linux4noobs

1421 readers

2 users here now

linux4noobs

Noob Friendly, Expert Enabling

Whether you're a seasoned pro or the noobiest of noobs, you've found the right place for Linux support and information. With a dedication to supporting free and open source software, this community aims to ensure Linux fits your needs and works for you. From troubleshooting to tutorials, practical tips, news and more, all aspects of Linux are warmly welcomed. Join a community of like-minded enthusiasts and professionals driving Linux's ongoing evolution.

Seeking Support?

Mention your Linux distro and relevant system details.
Describe what you've tried so far.
Share your solution even if you found it yourself.
Do not delete your post. This allows other people to see possible solutions if they have a similar problem.
Properly format any scripts, code, logs, or error messages.
Be mindful to omit any sensitive information such as usernames, passwords, IP addresses, etc.

Community Rules

Keep discussions respectful and amiable. This community is a space where individuals may freely inquire, exchange thoughts, express viewpoints, and extend help without encountering belittlement. We were all a noob at one point. Differing opinions and ideas is a normal part of discourse, but it must remain civil. Offenders will be warned and/or removed.
Posts must be Linux oriented
Spam or affiliate links will not be tolerated.

founded 1 year ago

MODERATORS

PlutoParty@programming.dev

How to Encrypt Drives ? (self.linux4noobs)

submitted 2 months ago* (last edited 2 months ago) by gpstarman to c/linux4noobs@programming.dev

7 comments fedilink hide all child comments

This is my disk layout:

500 GB Linux - BTRFS

100 GB Windows - NTFS

400 GB Storage - NTFS (shared between linux and windows)

I want to encrypt everything. For Linux I can use luks2 but what I'm supposed to do for Windows ? (No bitlocker please)

Will veracrypt replace refind boot manager?

Note: I am talking about the one that asks password before boot (full encryption)

you are viewing a single comment's thread
view the rest of the comments

[–] tal 2 points 2 months ago* (last edited 2 months ago) (2 children)

What type of encryption do you need? NTFS can natively provide encryption, but it's going to be file level. LUKS2 is block device level, so the whole filesystem looks like one encrypted blob.

EDIT: And I don't know if Linux can do encrypted NTFS. If not, that wouldn't work for the shared storage.

kagis

Nope. Looks like there's a utility, ntfsdecrypt, to do decryption on a file-by-file basis, though. Probably not what you want, though.

https://superuser.com/questions/1554798/access-files-encrypted-with-windows-efs-encrypting-file-system-on-linux

EDIT2: This guy is recommending VeraCrypt, as it works with both. I've never used it, though, and the post is eight years old, so I suppose the situation could have changed.

https://unix.stackexchange.com/questions/306398/does-linux-work-well-with-encrypted-ntfs-drives

Linux doesn't support NTFS file-level encryption. Bitlocker using the recovery key sorta works but is still very new(look here for more info). Windows in turn can't read LUKS-encrypted devices. If you need to share your encrypted drive between Windows and Linux, I'd recommend VeraCrypt or one of the other TrueCrypt forks.

[–] gpstarman 1 points 2 months ago* (last edited 2 months ago)

The one that asks password before boot (full encryption)

[–] gpstarman 1 points 2 months ago* (last edited 2 months ago)

But veracrypt has it's own boot loader right? Won't it replace rEFInd?