I'm looking into automating (as much as possible) setting this up with sdm, and found this page that at first blush looks like a good starting point: https://rr-developer.github.io/LUKS-on-Raspberry-Pi/What is the "proper" way to setup cryptsetup after things like raspi-firmware and Pi initramfs hooks?
What I did before: partition the SD card, encrypt the root partition with cryptsetup, dd the image, mount the root and boot (then at /boot) partitions, make the necessary changes for cryptsetup to work (config.txt, cmdline.txt, fstab, crypttab).
I'll have more info on it later today or tomorrow after I finish my first (manual) go-around with it.
Statistics: Posted by bls — Wed Jan 10, 2024 2:21 pm