Encrypting Exisiting System

I have an existing install of openSUSE (11.0) that I have setup on my desktop. I’m fairly concerned about the security of files on my system. Normally I would be happy with a secure deletion method (shred, Eraser) but it seems this method does not work so well with a journaling file system. So at this point I would like to encrypt my file systems. Currently my hdd layout is the following:

Primary Partition:
/windows  40GB     not to be encrypted...

Extended Partition:
/boot     133 MB   not to be encrypted...
swap      2GB      to be encrypted...
/         30GB     to be encrypted...
/home     160GB    to be encrypted...

*all partitions to be encrypted have less than 20GB used space

I have read through Encrypted Root File System - openSUSE but this seems targeted towards a new install…

I think I have a general idea on how I could proceed, but I would like to get some tips and pointers before I start. I was thinking something along the lines of:

  1. Backup up all data on partitions to be encrypted. (dump to external USB dive)
  2. Follow the steps in Encrypted Root File System - openSUSE
  3. Restore backed up data to encrypted file systems (restore from external USB drive)

After some discussion here on the forums and in IRC I will likely proceed in this endeavor. I am likely to fully document my experience and if I do I will post my results.

Any tips, pointers, or stories would be appreciated! :slight_smile: