In case anyone is interested or curious, sdm V11.3 is now available. If you have a system running, not created by sdm, you can easily encrypt its rootfs with SSH capability to unlock:The authorized_keys file is required with --ssh since there's no password authentication in initramfs. If you need help in setting up SSH password-less login (which will generate ~/.ssh/authorized_keys), there are plenty of guides on the internet. such as this or this.
Of course, rootfs encryption can also be used on headful Pi systems, by running the sdm-cryptconfig tool with no switches.
Code:
sudo curl --fail --silent --show-error -L https://github.com/gitbls/sdm/raw/master/sdm-cryptconfig -o /usr/local/bin/sdm-cryptconfigsudo chmod 755 /usr/local/bin/sdm-cryptconfigsudo sdm-cryptconfig --ssh --authorized-keys /path/to/ssh-authorized-keys fileOf course, rootfs encryption can also be used on headful Pi systems, by running the sdm-cryptconfig tool with no switches.
Statistics: Posted by bls — Sat Feb 03, 2024 11:03 pm