Re: LUKS question

2017-12-21 Thread Bruno Wolff III
On Mon, Dec 18, 2017 at 14:28:11 -0800, Gordon Messmer wrote: On 12/18/2017 06:14 AM, Michael Cronenworth wrote: Everything possible even on the / filesystem while the system runs normally. All of what you describe is possible without LVM, too. Including moving

Re: LUKS question

2017-12-18 Thread Chris Murphy
On Mon, Dec 18, 2017 at 3:28 PM, Gordon Messmer wrote: > On 12/18/2017 06:14 AM, Michael Cronenworth wrote: >>> >>> Everything possible even on the / filesystem while the system runs >>> normally. >> >> >> All of what you describe is possible without LVM, too. > > > >

Re: LUKS question

2017-12-18 Thread Gordon Messmer
On 12/18/2017 06:14 AM, Michael Cronenworth wrote: Everything possible even on the / filesystem while the system runs normally. All of what you describe is possible without LVM, too. Including moving the filesystem while the system using it is live?  I'm not aware of a non-LVM way to do

Re: LUKS question

2017-12-18 Thread Michael Cronenworth
On 12/15/2017 10:13 AM, Roberto Ragusa wrote: This is the kind of things LVM makes easy. Extend your VG to an additional disk (USB), move your LV there, remove your PV, turn it into encrypted, readd the PV, move the LV into the new PV, reduce the VG to let the USB disk go away. Everything

Re: LUKS question

2017-12-15 Thread Roberto Ragusa
On 12/12/2017 04:17 PM, Michael Cronenworth wrote: > On 12/12/2017 08:40 AM, Wells, Roger K. wrote: >> I have existing systems with un-encrypted disks. >> I have tried unsuccessfully to encrypt them using LUKS. >> Has anyone out there been able to encrypt an existing system (after the >> fact, so

Re: LUKS question

2017-12-13 Thread Wolfgang Pfeiffer
On Tue, 12 Dec 2017 09:40:14 -0500 "Wells, Roger K." wrote: > I have existing systems with un-encrypted disks. > I have tried unsuccessfully to encrypt them using LUKS. > Has anyone out there been able to encrypt an existing system (after > the fact, so to speak)? I have

Re: LUKS question

2017-12-12 Thread Tim
Allegedly, on or about 12 December 2017, Robert Nichols sent: > You can do that with cryptsetup-reencrypt, but it needs to be able to > make space for the ~2MB LUKS header ahead of the filesystem in the > partition. That's a fairly risky operation -- shrinking the > filesystem slightly and

Re: LUKS question

2017-12-12 Thread Robert Nichols
On 12/12/2017 08:40 AM, Wells, Roger K. wrote: I have existing systems with un-encrypted disks. I have tried unsuccessfully to encrypt them using LUKS. Has anyone out there been able to encrypt an existing system (after the fact, so to speak)? You can do that with cryptsetup-reencrypt, but it

Re: LUKS question

2017-12-12 Thread Michael Cronenworth
On 12/12/2017 08:40 AM, Wells, Roger K. wrote: I have existing systems with un-encrypted disks. I have tried unsuccessfully to encrypt them using LUKS. Has anyone out there been able to encrypt an existing system (after the fact, so to speak)? TIA You cannot encrypt an existing file

LUKS question

2017-12-12 Thread Wells, Roger K.
I have existing systems with un-encrypted disks. I have tried unsuccessfully to encrypt them using LUKS. Has anyone out there been able to encrypt an existing system (after the fact, so to speak)? TIA -- Roger Wells, P.E. leidos 221 Third St Newport, RI 02840 401-847-4210 (voice) 401-849-1585