So like a doofus, ive never really done encryption on any of my PCs/drives. With the way stuff is going, now I want all of it encrypted. The issue is I have so much data from over the years and everything ive read says it deletes everything when you encrypt.

For me it would mostly be my desktop and my nas.

Is it really a matter of, I’m gonna have to buy a whole bunch more HDDs to copy everything over to, encrypt, copy it all back? What’s the best (Linux) software for a mass copy task like that to be sure it works correctly?

  • solrize@lemmy.ml
    link
    fedilink
    arrow-up
    4
    ·
    1 day ago

    LUKS is generally the least obstrusive once it is running, though setting it up the first time can be confusing.

    If you install Debian (or maybe other distros) from scratch, the installer offers to do it for you. Otherwise, basically,

    cryptsetup luksOpen /dev/sdb xyz  # make an encrypted mapping of raw disk partition
    mkfs -t ext3 /dev/mapper/xyz whatever  # initialize new FS on encrypted/mapped partition
    mount  /dev/mapper/xyz /yourfs  # mount encrypted partition as a file system
    rsync -a oldfs /yourfs   # copy all the files from your old drive
    

    The above is a basic strategy not something to cut and paste. Check the man pages for details, or ask here.

    How to quickly integrity check all files: hmm, I’ll think about whether there is a neat trick for that, otherwise md5sum everything and compare file by file using “find”.

    • eldavi@lemmy.ml
      link
      fedilink
      English
      arrow-up
      1
      ·
      8 hours ago

      If you install Debian (or maybe other distros) from scratch, the installer offers to do it for you. Otherwise, basically,

      i tried doing this recently and the installer didn’t give the option. which installer where you using?

      • solrize@lemmy.ml
        link
        fedilink
        arrow-up
        3
        ·
        5 hours ago

        The installer included with Debian, was there a problem? It’s in the step where you partition the disk. It asks whether you want to encrypt.