Is it possible to encrypt with Veracrypt root partition of already installed Ubuntu without data loss? I think I need to use boot flash cause impossible to encrypt mounted root partition, right? Do I need to create separate unencrypted /boot? Any experience with it, trusted manuals, working and ...