Allegedly, on or about 12 December 2017, Robert Nichols sent: > You can do that with cryptsetup-reencrypt, but it needs to be able to > make space for the ~2MB LUKS header ahead of the filesystem in the > partition. That's a fairly risky operation -- shrinking the > filesystem slightly and shifting it over. An alternative is LUKS with > a detached header, but maintaining that relationship is an > administrative headache with a severe penalty for error. If they had the spare drive space, I'd suggest shrink the existing partition in half. Make a new encrypted one in that new space. Copy the files over. Erase the previous partition, and either keep it for the next lot of jiggery-pokery, or expand your new one into the space. -- [tim@localhost ~]$ uname -rsvp Linux 4.13.16-202.fc26.x86_64 #1 SMP Thu Nov 30 15:39:32 UTC 2017 x86_64 Boilerplate: All mail to my mailbox is automatically deleted. There is no point trying to privately email me, I only get to see the messages posted to the mailing list. - And how would you describe Windows? - One man's trash is another man's treasure... _______________________________________________ users mailing list -- users@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to users-leave@xxxxxxxxxxxxxxxxxxxxxxx