Disk encryption with read-only filesystem

[grzegorz.suwala]

Hi,
I have a Xavier NX, 16GB eMMC, L4T 32.7.3(Jetpack 4.6.3).

I try to enable disk encryption with a read-only filesystem using overlayfs.

I was able to enable disk encryption after following instructions from the thread Topic 276275.
To enable read-only mode I use a script from the repository.
https://github.com/forecr/jetson_overlayroot
I tested both procedures independently and they work.

The problem occurs when I want to combine both procedures. First, I encrypt the disk, then run the script to enable read-only.
Below is a screenshot of the system startup process.

As you can see, the system startup process ends in emergency mode.

I also tried editing the /etc/overlayroot.conf file:

overlayroot=“/dev/mapper/cryp_root”
overlayroot_cfgdisk=“enabled”
Unfortunately, this approach also did not work with an error message.

However, the system starts but does not have read-only mode enabled.

I appreciate any help in solving my problem.

[JerryChang]

hello grzegorz.suwala,

@grzegorz.suwala

The problem occurs when I want to combine both procedures.

we’ve never test disk encryption with a read-only filesystem.
actually, we’ve only support disk encryption.

[grzegorz.suwala]

Hi JerryChang,

@JerryChang

we’ve never test disk encryption with a read-only filesystem.
actually, we’ve only support disk encryption.

I am aware of this.
Considering that several threads on the forum are dedicated to read-only file systems, I hope someone could advise me on how to solve this problem.