disk-encryption-tool is a command-line utility for converting existing unencrypted Linux storage to LUKS encryption.
It works with a mounted filesystem or block device and uses cryptsetup’s in-place reencryption functionality rather than requiring the contents to be copied to a newly created encrypted volume.
The tool has particular integration with openSUSE system images and the early boot environment. Its accompanying dracut module can perform encryption during boot, allowing systems to be deployed initially without encryption and converted before normal operation. Btrfs filesystems receive special handling so their filesystem and partition can be temporarily reduced before encryption and expanded again afterwards. Swap partitions are also supported.
This is free and open source software.
Key Features
- Uses LUKS encryption through cryptsetup reencrypt.
- Accepts mounted filesystems or block devices as encryption targets.
- Handles Btrfs filesystems by shrinking the filesystem and partition before encryption and restoring their available space afterwards.
- Supports encryption of swap partitions while retaining their UUID where possible.
- Generates an enrollment key automatically when a key is not supplied.
- Can store generated keys in the kernel keyring, useful when encrypting multiple disks during the same operation.
- Writes the resulting encrypted device configuration to /etc/crypttab using its UUID.
- Supports custom crypttab options and automatically applies appropriate early-boot settings to the encrypted root filesystem.
- Allows additional cryptsetup reencrypt parameters to be supplied through an encryption configuration file.
- Includes a dracut module for carrying out encryption from the initrd.
- Can encrypt multiple specified partitions during early boot.
- Supports systemd credentials for controlling whether encryption occurs and which partitions are processed.
- Integrates with Combustion-based system provisioning.
Website: github.com/openSUSE/disk-encryption-tool
Support:
Developer: openSUSE
License: MIT License
disk-encryption-tool is written in Bash. Learn Bash with our recommended free books and free tutorials.
Related Software
| Disk Encryption Tools | |
|---|---|
| VeraCrypt | Strong disk encryption software |
| loop-AES | Encrypt disk partitions, removable media, swap space and other devices |
| dm-crypt | Transparent disk encryption subsystem |
| GnuPG | GNU Privacy Guard - implementation of the OpenPGP standard |
| GocryptFS | Encrypted overlay filesystem written in Go |
| cryptsetup | Configures encrypted block devices |
| Tomb | System for file encryption |
| Shufflecake | Create multiple hidden volumes |
| zuluCrypt | Feature rich solution for hard drive encryption |
| cryptmount | Managing encrypted file systems |
Read our verdict in the software roundup.
 Explore our comprehensive directory of recommended free and open source software. Our carefully curated collection spans every major software category.This directory is part of our ongoing series of informative articles for Linux enthusiasts. It features hundreds of detailed reviews, along with open source alternatives to proprietary solutions from major corporations such as Google, Microsoft, Apple, Adobe, IBM, Cisco, Oracle, and Autodesk. You’ll also find interesting projects to try, hardware coverage, free programming books and tutorials, and much more. Discovered a useful open source Linux program that we haven’t covered yet? Let us know by completing this form. |
Please read our Comment Policy before commenting.