Because encryption is still running in the vm and the / will be /oldroot and /home will under /oldroot/home
Let the encryption get completed. Use the below link to verify if the encryption is successful from Portal and OS level: https://video2.skills-academy.com/en-us/azure/virtual-machines/linux/how-to-verify-encryption-status
Also, the OS Disk encryption would take some Time based on the size of the disk for 30 GB, it would take around 3-6 hours
Have a working backup for the vm which you are going to encrypt it.
- Make sure that the VM has enough RAM(minimum 7Gb) and also enough space in the OSDisk.
- Make sure that the application is stopped prior to the encryption process is started, also make sure that the application remains stopped after a reboot also, as the ADE process will reboot the vm.
- Make sure that the vm is not accessed by any means being it ssh or winscp or any other tools.
- Make sure that there is no extension installed in the vm.
- Make sure that there is no server hardening is done on the vm which is going to encrypted.
- You can monitor the encryption status using the PowerShell or azure cli commands or checking the serial console.
- Also as stated earlier, if you are using datadisk, make sure that the file system type is ext4 and not xfs, because xfs file system is not supported for single pass encryption
Note: The ADE is supported for Endorsed Linux images only, for any other images, we would support on best effort basis.
You can find the details about images here in the link: https://video2.skills-academy.com/en-us/azure/virtual-machines/linux/disk-encryption-overview#supported-operating-systems
Enable Azure Disk Encryption for Linux VMs - Azure Linux Virtual Machines