Frank Steinmetzger wrote: > Am Wed, Sep 14, 2022 at 12:40:21AM -0500 schrieb Dale: > >> Now to replace my /home drive which is also close to full. It's not >> encrypted tho. The biggest difference in this and plain LVM, resizing >> with cryptsetup or close and reopen. Keep in mind, while I did all >> this, LUKS, cryptsetup, whatever was open. > I recently learnt that you can encrypt an unencrypted devices on-the-fly. > Kinda neat. It is also resilient to hard interruptions like power-offs. > See man cryptsetup-reencrypt. > > But if you want to replace the drive anyways, it may be faster to set up a > new device and rsync the files in the last step. I always use these kinds of > opportunities to weed out old cruft on my filesystem. >
The reason I left /home itself plain, when I leave, I lock the encrypted parts. I need the rest of /home plain so I can leave downloads and such running. If all of /home was encrypted, then I'd have to stop my downloads or just store them elsewhere. The things I want to keep secure, they are in the encrypted parts. I don't keep a lot of cruft around. The only exception, I need to clean out bookmarks in Seamonkey. I have a tool that helps in Firefox but sadly, Seamonkey has few working addon type tools anymore. Other than email, I'd like to switch to something else. Wouldn't mind switching anyway but I just don't like the options. Dale :-) :-)
