Full root filesystem encryption on an Armbian system (NEW, replaces 2017 tutorial on this topic)

[quaSimba]

Thanks for the reply. In the end I soved it by following also a few steps from over here. I don't know exactly what did the trick, but actually I assume it was pure coincidence: my ethernet device is actually called en0, not eth0. During my first run through this tutorial I wasn't aware of that. I think I simply forgot to change this bit in my recent try and luckily got it working that way. 

 

About the systemd-cryptsetup: I don't know if I understand correctly, but doesn't this do some of the steps automatically which we set up manually? If so, maybe it should be adopted to this tutorial in the future … 

[fxkl47BF]

thanks for all the work you put in to this application.

i've done this on most all of my systems and it was a bit tedious and fiddley.

with just a few tweeks it ran through with no errors on my hc4 with bookworm.

one question, why remove bash-completion and command-not-found packages?

[quaSimba]

Quick note on what I also had to change to make it running on my Raspi: in fstab, the option "commit=600" won't work as the Armbian version for Raspis uses a FAT32 boot partition. Apparently "commit" doesn't work with that file system.

 

To get it working, my fstab reads:

…
UUID=[ID] /boot vfat defaults,noatime,nodiratime 0 2
…

[MMGen]

@quaSimba: Thanks for your remarks and the link to the guide on Github. Hopefully I'll one day have a RPi to work with so I can support it in my script and tutorial.

 

@fxkl47BF: The completion packages were removed because they can be horribly laggy on low-powered SoCs and I find them annoying in general. They can be easily reinstalled if desired.