I have added a new drive to a qubes box. I can partition the drive, and attach it to a qube, but it is not encrypted. I would like to know how to encrypt and whether or not to encrypt the partition or the whole device.
Specifically, my goal is to take one drive and split it into several partitions and attach at least one smaller partition to a qube while leaving the other(s) for future use or backup storage.
The documentation for block devices makes sense, but I do not see how to encrypt after install.
I noticed that if I format a partition in gui as ext4 there is a passwd LUKS option. I assume this is the answer and hope I did not waste any person’s time.
View the partition in “Disks” > click on “Additional partition options” > choose “Format Partition” > Ext4 (with LUKS)
then mount as described in docs: Block (storage) devices