FedoraForum.org - Fedora Support Forums and Community
Results 1 to 9 of 9
  1. #1
    Join Date
    Mar 2017
    Location
    London
    Posts
    17

    Remove Encryption

    Hi.

    As subject, really. I asked for the disk to be encrypted when installing Fedora 27. I'd like to remove that. Can someone tell me how? Thanks.

  2. #2
    Join Date
    Mar 2011
    Location
    /
    Posts
    5,102

    Re: Remove Encryption

    I don't think you can remove encryption once you have installed the system with it. You might need to reinstall.
    Fedora 27 x86_64 XFCE - Sager | Intel Core i7 - 4810 MQ | NVIDIA GeForce GTX 860M | 16 GB RAM | 480 GB ADATA SSD |
    Fedora 27 x86_64 XFCE - Dell Precision M4800 | Intel Core i7 - 4900 MQ | NVIDIA Quadro K1100M | 16 GB RAM | 750 GB 7200 RPM HDD |


    The Linux Documentation Project | Fedora Documentation

  3. #3
    Join Date
    Feb 2005
    Location
    London, UK
    Posts
    566

    Re: Remove Encryption

    Quote Originally Posted by nonamedotc
    I don't think you can remove encryption once you have installed the system with it. You might need to reinstall.
    You might need to reinstall the filesystem (not the full OS). i.e: backup that FS, umount FS, delete FS, make new FS, restore files, mount FS, delete entry in crypttab & update fstab. You may need to do some of these from a Live media boot or similar though if you can't umount the filesystem.

  4. #4
    Join Date
    Jun 2005
    Location
    Montreal, Que, Canada
    Posts
    4,606

    Re: Remove Encryption

    Just like pregnancy, you can't be half pregnant. Abortion is the only way. If you chose encryption, then you can't just un-choose it and live with half and half. You have a few options.
    a) backup your files and re-install your distribution, indicating that you do not want encrypted partitions.
    b) If you have extra partition space, format it unencrypted, copy over the encrypted partition to it, and fix up the /etc/fstab.
    b1) After copying over the data to an uncrypted partition, format the existing partition as not encrypted and copy back. (Not sure this would work).
    c) Live with encryption until a future requirement presents itself to do a)
    Leslie in Montreal

    Interesting web sites list
    http://forums.fedoraforum.org/showth...40#post1697840

  5. #5
    Join Date
    Feb 2005
    Location
    London, UK
    Posts
    566

    Re: Remove Encryption

    Quote Originally Posted by lsatenstein
    Just like pregnancy, you can't be half pregnant.
    Don't you *have* to be half encrypted as you can't have /boot encrypted? I only have /home encrypted, so it's only /home I'd have to backup and rebuild unencrypted.

  6. #6
    Join Date
    Jun 2005
    Location
    Montreal, Que, Canada
    Posts
    4,606

    Re: Remove Encryption

    Encryption is by partition.
    Leslie in Montreal

    Interesting web sites list
    http://forums.fedoraforum.org/showth...40#post1697840

  7. #7
    Join Date
    Feb 2005
    Location
    London, UK
    Posts
    566

    Re: Remove Encryption

    Maybe our definitions of "partition" are different as I consider that a "slice" of a physical hard disk? Perhaps you mean volume or filesystem? dm-crypt can create an encrypted container pretty much anywhere using a loop device, e.g: I could make a 50M encrypted filesystem inside my home directory if I so wished:

    Code:
    [haydn@darkstar ~]$ su -
    Password: 
    [root@darkstar ~]# mkdir safe
    [root@darkstar ~]# cd safe/
    [root@darkstar safe]# dd if=/dev/urandom of=./foo bs=1M count=50
    50+0 records in
    50+0 records out
    52428800 bytes (52 MB, 50 MiB) copied, 0.259246 s, 202 MB/s
    [root@darkstar safe]# losetup /dev/loop8 ./foo
    [root@darkstar safe]# cryptsetup luksFormat /dev/loop8
    
    WARNING!
    ========
    This will overwrite data on /dev/loop8 irrevocably.
    
    Are you sure? (Type uppercase yes): YES
    Enter passphrase: 
    Verify passphrase: 
    [root@darkstar safe]# cryptsetup --type luks open /dev/loop8 baa
    Enter passphrase for /root/safe/foo: 
    [root@darkstar safe]# mke2fs /dev/mapper/baa 
    mke2fs 1.43.5 (04-Aug-2017)
    Creating filesystem with 49152 1k blocks and 12288 inodes
    Filesystem UUID: 47519741-ff04-48ed-9f30-d9602ac48ce0
    Superblock backups stored on blocks: 
        8193, 24577, 40961
    
    Allocating group tables: done                            
    Writing inode tables: done                            
    Writing superblocks and filesystem accounting information: done
    
    [root@darkstar safe]# mkdir mnt
    [root@darkstar safe]# mount /dev/mapper/baa ./mnt
    [root@darkstar safe]# df -h ./mnt
    Filesystem       Size  Used Avail Use% Mounted on
    /dev/mapper/baa   47M  778K   44M   2% /root/safe/mnt
    [root@darkstar safe]# lsblk |grep baa
    └─baa                                         253:5    0    48M  0 crypt /root/safe/mnt
    [root@darkstar safe]#

  8. #8
    Join Date
    Jun 2005
    Location
    Montreal, Que, Canada
    Posts
    4,606

    Re: Remove Encryption

    When you announce to anaconda that you want encryption, it would be for /home, except /boot (for now), and may even include encrypting / and swap. If you intend to protect root programs from end-users, then it too needs to be encrypted.

    I am a single system desktop user, I do not encrypt. That decision allows me to run several different Fedora Linux versions on separated disks, where the data from one Fedora is accessible from all the other Fedora. I have absolutely no financial data on my computer, though my email systems and my Fedoraforum access could be hacked.

    If I was using a server, I would of course use encryption
    Leslie in Montreal

    Interesting web sites list
    http://forums.fedoraforum.org/showth...40#post1697840

  9. #9
    Join Date
    Feb 2005
    Location
    London, UK
    Posts
    566

    Re: Remove Encryption

    Quote Originally Posted by lsatenstein
    I am a single system desktop user, I do not encrypt.

    If I was using a server, I would of course use encryption
    That's interesting, I'm the other way around. For most servers I would assume it's in a secure location so physical access would be restricted and therefore there's little point in the overhead of encrypting (although you need to ensure your decom processes include adequately wiping the disks). For a desktop, and especially laptops, I would assume physical access is more likely to be available to others and therefore encryption is more important.

Similar Threads

  1. Replies: 3
    Last Post: 29th August 2017, 08:19 PM
  2. How to remove encryption from an hard disk?
    By aneesk_k in forum Security and Privacy
    Replies: 3
    Last Post: 17th March 2009, 03:46 PM
  3. Replies: 3
    Last Post: 9th November 2008, 08:29 PM
  4. How to remove encryption from a partition
    By buchalkalan in forum Alpha - Beta (Fedora 9 Only)
    Replies: 1
    Last Post: 28th April 2008, 11:46 PM
  5. Replies: 4
    Last Post: 25th March 2005, 12:34 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •