Kali Linux Persistence: Transitioning from Unencrypted to LUKS Encrypted Partitions

Persistence Partition Migration

Kali Linux Live USB persistence utilizes an overlay filesystem to merge a read-only system image with a writable partition. While the system supports both unencrypted and LUKS-encrypted persistence partitions, the transition between these two states is not an automated process.

When moving from a standard persistence partition to an encrypted one, the underlying partition must be reformatted with LUKS, which destroys existing data. Because the persistence.conf file resides within the partition itself, the configuration mapping for directories like /home and /etc is lost during the encryption process.

There is uncertainty regarding the most efficient method to migrate existing persisted data into a new encrypted volume without manually recreating the overlay configuration from scratch.

• Can existing persistence data be migrated to a LUKS-encrypted partition without a full manual backup and restore of the persistence.conf mapping?
• Does the overlayfs mechanism support a seamless transition if the partition UUID changes during the encryption process?