Encrypt an existing Linux installation with zero downtime (LUKS on LVM)

Fri, 20 Nov 2020 00:00:00 +0000

During the bi-yearly review of my setup, I realized I was running a Linux machine without full disk encryption. The encryption of the disk needed to be done ASAP, but I was not willing to reinstall the whole operating system to achieve that.

Linux: using bind mount to move a subset of root subdirectories to another partion or disk

Tue, 21 Aug 2018 00:00:00 +0000

I was in the situation dealing with a Linux box with two hard disks:

/dev/sda: fast hard drive (SSD), small size (~200 GB)
/dev/sdb: very big hard drive (HDD), large size (~4 TB)

The operating system was installed on /dev/sda, so I had /dev/sdb empty. I knew I could create a mount point (e.g. /storage) and mount it to /dev/sdb, but after reading Intelligent partitioning and the recommended Debian partitioning scheme I thought about moving:

Lvm on Michele Bologna

Encrypt an existing Linux installation with zero downtime (LUKS on LVM)

Linux: using bind mount to move a subset of root subdirectories to another partion or disk