How to encrypt entire linux sda? [closed]
I know a little bit about encrypting partition with "cryptsetup", but it cannot encrypt live drive like /dev/sda1 for "/" or root partition ...
is there any tutorial out there for encrypting entire linux hard drive and ask/prompt for password message when booting ?
root@DATO-SERVER:/usr/local/src/.cache# lsblk -i -o NAME,TYPE,MOUNTPOINT
NAME TYPE MOUNTPOINT
sda disk
|-sda1 part /data/works
`-sda2 part /data/life
sdb disk
`-sdb1 part /data/backups
sdc disk
|-sdc1 part /boot
`-sdc2 part /data/sdcard
sdd disk
|-sdd1 part /
|-sdd2 part /data/osx
|-sdd3 part /home
`-sdd4 part [SWAP]
linux hard-drive encryption diskcryptor
edited Jan 23 at 14:30
grawity
241k37510566
asked Jan 23 at 14:28
MUWA MUWA
1
closed as off-topic by Moab, JakeGould, music2myear, Kamil Maciorowski, td512 Jan 25 at 5:53
This question appears to be off-topic. The users who voted to close gave this specific reason:
- "Questions seeking product, service, or learning material recommendations are off-topic because they become outdated quickly and attract opinion-based answers. Instead, describe your situation and the specific problem you're trying to solve. Share your research. Here are a few suggestions on how to properly ask this type of question." – Moab, JakeGould, music2myear, Kamil Maciorowski, td512
If this question can be reworded to fit the rules in the help center, please edit the question.
add a comment |
I know a little bit about encrypting partition with "cryptsetup", but it cannot encrypt live drive like /dev/sda1 for "/" or root partition ...
is there any tutorial out there for encrypting entire linux hard drive and ask/prompt for password message when booting ?
root@DATO-SERVER:/usr/local/src/.cache# lsblk -i -o NAME,TYPE,MOUNTPOINT
NAME TYPE MOUNTPOINT
sda disk
|-sda1 part /data/works
`-sda2 part /data/life
sdb disk
`-sdb1 part /data/backups
sdc disk
|-sdc1 part /boot
`-sdc2 part /data/sdcard
sdd disk
|-sdd1 part /
|-sdd2 part /data/osx
|-sdd3 part /home
`-sdd4 part [SWAP]
linux hard-drive encryption diskcryptor
edited Jan 23 at 14:30
grawity
241k37510566
asked Jan 23 at 14:28
MUWA MUWA
1
closed as off-topic by Moab, JakeGould, music2myear, Kamil Maciorowski, td512 Jan 25 at 5:53
This question appears to be off-topic. The users who voted to close gave this specific reason:
- "Questions seeking product, service, or learning material recommendations are off-topic because they become outdated quickly and attract opinion-based answers. Instead, describe your situation and the specific problem you're trying to solve. Share your research. Here are a few suggestions on how to properly ask this type of question." – Moab, JakeGould, music2myear, Kamil Maciorowski, td512
If this question can be reworded to fit the rules in the help center, please edit the question.
3
What has your research shown?
– Moab
Jan 23 at 14:31
add a comment |
I know a little bit about encrypting partition with "cryptsetup", but it cannot encrypt live drive like /dev/sda1 for "/" or root partition ...
is there any tutorial out there for encrypting entire linux hard drive and ask/prompt for password message when booting ?
root@DATO-SERVER:/usr/local/src/.cache# lsblk -i -o NAME,TYPE,MOUNTPOINT
NAME TYPE MOUNTPOINT
sda disk
|-sda1 part /data/works
`-sda2 part /data/life
sdb disk
`-sdb1 part /data/backups
sdc disk
|-sdc1 part /boot
`-sdc2 part /data/sdcard
sdd disk
|-sdd1 part /
|-sdd2 part /data/osx
|-sdd3 part /home
`-sdd4 part [SWAP]
linux hard-drive encryption diskcryptor
edited Jan 23 at 14:30
grawity
241k37510566
asked Jan 23 at 14:28
MUWA MUWA
1
I know a little bit about encrypting partition with "cryptsetup", but it cannot encrypt live drive like /dev/sda1 for "/" or root partition ...
is there any tutorial out there for encrypting entire linux hard drive and ask/prompt for password message when booting ?
root@DATO-SERVER:/usr/local/src/.cache# lsblk -i -o NAME,TYPE,MOUNTPOINT
NAME TYPE MOUNTPOINT
sda disk
|-sda1 part /data/works
`-sda2 part /data/life
sdb disk
`-sdb1 part /data/backups
sdc disk
|-sdc1 part /boot
`-sdc2 part /data/sdcard
sdd disk
|-sdd1 part /
|-sdd2 part /data/osx
|-sdd3 part /home
`-sdd4 part [SWAP]
linux hard-drive encryption diskcryptor
linux hard-drive encryption diskcryptor
edited Jan 23 at 14:30
grawity
241k37510566
asked Jan 23 at 14:28
MUWA MUWA
1
edited Jan 23 at 14:30
grawity
241k37510566
asked Jan 23 at 14:28
MUWA MUWA
1
edited Jan 23 at 14:30
grawity
241k37510566
edited Jan 23 at 14:30
grawity
241k37510566
edited Jan 23 at 14:30
grawity
241k37510566
241k37510566
asked Jan 23 at 14:28
MUWA MUWA
1
asked Jan 23 at 14:28
MUWA MUWA
1
asked Jan 23 at 14:28
MUWA MUWA
1
1
closed as off-topic by Moab, JakeGould, music2myear, Kamil Maciorowski, td512 Jan 25 at 5:53
This question appears to be off-topic. The users who voted to close gave this specific reason:
- "Questions seeking product, service, or learning material recommendations are off-topic because they become outdated quickly and attract opinion-based answers. Instead, describe your situation and the specific problem you're trying to solve. Share your research. Here are a few suggestions on how to properly ask this type of question." – Moab, JakeGould, music2myear, Kamil Maciorowski, td512
If this question can be reworded to fit the rules in the help center, please edit the question.
closed as off-topic by Moab, JakeGould, music2myear, Kamil Maciorowski, td512 Jan 25 at 5:53
This question appears to be off-topic. The users who voted to close gave this specific reason:
- "Questions seeking product, service, or learning material recommendations are off-topic because they become outdated quickly and attract opinion-based answers. Instead, describe your situation and the specific problem you're trying to solve. Share your research. Here are a few suggestions on how to properly ask this type of question." – Moab, JakeGould, music2myear, Kamil Maciorowski, td512
If this question can be reworded to fit the rules in the help center, please edit the question.
3
What has your research shown?
– Moab
Jan 23 at 14:31
add a comment |
3
What has your research shown?
– Moab
Jan 23 at 14:31
3
3
What has your research shown?
– Moab
Jan 23 at 14:31
What has your research shown?
– Moab
Jan 23 at 14:31
add a comment |
1 Answer
1
active
oldest
votes
is there any tutorial out there for encrypting entire linux hard drive and ask/prompt for password message when booting ?
Note that configuring a password prompt on boot for / depends on the distribution. That is, Ubuntu has one method and its own instructions, Arch Linux has another, Gentoo has yet another. It also depends on your bootloader and firmware – for example, GRUB can decrypt a LUKS-encrypted / entirely on its own, but Syslinux cannot and would require a /boot partition.
- Search keywords: "<distro name> encrypted root"
- Ubuntu: https://help.ubuntu.com/community/ManualFullSystemEncryption, https://help.ubuntu.com/community/FullDiskEncryptionHowto
- Arch: https://wiki.archlinux.org/index.php/Dm-crypt/Encrypting_an_entire_system
- Gentoo: https://wiki.gentoo.org/wiki/Full_Disk_Encryption_From_Scratch_Simplified
(In contrast, configuring cryptsetup for data partitions is done nearly the same way everywhere.)
I know a little bit about encrypting partition with "cryptsetup", but it cannot encrypt live drive like /dev/sda1 for "/" or root partition ...
Then do it while the partition is not "live". You can run the necessary programs using a 'Live CD/USB', and it'll treat your main OS as just another ordinary partition.
To encrypt an existing partition and avoid losing data, you can use luksipc. (I've also heard that latest cryptsetup versions have this functionality built in to cryptsetup-reencrypt.) Do not 'format' the partition!
(Recommendation: First encrypt a data partition or two until you have a good grip on how cryptsetup, luksipc and related tools work.)
answered Jan 23 at 14:40
grawitygrawity
241k37510566
add a comment |
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
is there any tutorial out there for encrypting entire linux hard drive and ask/prompt for password message when booting ?
Note that configuring a password prompt on boot for / depends on the distribution. That is, Ubuntu has one method and its own instructions, Arch Linux has another, Gentoo has yet another. It also depends on your bootloader and firmware – for example, GRUB can decrypt a LUKS-encrypted / entirely on its own, but Syslinux cannot and would require a /boot partition.
- Search keywords: "<distro name> encrypted root"
- Ubuntu: https://help.ubuntu.com/community/ManualFullSystemEncryption, https://help.ubuntu.com/community/FullDiskEncryptionHowto
- Arch: https://wiki.archlinux.org/index.php/Dm-crypt/Encrypting_an_entire_system
- Gentoo: https://wiki.gentoo.org/wiki/Full_Disk_Encryption_From_Scratch_Simplified
(In contrast, configuring cryptsetup for data partitions is done nearly the same way everywhere.)
I know a little bit about encrypting partition with "cryptsetup", but it cannot encrypt live drive like /dev/sda1 for "/" or root partition ...
Then do it while the partition is not "live". You can run the necessary programs using a 'Live CD/USB', and it'll treat your main OS as just another ordinary partition.
To encrypt an existing partition and avoid losing data, you can use luksipc. (I've also heard that latest cryptsetup versions have this functionality built in to cryptsetup-reencrypt.) Do not 'format' the partition!
(Recommendation: First encrypt a data partition or two until you have a good grip on how cryptsetup, luksipc and related tools work.)
answered Jan 23 at 14:40
grawitygrawity
241k37510566
add a comment |
is there any tutorial out there for encrypting entire linux hard drive and ask/prompt for password message when booting ?
Note that configuring a password prompt on boot for / depends on the distribution. That is, Ubuntu has one method and its own instructions, Arch Linux has another, Gentoo has yet another. It also depends on your bootloader and firmware – for example, GRUB can decrypt a LUKS-encrypted / entirely on its own, but Syslinux cannot and would require a /boot partition.
- Search keywords: "<distro name> encrypted root"
- Ubuntu: https://help.ubuntu.com/community/ManualFullSystemEncryption, https://help.ubuntu.com/community/FullDiskEncryptionHowto
- Arch: https://wiki.archlinux.org/index.php/Dm-crypt/Encrypting_an_entire_system
- Gentoo: https://wiki.gentoo.org/wiki/Full_Disk_Encryption_From_Scratch_Simplified
(In contrast, configuring cryptsetup for data partitions is done nearly the same way everywhere.)
I know a little bit about encrypting partition with "cryptsetup", but it cannot encrypt live drive like /dev/sda1 for "/" or root partition ...
Then do it while the partition is not "live". You can run the necessary programs using a 'Live CD/USB', and it'll treat your main OS as just another ordinary partition.
To encrypt an existing partition and avoid losing data, you can use luksipc. (I've also heard that latest cryptsetup versions have this functionality built in to cryptsetup-reencrypt.) Do not 'format' the partition!
(Recommendation: First encrypt a data partition or two until you have a good grip on how cryptsetup, luksipc and related tools work.)
answered Jan 23 at 14:40
grawitygrawity
241k37510566
add a comment |
is there any tutorial out there for encrypting entire linux hard drive and ask/prompt for password message when booting ?
Note that configuring a password prompt on boot for / depends on the distribution. That is, Ubuntu has one method and its own instructions, Arch Linux has another, Gentoo has yet another. It also depends on your bootloader and firmware – for example, GRUB can decrypt a LUKS-encrypted / entirely on its own, but Syslinux cannot and would require a /boot partition.
- Search keywords: "<distro name> encrypted root"
- Ubuntu: https://help.ubuntu.com/community/ManualFullSystemEncryption, https://help.ubuntu.com/community/FullDiskEncryptionHowto
- Arch: https://wiki.archlinux.org/index.php/Dm-crypt/Encrypting_an_entire_system
- Gentoo: https://wiki.gentoo.org/wiki/Full_Disk_Encryption_From_Scratch_Simplified
(In contrast, configuring cryptsetup for data partitions is done nearly the same way everywhere.)
I know a little bit about encrypting partition with "cryptsetup", but it cannot encrypt live drive like /dev/sda1 for "/" or root partition ...
Then do it while the partition is not "live". You can run the necessary programs using a 'Live CD/USB', and it'll treat your main OS as just another ordinary partition.
To encrypt an existing partition and avoid losing data, you can use luksipc. (I've also heard that latest cryptsetup versions have this functionality built in to cryptsetup-reencrypt.) Do not 'format' the partition!
(Recommendation: First encrypt a data partition or two until you have a good grip on how cryptsetup, luksipc and related tools work.)
answered Jan 23 at 14:40
grawitygrawity
241k37510566
is there any tutorial out there for encrypting entire linux hard drive and ask/prompt for password message when booting ?
Note that configuring a password prompt on boot for / depends on the distribution. That is, Ubuntu has one method and its own instructions, Arch Linux has another, Gentoo has yet another. It also depends on your bootloader and firmware – for example, GRUB can decrypt a LUKS-encrypted / entirely on its own, but Syslinux cannot and would require a /boot partition.
- Search keywords: "<distro name> encrypted root"
- Ubuntu: https://help.ubuntu.com/community/ManualFullSystemEncryption, https://help.ubuntu.com/community/FullDiskEncryptionHowto
- Arch: https://wiki.archlinux.org/index.php/Dm-crypt/Encrypting_an_entire_system
- Gentoo: https://wiki.gentoo.org/wiki/Full_Disk_Encryption_From_Scratch_Simplified
(In contrast, configuring cryptsetup for data partitions is done nearly the same way everywhere.)
I know a little bit about encrypting partition with "cryptsetup", but it cannot encrypt live drive like /dev/sda1 for "/" or root partition ...
Then do it while the partition is not "live". You can run the necessary programs using a 'Live CD/USB', and it'll treat your main OS as just another ordinary partition.
To encrypt an existing partition and avoid losing data, you can use luksipc. (I've also heard that latest cryptsetup versions have this functionality built in to cryptsetup-reencrypt.) Do not 'format' the partition!
(Recommendation: First encrypt a data partition or two until you have a good grip on how cryptsetup, luksipc and related tools work.)
answered Jan 23 at 14:40
grawitygrawity
241k37510566
answered Jan 23 at 14:40
grawitygrawity
241k37510566
answered Jan 23 at 14:40
grawitygrawity
241k37510566
answered Jan 23 at 14:40
grawitygrawity
241k37510566
241k37510566
add a comment |
add a comment |
3
What has your research shown?
– Moab
Jan 23 at 14:31