f9 encrypted fs - how???

[Wolfgang S. Rupprecht]

Bruno Wolff III <bruno at wolff.to> writes:
> You aren't going to be able to change an existing file system in place.
> Probably the easiest solution is to back up your data and configuration
> information and reinstall.

I think I have enough free space to juggle things.  I've got the
rootfs and swap on LVM and have tons of free space.  In theory I could
shrink the rootfs ext3, shrink the LogVol00 containing that ext3, and
create a new logical volume to contain /home that I intend to encrypt.
While I'm at it I'll also encrypt swap, but with an ephemeral key that
gets pulled from /dev/random on each boot.

> You can use cryptsetup (using the luks commands) to set up an encrypted
> block device on top of a partition. You can then use mkfs to make a new
> file system on top of the encrypted device. This is what you would do for
> setting up encryption on a usb device. For a file system you want mounted
> at boot time, you'll also need to make an entry in /etc/fstab.

Thanks!  I think that's the key I needed.

-wolfgang
-- 
Wolfgang S. Rupprecht              http://www.full-steam.org/  (ipv6-only)
         You may need to config 6to4 to see the above pages.