Create 7 new encrypted partition on Orin NX 8GiB

Robotics & Edge Computing Jetson & Embedded Systems Jetson Orin NX
1

Hi, I try to understand the right way to set the xml configuration file on my Orin NX 8 GiB. I try to create 7 distinct partition with different size during the flash. The ROOTFS is already set in the configuration file associate with this setting.
Here is my xml files :

This XML file does not appear to have any style information associated with it. The document tree is shown below.
Modify flash_l4t_nvme_rootfs_enc.xml
<!--  Nvidia Tegra Partition Layout Version 1.0.0  -->
<partition_layout version="01.00.0000">
<device type="external" instance="0" sector_size="512" num_sectors="NUM_SECTORS">
<partition name="master_boot_record" type="protective_master_boot_record">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 512 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<description> **Required.** Contains protective MBR. </description>
</partition>
<partition name="primary_gpt" type="primary_gpt">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 19968 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<description> **Required.** Contains primary GPT of the `nvme` device. All partitions defined after this entry are configured in the kernel, and are accessible by standard partition tools such as gdisk and parted. </description>
</partition>
<partition name="APP" type="data">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 419430400 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 0x8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<align_boundary> 4096 </align_boundary>
<unique_guid> APPUUID </unique_guid>
<filename> system_boot.img </filename>
<description> **Required.** Contains the boot partition. This partition must be defined after `primary_GPT` so that it can be accessed as the fixed known special device `/dev/nvme0n1p1`. </description>
</partition>
<partition name="APP_ENC" type="data" encrypted="true">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> APP_ENC_SIZE </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 0x8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<align_boundary> 4096 </align_boundary>
<unique_guid> APP_ENC_UUID </unique_guid>
<filename> system_root_encrypted.img_ext </filename>
<description> **Required.** Contains the encrypted root partition("/"). </description>
</partition>
<partition name="kernel" type="kernel">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 134217728 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<filename> LNXFILE </filename>
<description> **Required.** Chain A; contains boot.img (kernel, initrd, etc) which is loaded in when cpu-bootloader failes to launch the kernel from the rootfs at `/boot`. </description>
</partition>
<partition name="kernel-dtb" type="kernel_dtb">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 786432 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<filename> DTB_FILE </filename>
<description> **Required.** Chain A; contains kernel device tree blob. </description>
</partition>
<partition name="reserved_for_chain_A_user" type="data">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 33161216 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<description> **Required.** Reserved space for chain A on user device. </description>
</partition>
<partition name="kernel_b" type="kernel">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 134217728 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<filename> LNXFILE </filename>
<description> **Required.** Chain B; contains boot.img (kernel, initrd, etc) which is loaded in when cpu-bootloader failes to launch the kernel from the rootfs at `/boot`. </description>
</partition>
<partition name="kernel-dtb_b" type="kernel_dtb">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 786432 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<filename> DTB_FILE </filename>
<description> **Required.** Chain B; contains kernel device tree blob. </description>
</partition>
<partition name="reserved_for_chain_B_user" type="data">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 33161216 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<description> **Required.** Reserved space for chain B on user device. </description>
</partition>
<partition name="RECNAME" type="kernel">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> RECSIZE </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<filename> RECFILE </filename>
<description> **Required.** Contains recovery image. </description>
</partition>
<partition name="RECDTB-NAME" type="kernel_dtb">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 524288 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<filename> RECDTB-FILE </filename>
<description> **Required.** Contains recovery DTB image. </description>
</partition>
<partition name="RECROOTFS" type="data">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> RECROOTFSSIZE </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 0x8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<description> **Optional.** Reserved for future use by the recovery filesystem; removable. </description>
</partition>
<partition name="esp" type="data">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 67108864 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 0x8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<filename> ESP_FILE </filename>
<partition_type_guid> C12A7328-F81F-11D2-BA4B-00A0C93EC93B </partition_type_guid>
<description> **Required.** EFI system partition with L4T Launcher. </description>
</partition>
<partition name="RECNAME_alt" type="kernel">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> RECSIZE </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<description> **Required.** For fail-safe recovery update. </description>
</partition>
<partition name="RECDTB-NAME_alt" type="kernel_dtb">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 524288 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<description> **Required.** For fail-safe recovery DTB update. </description>
</partition>
<partition name="esp_alt" type="data">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 67108864 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 0x8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<description> **Required.** EFI system partition for fail-safe ESP update. </description>
</partition>
<!-- partition 01 (5 GiB) -->
    <partition name="partition_01" type="data">
      <allocation_policy> sequential </allocation_policy>
      <filesystem_type> basic </filesystem_type>
      <size> 52428800 </size> <!-- 5 GiB -->
      <file_system_attribute> 0 </file_system_attribute>
      <allocation_attribute> 0x008 </allocation_attribute>
      <percent_reserved> 0 </percent_reserved>
      <description> Partition 1</description>
    </partition>

    <!-- partition_02 (5 GiB) -->
    <partition name="partition_02" type="data" encrypted="true">
      <allocation_policy> sequential </allocation_policy>
      <filesystem_type> basic </filesystem_type>
      <size> 52428800 </size> <!-- 5 GiB -->
      <file_system_attribute> 0 </file_system_attribute>
      <allocation_attribute> 0x008 </allocation_attribute>
      <percent_reserved> 0 </percent_reserved>
      <description> Partition 2 </description>
    </partition>

    <!-- partition_03 (50 GiB) -->
    <partition name="partition_03" type="data" encrypted="true">
      <allocation_policy> sequential </allocation_policy>
      <filesystem_type> basic </filesystem_type>
      <size> 524288000 </size> <!-- 50 GiB -->
      <file_system_attribute> 0 </file_system_attribute>
      <allocation_attribute> 0x008 </allocation_attribute>
      <percent_reserved> 0 </percent_reserved>
      <description> Partition 3 </description>
    </partition>

    <!-- partition_04 (15 GiB) -->
    <partition name="partition_04" type="data" encrypted="true">
      <allocation_policy> sequential </allocation_policy>
      <filesystem_type> basic </filesystem_type>
      <size> 157286400 </size> <!-- 15 GiB -->
      <file_system_attribute> 0 </file_system_attribute>
      <allocation_attribute> 0x008 </allocation_attribute>
      <percent_reserved> 0 </percent_reserved>
      <description> Partition 4</description>
    </partition>

    <!-- partition_05 (2.5 GiB) -->
    <partition name="partition_05" type="data" encrypted="true">
      <allocation_policy> sequential </allocation_policy>
      <filesystem_type> basic </filesystem_type>
      <size> 26214400 </size> <!-- 2.5 GiB -->
      <file_system_attribute> 0 </file_system_attribute>
      <allocation_attribute> 0x008 </allocation_attribute>
      <percent_reserved> 0 </percent_reserved>
      <description> Partition 5 </description>
    </partition>

    <!-- partition_06 (2.5 GiB) -->
    <partition name="partition_06" type="data" encrypted="true">
      <allocation_policy> sequential </allocation_policy>
      <filesystem_type> basic </filesystem_type>
      <size> 26214400 </size> <!-- 2.5 GiB -->
      <file_system_attribute> 0 </file_system_attribute>
      <allocation_attribute> 0x008 </allocation_attribute>
      <percent_reserved> 0 </percent_reserved>
      <description> Partition 6 </description>
    </partition>

    <!-- partition_07 (512 MiB) -->
    <partition name="partition_07" type="data" encrypted="true">
      <allocation_policy> sequential </allocation_policy>
      <filesystem_type> basic </filesystem_type>
      <size> 5242880 </size> <!-- 512 MiB -->
      <file_system_attribute> 0 </file_system_attribute>
      <allocation_attribute> 0x808 </allocation_attribute>
      <percent_reserved> 0 </percent_reserved>
      <description> Partition 7</description>
    </partition>

<partition name="secondary_gpt" type="secondary_gpt">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 0xFFFFFFFFFFFFFFFF </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<description> **Required.** Contains secondary GPT of the `nvme` device. </description>
</partition>
</device>
</partition_layout>

The partition are created but there are not formated ???

3

hello apa,

please see-also developer guide, Layout of an Encrypted Disk.

4 
This XML file does not appear to have any style information associated with it. The document tree is shown below.

<!--  Nvidia Tegra Partition Layout Version 1.0.0  -->
<partition_layout version="01.00.0000">
<device type="external" instance="0" sector_size="512" num_sectors="NUM_SECTORS">
<partition name="master_boot_record" type="protective_master_boot_record">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 512 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<description> **Required.** Contains protective MBR. </description>
</partition>
<partition name="primary_gpt" type="primary_gpt">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 19968 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<description> **Required.** Contains primary GPT of the `nvme` device. All partitions defined after this entry are configured in the kernel, and are accessible by standard partition tools such as gdisk and parted. </description>
</partition>
<partition name="APP" type="data">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 419430400 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 0x8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<align_boundary> 4096 </align_boundary>
<unique_guid> APPUUID </unique_guid>
<filename> system_boot.img </filename>
<description> **Required.** Contains the boot partition. This partition must be defined after `primary_GPT` so that it can be accessed as the fixed known special device `/dev/nvme0n1p1`. </description>
</partition>
<partition name="APP_ENC" type="data"scription> **Required.** Contains the encrypted recovery partition("/"). </description>
</partition>
<partition name="secondary_gpt" type="secondary_gpt">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 0xFFFFFFFFFFFFFFFF </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<description> **Required.** Contains secondary GPT of the `nvme` device. </description>
</partition>
</device>
</partition_layout> encrypted="true">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> APP_ENC_SIZE </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 0x8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<align_boundary> 4096 </align_boundary>
<unique_gscription> **Required.** Contains the encrypted recovery partition("/"). </description>
</partition>
<partition name="secondary_gpt" type="secondary_gpt">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 0xFFFFFFFFFFFFFFFF </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<description> **Required.** Contains secondary GPT of the `nvme` device. </description>
</partition>
</device>
</partition_layout>uid> APP_ENC_UUID </unique_guid>
<filename> system_root_encrypted.img_ext </filename>
<description> **Required.** Contains the encrypted root partition("/"). </description>
</partition>
<partition name="kernel" type="kernel">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 134217728 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<filename> LNXFILE </filename>
<description> **Required.** Chain A; contains boot.img (kernel, initrd, etc) which is loaded in when cpu-bootloader failes to launch the kernel from the rootfs at `/boot`. </description>
</partition>
<partition name="kernel-dtb" type="kernel_dtb">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 786432 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<filename> DTB_FILE </filename>
<description> **Required.** Chain A; contains kernel device tree blob. </description>
</partition>
<partition name="reserved_for_chain_A_user" type="data">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 33161216 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attscription> **Required.** Contains the encrypted recovery partition("/"). </description>
</partition>
<partition name="secondary_gpt" type="secondary_gpt">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 0xFFFFFFFFFFFFFFFF </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<description> **Required.** Contains secondary GPT of the `nvme` device. </description>
</partition>
</device>
</partition_layout><!--  Nvidia Tegra Partition Layout Version 1.0.0  -->
<partition_layout version="01.00.0000">
<device type="external" instance="0" sector_size="512" num_sectors="NUM_SECTORS">
<partition name="master_boot_record" type="protective_master_boot_record">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 512 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<description> **Required.** Contains protective MBR. </description>
</partition>
<partition name="primary_gpt" type="primary_gpt">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 19968 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<description> **Required.** Contains primary GPT of the `nvme` device. All partitions defined after this entry are configured in the kernel, and are accessible by standard partition tools such as gdisk and parted. </description>
</partition>
<partition name="APP" type="data">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 419430400 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 0x8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<align_boundary> 4096 </align_boundary>
<unique_guid> APPUUID </unique_guid>
<filename> system_boot.img </filename>
<description> **Required.** Contains the boot partition. This partition must be defined after `primary_GPT` so that it can be accessed as the fixed known special device `/dev/nvme0n1p1`. </description>
</partition>
<partition name="APP_ENC" type="data" encrypted="true">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> APP_ENC_SIZE </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 0x8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<align_boundary> 4096 </align_boundary>
<unique_guid> APP_ENC_UUID </unique_guid>
<filename> system_root_encrypted.img_ext </filename>
<description> **Required.** Contains the encrypted root partition("/"). </description>
</partition>
<partition name="kernel" type="kernel">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 134217728 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<filename> LNXFILE </filename>
<description> **Required.** Chain A; contains boot.img (kernel, initrd, etc) which is loaded in when cpu-bootloader failes to launch the kernel from the rootfs at `/boot`. </description>
</partition>
<partition name="kernel-dtb" type="kernel_dtb">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 786432 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<filename> DTB_FILE </filename>
<description> **Required.** Chain A; contains kernel device tree blob. </description>
</partition>
<partition name="reserved_for_chain_A_user" type="data">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 33161216 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<description> **Required.** Reserved space for chain A on user device. </description>
</partition>
<partition name="kernel_b" type="kernel">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 134217728 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<filename> LNXFILE </filename>
<description> **Required.** Chain B; contains boot.img (kernel, initrd, etc) which is loaded in when cpu-bootloader failes to launch the kernel from the rootfs at `/boot`. </description>
</partition>
<partition name="kernel-dtb_b" type="kernel_dtb">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 786432 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<filename> DTB_FILE </filename>
<description> **Required.** Chain B; contains kernel device tree blob. </description>
</partition>
<partition name="reserved_for_chain_B_user" type="data">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 33161216 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<description> **Required.** Reserved space for chain B on user device. </description>
</partition>
<partition name="RECNAME" type="kernel">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> RECSIZE </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<filename> RECFILE </filename>
<description> **Required.** Contains recovery image. </description>
</partition>
<partition name="RECDTB-NAME" type="kernel_dtb">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 524288 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<filename> RECDTB-FILE </filename>
<description> **Required.** Contains recovery DTB image. </description>
</partition>
<partition name="RECROOTFS" type="data">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> RECROOTFSSIZE </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 0x8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<description> **Optional.** Reserved for future use by the recovery filesystem; removable. </description>
</partition>
<partition name="esp" type="data">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 67108864 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 0x8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<filename> ESP_FILE </filename>
<partition_type_guid> C12A7328-F81F-11D2-BA4B-00A0C93EC93B </partition_type_guid>
<description> **Required.** EFI system partition with L4T Launcher. </description>
</partition>
<partition name="RECNAME_alt" type="kernel">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> RECSIZE </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<description> **Required.** For fail-safe recovery update. </description>
</partition>
<partition name="RECDTB-NAME_alt" type="kernel_dtb">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 524288 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<description> **Required.** For fail-safe recovery DTB update. </description>
</partition>
<partition name="esp_alt" type="data">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 67108864 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 0x8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<description> **Required.** EFI system partition for fail-safe ESP update. </description>
</partition>
<!-- PARTITION01 (5 GiB) -->
<partition name="PARTITION01" type="data">
  <allocation_policy> sequential </allocation_policy>
  <filesystem_type> basic </filesystem_type>
  <size> 5368709120 </size> <!-- 5 GiB in bytes -->
  <file_system_attribute> 0 </file_system_attribute>
  <allocation_attribute> 0x8</allocation_attribute>
  <align_boundary> 16384 </align_boundary>
  <percent_reserved> 0 </percent_reserved>
  <unique_guid> PARTITION01_UUID </unique_guid>
  <filename> partition01_boot.img </filename>
  <description> **Required.** Contains the boot partition. </description>
</partition>

<partition name="PARTITION01_ENC" type="data" encrypted="true" reencrypt="false">
  <allocation_policy> sequential </allocation_policy>
  <filesystem_type> basic </filesystem_type>
  <size> PARTITION01_ENC_SIZE </size>
  <file_system_attribute> 0 </file_system_attribute>
  <allocation_attribute> 0x8 </allocation_attribute>
  <percent_reserved> 0 </percent_reserved>
  <align_boundary> 16384 </align_boundary>
  <unique_guid> PARTITION01_ENC_UUID </unique_guid>
  <filename> partition01_root_encrypted.img </filename>
  <description> **Required.** Contains the encrypted root partition("/"). </description>
</partition>

<!-- PARTITION02 (5 GiB) -->
<partition name="PARTITION02" type="data">
  <allocation_policy> sequential </allocation_policy>
  <filesystem_type> basic </filesystem_type>
  <size> 5368709120 </size> <!-- 5 GiB in bytes -->
  <file_system_attribute> 0 </file_system_attribute>
  <allocation_attribute> 0x8 </allocation_attribute>
  <align_boundary> 16384 </align_boundary>
  <percent_reserved> 0 </percent_reserved>
  <unique_guid> PARTITION02_UUID </unique_guid>
  <filename> partition02_boot.img </filename>
  <description> **Required.** Contains the boot partition. </description>
</partition>

<partition name="PARTITION02_ENC" type="data" encrypted="true" reencrypt="false">
  <allocation_policy> sequential </allocation_policy>
  <filesystem_type> basic </filesystem_type>
  <size> PARTITION02_ENC_SIZE </size>
  <file_system_attribute> 0 </file_system_attribute>
  <allocation_attribute> 0x8 </allocation_attribute>
  <percent_reserved> 0 </percent_reserved>
  <align_boundary> 16384 </align_boundary>
  <unique_guid> PARTITION02_ENC_UUID </unique_guid>
  <filename> partition02_root_encrypted.img </filename>
  <description> **Required.** Contains the encrypted root partition("/"). </description>
</partition>

<!-- PARTITION03 (50 GiB) -->
<partition name="PARTITION03" type="data">
  <allocation_policy> sequential </allocation_policy>
  <filesystem_type> basic </filesystem_type>
  <size> 53687091200 </size> <!-- 50 GiB in bytes -->
  <file_system_attribute> 0 </file_system_attribute>
  <allocation_attribute> 0x8 </allocation_attribute>
  <align_boundary> 16384 </align_boundary>
  <percent_reserved> 0 </percent_reserved>
  <unique_guid> PARTITION03_UUID </unique_guid>
  <filename> partition03_boot.img </filename>
  <description> **Required.** Contains the boot partition. </description>
</partition>

<partition name="PARTITION03_ENC" type="data" encrypted="true" reencrypt="false">
  <allocation_policy> sequential </allocation_policy>
  <filesystem_type> basic </filesystem_type>
  <size> PARTITION03_ENC_SIZE </size>
  <file_system_attribute> 0 </file_system_attribute>
  <allocation_attribute> 0x8 </allocation_attribute>
  <percent_reserved> 0 </percent_reserved>
  <align_boundary> 16384 </align_boundary>
  <unique_guid> PARTITION03_ENC_UUID </unique_guid>
  <filename> partition03_root_encrypted.img </filename>
  <description> **Required.** Contains the encrypted root partition("/"). </description>
</partition>

<!-- PARTITION04 (15 GiB) -->
<partition name="PARTITION04" type="data">
  <allocation_policy> sequential </allocation_policy>
  <filesystem_type> basic </filesystem_type>
  <size> 16106127360 </size> <!-- 15 GiB in bytes -->
  <file_system_attribute> 0 </file_system_attribute>
  <allocation_attribute> 0x8 </allocation_attribute>
  <align_boundary> 16384 </align_boundary>
  <percent_reserved> 0 </percent_reserved>
  <unique_guid> PARTITION04_UUID </unique_guid>
  <filename> partition04_boot.img </filename>
  <description> **Required.** Contains the boot partition. </description>
</partition>

<partition name="PARTITION04_ENC" type="data" encrypted="true" reencrypt="false">
  <allocation_policy> sequential </allocation_policy>
  <filesystem_type> basic </filesystem_type>
  <size> PARTITION04_ENC_SIZE </size>
  <file_system_attribute> 0 </file_system_attribute>
  <allocation_attribute> 0x8 </allocation_attribute>
  <percent_reserved> 0 </percent_reserved>
  <align_boundary> 16384 </align_boundary>
  <unique_guid> PARTITION04_ENC_UUID </unique_guid>
  <filename> partition04_root_encrypted.img </filename>
  <description> **Required.** Contains the encrypted root partition("/"). </description>
</partition>

<!-- PARTITION05 (2.5 GiB) -->
<partition name="PARTITION05" type="data">
  <allocation_policy> sequential </allocation_policy>
  <filesystem_type> basic </filesystem_type>
  <size> 2684354560 </size> <!-- 2.5 GiB in bytes -->
  <file_system_attribute> 0 </file_system_attribute>
  <allocation_attribute> 0x8 </allocation_attribute>
  <align_boundary> 16384 </align_boundary>
  <percent_reserved> 0 </percent_reserved>
  <unique_guid> PARTITION05_UUID </unique_guid>
  <filename> partition05_boot.img </filename>
  <description> **Required.** Contains the boot partition. </description>
</partition>

<partition name="PARTITION05_ENC" type="data" encrypted="true" reencrypt="false">
  <allocation_policy> sequential </allocation_policy>
  <filesystem_type> basic </filesystem_type>
  <size> PARTITION05_ENC_SIZE </size>
  <file_system_attribute> 0 </file_system_attribute>
  <allocation_attribute> 0x8 </allocation_attribute>
  <percent_reserved> 0 </percent_reserved>
  <align_boundary> 16384 </align_boundary>
  <unique_guid> PARTITION05_ENC_UUID </unique_guid>
  <filename> partition05_root_encrypted.img </filename>
  <description> **Required.** Contains the encrypted root partition("/"). </description>
</partition>

<!-- PARTITION06 (2.5 GiB) -->
<partition name="PARTITION06" type="data">
  <allocation_policy> sequential </allocation_policy>
  <filesystem_type> basic </filesystem_type>
  <size> 2684354560 </size> <!-- 2.5 GiB in bytes -->
  <file_system_attribute> 0 </file_system_attribute>
  <allocation_attribute> 0x8 </allocation_attribute>
  <align_boundary> 16384 </align_boundary>
  <percent_reserved> 0 </percent_reserved>
  <unique_guid> PARTITION06_UUID </unique_guid>
  <filename> partition06_boot.img </filename>
  <description> **Required.** Contains the boot partition. </description>
</partition>

<partition name="PARTITION06_ENC" type="data" encrypted="true" reencrypt="false">
  <allocation_policy> sequential </allocation_policy>
  <filesystem_type> basic </filesystem_type>
  <size> PARTITION06_ENC_SIZE </size>
  <file_system_attribute> 0 </file_system_attribute>
  <allocation_attribute> 0x8 </allocation_attribute>
  <percent_reserved> 0 </percent_reserved>
  <align_boundary> 16384 </align_boundary>
  <unique_guid> PARTITION06_ENC_UUID </unique_guid>
  <filename> partition06_root_encrypted.img </filename>
  <description> **Required.** Contains the encrypted root partition("/"). </description>
</partition>

<!-- PARTITION07 (512 MiB) -->
<partition name="PARTITION07" type="data">
  <allocation_policy> sequential </allocation_policy>
  <filesystem_type> basic </filesystem_type>
  <size> 536870912 </size> <!-- 512 MiB in bytes -->
  <file_system_attribute> 0 </file_system_attribute>
  <allocation_attribute> 0x8 </allocation_attribute>
  <align_boundary> 16384 </align_boundary>
  <percent_reserved> 0 </percent_reserved>
  <unique_guid> PARTITION07_UUID </unique_guid>
  <filename> partition07_boot.img </filename>
  <description> **Required.** Contains the boot partition. </description>
</partition>

<partition name="PARTITION07_ENC" type="data" encrypted="true" reencrypt="false">
  <allocation_policy> sequential </allocation_policy>
  <filesystem_type> basic </filesystem_type>
  <size> PARTITION07_ENC_SIZE </size>
  <file_system_attribute> 0 </file_system_attribute>
  <allocation_attribute> 0x808 </allocation_attribute>
  <percent_reserved> 0 </percent_reserved>
  <align_boundary> 16384 </align_boundary>
  <unique_guid> PARTITION07_ENC_UUID </unique_guid>
  <filename> partition07_root_encrypted.img </filename>
  <description> **Required.** Contains the encrypted root partition("/"). </description>
</partition>


<partition name="secondary_gpt" type="secondary_gpt">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 0xFFFFFFFFFFFFFFFF </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<description> **Required.** Contains secondary GPT of the `nvme` device. </description>
</partition>
</device>
</partition_layout>

Still got conflict when I flash … can you point where I’m missing something. Do I have to modified other files to make this happen ?

flash_1-5_0_20240725-123043.log (7.1 KB)

5

hello apa,

what’s the real use-case to create another 7 new partitions?
don’t this xml file, nvme_rootfs_enc.xml already create APP_ENC partition an encrypted partition contains the rest of the file system.

may I know what’s your flash commands.
for instance, if you following the file, flash_l4t_nvme_rootfs_ab.xml as an example for having the APP_b,
you should also given ROOTFS_AB=1 in the flash command-line for enabling A/B partition also.
programmatically, you should specify the partition after the UDA partition to accommodate the partition sizing.

furthermore,
here’s a sample flash command for your reference.
sudo ROOTFS_AB=1 ADDITIONAL_DTB_OVERLAY_OPT='BootOrderNvme.dtbo' ./tools/kernel_flash/l4t_initrd_flash.sh --external-device nvme0n1 --sparse -c tools/kernel_flash/flash_l4t_nvme_rootfs_ab.xml -p '-c bootloader/t186ref/cfg/flash_t234_qspi.xml' --showlogs --network usb0 jetson-orin-nano-devkit internal

6

We want to seperate the user space on the device, compartmentalize the users space. Can you give me a clear example of the XML modification to add 6 more partition after the UDA ??? the A/B partitionning is not for dual boot ?

7

You can closed the ticket I used parted and gen_luks.sh to created these partitions. Thanks

9

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.