Encrypting an existing filesystem?

Canadakid · 01-01-2007, 10:59 PM

Hello...

I'm wondering if there was any way of encrypting an existing ext3 partition with dm-crypt+LUKS or something roughly equivalent.

While searching I came across this thread where someone did this with the now-deprecated "cryptoloop" system on a non-journaled filesystem. I was wondering if it was possible to do it as I explained in the first paragraph.

Some preliminary research leads me to believe it's not possible, but I wanted to throw it out here to those who know more than me.

Thanks!

Lotharster · 01-03-2007, 06:30 AM

This is possible with loop-aes. However, trying to directly encrypt a filesystem is quite risky. If your computer crashes halfway through, you have a half-encrypted and half-not-encrypted filesystem. You should definitely make a backup before.

Canadakid · 01-03-2007, 01:30 PM

Thanks. I probably won't bother, then. I keep all my really sensitive stuff in an EncFS folder anyway, so encrypting the whole partition isn't REALLY necessary.

operator10001 · 01-09-2007, 12:18 PM

it can be done. etch comes with that feature as standard. I recommend using rsa very carefully. the more bits the better.

nx5000 · 01-09-2007, 12:34 PM

You don't have enough space to first put the data somewhere else (even compressed) and then encrypt the partition?
Would be easier, safer and feasible, I'm not sure the inline encryption can work.

operator10001 how do you do this? I know that the installer allows you to CREATE encrypted partition but I haven't heard of a solution to encrypt a working partition.

Canadakid · 01-09-2007, 08:25 PM

Quote:

Originally Posted by nx5000

You don't have enough space to first put the data somewhere else (even compressed) and then encrypt the partition?
Would be easier, safer and feasible, I'm not sure the inline encryption can work.

Unfortunately I'm one of those people who never bothered to plan his partitions. hdb1 is a small /boot/ partition, hdb2 is swap, hdb3 is /

hda is my other hard drive with WinXP, which I keep around for my parents, who like to use my computer on occassion.

It's alright, though. I may be doing a re-install soon anyway, with all the important stuff on my 1GB jumpdrive. If I do that, I'll encrypt then.

nx5000 · 01-10-2007, 05:27 AM

So you wanted to encrypt hdb3 (/) while running on it ?
If that's the case, I find it a bit risky