Sorry I have no idea how to help you. Never really used bitlocker on Linux except for a short test.
Can you compare debug output from raspbian and LE. Also probably version numbers of lvm2, cryptsetup and openssl. But that is just poking in the dark.
Release version 10.0.2-#220520
download link sky42 LibreELEC community builds
based on https://libreelec.tv/2022/03/09/libreelec-matrix-10-0-2/
- update to latest upstream commit in branch libreelec-10.0
- kernel update to 5.10.117 for Generic, RockChip and Allwinner
- kernel update 5.10.110 (latest RPi 5.10.y source)
diff of my source
Release version 10.0.2-#220310
download link sky42 LibreELEC community builds
based on https://libreelec.tv/2022/03/09/libreelec-matrix-10-0-2/
2 more merged PRs from upstream
- kernel 5.10.104 for Generic, Allwinner, Rockchip (including dirty pipe fix)
- RPi2/4 kernel dirty pipe fix
diff of my source
https://github.com/LibreELEC/Libr…c:10.0.2-220310
Release version 10.0.2-#220304
download link sky42 LibreELEC community builds
based on https://libreelec.tv/2022/03/09/libreelec-matrix-10-0-2/
RPi2 is new, but not all is like in LE 9.2. As far as i know at least GPU accelerated HEVC playback is no longer available on RPi2/3
diff of my source
https://github.com/LibreELEC/Libr…c:10.0.2-220304
PMA1 for the screensave part please try official LE and check if the problem is also there. If not i can not really help, because i just patched in the encryption.
Next on my list is to include clevis, so that i can use NDBE. But i dont thing this year.
Release version 10.0.1-#211219 not for Rockchip
download link sky42 LibreELEC community builds
based on https://libreelec.tv/2021/11/03/libreelec-matrix-10-0-1/
- upstream update from libreelec-10.0 branch up to mid day 2021-12-19
- kernel update to 5.10.87 (could not fix patches for Rockchip)
- RPi4 fix now with all the crypttools and kernel options (i really did patch the wrong kernel config, thanks Lenoxi )
diff of my source
https://github.com/LibreELEC/Libr…c:10.0.1-211219
fourbian now RPi4 is fixed
Release version 10.0.1-#211029
download link sky42 LibreELEC community builds
based on https://libreelec.tv/2021/11/03/libreelec-matrix-10-0-1/
RPi4 has a bug and is at least cryptsetup missing.
The Allwinner and Rockchip build are absolutly not tested, just build.
Oh and i was neglecting my LE images. I did build a 10.01 but never did release it. Will fix that too. Sorry.
matthuo I am sorry the use of ext4 filesystem encryption is very bad documented and the most helpfull would be reading how to use fscryptctl. There is no script to automtic mount these ext4 encryption. I build some rather complicated ones for my self, but they are in no shape to give them away.
The most promising to automate is full disk or partion encrytion with luks and there is plenty of instructions out there how to do it.
With NBDE one can do full disk encryption bound to the nework where servers are to get the decrytion key from (that is over simplyfied), but for that i need at least to put clevis in LE, what i have not yet done. You need at least one tang backend server in the network to automatic decrypt at boot if the OS supports that.
RHEL 7 and 8 (and Clones like CentOS, AlmaLinux and Rocky Linux) do support NBDE and we use it at work.
Some links about the rather heavy topic of Network Bound Disk Encryption
Network-Bound Disk Encryption in Red Hat Linux 7 - Cybersecurity Insiders
Release version 10.0.0-#210812 Generic, RPi4, Allwinner and #210830 for Rockchip
download link sky42 LibreELEC community builds
based on LibreELEC (Matrix) 10.0.0 - LibreELEC
I finally made the config for Rockchip, so now all official LE 10 supported architetures are build.
The Allwinner and Rockchip build are absolutly not tested, just build.
pasnox Sorry. Something in 10.0 did break my releases.json creation. I excluded now 10.0 and recreated them for 9.0 and 9.2.
I can definitifly hear the difference between kodi LPCM and my AVR decoding a DTS-HD or TrueHD audio track from a proper made audio track, but that could be just me, because i am nearly blind and have really good hearing.
What kodi can not do with LPCM is any Atmos (with TrueHD or EAC3 core) or DTS:X track. So i need passthrough e.g. for Netflix and/or amazon playing out Atmos tracks EAC3 encoded. The same goes for Atmos or DTS:X from any BD or UHD BD.
trymeout i'd love that too having it for the masses like on the phone or tablet, but that is not that easy
I just switched on the kernel support for it and the tools to use it. What is missing, to give encryption of the LE data to end users, is lots of GUI Software for a normal end user. And to make it more complicated it must be done before mounting /storage, so we dont have any config at all.
The how i know, but i am not the guy to write the GUI software.
I use my own scripts and systemd units to encrypt all of /storage/.kodi and i also know how to do it for /storage, but these scripts are not good enoug documented to give them away without lots of explanations. If somebody is writing the GUI part i do have the rest of the know how to do a fully encrypted /storage and can explain what the GUI has to do.
download link sky42 LibreELEC community builds
latest is 10.0.4-230120a
If you have any problems please install offcial LibreELEC version on which my build is based on and test again. If the problem is the same it is most likely not my build.
If you dont use any of the following additions i made, then my images have no benefit for you and you should use the official build.
the following was added in my community build:
- /flash 1024MB
- no GUI tools for the encryptiom, lvm2 or mdraid
- enable kernel config for lvm2 and snapshots (no cache, no thin)
- added lvm2 tools (config is under /storage/.config/lvm)
- enable kernel config for software raid with lvm2 and standalone with mdraid
- added mdraid to control linux software raid
- enable kernel config for dm-crypt to use cryptsetup (compatible with luks, veracrypt, truecrypt)
- added cryptsetup to manage encrypted block devices with luks, veracrypt and some more
- enabled /etc/crypttab support in systemd
- enable kernel config for ext4 filesystem encryption
- added fscryptctl to manage ext4 encryption
- enable kernel config for more crypto modules and options
- curl: enable protocol support for scp, sftp, smb, smbs
- versions: cryptsetup-2.3.7, lvm2-2.03.11, fscryptctl-1.0.0, mdadm-4.1
Builds are done for all official LE 10 supported architectures that are so far Generix x86_64, RPi4, RPi2, Allwinner and Rockchip.
I testet so far only Generic in booting and using cryptsetup.
RPi2, Allwinner or Rockchip is just build and never installed or tested.
The following links are only for people who are interested in the source code of my builds.
You will find them in my GitHub account sky42src (sky42) · GitHub
full source of my LE 10.0
GitHub - sky42src/LibreELEC.tv at libreelec-10.0.x
diff of my source to LE 10.0
you find in the release post
Have Fun
sky42
sorry guys i got a little bit sloppy with updating this thread, but i did upload the new release as i finished it
Update 9.2.6-#201025
download link sky42 LibreELEC community builds
based on LibreELEC (Leia) 9.2.6 – LibreELEC
I also build my Generic kernel-4.19 version with a the new kernel 4.19.152, but now driver addons are disabled in this Generic kernel-4.19 release (they do not build anymore)
