encrypting /home partition post-install

[Sam Varshavchik]

Gordon Messmer writes:

> On 11/29/2015 12:25 PM, Ranjan Maitra wrote:
>> Is it possible to encrypt a /home partition on F23 without losing the
>> data? If so, what is the recommended method?
>
> Possible, yes.  Supported?  No.
>
> http://www.johannes-bauer.com/linux/luksipc/
>
> If you trust the author, you might be able to convert a single
> filesystem in-place to LUKS.  The result will not resemble the manner in
> which Anaconda (the Fedora installer) creates encrypted filesystems.
> Anaconda will, by default, encrypt a volume group.

That might be Anaconda's default behavior, but at least as of F23 Anaconda  
still lets you create raw+encrypted partitions. I just did that on a new  
laptop.

I really don't understand why Fedora is still foisting all the overhead of  
LVM on everyone, by default. I would tend to think that for typical use  
cases, LVM brings absolutely nothing value-added. I would expect that, with  
most use cases, people install Fedora with the default filesystem layout,  
and never have the need to move or grow their existing partitions.

In the few cases where someone might add another hard drive, an initial LVM- 
based format will certainly offer an option of growing the existing  
partitions to the new hard drive. But I wonder how often does that happen,  
versus how often LVM's overhead ends up getting competely wasted. And, after  
all, you can still create new partitions on the new hard drive and use them,  
without LVM.


-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 819 bytes
Desc: not available
URL: <http://lists.fedoraproject.org/pipermail/users/attachments/20151129/48bc12b1/attachment.sig>