Orin NX Disk Encryption Modify Size

Hello, NVIDIA Team,
For my purpose I’m trying to flash the SSD with encryption.
Here are the steps I’m following:

  1. Generate images for QSPI:
      sudo ./tools/kernel_flash/l4t_initrd_flash.sh --showlogs -p \
    "-c bootloader/t186ref/cfg/flash_t234_qspi.xml" \
    --no-flash --network usb0 jetson-orin-nano-devkit internal
    
  2. Generate the key:
    echo "f0e0d0c0b0a001020304050607080900" > ekb.key
    
  3. Generate images for external storage device:
    sudo ROOTFS_ENC=1 ./tools/kernel_flash/l4t_initrd_flash.sh \
    --showlogs --no-flash --external-device nvme0n1p1 -i ./ekb.key \
    -c ./tools/kernel_flash/flash_l4t_t234_nvme_rootfs_enc.xml \
    --external-only --append --network usb0 \
    jetson-orin-nano-devkit external
    
  4. Flash images into the both storage devices:
    sudo ./tools/kernel_flash/l4t_initrd_flash.sh --showlogs \
    --network usb0 --flash-only
    

This process works well.

As a result, I have the following:

My SSD is 256 GiB, and I would like to utilize its full capacity.

I tried running the command with the -S 128GiB flag, but it had no effect on the result:

sudo ROOTFS_ENC=1 ./tools/kernel_flash/l4t_initrd_flash.sh \
--showlogs --no-flash --external-device nvme0n1p1 -i ./ekb.key \
-c ./tools/kernel_flash/flash_l4t_t234_nvme_rootfs_enc.xml \
--external-only --append --network usb0 -S 128GiB\
jetson-orin-nano-devkit external

I also attempted modifying the layout file by replacing APP_ENC_SIZE with a specific byte size, but encountered a block number error. A similar error occurred when I changed ROOTFSSIZE in Linux_for_Tegra/p3767.conf.common.

Any suggestions or guidance on adjusting the default disk size would be greatly appreciated!

hello alex318,

please refer to developer guide, How to Flash an Encrypted Rootfs to an External Storage Device.
you may see-also $OUT/Linux_for_Tegra/tools/kernel_flash/README_initrd_flash.txt of [Workflow 11] for demonstration.

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.