(12-15-2022, 08:29 AM)Zebulon Walton Wrote:(12-15-2022, 01:51 AM)wibble Wrote: You should be able to resize the encrypted partition(s) but you'll need to boot from SD to do it as you can't do it while the partition is mounted. I'm assuming it's using LUKS rather than native filesystem encryption. Its a multi-step process as the partition management tools don't yet handle it natively, but it can be done, and there are plenty of tutorials around.
I'll look into that. (It is LUKS encryption.) I have a current image backup so it won't hurt to do some experimentation.
Another way might be to delete the main partition and expand the boot partition to a desired size like maybe 500MB. Then create a new main partition with LUKS encryption and copy the entire backed-up filesystem to it.
I'm using FDE as well, but my /boot is about 480MB. I think I used the 20210815 image. Perhaps the developers expanded that at some point but you're using an older image?
If you do try to enlarge /boot, be aware that the UUIDs for the /boot & / file systems and the LUKS container must stay the same. Those UUIDs are in /etc/fstab and /etc/crypttab and get embedded inside the initrds so it gets complicated if they change. My notes say that the partition UUIDs are not relevant. When creating a filesystem you can use the "-U" switch to set the UUID and cryptsetup has "--uuid" for that.