Flash Disk encryption on external(NVME) not booting

I’m using L4T35.4.1 and it’s a Jetson AGX Orin. I’m working with Nvidia’s approach of encrypted disk. So far it’s working fine with internal(EMMC), but when I use approach here, after flashing (using flash.sh ) the QSPI and EMMC, I suppose it should just reflash the QSPI and NVME in this case.
Although the flashing succeeded, I got an error

[   12.521608] Run /init as init process
[   12.533703] Root device found: UUID=1ee7d841-2622-4c8f-957a-097a2d065fdf
[   12.723289] ERROR: encrypted dev /dev/nvme0n1p2 is not LUKS device.
[   12.725199] Kernel panic - not syncing: Attempted to kill init! exitcode=0x00007f00
[   12.725421] CPU: 4 PID: 1 Comm: bash Not tainted 5.10.120-tegra #1
[   12.725585] Hardware name: Unknown Jetson AGX Orin/Jetson AGX Orin, BIOS 202210.3-52cefd4-dirty 10/27/2023
[   12.725860] Call trace:
[   12.725937]  dump_backtrace+0x0/0x1d0
[   12.726038]  show_stack+0x30/0x40
[   12.726142]  dump_stack+0xd8/0x138
[   12.726231]  panic+0x17c/0x384
[   12.726311]  do_exit+0xaa8/0xab0
[   12.726403]  do_group_exit+0x4c/0xb0
[   12.726515]  __arm64_sys_exit_group+0x28/0x30
[   12.726633]  el0_svc_common.constprop.0+0x80/0x1d0
[   12.726769]  do_el0_svc+0x38/0xb0
[   12.726866]  el0_svc+0x1c/0x30
[   12.726950]  el0_sync_handler+0xa8/0xb0
[   12.727053]  el0_sync+0x16c/0x180
[   12.727151] SMP: stopping secondary CPUs
[   12.727533] Kernel Offset: 0x2c2b4a750000 from 0xffff800010000000
[   12.728330] PHYS_OFFSET: 0xffffa310c0000000
[   12.728952] CPU features: 0x08040006,4a80aa38
[   12.729618] Memory Limit: none
[   12.730085] ---[ end Kernel panic - not syncing: Attempted to kill init! exitcode=0x00007f00 ]---

In UEFI, I can manually select the already flashed and working encrypted emmc boot, and check in that emmc rootfs about this nvme0n1p2. Although the nvme0n1p1 seems correct, mount-able, with correct NVME UUID in its initrd /etc/crypttab for example, when I try to luksOpen the nvme0n1p2 it prompt the same error of nvme0n1p2 is not LUKS device

Seems the initrd flashing of the external device is not working?

Hi user16748,

Are you using the devkit or custom board for AGX Orin?
Have you also verified with the latest R35.5.0?

[   12.723289] ERROR: encrypted dev /dev/nvme0n1p2 is not LUKS device.

It seems something wrong in your NVMe partition.

Could you share the full steps how you flash the external NVMe with disk-encryption enabled?

Hi Kevin,
Thanks for the update. And it turned out it was a bad NVME caused some corruption on the luks header. Replacement of NVME made it success on NVME encryption.
Thanks again!

1 Like

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.