https://community.nxp.com/t5/i-MX-Processors/Automatically-decrypt-root-filesystem-systemd-dm-crypt/m-p/1938128#M227571 <P>Hello,</P><P>I have followed the document AN12714.pdf and the IMX Linux User guide(IMXLUG_6.6.23_2.0.0) on how to use the CAAM module to encrypt and decrypt a partition. Since the operations performed there are manually I want to have this done automatically.</P><P>It is possible to script these steps and introduce a script at boot in my initramfs to do this, but I have also looked into using third-party components such as the module systemd-cryptsetup of systemd and the usage of a /etc/crypttab file. I can however not yet determine if this is usable with the CAAM module as in the examples in the documents the keys are imported into the keyring and then use dmsetup to decrypt the partition.</P><OL><LI>Does somebody have a explanation on how this should work with the combination of the CAAM module?</LI><LI>And did anybody managed to get this combination working or is there some reference forum post where this is working/discussed?</LI></OL> Thu, 22 Aug 2024 06:54:56 GMT beestarbush 2024-08-22T06:54:56Z https://community.nxp.com/t5/i-MX-Processors/Automatically-decrypt-root-filesystem-systemd-dm-crypt/m-p/1938128#M227571 <P>Hello,</P><P>I have followed the document AN12714.pdf and the IMX Linux User guide(IMXLUG_6.6.23_2.0.0) on how to use the CAAM module to encrypt and decrypt a partition. Since the operations performed there are manually I want to have this done automatically.</P><P>It is possible to script these steps and introduce a script at boot in my initramfs to do this, but I have also looked into using third-party components such as the module systemd-cryptsetup of systemd and the usage of a /etc/crypttab file. I can however not yet determine if this is usable with the CAAM module as in the examples in the documents the keys are imported into the keyring and then use dmsetup to decrypt the partition.</P><OL><LI>Does somebody have a explanation on how this should work with the combination of the CAAM module?</LI><LI>And did anybody managed to get this combination working or is there some reference forum post where this is working/discussed?</LI></OL> Thu, 22 Aug 2024 06:54:56 GMT https://community.nxp.com/t5/i-MX-Processors/Automatically-decrypt-root-filesystem-systemd-dm-crypt/m-p/1938128#M227571 beestarbush 2024-08-22T06:54:56Z