Imx8mq: How to encrypt rootfs

[kinjalGediya]

Hi,

I am using iMX8MQ based custom board and I want to encrypt rootfs.
I have gone through the community link

link: https://community.nxp.com/t5/i-MX-Processors/How-to-create-an-encrypted-rootfs-for-iMX8MQ-using-yoct...

I am facing the same as describe in above link. I am not able to create "/dev/caam-keygen" node.
I am working on kernel version 5.4.3 but I tried with kernel version 5.4.80 but still facing the same issue.
I am attaching kernel configuration for your reference.

Another thing I wanted to know that which device driver file is responsible to create "/dev/caam-keygen" node?

[b36401]

Please make sure that keygen sources are included (I mean drivers/crypto/caam/caamrng.c)

[kinjalGediya]

Hi,
Thanks for reply.

I have follow the steps successfully and now I wanted to know that How to add support in yocto to create encrypted rootfs so that I can directly flash encrypted rootfs?

Hope for your quick response.

[b36401]

I can offer this document regarding to rootfs encryption:
https://community.nxp.com/docs/DOC-342300

[ssepulveda]

Could you share the document with me, please?

[kinjalGediya]

Hi,
I am not able to open link which you have provided.

https://community.nxp.com/docs/DOC-342300

Can you give any alternative link for the same.

[Pugo]

I am also trying to investigate encrypted rootfs, but can not read this document.

If it is an NDA matter I am currently trying to figure out how the process of that is handled within my organization.

[gnulux]

Is it possible to have the documentation too ? I can't download it

[b36401]

I sent you the article over email.

[Aimo]

@b36401 Can I get the same article, please.