12-07-2019, 12:01 AM
(12-06-2019, 03:27 AM)danielt Wrote: LUKS is now working. I hacked together basic support for encrypted rootfs yesterday evening (although I didn't document it yet because the code that implements is isn't very nicely written):This is my dream list. Unfortunately I haven't my PBP delivery yet, and you've moved so quickly before I've had opportunity to contribute!
https://github.com/daniel-thompson/pineb...r/issues/1
The big gotcha is that in order to install to a luks partition you need crypto support in the kernel you are running the installer from. The original stock kernel did not include support for this and I have not yet tested it on a system that has been upgraded to v1.6. Success reports welcome (and thanks to @Solra Bizna for the one already shared) since if I get enough of these I can delete the "not tested enough" from the list of limitations ;-) .
The installer will install Debian Bullseye (testing) but other than the kernel and firmware everything is pure Debian so the classic upgrade path should "just work" (update sources.list, update, upgrade, dist-upgrade)... and if it doesn't you can rely on the usual Debian Unstable warranty: if it breaks: you get to keep both parts :-) . Alternatively you can hack the installer: make clean && sed -ie 's/bullseye/sid/' Makefile etc/apt/sources.list should get you most of the way there although I think you might also have to remove security and updates from sources.list.
Is there a dummy kernel package for pinning, or is that not even really necessary?
Maybe a PPA for the Debian packaged kernel and headers/source packages would be worth starting? Some frown on PPA, I know. I build so much for Deb/Ubu/Pop on Intel, it might be worth me taking up these and kernels, once my feet are wet with the machine.
— Jeremiah Cornelius
"Be the first person not to do something, that no one has thought of not doing before’’
— Brian Eno, "Oblique Strategies"
"Be the first person not to do something, that no one has thought of not doing before’’
— Brian Eno, "Oblique Strategies"