Arch Linux

rnsc

Member

Registered: 2024-04-11

Posts: 5

[Solved] LUKS on LVM: encrypting only LV /home?

Hi all, I am studying the different encryption methods from the wiki for a 4-year old Chromebook that I have converted to a laptop and which has an eMMC with a limited "disk" space of 32GB. 

The intention is to only encrypt /home and keep /root unencrypted for performance reasons (Intel Celeron N4120), so not use LVM on LUKS,

and to be able to resize the logical volumes of /root and /home in case any of those needs more space (unknown at the moment), so no LUKS on a (pre-allocated) partition.

I'm reading https://wiki.archlinux.org/title/Dm-cry … UKS_on_LVM but it describes encrypting logical volume /root first (5.2), then encrypting logical volume /home next (5.7), so before trying anything in a VM I'm asking if it is possible to begin with.

Thanks in advance.

Last edited by rnsc (2024-11-26 22:54:36)

frostschutz

Member

Registered: 2013-11-15

Posts: 1,472

Re: [Solved] LUKS on LVM: encrypting only LV /home?

Yes, it's possible to encrypt just the /home LV. (LUKS inside LVM, instead of LVM inside LUKS)

rnsc

Member

Registered: 2024-04-11

Posts: 5

Re: [Solved] LUKS on LVM: encrypting only LV /home?

Thanks, sounds like my weekend researching for it will be one of *those* fun ones, there's a lot to digest and experiment with

/edit: I won't mark it as "solved" yet, as I suspect I will need some help at some point most probably.

Last edited by rnsc (2024-11-22 14:55:11)