Possible to encrypt after installation?

I installed Garuda without enabling disk encryption. I have everything set now, and even have couple of btrfs snapshots.

Is it possible to encrypt the drive(SSD) now? Or does it have to be on fresh install only?

If possible, how?

╰─λ inxi -Faz
System:    Kernel: 5.14.12-arch1-g14-1 x86_64 bits: 64 compiler: gcc v: 11.1.0
parameters: pm_debug_messages amd_pmc.dyndbg=+p acpi.dyndbg=file drivers/acpi/x86/s2idle.c +p
amd_pmc.enable_stb=1 BOOT_IMAGE=/@/boot/vmlinuz-linux-g14
root=UUID=2eeb1928-e215-484e-9847-54e2ce849c93 rw [email protected] quiet splash
rd.udev.log_priority=3 vt.global_cursor_default=0 systemd.unified_cgroup_hierarchy=1
resume=UUID=2978cdd3-cd08-43ba-b001-a7053ea59b54 loglevel=3
Desktop: KDE Plasma 5.23.1 tk: Qt 5.15.2 info: latte-dock wm: kwin_x11 vt: 1 dm: SDDM
Distro: Garuda Linux base: Arch Linux
Machine:   Type: Laptop System: ASUSTeK product: ROG Zephyrus G14 GA401II_GA401II v: 1.0 serial: <filter>
Mobo: ASUSTeK model: GA401II v: 1.0 serial: <filter> UEFI: American Megatrends v: GA401II.219
date: 12/30/2020
Battery:   ID-1: BAT0 charge: 50.8 Wh (69.0%) condition: 73.6/76.0 Wh (96.9%) volts: 15.8 min: 15.8
model: ASUSTeK ASUS Battery type: Li-ion serial: N/A status: Discharging
CPU:       Info: 6-Core model: AMD Ryzen 5 4600HS with Radeon Graphics bits: 64 type: MT MCP arch: Zen 2
family: 17 (23) model-id: 60 (96) stepping: 1 microcode: 8600104 cache: L2: 3 MiB
flags: avx avx2 lm nx pae sse sse2 sse3 sse4_1 sse4_2 sse4a ssse3 svm bogomips: 71894
Speed: 1587 MHz min/max: 1400/3000 MHz boost: enabled Core speeds (MHz): 1: 1587 2: 1495
3: 1397 4: 1396 5: 1389 6: 1392 7: 1704 8: 1609 9: 1428 10: 1778 11: 1746 12: 1407
Vulnerabilities: Type: itlb_multihit status: Not affected
Type: l1tf status: Not affected
Type: mds status: Not affected
Type: meltdown status: Not affected
Type: spec_store_bypass mitigation: Speculative Store Bypass disabled via prctl and seccomp
Type: spectre_v1 mitigation: usercopy/swapgs barriers and __user pointer sanitization
Type: spectre_v2
mitigation: Full AMD retpoline, IBPB: conditional, IBRS_FW, STIBP: conditional, RSB filling
Type: srbds status: Not affected
Type: tsx_async_abort status: Not affected
Graphics:  Device-1: AMD Renoir vendor: ASUSTeK driver: amdgpu v: kernel bus-ID: 04:00.0
chip-ID: 1002:1636 class-ID: 0300
Display: x11 server: X.Org 1.20.13 compositor: kwin_x11 driver: loaded: amdgpu,ati
unloaded: modesetting alternate: fbdev,vesa display-ID: :0 screens: 1
Screen-1: 0 s-res: 1920x1080 s-dpi: 96 s-size: 508x285mm (20.0x11.2") s-diag: 582mm (22.9")
Monitor-1: eDP res: 1920x1080 hz: 120 dpi: 158 size: 309x174mm (12.2x6.9") diag: 355mm (14")
OpenGL: renderer: AMD RENOIR (DRM 3.42.0 5.14.12-arch1-g14-1 LLVM 12.0.1) v: 4.6 Mesa 21.2.4
direct render: Yes
Audio:     Device-1: AMD driver: snd_hda_intel v: kernel bus-ID: 04:00.1 chip-ID: 1002:1637 class-ID: 0403
Device-2: AMD Raven/Raven2/FireFlight/Renoir Audio Processor vendor: ASUSTeK driver: N/A
alternate: snd_pci_acp3x, snd_rn_pci_acp3x bus-ID: 04:00.5 chip-ID: 1022:15e2 class-ID: 0480
Device-3: AMD Family 17h HD Audio vendor: ASUSTeK driver: snd_hda_intel v: kernel
bus-ID: 04:00.6 chip-ID: 1022:15e3 class-ID: 0403
Sound Server-1: ALSA v: k5.14.12-arch1-g14-1 running: yes
Sound Server-2: JACK v: 1.9.19 running: no
Sound Server-3: PulseAudio v: 15.0 running: no
Sound Server-4: PipeWire v: 0.3.38 running: yes
Network:   Device-1: Intel Wi-Fi 6 AX200 driver: iwlwifi v: kernel bus-ID: 02:00.0 chip-ID: 8086:2723
class-ID: 0280
IF: wlp2s0 state: up mac: <filter>
Bluetooth: Device-1: Intel AX200 Bluetooth type: USB driver: btusb v: 0.8 bus-ID: 5-4:3 chip-ID: 8087:0029
class-ID: e001
Report: bt-adapter ID: hci0 rfk-id: 0 state: up address: <filter>
Drives:    Local Storage: total: 953.87 GiB used: 299.28 GiB (31.4%)
SMART Message: Unable to run smartctl. Root privileges required.
ID-1: /dev/nvme0n1 maj-min: 259:0 vendor: Intel model: SSDPEKNW010T8 size: 953.87 GiB
block-size: physical: 512 B logical: 512 B speed: 31.6 Gb/s lanes: 4 type: SSD serial: <filter>
rev: 004C temp: 27.9 C scheme: GPT
Partition: ID-1: / raw-size: 937.05 GiB size: 937.05 GiB (100.00%) used: 299.28 GiB (31.9%) fs: btrfs
dev: /dev/nvme0n1p2 maj-min: 259:2
ID-2: /boot/efi raw-size: 260 MiB size: 256 MiB (98.46%) used: 562 KiB (0.2%) fs: vfat
dev: /dev/nvme0n1p1 maj-min: 259:1
ID-3: /home raw-size: 937.05 GiB size: 937.05 GiB (100.00%) used: 299.28 GiB (31.9%) fs: btrfs
dev: /dev/nvme0n1p2 maj-min: 259:2
ID-4: /var/log raw-size: 937.05 GiB size: 937.05 GiB (100.00%) used: 299.28 GiB (31.9%)
fs: btrfs dev: /dev/nvme0n1p2 maj-min: 259:2
ID-5: /var/tmp raw-size: 937.05 GiB size: 937.05 GiB (100.00%) used: 299.28 GiB (31.9%)
fs: btrfs dev: /dev/nvme0n1p2 maj-min: 259:2
Swap:      Kernel: swappiness: 133 (default 60) cache-pressure: 100 (default)
ID-1: swap-1 type: partition size: 16.56 GiB used: 0 KiB (0.0%) priority: -2
dev: /dev/nvme0n1p3 maj-min: 259:3
ID-2: swap-2 type: zram size: 15.05 GiB used: 1.7 MiB (0.0%) priority: 100 dev: /dev/zram0
Sensors:   System Temperatures: cpu: 38.2 C mobo: 38.0 C gpu: amdgpu temp: 36.0 C
Fan Speeds (RPM): cpu: 2600
Info:      Processes: 364 Uptime: 14h 29m wakeups: 42 Memory: 15.05 GiB used: 5.11 GiB (33.9%)
Init: systemd v: 249 tool: systemctl Compilers: gcc: 11.1.0 clang: 12.0.1 Packages:
pacman: 1488 lib: 371 Shell: fish v: 3.3.1 default: Zsh v: 5.8 running-in: konsole inxi: 3.3.07

Unless you have a lot of free space and time to move data around you are better off reinstalling.

1 Like