disk-encryption-tool is a command-line utility for converting existing unencrypted Linux storage to LUKS encryption.
It works with a mounted filesystem or block device and uses cryptsetup’s in-place reencryption functionality rather than requiring the contents to be copied to a newly created encrypted volume.
The tool has particular integration with openSUSE system images and the early boot environment. Its accompanying dracut module can perform encryption during boot, allowing systems to be deployed initially without encryption and converted before normal operation. Btrfs filesystems receive special handling so their filesystem and partition can be temporarily reduced before encryption and expanded again afterwards. Swap partitions are also supported.
This is free and open source software.
Key Features
- Uses LUKS encryption through cryptsetup reencrypt.
- Accepts mounted filesystems or block devices as encryption targets.
- Handles Btrfs filesystems by shrinking the filesystem and partition before encryption and restoring their available space afterwards.
- Supports encryption of swap partitions while retaining their UUID where possible.
- Generates an enrollment key automatically when a key is not supplied.
- Can store generated keys in the kernel keyring, useful when encrypting multiple disks during the same operation.
- Writes the resulting encrypted device configuration to /etc/crypttab using its UUID.
- Supports custom crypttab options and automatically applies appropriate early-boot settings to the encrypted root filesystem.
- Allows additional cryptsetup reencrypt parameters to be supplied through an encryption configuration file.
- Includes a dracut module for carrying out encryption from the initrd.
- Can encrypt multiple specified partitions during early boot.
- Supports systemd credentials for controlling whether encryption occurs and which partitions are processed.
- Integrates with Combustion-based system provisioning.
Website: github.com/openSUSE/disk-encryption-tool
Support:
Developer: openSUSE
License: MIT License
disk-encryption-tool is written in Bash. Learn Bash with our recommended free books and free tutorials.
Related Software
| Disk Encryption Tools | |
|---|---|
| VeraCrypt | Strong disk encryption software |
| loop-AES | Encrypt disk partitions, removable media, swap space and other devices |
| dm-crypt | Transparent disk encryption subsystem |
| cryptsetup | Configures encrypted block devices |
| GnuPG | GNU Privacy Guard - implementation of the OpenPGP standard |
| gocryptfs | Encrypted overlay filesystem written in Go |
| Tomb | System for file encryption |
| Shufflecake | Create multiple hidden volumes |
| zuluCrypt | Feature rich solution for hard drive encryption |
| cryptmount | Managing encrypted file systems |
| disk-encryption-tool | Encrypt existing Linux storage without reinstalling the system |
Read our verdict in the software roundup.
 LinuxLinks helps you discover the best free and open source software for Linux. Explore our extensive collection of recommended applications, including alternatives to popular proprietary software.We also publish software reviews, Linux tutorials, hardware reviews, free programming books and articles covering the wider open source community. Browse our Linux resources to discover more. Know a useful free and open source Linux application we haven't covered? Suggest a program for inclusion. Has your software been featured on LinuxLinks? Display one of our Featured on LinuxLinks badges on your website or GitHub README. |
Please read our Comment Policy before commenting.