Well, I'm going to need some help here. I created the encrypted directory ok but I didn't understand the following commands and now at log in I'm asked for the encrypted volume pass phrase, which works, but then I get asked for the pass phrase for my old /home not the new encrypted one. So I can't log on.
== Phase 3 ==
That went well, I hope! To ensure we work with the correct /home, let us create an empty file (old-home) in our current profile. It will help us differenciate the current user profile, from our to-be encrypted profile.
kbmonkey@bitwise:~$ touch ~/old-home
Now reboot with the *live* usb again. We just need to move the old /home out of the way. I'll wait here until you get back...
Back in the live environment now? Good, let us enter root mode -- please double-check your commands before you run smile
crunchbang@crunchbang:~$ sudo -i
mount / which contains the original unencrypted /home. Note that sda1 is where I installed / to, this is *not* our encrypted (sdaX) partition.
root@crunchbang:~# mkdir /mnt/disk && mount /dev/sda1 /mnt/disk/
If you had to ls /mnt/disk/home/USER you will see the file 'old-home', just an indication of which /home we are working with.
rename the unencrypted /home, so we still have it, but it won't be used by the OS anymore
root@crunchbang:~# mv /mnt/disk/home/ /mnt/disk/home_old
recreate the /home mount point, it is needed by fstab
root@crunchbang:~# mkdir /mnt/disk/home
root@crunchbang:~# umount /mnt/disk
Done! You can now reboot into the installed env now.