Arch Linux

morningsun

Member

Registered: 2018-09-24

Posts: 2

Encryption post install

Hi all,
I'm a brand new Arch Linux user and I'm really enjoying it, I honestly wish I installed it earlier.
Anyway, I was reading on the wiki about encryptions and I think (my interpretation at least I may be completely wrong) that encryption setup is pre-installation. When I was installing Arch I may have forgotten to encrypt my drive. Is there anyway to encrypt my drive post installation? I don't mind reinstalling Arch if I have to I just want to know if there is an easier way. I'm running plasma desktop with 2 partition: boot and swap. I don't know if that changes anything 

Thank you in advance, I'm sorry if this was a very stupid question and wasted your time

jasonwryan

Anarchist

From: .nz

Registered: 2009-05-09

Posts: 30,426

Website

Re: Encryption post install

If you want FDE, yes it has to be done prior to the install. If you just want to install a partition (like /home), you can manage that without a reinstall.

I doubt that you only have two partitions, at least not just /boot and swap...

---

Arch + dwm   •   Mercurial repos  •   Surfraw

Registered Linux User #482438

morningsun

Member

Registered: 2018-09-24

Posts: 2

Re: Encryption post install

If you want FDE, yes it has to be done prior to the install. If you just want to install a partition (like /home), you can manage that without a reinstall.

I doubt that you only have two partitions, at least not just /boot and swap...

Yeah ok thank you for the clarification. Yeah I'm just coming to grasps with Arch so I'm I guess a bit ignorant to most things, but I'll get there

MariusK

Member

Registered: 2013-02-05

Posts: 7

Re: Encryption post install

If you are looking for something like Dm-crypt/Encrypting_an_entire_system#Simple_partition_layout_with_LUKS, you can avoid a reinstall by backing up the root partition, creating the partitions/containers as stated in the wiki. Then - instead of reinstalling - you copy everything from your backup into the encrypted container and adjust the bootloader, fstab and mkinitcpio.conf accordingly. I've done it three times and did not find it easy. Rebooting a live system, decrypting the filesystem and mounting the containers to fix a mistake is really annoying.