Block-device encryption without reinstallation
Block-device encryption without reinstallation
Posted Sep 30, 2025 21:13 UTC (Tue) by berto (subscriber, #58604)In reply to: Block-device encryption without reinstallation by geert
Parent article: Managing encrypted filesystems with dirlock
I believe that BitLocker does something like that, it would certainly be a nice feature to have.
But I'm not sure how that would work in practice: the LUKS header alone takes several MBs, so apart from shrinking the filesystem you would have to either move all the data or put the superblock and the first few MBs at the end of the partition, and then use the device mapper to make those appear at the beginning.
