Qubes: LUKS2 cryptsetup-reencrypt risk? [off-topic]

Qubes-Whonix
1

If utilizing LUKS2 FDE (Full Disk Encryption), does this mean once the disk is encrypted, there is no going back using the “cryptsetup-reencrypt” to change the Master Encryption Key on the entire disk because
:point_down:t3:THIS :point_down:

IMG_1869
IMG_18691179×2002 259 KB

source:
RHEL

As :point_up_2:t3:THAT :point_up_2: sounds like it implies that no matter what “cryptsetup-reencrypt” on LUKS2 will always require reformatting of the disk.

In other words no matter how careful I am in inputing CLI command(s) for this, it will inevitably destroy the current data on disk thus making me start over with a fresh install of QubesOS?

Yes/No?

1 Like
2

Wrong forum.

Not a Whonix issue.

2 Likes
3

Where do you suggest I go then?

1 Like
4

Qubes forum.

2 Likes
5

→ What to post in this Qubes-Whonix forum and what not.

2 Likes
6

Honestly it’s not Qubes-specific, either…just look at this user’s posts over at the Qubes forum and you’ll know what I mean. Just my 2c.

But, in order for me not to be a jerk:

No.

2 Likes
7

Thank you for giving me the answer so I can decide to take the risk or not updating the FDE passphrase

Also, the “solve button” is not appearing here on this Forum thread so I am currently unable to mark this as solved by you but will check back to see if later I can

1 Like
8

That’s a forum plugin which isn’t used by all forums, I think.

3 Likes