021 - How To Encrypt Linux Filesystems Using LUKS (Linux Unified Key Setup) | RHEL 8

You could encrypt files and directories in Linux to protect it against theft but you could also encrypt your filesystem as well. Some Linux distros allow you to encrypt your filesystem or home directory during the installation steps but the option is not checked by default. Ubuntu used to provide an option to encrypt home directory but it stopped doing so after version 18 because the encrypting system, eCryptfs, it was using was under-maintained and considered to be unfit to use in a production system.
The preferred way to encrypt a partition or a filesystem is to do a full disk encryption using LUKS (Linux Unified Key Setup), and in this video that is what we are going to discuss about. LUKS is a disk encryption specification created for Linux and uses device mapper crypt (dm-crypt) as a kernel module to handle the encryption. dm-crypt is a transparent disk encryption subsystem in Linux kernel versions 2.6 and later. LUKS creates a new block device encrypted over existing block device and while doing so, it will delete all the data. So if you are encrypting an existing partition, please make sure that the data in it are backed up before encrypting it.
#Linux #LUKS #Encryption

[@pra168]

Very good presentation. No waste of time. Directly hits the target. Thank you very much.

[@RajeshKalle]

That was very informative. Is the process same encrypting a tmpfs in linux ?

[@PrathameshGelye-e7h]

No waste of time. Thank you very much. but this works only on secondary disk I mean not on sda disk which will be the main and primary disk . how should I encrypt this disk without data loss?

[@DisasterousRDX]

Thanks for helping on the implementation.

[@AmitKumar-zy9rt]

can I encrypt a database directory inside the ─sda10 like ├─user1-database as lvm, above procedure will be helpful? I have already installed data in this, so an encryption at sublayer LVM also works?

[@CommandLines]

It should work the same way.

[@AmitKumar-zy9rt]

during linux RHEL installation, is there any option to enable/disable full disk encryption?

[@CommandLines]

Yes!

[@domenicoragosta2690]

Straightforward and very clear! Could you show how to perform a fsck on an encrypted partition with lvm on top, please? Thx in advance

[@CommandLines]

You would need to open LVM and then run fsck on encrypted volume. The following link might be helpful.
serverfault.com/questions/375090/using-fsck-to-check-and-repair-luks-encrypted-disk

[@SANDEEPKUMAR-vd9fl]

Nice video... thankyou very much

[@abhibora5805]

Thanks....