[yocto] rootfs encryption support

[Kumar, Shrawan]

To add further information to the query , I am executing  "cryptsetup"  from a recipe as below : (Yocto 2.0.2)


fakeroot do_install() {
               cryptsetup --type=plain open hello.enc demomap < dm-crypt-key

}


Additional debug log :

+ do_install
| + cryptsetup --type=plain open /path_to/tmp/work/cortexa9hf-vfp-neon-elina-linux-gnueabi/DM-CryptSetup/1.0-r0/hello.enc demomap
| Cannot initialize device-mapper. Is dm_mod kernel module loaded?
|
| Cannot initialize device-mapper. Is dm_mod kernel module loaded?
| + bb_exit_handler


Ideally , I was under impression that "fakeroot" shall have allowed to me achieve the goal.



Thanks & Regads
Shrawan

From: Kumar, Shrawan
Sent: Tuesday, September 26, 2017 10:56 AM
To: 'yocto at yoctoproject.org' <yocto at yoctoproject.org>
Subject: rootfs encryption support

Hello Team ,

Is it possible to get encrypted rootfs during image build  ?

Currently , I am running "cryptsetup" (as sudo) manually   after the final image(rootfs.ext4) is produced  . The idea is to get this done within yocto environment without sudo problem .


Thanks and Regards
Shrawan
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.yoctoproject.org/pipermail/yocto/attachments/20170926/6a4cf2dc/attachment.html>