Skip to content

Adding new encrypted partitions/disk

If you already encrypted you system drive when installing your OS, you can add new partitions/disks as encrypted devices too. If you did not encrypted your system drive, then I don't know how to do, but some search on the internet will provide you information on that.

This is to add it permanently to your system (like what you put in /etc/fstab).

What I've done

Start formatting disk/partition with encryption flag + ext4 using Gnome disks. Note the UUID of the new LUKS partition.

Then I've edited the /etc/crypttab file, adding this line:

dm_crypt-N UUID=XXXXXX none luks

Replace:

  • N by the first integer available (if you have nothing in the file use 0)
  • XXXXXX by the UUID of the LUKS partition

Then I edit my fstab file /etc/fstab to point to the new partition device. I've added those lines:

/dev/mapper/dm_crypt-N /mnt/MyNewMountPoint auto defaults 0 0

The name dm_crypt-N must match the one in \etc\crypttab

Good news

If you set the same pass phrase for all your encrypted partitions, you will be prompted only once (at least that what I saw on my configuration).

100 words vs 1 picture:

Configuration example with 1 new partition

Refs