Manjaro Arm Encrypted EMMC
#1
Hey,

Im trying to get an encrypted Manajaro Arm Minimal Running on my pbpro. I managed to create a minimal manjaro arm image and tried the following

1. Flash Uboot from Manjaro to the first sectors of the EMMC
2. Create a 500MB Ext4 Boot partition
3. Create an encrypted BTRFS Luks partition  for the rest of the emmc

I copied the fs to the main btrfs partition and moved /boot to the boot partition. Without any further setup i tried booting the pbpro and only got a black screen. I think what I have to do now is

1. Reconfigure UBOOT to find the /boot partition and advice kernel to mount encrypted btrfs root partition
2. Recompile Kernel with all the stuff necessary for booting luks
3. setup fstab for the new rootfs

I know how to do the last one but I'm stuck on the first two and cant find any good refenrece on how to do this on arm with uboot. Can you help me?

Thx

P.S. Once i firgured it all out, I'll write up a guide for yall
#2
look at the danielt's debian installer for ideas.
#3
Here is a write up on getting fde with luks on manjaro xfce image installed on an sdcard. Not exactly what your are wanting to do but may help.

https://forum.pine64.org/showthread.php?tid=9052
#4
You might want to have an UART connection handy.

Or if that's not a possibility, the first thing you should probably do is building an initramfs with the modules required for the display so you can get output earlier during boot; no need to rebuild the kernel. Beware, though, that the default boot.txt on Manjaro doesn't seem to properly load the initramfs. The linked thread by limxr and/or https://github.com/lsfxz/pinebookpro-thi...aster/luks might help (the latter was initially a gist elsewhere, should give you some hints about where to look / modify things).
#5
Has anyone managed to successfully do this?
#6
(02-10-2020, 03:14 AM)grego Wrote: Has anyone managed to successfully do this?

I have my PBP on Manjaro with the home directory encrypted via this guide.  https://wiki.archlinux.org/index.php/ECryptfs

Pretty much followed it to the letter and it worked fine. I haven't tried the encryption of the SWAP space as of yet.
#7
I did my best to understand the write up from: https://forum.pine64.org/showthread.php?tid=9052
Unfortunately I'm not experienced enough to understand it fully. I do feel confused at the start when using gparted for setting up partitions and copying files.
I'm going to do some more reading/testing and Kudos to limxr for writing this.
#8
(02-10-2020, 09:57 AM)Janoz Wrote: I did my best to understand the write up from: https://forum.pine64.org/showthread.php?tid=9052
Unfortunately I'm not experienced enough to understand it fully. I do feel confused at the start when using gparted for setting up partitions and copying files.
I'm going to do some more reading/testing and Kudos to limxr for writing this.


^I had to take it slower with gparted (never used it before). Now it finally works on my SD. I'm not sure if this will work on eMMC but it feels like it's around the corner. Thanks for this @limxr
#9
(02-10-2020, 09:19 AM)wsgts Wrote:
(02-10-2020, 03:14 AM)grego Wrote: Has anyone managed to successfully do this?

I have my PBP on Manjaro with the home directory encrypted via this guide.  https://wiki.archlinux.org/index.php/ECryptfs

Pretty much followed it to the letter and it worked fine. I haven't tried the encryption of the SWAP space as of yet.


Where do I get the 'ecryptfs-migrate-home' ? The wiki says nothing about where it can be found.


Possibly Related Threads…
Thread Author Replies Views Last Post
  Working suspend on Manjaro brzegorz 2 172 07-30-2021, 06:21 AM
Last Post: vssz
  Manjaro and Arch repository with privacy oriented software as400 78 45,812 07-28-2021, 05:24 AM
Last Post: llsf
  Manjaro [ARM Stable Update] 2021-07-23 issues Bocanila 0 136 07-24-2021, 09:09 AM
Last Post: Bocanila
  Sound stuttering on Manjaro gnome after latest kernel upgrade? pjsf 0 139 07-13-2021, 10:37 PM
Last Post: pjsf
  Kernel crash on Manjaro ARM mfashby 0 144 07-06-2021, 03:17 PM
Last Post: mfashby
  Manjaro wont recognize eMMC after booting with it disabled peasant 1 250 06-27-2021, 02:39 AM
Last Post: Arwen
  Pinebook pro nearly unusable after using manjaro-arm-installer TheCounselor 0 292 06-18-2021, 03:34 PM
Last Post: TheCounselor
  Pinebook Pro Manjaro Power Savinng Tips HelpMyBatteryIsDraining 1 411 06-15-2021, 08:42 AM
Last Post: moonwalkers
  [LibreOffice & Gimp] ARM support: no hardware acceleration on [Manjaro] Pinebook Pro regivanx 0 279 06-15-2021, 04:04 AM
Last Post: regivanx
Question Building custom kernel (5.11.x) for Manjaro? ppafin 4 889 06-02-2021, 04:17 AM
Last Post: ppafin

Forum Jump:


Users browsing this thread: 1 Guest(s)