Skapa partitionen som ska krypteras (/dev/sda2 i detta exempel)

Använd Gparted, cfdisk, fdisk eller liknande.

Kryptera partitionen /dev/sda2

cryptsetup luksFormat /dev/sda2

WARNING!

This will overwrite data on /dev/sda2 irrevocably.

Are you sure? (Type uppercase yes): YES
(Ange valfritt lösenord)
Enter passphrase:
Verify passphrase:

Avkryptera partitionen och mappa mot valfri tagg (exempelvis encrypted)

cryptsetup open /dev/sda2 encrypted
(Skriv samma lösenord som angavs tidigare)
Enter passphrase for /dev/sda2:

Skapa ett filsystem på partitionen

mkfs.ext4 /dev/mapper/encrypted

mke2fs 1.43.4 (31-Jan-2017)
Creating filesystem with 9883648 4k blocks and 2473984 inodes
Filesystem UUID: c6629598-4f80-4435-9732-7118562ef7d3
Superblock backups stored on blocks:
32768, 98304, 163840, 229376, 294912, 819200, 884736, 1605632, 2654208,
4096000, 7962624

Allocating group tables: done
Writing inode tables: done
Creating journal (65536 blocks): done
Writing superblocks and filesystem accounting information: done

Montera filsystemet (på valfritt ställe, exempelvis /mnt)

cryptsetup –type luks open /dev/sda2 encrypted
mount -t ext4 /dev/mapper/encrypted /mnt

root@devuan:~# df -h /mnt
Filesystem Size Used Avail Use% Mounted on
/dev/mapper/encrypted 37G 49M 35G 1% /mnt

Avmontera filsystemet

umount /mnt
cryptsetup close encrypted

Referenser

https://gitlab.com/cryptsetup/cryptsetup/

https://www.cyberciti.biz/hardware/howto-linux-hard-disk-encryption-with-luks-cryptsetup-command/

https://linuxconfig.org/basic-guide-to-encrypting-linux-partitions-with-luks