021 - How To Encrypt Linux Filesystems Using LUKS (Linux Unified Key Setup) | RHEL 8

You could encrypt files and directories in Linux to protect it against theft but you could also encrypt your filesystem as well. Some Linux distros allow you to encrypt your filesystem or home directory during the installation steps but the option is not checked by default. Ubuntu used to provide an option to encrypt home directory but it stopped doing so after version 18 because the encrypting system, eCryptfs, it was using was under-maintained and considered to be unfit to use in a production system. The preferred way to encrypt a partition or a filesystem is to do a full disk encryption using LUKS (Linux Unified Key Setup), and in this video that is what we are going to discuss about. LUKS is a disk encryption specification created for Linux and uses device mapper crypt (dm-crypt) as a kernel module to handle the encryption. dm-crypt is a transparent disk encryption subsystem in Linux kernel versions 2.6 and later. LUKS creates a new block device encrypted over existing block device and while doing so, it will delete all the data. So if you are encrypting an existing partition, please make sure that the data in it are backed up before encrypting it. #Linux #LUKS #Encryption