This was already implemented with https://github.com/armbian/build/pull/948,
before but never made it into the master branch yet. Probably because the
development branch has been abandoned in the meantime and it is to much effort
now to merge it into master.
It includes all the cleanup changes from commit 08743d3 and has been successfully
tested on an Odroid HC1.
In addition to what is currently in the `luks` branch the following improvments
where done/added:
1. update_initramfs() function in debbootstrap-ng.sh, which needs to be invoked
after the partition layout and /etc/crypttab was created. Else `cryptroot-unlock`
won't work and you'll run into:
https://serverfault.com/questions/907254/cryproot-unlock-with-dropbear-timeout-while-waiting-for-askpass
Apart from that it might be useful to always run `update-initramfs` at the end
of the build process anyway, in case customize_image (userpatches) made some
changes to the initramfs tools configs.
2. CRYPTROOT_SSH_UNLOCK=yes/no config option. It's by default set to yes, but it
might be desired by some users to disable enable SSH/dropbear access while
still having LUKS support. E.g. if they have a device that has a display
and keyboard.
3. If no `authorized_keys` file is provided via userpatches, a new SSH key pair
is generated and for convenience copied to the output directory along with
the final image.
This change introduces a method for U-Boot to perform board version detection at boot and
update the required board DT to load. This process is used to detect the NEO2 board revision
and load the v1.1 NEO2 DT for v1.1 NEO2 boards.
There are two versions of the NanoPi NEO2 board; this change adds the default DT for the
v1.1 board. It includes the correct LED configuration and the MP2143DJ VDD regulator
definition.
This patch enables access to the R_PIO GPIO bank within the U-Boot SPL for the H3 and
H5. This secondary GPIO bank should be available in the SPL just as the PIO bank is,
as there can be need to access these GPIOs during initial board startup.
Ubuntu Bionic and newer Debian distributions have new enough dtc for
compiling overlays, so try to use distribution provided compiler if
kernel headers are not installed
enable the MTD SPI flash configuration in the sunxi-next kernel; this allows on-board
SPI flash to be available via MTD by default when enabling the "spi-jedec-nor" overlay
in the boot configuration.