hello JulienMoinard,
may I know did disk encryption works without APP size modification?
here’s a partition layout sample you should refer to, t186ref/cfg/flash_t194_sdmmc_enc_rfs.xml
to clarify,
once the feature had been applied, the APP partition would be separated into two partitions, (1) boot (“/boot”) and (2) root (“/”) partitions.
the boot partition (“APP”) remains in an unencrypted format, so the bootloader can sill load kernel and device tree blob; the root partition (“APP_ENC”) would be encrypted.
here’s an example of the flash commands to flash encrypted disk images.
i.e. $ sudo ROOTFS_ENC=1 ./flash.sh jetson-xavier mmcblk0p1