aright, I do think, due to overlays not being...great in vanilla debian, I'll pick up the raspios support and run with it.

now to see if we can bring over cryptsetup-reencrypt

@arrjay what pisses me off about every single distro for the #RaspberryPi is that none of them have #FeatureParity to their #Desktop parts for no good reason.

  • And I mean fundamentals like a proper #Installer with #LUKS / #dmcrypt support for the / filesystem to facilitate FDE!

Something we had on @ubuntu / #Ubuntu 7.04 & @opensuse / #OpenSUSE 10.2 from day 1!

  • IDK but to me that sounds like a steep feature regression!
@kkarhan @arrjay @ubuntu @opensuse Agree to the extent that it WAS a missing feature. But you can easily encrypt your rootfs on Debian and RasPiOS: https://github.com/gitbls/sdm/blob/master/Docs/Disk-Encryption.md
sdm/Docs/Disk-Encryption.md at master · gitbls/sdm

Raspberry Pi SD Card Image Manager. Contribute to gitbls/sdm development by creating an account on GitHub.

GitHub

@bls @arrjay I KNOW how to manually encrypt stuff - that's not the point.

  • My point is that this is some 3rd party afterthought and not like with #amd64-Versions of the same distros [ @ubuntu, @opensuse, #Debian ) like an option one can choose at an #installer level from a live system.

It's most likely the reason why @tails_live / @tails / #Tails didn't get a #port to #ARM64 to this day...

@kkarhan @arrjay @ubuntu @opensuse @tails_live @tails Don't disagree with your points, but OTOH I can fully customize RasPiOS PRECISELY the way I want it in less than 10 minutes, and it will boot up and run with no further muss and fuss. Yes, this precludes installing the OS with certain features like rootfs encryption, but this method is really freaking sweet if you reinstall a lot like I do.