LE 9.2 with lvm2, luks (dm-crypt, veracrypt), ext4 encryption and some newclock5 kodi patches

**sky42** · September 11, 2019 at 4:35 PM

download link sky42 LibreELEC community builds

latest is 9.2.6 and has version number 9.2.6-#201025

If you have any problems please install offcial LibreELEC version on which my build is based on and test again. If the problem is the same it is most likely not my build.

If you dont use any of the following additions i made, then my images have no benefit for you and you should use the official build.

the following was added in my community build:

- /flash 1024MB

- added a 2nd kernel for Generic: ported 4.19 from 9.0.2 and updated to the latest version (suffix kernel-4.19)

- no GUI tools for the encryptiom or lvm2

- enable kernel config for lvm2 and snapshots (no raid, no cache)

- added lvm2 tools (config is under /storage/.config/lvm)

- enable kernel config for dm-crypt to use cryptsetup (compatible with luks, veracrypt, truecrypt)

- added cryptsetup to manage encrypted block devices with luks, veracrypt and some more

- enabled /etc/crypttab support in systemd

- enable kernel config for ext4 filesystem encryption

- added fscryptctl to manage ext4 encryption

- enable kernel config for more crypto modules and hardware acceleration (if existing)

- curl: enable protocol support for scp, sftp, smb, smbs

- added some Kodi newclock5 patches from popcornmix to all projects where they are not included (details see github source below)

Builds are done for all project and devices that are supported by LE 9.2 at the moment (Generic, RPi, Rockchip)

weekly use by me: Generic

tested booting: RPi4, RPi2

just build and never tested: all the rest

The following links are only for people who are interested in the source code of my builds.

You will find them in my GitHub account sky42src (sky42) · GitHub

full source of my LE 9.2

GitHub - sky42src/LibreELEC.tv at 9.2.6-201025

diff of my source to LE 9.2

Comparing LibreELEC:9.2.6...sky42src:9.2.6-201025 · LibreELEC/LibreELEC.tv · GitHub

Have Fun

sky42

**sky42** · September 11, 2019 at 4:37 PM

reserved post for some documentation (i want to write) on how to use lvm2, cryptsetup and hopefully in a later version network bound disc encryption.

eightball70 · September 13, 2019 at 11:15 AM

Thanks for your work. I'm using the LibreELEC-Generic.x86_64-sky42-9.1.501-#190907-kernel-4.19 version, since the latest versions with Linux Kernel 5.0.x fail to detect the RTS5229 built in card reader on my NUC7PJYH.

Everything is working fine now.

**sky42** · November 2, 2019 at 3:52 PM

Update 9.1.502-#191018

download link sky42 LibreELEC community builds

based on LibreELEC (Leia) 9.2 Beta 2 – LibreELEC

Marciano · November 2, 2019 at 4:12 PM

Hi, just a wuestion about the newclock5 kodi patches are there some fixes for screen tearing for rpi4?

**sky42** · November 3, 2019 at 10:33 AM

I don't think so.

**sky42** · November 26, 2019 at 5:42 PM

Update 9.2.0-#191123

download link sky42 LibreELEC community builds

based on LibreELEC (Leia) 9.2.0 – LibreELEC

but i included [le92] NFS / netboot backports by HiassofT · Pull Request #3991 · LibreELEC/LibreELEC.tv · GitHub

pasnox · December 8, 2019 at 12:54 PM

I just registered to say thank you for your work!

Everything works great!

Ok, setting up the encrypted stuff and have it auto mounted was not the easiest as there is no documentation, but google helped!

**sky42** · March 10, 2020 at 10:31 PM

Update 9.2.1-#200303

download link sky42 LibreELEC community builds

based on LibreELEC (Leia) 9.2.1 – LibreELEC

Generic kernel-4.19 is now 4.19.106 as the RPi version in the release

Wicher · May 10, 2020 at 1:08 AM

sky42 What am I doing wrong?

Code

cryptsetup --veracrypt open --type tcrypt /dev/sda1 disk1 --key-file /storage/keyfile
mount /dev/mapper/disk1 /media

Avan · May 11, 2020 at 9:27 AM

Wicher

i use this commands

Code

cryptsetup luksOpen -d /storage/Key /storage/UCrypt Crypt
mount -t ext4 /dev/mapper/Crypt /storage/.Crypt

Wicher · May 11, 2020 at 2:59 PM

Avan This is for LUKS, I'm looking for a way to mount VeraCrypt since this disk is shared with a Windows machine.

Edit:

I managed to make it work, I had to change the mountpoint. Now I just have to fix the automount script.

Edit2:

Is there a way to skip passphrase prompt? I'm currently using a keyfile only with an empty password. Is there equivalent of /tryemptypass for cryptsetup?

**Nicolas** · May 14, 2020 at 2:27 AM

Hello Sky42!

Thank you for your builds!

Do you plan to build a generic version based on LE9.2.2?

Regards

Nicolas

**sky42** · June 6, 2020 at 1:22 AM

Sorry Wicher Nicolas i was and still are very busy at work

Wicher 2 examples from one of my posts 2 yesrs ago

features tested:

- truecrypt with "cryptsetup open --type tcrypt /dev/sda6 tcrypt-sda6 ; mount /dev/mapper/tcrypt-sda6 <your mountpoint>" created on OE 5.0 with truecrypt

- veracrypt with "cryptsetup open --veracrypt --type tcrypt /dev/sdb6 vcrypt-sdb6 ; mount.exfat /dev/mapper/vcrypt-sdb6 <your mountpoint>" created on Windows 10 with veracypt and formated as exfat

- cryptsetup luks i used to create and mount encrypted userdata

and the actual command line i use at the moment on my CentOS7 systems to mount my encrypted drives with a PW given in a script and mounting all

Code

stty -echo
$ECHO -e ">>> Please enter password:    \c"
read PASS
stty echo

cryptsetup luksOpen /dev/sdc1 luks-sdc1 - <<< "$PASS" || exit 1

Nicolas sorry for the delay the next post will be 9.2.3

**sky42** · June 6, 2020 at 1:29 AM

Update 9.2.3-#200605

download link sky42 LibreELEC community builds

based on LibreELEC (Leia) 9.2.3 – LibreELEC

Generic kernel-4.19 is now 4.19.126 in the release

full source

GitHub - sky42src/LibreELEC.tv at 9.2.3-200605

diff of my source to LE 9.2

Comparing LibreELEC:9.2.3...sky42src:9.2.3-200605 · LibreELEC/LibreELEC.tv · GitHub

kragil · August 1, 2020 at 7:31 AM

Hello,

thanks for this!

One quick yes/no question:

Does this support Adiantum encryption? (has to be in the kernel, but I think it was only merged in 5.0)

**sky42** · August 1, 2020 at 10:38 PM

From a quick look at the source no:

Code

sky42@xenial:/letv/9/2x$ git grep CONFIG_CRYPTO_ADIANTUM
projects/Allwinner/linux/linux.aarch64.conf:# CONFIG_CRYPTO_ADIANTUM is not set
projects/Allwinner/linux/linux.arm.conf:# CONFIG_CRYPTO_ADIANTUM is not set
projects/Generic/linux/linux.x86_64.conf:# CONFIG_CRYPTO_ADIANTUM is not set

and from reading over here Enabling Adiantum | Android Open Source Project i dont think i will include it in 9.2. But when i start with LE 10 i will (hopefully) think of it.

**sky42** · August 13, 2020 at 9:35 PM

Update 9.2.4-#200803

download link sky42 LibreELEC community builds

based on LibreELEC (Leia) 9.2.4 – LibreELEC

Generic kernel-4.19 is now 4.19.136 in the release

full source

GitHub - sky42src/LibreELEC.tv at 9.2.4-200803

diff of my source to LE 9.2

Comparing LibreELEC:9.2.4...sky42src:9.2.4-200803 · LibreELEC/LibreELEC.tv · GitHub