Artix Linux Forum

Artix Linux => Applications & Software => Topic started by: BloodAndSoil on 18 January 2022, 08:21:19

Title: Encrypting Existing System
Post by: BloodAndSoil on 18 January 2022, 08:21:19
After  some looking through the forum, I couldn't find anything on encrypting an existing system without having  to do  a fresh install. The only method of disk encryption that  I  know of  is veracrypt, I don't really know much   about disk encryption at  the  moment so I was wondering if there is a  quick fix. I have 2 SSDs and 1 HDD.

Apologies if this has already been   covered. I would appreciate if anyone can  point me in the right  direction.
Title: Re: Encrypting Existing System
Post by: strajder on 18 January 2022, 08:46:36
https://wiki.archlinux.org/title/Data-at-rest_encryption
https://wiki.archlinux.org/title/Dm-crypt/Encrypting_an_entire_system
https://wiki.archlinux.org/title/Dm-crypt/Device_encryption#Encrypt_an_existing_unencrypted_file_system

https://forum.artixlinux.org/index.php/topic,1923.0.html
Quote
First go through wiki.archlinux.org and wiki.artixlinux.org and use the relevant parts (all except the systemd commands on the archlinux wiki) to set up your system really correctly.
Title: Re: Encrypting Existing System
Post by: VictorBrand on 18 January 2022, 08:57:54
AFAIK, there is actually no any out-of-the-box solution for encrypting existing partitions in Linux.

The best tool for disk encryption in Linux is dm-crypt (LUKS) as of now (although there are some veracrypt solutions). I use it, and I just backed up my data and then remapped the entire disk, establishing LVM inside a LUKS container. This works pretty nice with most distros, Artix included. I find this backup-and-restore method more reliable and consistent than tinkering existing partitions.