Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I read that the installer can handle encryption easily, but I don't want to reinstall.

TrueCrypt apparently can't encrypt a partition in-place and will require a format.

I've looked around at some tutorials using dm-crypt and apparently this requires a format as well.

I would prefer to use a built-in (provided by the kernel) system for encryption instead of third party tools (like TrueCrypt).


share|improve this question
up vote 0 down vote accepted

I've done this as I've detailed in the following thread (not really what I asked, but the closest approximation):

I read about the ecryptfs solution and it didn't seem something very desirable or enough low-level. I ultimately used dm-crypt/cryptsetup/luks as described below.


  • Resized down the existing /home partition

  • Created a new encrypted partition

  • rsync -a the files to the new partition

  • Deleted the old partition

  • Made the new partition the new /home

  • Then I encrypted the swap partition:

Information at the following links also helped:

Now one question arises:

Can I do the same thing for the root partition? Will it just work? Do you expect I might encounter some problems?

-> And no, you shouldn't try that for the root partition unless you know what you're doing. But it is entirely possible - though it might result in an unbootable OS (IF you don't know how to avoid that).

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.