On 11/22/2013 05:49 AM, shmick@xxxxxxxxxx wrote:
Ondrej Kozina:
On 11/22/2013 09:26 AM, shmick@xxxxxxxxxx wrote:
can i re-format an existing luks partition (as the same /dev/sda[x] and
simply re-copy an fsarchive operating system backup straight to it
without anything further required ?
There's an offline cryptsetup-reencrypt tool in cryptsetup 1.5.0 and
later. It's really offline so the device needs to umnouted before
reencrypting.
Also you should consider shrinking the filesystem residing on the luks
device (and after that also the device) before actual reencryption. It
makes reencryption sector-by-sector no matter if it is used by
filessytem or not.
thank you for the advice
Also there are some fixes ready for reencryption tool on the way so you
may be also interested waiting for 1.6.3 release in coming weeks.
i shall wait around for some updates
just finally as an aside, is this method truly safe compared to starting
again ?
Safer and simpler just to start over with a luksFormat, as you proposed.
--
Bob Nichols "NOSPAM" is really part of my email address.
Do NOT delete it.
_______________________________________________
dm-crypt mailing list
dm-crypt@xxxxxxxx
http://www.saout.de/mailman/listinfo/dm-crypt
