Encrypting the $HOME directory under ubuntu/debian and other dists.
In my case my $USER is “ubuntu” so be careful to replace that with your own user.
Be sure to have more than the double free space in your $HOME than the size of the files to complete the migration, else copy your files temporarily in another partition and after the encryption put them back.
First install the required packages: rsync lsof ecryptfs-utils
|
1 |
sudo apt-get install rsync lsof ecryptfs-utils |
Then we must login as another user to encrypt our $HOME directory. In ubuntu this is impossible if there is only one user other than root, because $HOME is being used by the user and root has no password, so we create a temporary user to complete the encryption.
[NOTE]If your root account has a password or you have another account skip this step
|
1 |
sudo adduser tmp |
Add him to the sudo group
|
1 |
sudo usermod -a -G sudo tmp |
Then relogin as tmp , check that your user’s directory is not being used and continue.
|
1 |
lsof /home/ubuntu |
|
1 |
sudo ecryptfs-migrate-home -u ubuntu |
In the promt “Enter your login passphrase [ubuntu]:” add your user’s password.Wait for a while until the migration is completed and login as your user to complete the migration.
|
1 2 |
su - ubuntu ls |
If you see your files then the migration is complete, else if you see “Access-Your-Private-Data.desktop README.txt” mount the ecrypted $HOME with:
|
1 |
ecryptfs-mount-private |
****RELOGIN**** as your user and delete the temporary folder of your $HOME and the tmp user:
|
1 |
sudo deluser tmp && sudo rm -r /home/ubuntu.* /home/tmp |
