Encypt userdata

[pleoni]

Did anybody encrypt user data?
I tried, but it was failed.
My steps:
0 - install ubuntu, turn on, select country -> wifi -> device name -> password
1 - reboot recovery
2 - connect via adb
3 - umount /cache
4 - e2fsck -f /dev/block/bootdevice/by-name/userdata
5 - tune2fs -O encrypt /dev/block/bootdevice/by-name/userdata
6 - reboot, connect via adb
7 - sudo mount -o remount,rw /
8 - sudo apt update
9 - sudo apt install fscrypt libpam-fscrypt -y
10 - sudo fscrypt setup
11 - run "sudo nano /etc/deviceinfo/devices/surya.yaml" and add "FilesystemEncryption: true" to end of file
12 - reboot, in UI I go to System Settings -> Security -> Filesystem Encryption -> enable and enter current password
13 - phone reboots during encrypting
14 - then I see boot screen -> enter password -> I see boot screen one more time -> then looks like a new system, I need to select country -> setup wifi -> set device name, but a keyboard doesn't work, and swype doesn't work. And I only can reboot to recovery and do factory reset.
As e result I have no encrypted device.
Do I do something wrong? or I need to do next "If your device uses kernel version 4.14 or 4.19, then you can backport policy version 2 support from the Android Common Kernel repository."? Does any body have an instruction?
Thank you

[gpatel-fr]

@pleoni

Hello

while I don't use encryption myself I can only wonder why you did not use the option 'Encryption' in 'security and privacy' tab of general settings ?

it's marked as 'experimental', but it can't be worse than hacking around the rootfs, an action about which you can read literally dozen of warnings while browsing this forum - in short, if you want to break your device, there is no better way than turning the rootfs r/w.