my imx8 boards ,for example , maaxboard and iwave board start up from sd card.
can I make my sd card read only? if we want to write it, we need to input password.
I know in rootfs /etc /inittab, we can mount it as read only.
but we can use sd card reader to open the image in it.
how I can do?
One way to make it Read-only would be through the physical switch. The other one would require encrypting the data which is what you mentioned. It is necessary to authenticate with the right key to be able to see the data.
thank you very much.
do you have some more detail or links about your suggestions: "The other one would require encrypting the data which is what you mentioned"
do I need to encrypt the whole image (eg: only rootfs not including kernel ,uboot ),
but after encrypting, how to start up ? (do I need to add some code in kenrel? it seem I need to input password every time to start up)
I believe it would be helpful to refer to the following thread where this topic has been addressed: https://community.nxp.com/t5/i-MX-Processors-Knowledge-Base/Encrypted-boot-loader-on-SabreSD-i-MX6q-...
Hope it helps!