Contents
What does it mean to encrypt a backup drive?
Encrypting backups gives you personal control over your personal information. It’s a level of protection that goes way beyond an email password, for example. If your iPhone gets stolen or you leave your computer or iPad on an airplane, your information is locked securely with the password only you know.
What is LUKS and LVM?
June 5, 2013 by Dejan Lukan. LVM + LUKS. LVM is software that uses physical devices as physical volumes (PVs) in storage pools called volume group (VG). Physical volumes can be a partition, whole SATA hard drive grouped as JBOD, RAID systems, iSCSI, Fibre Channel, eSATA, etc [1].
Is the luks1 format compatible with LUKS2?
Cryptsetup 2.0.0 Release Notes Stable release with experimental features. This version introduces a new on-disk LUKS2 format. The legacy LUKS (referenced as LUKS1) will be fully supported forever as well as a traditional and fully backward compatible format.
Can a root partition be converted to LUKS2?
Alternatively the root partition, if it holds /boot and is LUKS2, may be converted back to LUKS1 in its entirety. In both cases it is a good idea to add a keyfile for one additional LUKS keyslot and to copy this keyfile into the initramfs (or configure the initramfs to find the keyfile).
Can you use GRUB on a Luks partition?
As of January 10th 2020, GRUB supports LUKS2 so if you are using GRUB to unlock the /boot partition or encrypted disk – GRUB has you covered. As for features see Leo’s answer GRUB does not support LUKS2 yet. If your /boot directory is on a LUKS-encrypted device and you use GRUB as your bootloader, it won’t work.
Can you use GRUB as a bootloader for LUKS2?
GRUB does not support LUKS2 yet. If your /boot directory is on a LUKS-encrypted device and you use GRUB as your bootloader, it won’t work. [minor point] Older cryptsetup (1.x.y) can’t process LUKS2, so Live CD/USBs with a version of cryptsetup before 2 can’t be used to decrypt LUKS2 partitions.