Post-Install Disk Encryption?
Hey all,
been using Bazzite well for almost a long while now and I've just noticed that I had forgotten to enable disk encryption during the installation.
So my question is basically, is there a way to enable disk-encryption after the fact?
Or if not full disk encryption (due to complexities), at least just the per user home folder?
Cheers in advance!
been using Bazzite well for almost a long while now and I've just noticed that I had forgotten to enable disk encryption during the installation.
So my question is basically, is there a way to enable disk-encryption after the fact?
Or if not full disk encryption (due to complexities), at least just the per user home folder?
Cheers in advance!
Solution
For anyone in this sort of situation, you have two options realistically:
Otherwise for the home folder thing, as an overview of what I did
Anyhow, it was a fun experiment, but no, just reinstall and check the box on the installer.
Then remember to setup tpm unlock using
- If you really need full disk encryption, just re-install
- If you don't mind only having the home folder encrypted there is ways to do that
Otherwise for the home folder thing, as an overview of what I did
- Shrink system volume
- Add a new partition that will become your new /home folder (as mount point as well)
- Encrypt it
- Add a script to decrypt the home folder on login (as system.d)
Anyhow, it was a fun experiment, but no, just reinstall and check the box on the installer.
Then remember to setup tpm unlock using
