On 2/13/20 1:30 AM, 'ukernel' via qubes-users wrote:
For some reason despite the fact that during installation I selected the
encryption checkbox and set a password but the partition where I
installed Qubes OS was not encrypted. I found a command to encrypt on
the same page of Qubes OS however it says that it overwrite all the
information. I need to know how to encrypt my disk without reinstalling
everything.
Could you help me please?
cryptsetup -v --hash sha512 --cipher aes-xts-plain64 --key-size 512
--use-random --iter-time 10000 --verify-passphrase luksFormat /dev/sda2
https://www.qubes-os.org/doc/custom-install/
Those are not instructions for encrypting after installation, but before
before installation.
Overall, the best approach is probably to backup your data and
re-install Qubes. If you think the installer isn't encrypting your
custom configuration due to a bug, then you can follow the
custom-install example you linked to just before install (I'm pretty
sure that doc exists bc other users encountered the same problem you did).
In-place conversion to LUKS encryption is rare and not supported by LUKS
itself, however a tool called 'luksipc' exists to do this. However I
don't think it works with LVM which is what Qubes uses for storage.
Another method requires allocating an unused partition, setting it up
with cryptsetup and LVM, then copying from old volumes to new and
adjusting the boot parameters to use the new setup. The following is
*loosely* how it might be done, although it does not setup a thin pool
for LVM so you would need to combine it with instructions from step 5 of
the Qubes custom-install doc...
https://askubuntu.com/questions/366749/enable-disk-encryption-after-installation/1107295#1107295
Its rather complicated so I suggest re-installing instead.
--
Chris Laprise, tas...@posteo.net
https://github.com/tasket
https://twitter.com/ttaskett
PGP: BEE2 20C5 356E 764A 73EB 4AB3 1DC4 D106 F07F 1886
--
You received this message because you are subscribed to the Google Groups
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/qubes-users/e188846e-dc2b-16f4-a7c6-2a60b79332c5%40posteo.net.
