Open dagaz opened 1 year ago
Since the release of postmarketOS ondev2, I was thinking of switching to ondev2 and generate those images instead. This allows it to be installed directly on the device without having to go through the trouble of using a computer and generate the image.
Which, the way these images are generated is a super, super bad security practice (hardcoded iterations by default, can be changed) since by default, if those images are generated on, let's say, a Threadripper 3990WX (or anything that's better), it'll take a super long time to unlock the encrypted device.
That would be a good idea. Even though it means that the installer script is not usable meanwhile.
Maybe it would be easier to just set a default FDE-Password and place a script to change it after first boot. (But that seems to be bad practice, too. But I assume that people who make the effort to find this script will most likely also make the super small effort to change the FDE passphrase.)
Hi. If I may ask, what is the status? Is there any way to install ArchLinux on PinePhone with disk encryption?
That would be a good idea. Even though it means that the installer script is not usable meanwhile.
Maybe it would be easier to just set a default FDE-Password and place a script to change it after first boot. (But that seems to be bad practice, too. But I assume that people who make the effort to find this script will most likely also make the super small effort to change the FDE passphrase.)
on phosh the FDE password can be changed on gnome-disks program
The server for the source images
DOWNLOAD_SERVER="https://danctnix.arikawa-hi.me/rootfs/archarm-on-mobile"
seems to be permanently down. It might be a good idea to use another source and/or add an option to give a cli-parameter for an image file. So it coult be downloaded from here https://github.com/dreemurrs-embedded/Pine64-Arch/releases/tag/20230203.