Just want to say thanks! I always intended to report back, but failed. Script worked great for me back in 2021.Mar.02 on PineA64 that has been running perfectly to this day!
Two important points that made me charge down this path (1) encrypt everything (2) ability to remote unlock via SSH after reboots.
Looking at my notes (i.e. a wrapper script that calls MMGen's script that does all hard work and is thoroughly commented). It took me 4 attempts and what finally worked, was to rebuild all.
...
# Destination device name (e.g. SD card in USB reader)
dstDevNm=sda
export ROOTFS_NAME=somename
export IP_ADDRESS=dhcp
export BOOTPART_LABEL=somenameboot
export DISK_PASSWD=dontlook
export UNLOCKING_USERHOST=
# Call main script
#
# [attempt 1] -s use auth keys file, -v verbose, -z wipe all partitions
#./armbian_rootenc_setup.sh -svz $dstDevNm
#
# [attempt 2] Don't wipe all parts.
#./armbian_rootenc_setup.sh -sz $dstDevNm
#
# [attempt 3] only use auth keys
#./armbian_rootenc_setup.sh -s $dstDevNm
#
# [attempt 4] Complete rebuild [THIS WORKED!]
./armbian_rootenc_setup.sh -fFsvz $dstDevNm
...
I will be using this again to upgrade my setup, after getting the new version of MMGen's script.
