That's awesome! Saves lot's of time comparing it to setting it up manually!The single command is: (initramfs) sdmcryptfs rootfs-dev scratch-dev
Where: rootfs-dev is the /dev/xxx of the rootfs device, and scratch-dev is the /dev/xxx of a scratch device as large or larger than rootfs.
I expect after encryption the system will ask for a passphrase a boot time? Is it possible to instead (no monitor, no keyboard, no network) to have the system unlocked via USB stick - maybe with a key file on it?
Statistics: Posted by orangeberry — Tue Apr 30, 2024 11:23 am