Skip to content

Update with results from 2021-03-04-raspios-buster-armhf-lite.img #3

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
mexon wants to merge 1 commit into
base: gh-pages
Choose a base branch
from
Open

Update with results from 2021-03-04-raspios-buster-armhf-lite.img #3

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 3 additions & 1 deletion index.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -112,6 +112,7 @@ esac
copy_exec /sbin/resize2fs /sbin
copy_exec /sbin/fdisk /sbin
copy_exec /sbin/cryptsetup /sbin
copy_file binary /lib/arm-linux-gnueabihf/libgcc_s.so.1
```
The programs are ‘resize2fs’, ‘fdisk’ and ‘cryptsetup’.
The file should be made executable:
Expand Down Expand Up @@ -183,6 +184,7 @@ it should be changed to:
```
/dev/mapper/sdcard
```
If the ‘/boot’ partition is specified as “PARTUUID=xxxxx”, that also needs to be changed to a device path. For Raspberry Pi this is usually ‘/dev/mmcblk0p1’.

**File: etc/crypttab**

Expand Down Expand Up @@ -234,7 +236,7 @@ time dd bs=4k count=XXXXX if=/dev/sda | sha1sum
```
Assuming that the checksums are correct, now it is time to encrypt the root filesystem of the SD Card, to create the LUKS volume using ‘cryptsetup’. There are many parameters and possible values for the encryption. This is the command I have chosen:
```
cryptsetup --type luks2 --cipher xchacha20,aes-adiantum-plain64 --hash sha256 --iter-time 5000 –keysize 256 --pbkdf argon2i luksFormat /dev/mmcblk0p2
cryptsetup --type luks2 --cipher xchacha20,aes-adiantum-plain64 --hash sha256 --iter-time 5000 –-key-size 256 --pbkdf argon2i luksFormat /dev/mmcblk0p2
```
More information about the parameters can be found here:
<https://man7.org/linux/man-pages/man8/cryptsetup.8.html>
Expand Down