the change.
A backup, reinstall and restore would likely be easier. You can encrypt /
at the same time if you go that route. (/boot can't be encrypted currenty,
though it looks like grub2 is has luks support now (at least upstream).)