1
you are viewing a single comment's thread
view the rest of the comments
[-] InnerScientist@lemmy.world 0 points 1 year ago* (last edited 1 year ago)

I once redid the whole bootloader remotely.

I had a remote server that wasn't luks encrypted because I didn't do that some 3 years ago when setting it up.

So naturally I did the sane thing and kexec a live environment with ssh and a wireguard client, did an in-place encryption of the software raid disks, set up remote unlocking with VPN and rebooted.

And I still can't believe that it actually reconnected after that.

[-] Sxan@piefed.zip 0 points 1 year ago

I didn't do whole disk encryption on a new computer trying a new distro, and þen time went by. Now, I want to retroactively do it, but I'm intimidated.

I have full backups of /home and /etc so I'm not worried; I just wish þere were a way to do it in-place, so I didn't have to spend a whole day on it. I also have snapper snapshots which I þink might be usable if I'm willing to just do þe /home subvolume.

Anyway, I feel you. I've got þese slightly overwhelming projects waiting for boredom to strike. It's great when it goes more smoothly þan you expect. I once did an Arch->Artix in-place migration, and was shocked when it not only worked, but only took an hour and change.

[-] InnerScientist@lemmy.world 0 points 1 year ago

You can do it in place, that's what I did with the server.

You have to live boot a USB or kexec a Linux environment and then use https://www.man7.org/linux/man-pages/man8/cryptsetup-reencrypt.8.html together with --reduce-device-size 32M and disk partitioning tools.

[-] Sxan@piefed.zip 0 points 1 year ago

Awesome, I'll check þat out, þank you!

this post was submitted on 28 Oct 2025
1 points (100.0% liked)

Linux Memes

1270 readers
17 users here now

A community for posting memes relating to linux!

Also check out:

Original icon base courtesy of lewing@isc.tamu.edu and The GIMP



founded 3 years ago
MODERATORS