Move system to encrypted LVM

Tonus · 05-16-2016, 08:54 AM

Hi all,

Would it be as simple as :

Code:

 
modprobe dm-crypt
cryptsetup luksOpen /dev/sdb1 /
Enter LUKS passphrase:

Mount lvms and copy /, home and whatever to their new places.
Update fstab.
Chroot in new /
Run mkinitrd with updated mkinitrd config file.
Run grub-mkconfig.

Is that all ?

I might miss something... And since I'm lazy and not sure when 14.2 will be out, it seems a bit easier to me to stick with my nice current..

bassmadrigal · 05-16-2016, 09:59 AM

I haven't ever used it, so I'm not sure on the steps, but I'm pretty sure you need a separate /boot partition, as that will need to remain unencrypted, and an initrd created to hold the required modules to access and decrypt your system.

TracyTiger · 05-16-2016, 10:08 AM

@Tonus You may want to look at the README files on Installation iso. (README_CRYPT.TXT, README_LVM.TXT). I've found they provide useful information although some things may have changed some for -current.

Tonus · 05-16-2016, 11:02 AM

Thank you both for your answers.

I already read the docs (on the dvd and this link http://blog.darknedgy.net/technology/2014/07/27/1/).

I was assuming a new drive prepared for lvm and luks, and an initrd config prepared correctly. That's the same as a fresh installation.

My wondering was more about _moving_ an existing system...