Ondrej Kozina: > On 11/22/2013 09:26 AM, shmick@xxxxxxxxxx wrote: >> can i re-format an existing luks partition (as the same /dev/sda[x] and >> simply re-copy an fsarchive operating system backup straight to it >> without anything further required ? > > There's an offline cryptsetup-reencrypt tool in cryptsetup 1.5.0 and > later. It's really offline so the device needs to umnouted before > reencrypting. > > Also you should consider shrinking the filesystem residing on the luks > device (and after that also the device) before actual reencryption. It > makes reencryption sector-by-sector no matter if it is used by > filessytem or not. thank you for the advice > > Also there are some fixes ready for reencryption tool on the way so you > may be also interested waiting for 1.6.3 release in coming weeks. i shall wait around for some updates just finally as an aside, is this method truly safe compared to starting again ? is there any peer review of cryptsetup's operation as a whole similarly like truecrypt had by a german organisation a few years back ? > > Regards > Ondrej > _______________________________________________ > dm-crypt mailing list > dm-crypt@xxxxxxxx > http://www.saout.de/mailman/listinfo/dm-crypt > _______________________________________________ dm-crypt mailing list dm-crypt@xxxxxxxx http://www.saout.de/mailman/listinfo/dm-crypt
