Skip to content

defaults: Add an initramfs script to reencrypt LUKS rootfs

Sebastian Krzyszkowiak requested to merge sebastian.krzyszkowiak/librem5-base:growcrypt into pureos/byzantium

Reencryption happens before resizing, so it only takes about two minutes on the phone.

In order to use it, initial LUKS dump needs to be stored on the rootfs:

mkdir -p /var/lib/reencrypt
LUKSDEV=$(cryptsetup status crypt_root | awk -F: '$1~/device/ {gsub(/^[ \t]+/, "", $2); print $2}')
cryptsetup luksDump $LUKSDEV > /var/lib/reencrypt/dump

Merge request reports