Raspberry Pi OS • Re: Disk Encryption

Not sure what you mean by "integrated burn script/tool". There are two burn capabilities in sdm:

• Burn a single IMG to a single disk or disk IMG using `sudo sdm --burn` (burn to a disk) or `sudo sdm --burnfile` (burn to a disk IMG for later burn to disk)
• Burn a bunch of disks from a single IMG using /usr/local/sdm/sdm-gburn. This is used, for example, to burn a bunch of mostly-the-same but with per-disk customizations from a single IMG.

I totally missed the first capability. Browsing slightly over the docs I expected it was made for the second reason to have batch burns with (slight) variations (like different host name etc.)

The first scenario would be what you want to use. --restart and --expand-root are optional, but very handy.

Code:

sudo sdm --burn /dev/sdX [--restart] [--expand-root] /path/to/customized-img.img

Well, that worked just a treat! System came up and did the first restart already after genereting ssh keys. Now itcame up again and waited 120 seconds for time sync (no network available) and now did a restart again and sdm-cryptconfig tells us that initramfs with rootfs encryption setting is in place. Next reboot and were are in initramfs and it looks like it is time for a scratch disk!

Statistics: Posted by orangeberry — Tue May 21, 2024 5:42 pm

---