Effectively in-place encryption system for encrypting system/root/operating system (os) partitions and user data partitions

Abstract

Techniques are taught for encrypting one or more target partitions effectively 'in-place'. This effectively in-place encryption is extremely desirable when a root/OS partition (such as /, /usr, /bin, etc.) needs to be encrypted without having to manually back up its contents to another location where they may be exposed in plaintext form, encrypting a new partition, and restoring the contents back to it. The techniques of the present disclosure are also applicable for encrypting effectively in-place user data partitions. To accomplish its objectives, the technology provides an install sequence/process and a modified boot sequence to automatically encrypt partitions effectively in-place. In various embodiments, the selection of copy partitions where copy data is temporarily stored in encrypted form, is performed manually or automatically. In other embodiments, a logical volume manager (LVM) is employed that greatly facilitates provisioning of free space in the system where copy data will be temporarily and securely held/stored.