I have added a new drive to a qubes box. I can partition the drive, and attach it to a qube, but it is not encrypted. I would like to know how to encrypt and whether or not to encrypt the partition or the whole device.
Specifically, my goal is to take one drive and split it into several partitions and attach at least one smaller partition to a qube while leaving the other(s) for future use or backup storage.
The documentation for block devices makes sense, but I do not see how to encrypt after install.
–edit
I noticed that if I format a partition in gui as ext4 there is a passwd LUKS option. I assume this is the answer and hope I did not waste any person’s time.
View the partition in “Disks” > click on “Additional partition options” > choose “Format Partition” > Ext4 (with LUKS)
One other tip (which you may already be aware of): A whole lot of stuff people ask on Qubes is a general linux question. So a lot of that won’t be in the Qubes docs. But if instead you search for it online without the “Qubes” keyword, you might find what you are looking for.
Thank you. I have not been a linux user for a long time. I did not know that LUKS was a part of ext4. I’ll increase the scope of my searches to outside the documentation next time.