• Nonononoki@lemmy.world
    link
    fedilink
    arrow-up
    11
    arrow-down
    1
    ·
    4 days ago

    LUKS encrypts the whole drive, native FS encryption can encrypt it partially (e.g. just the home partition). Additionally, decrypting without a keyboard is a pain or impossible (e.g. touch screen only devices).

    • Petter1@lemm.ee
      link
      fedilink
      arrow-up
      3
      ·
      4 days ago

      PostmarkedOS was able to encrypt disk while offering on screen touch keyboard to unlock it on my pinePhone “pro”.

    • prole@lemmy.blahaj.zone
      link
      fedilink
      arrow-up
      2
      ·
      edit-2
      4 days ago

      I’m the furthest thing from an expert in linux encryption, but can you not use KDE’s “Vaults” feature to create encrypted folders/drives? I think it uses “CryFS” as the backend (according to KDE. Don’t really know enough about it).

      I’ve used them on my btrfs drive and seemed to work fine.

    • RichardTickler@lemmy.world
      link
      fedilink
      arrow-up
      1
      ·
      3 days ago

      If the home/root partition is a physical or logical volume you most certainly can leave that decrypted while encrypting other volumes. The system could not boot if that were the case as the efi partition cannot be encrypted.