Questions About Encryption

Ask Fedora
1

I have some questions about encryption on Linux, which does apply to Fedora as well. I was wondering whether there is a feasible way of encrypting and decrypting the system while the system is online (currently running and all system partitions are mounted)? I want to assume that we are starting either from an encrypted Fedora default partitioning scheme or its equivalent; but, where the root btrfs is not encrypted with LUKS.

Is it possible to achieve online encryption and decryption that is possible on other OSes like MacOS and Windows?

2

Two options I can think of:

  • LUKS encrypt only /home (separate partition) (if that’s what you want)
  • systemd-homed - it’s a service, where your home dir is decrypted when you login and encrypted again, when you log off.

For systemd-homed, see

3

FYI I updated the title and add a tag to help other find your question.

Personally face with encrypting an existing non-encrypted system I would
do a backup of the data and then reinstall the system.

I’m not sure if there is a on-line option, but even if there is one I would want
a full backup just incase something went wrong.

1 Like
4

I may have misunderstood your question. So you want to encrypt you existing currently non-encrypted system? And even while it’s booted? In that case, backup everything and reinstall as @barryascott said.