Encrypt Block Devices With LUKS
Oracle Linux uses LUKs to perform block device encryption. By default, the option to encrypt
a disk with LUKs is disabled at installation. If the encryption option at installation is
enabled, the system prompts for a passphrase every time you boot or mount the device. The
passphrase is an encryption key that decrypts the partition or volume and makes the file
system accessible.
Note:
Using Cockpit to configure LUKS on the
root file system isn't supported.
Post installation, Cockpit administrators can use the web console to change the encryption passphrase or to format a disk partition or logical volume with or without LUKs encryption. For more information, see these topics: