I'm closely following AN12714 (https://www.nxp.com/docs/en/application-note/AN12714.pdf )for encrypting root filesystem in iMX6UL. And based on my hardware, the only thing I've changed from the provided example is, MACHINE=imx6ulevk (from original imx8mmevk). The build completed without any error but I encounter the following errors in runtime:
root@imx6ulevk:~# grep -B1 -A2 tk- /proc/crypto|grep -v kernel
root@imx6ulevk:~# dmsetup targets
/dev/mapper/control: open failed: No such device
Failure to communicate with kernel device-mapper driver.
Check that device-mapper is available in the kernel.
Incompatible libdevmapper 1.02.140 (2017-05-03) and kernel driver (unknown version).
root@imx6ulevk:~# ls -la /dev/mapper/control
crw------- 1 root root 10, 236 Jun 11 12:32 /dev/mapper/control
root@imx6ulevk:~# keyctl add caam_tk seckey "new ecb 16" @s
add_key: No such device
In the log above, my observation is cryptographic engine is not at all working as grep -B1 -A2 tk- /proc/crypto|grep -v kernel returns nothing and dm-crypt is screwed.
Can you point me what would have gone wrong here? and could you please list steps to debug this?
Use the recent NXP Linux BSP (L5.4.47). Look at section 9.5 (Disk encryption acceleration)