Manjaro Arm Encrypted EMMC
#1
Hey,

Im trying to get an encrypted Manajaro Arm Minimal Running on my pbpro. I managed to create a minimal manjaro arm image and tried the following

1. Flash Uboot from Manjaro to the first sectors of the EMMC
2. Create a 500MB Ext4 Boot partition
3. Create an encrypted BTRFS Luks partition  for the rest of the emmc

I copied the fs to the main btrfs partition and moved /boot to the boot partition. Without any further setup i tried booting the pbpro and only got a black screen. I think what I have to do now is

1. Reconfigure UBOOT to find the /boot partition and advice kernel to mount encrypted btrfs root partition
2. Recompile Kernel with all the stuff necessary for booting luks
3. setup fstab for the new rootfs

I know how to do the last one but I'm stuck on the first two and cant find any good refenrece on how to do this on arm with uboot. Can you help me?

Thx

P.S. Once i firgured it all out, I'll write up a guide for yall
#2
look at the danielt's debian installer for ideas.
#3
Here is a write up on getting fde with luks on manjaro xfce image installed on an sdcard. Not exactly what your are wanting to do but may help.

https://forum.pine64.org/showthread.php?tid=9052
#4
You might want to have an UART connection handy.

Or if that's not a possibility, the first thing you should probably do is building an initramfs with the modules required for the display so you can get output earlier during boot; no need to rebuild the kernel. Beware, though, that the default boot.txt on Manjaro doesn't seem to properly load the initramfs. The linked thread by limxr and/or https://github.com/lsfxz/pinebookpro-thi...aster/luks might help (the latter was initially a gist elsewhere, should give you some hints about where to look / modify things).
#5
Has anyone managed to successfully do this?
#6
(02-10-2020, 03:14 AM)grego Wrote: Has anyone managed to successfully do this?

I have my PBP on Manjaro with the home directory encrypted via this guide.  https://wiki.archlinux.org/index.php/ECryptfs

Pretty much followed it to the letter and it worked fine. I haven't tried the encryption of the SWAP space as of yet.
#7
I did my best to understand the write up from: https://forum.pine64.org/showthread.php?tid=9052
Unfortunately I'm not experienced enough to understand it fully. I do feel confused at the start when using gparted for setting up partitions and copying files.
I'm going to do some more reading/testing and Kudos to limxr for writing this.
#8
(02-10-2020, 09:57 AM)Janoz Wrote: I did my best to understand the write up from: https://forum.pine64.org/showthread.php?tid=9052
Unfortunately I'm not experienced enough to understand it fully. I do feel confused at the start when using gparted for setting up partitions and copying files.
I'm going to do some more reading/testing and Kudos to limxr for writing this.


^I had to take it slower with gparted (never used it before). Now it finally works on my SD. I'm not sure if this will work on eMMC but it feels like it's around the corner. Thanks for this @limxr
#9
(02-10-2020, 09:19 AM)wsgts Wrote:
(02-10-2020, 03:14 AM)grego Wrote: Has anyone managed to successfully do this?

I have my PBP on Manjaro with the home directory encrypted via this guide.  https://wiki.archlinux.org/index.php/ECryptfs

Pretty much followed it to the letter and it worked fine. I haven't tried the encryption of the SWAP space as of yet.


Where do I get the 'ecryptfs-migrate-home' ? The wiki says nothing about where it can be found.


Possibly Related Threads…
Thread Author Replies Views Last Post
  Sound stuttering on Manjaro gnome after latest kernel upgrade? pjsf 0 106 07-13-2021, 10:37 PM
Last Post: pjsf
  Kernel crash on Manjaro ARM mfashby 0 118 07-06-2021, 03:17 PM
Last Post: mfashby
  Manjaro wont recognize eMMC after booting with it disabled peasant 1 222 06-27-2021, 02:39 AM
Last Post: Arwen
  Pinebook pro nearly unusable after using manjaro-arm-installer TheCounselor 0 260 06-18-2021, 03:34 PM
Last Post: TheCounselor
  Pinebook Pro Manjaro Power Savinng Tips HelpMyBatteryIsDraining 1 361 06-15-2021, 08:42 AM
Last Post: moonwalkers
  [LibreOffice & Gimp] ARM support: no hardware acceleration on [Manjaro] Pinebook Pro regivanx 0 240 06-15-2021, 04:04 AM
Last Post: regivanx
  Manjaro and Arch repository with privacy oriented software as400 77 45,198 06-08-2021, 04:54 AM
Last Post: llsf
Question Building custom kernel (5.11.x) for Manjaro? ppafin 4 828 06-02-2021, 04:17 AM
Last Post: ppafin
Lightbulb Hardware video acceleration in Chromium on Manjaro siemsenit 3 540 06-01-2021, 09:51 AM
Last Post: siemsenit
Question Flashing updated uboot in Manjaro TDC_PBP 5 2,956 05-28-2021, 01:29 PM
Last Post: wdt

Forum Jump:


Users browsing this thread: 1 Guest(s)