Encryption
-
I'm setting up a Oneplus Nord N10 with Ubuntu Touch, and I wanted to encrypt my home partition.
I'm running 24.04-1.x Daily
I went into Settings > Security & Privacy > Encryption
It ends up: Error Encryption failed. Please try again later.
In the journal I get:
[ERROR] fscrypt encrypt: kernel is too old to support v2 encryption policies\n\nv2 encryption policies are only supported by kernel version 5.4 and later.\nEither use a newer kernel, or change policy_version to 1 in /etc/fscrypt.conf.\n"The kernel is 4.19 so there is no version 2 available.
I tried to edit /etc/fscrypt.conf but it is readonly. The file permissions are root:root 666 and it is not marked as immutable. I'm puzzled why root can't edit the file.
Any solution to allow encryption?
Thanks.
Mark
-
@mark1250 filesystem as a whole is read only. It is possible to mount as rw. That will allow you to edit the file. Don't know if it will allow encryption though.
-
@projectmoon
Thanks. I had thought all /etc was mounted rw. I see that is not the case.I mounted the filesystem rw and edited the file. It did allow the encryption. BUT, I think that may have broke the installation. While encrypting, it crashed the OS. Now after a reboot, I enter my password and it keeps asking me to setup the phone, like a fresh install.
DON'T do what I just did unless you want to loose data!
So I'm going to reinstall with a wipe.
-
@mark1250 Did you have a lot of data in your home directory, like almost 50% usage or more?
-
@lk108 No, I just got Ubuntu Touch on this phone so it wasnt a space issue.
Maybe the porter knows why the fscrypt was set to v2. And was for a good reason
-
Kernel 4.19 has an opportunity to receive fscrypt v2 support by backporting it as per docs: https://docs.ubports.com/en/latest/porting/configure_test_fix/Fscrypt.html
You can ask your port maintainer to do that.
-
@mark1250 Only a few devices have encryption at the moment, I think it may be coming to the N10 soon.
