PINE64
Just reflashed to latest mobian, it never asked for disk encryption? - Printable Version

+- PINE64 (https://forum.pine64.org)
+-- Forum: PinePhone (https://forum.pine64.org/forumdisplay.php?fid=120)
+--- Forum: General Discussion on PinePhone (https://forum.pine64.org/forumdisplay.php?fid=127)
+--- Thread: Just reflashed to latest mobian, it never asked for disk encryption? (/showthread.php?tid=15123)



Just reflashed to latest mobian, it never asked for disk encryption? - JuniperFury - 10-17-2021

I once bricked the phone and had to reinstall using iso and jumpdrive. During that time I fairly certain it asked for me to setup luks encryption passphrase. With this new .iso, mobian-pinephone-phosh-20210517.img, it didn't seem to give me this option. Huh

I probably just missed something, but could an expert comment on this? It's company policy not allowed to have a phone without encryption. Can I set this up after the fact? I'd hate to reflash and reupdate again. But if I must, I'll do it over againĀ  Sad

thank you!


RE: Just reflashed to latest mobian, it never asked for disk encryption? - bcnaz - 10-17-2021

@The Mobian website : Their wiki has everything you need to know about installing encryption ...


RE: Just reflashed to latest mobian, it never asked for disk encryption? - wibble - 10-18-2021

To be more specific see the 'Disk encryption' and 'Encrypted /home partition' sections of:
https://wiki.mobian-project.org/doku.php?id=howto:security

You probably used the installer image when you did it before, rather than the normal image. It is probably possible to convert an existing install to an encrypted one, but I suspect it'll be easier and more reliable to back up at least any user data then reinstall using the installer image and restore user data. I say this having looked at doing a similar conversion on an older linux laptop install - the conversion process was at best some "here's how I did it" pages rather than something properly documented, and if any of it wasn't quite right there was a chance future updates would fail in interesting ways.


RE: Just reflashed to latest mobian, it never asked for disk encryption? - JuniperFury - 10-18-2021

(10-18-2021, 07:54 AM)wibble Wrote: To be more specific see the 'Disk encryption' and 'Encrypted /home partition' sections of:
https://wiki.mobian-project.org/doku.php?id=howto:security

You probably used the installer image when you did it before, rather than the normal image. It is probably possible to convert an existing install to an encrypted one, but I suspect it'll be easier and more reliable to back up at least any user data then reinstall using the installer image and restore user data. I say this having looked at doing a similar conversion on an older linux laptop install - the conversion process was at best some "here's how I did it" pages rather than something properly documented, and if any of it wasn't quite right there was a chance future updates would fail in interesting ways.

Yes you're correct. Checking my current image, it seems I didn't download the "installer". I didn't know there was a difference.

I didn't restore any data yet, so I'll just reinstall using "mobian-installer-pinephone-phosh-20210516.img", instead of "mobian-pinephone-phosh-20210517.img".

I wonder how many others missed this difference. Tongue