NixOS
luks for generated image
It seems that currently luks can be only created on device using installer but there is no support for generating a luks encrypted image. It would be very helpful to support this for android devices
Just to make sure; the idea is to use a known plaintext password for the encryption and then use cryptsetup luksChangeKey to change the key, right?
I think that's a good idea in general (I've struggled with this in the past), and since users have to enter the very obviously not secure plaintext password on every boot, it wouldn't need any big banner a la "please change your password" (IMHO).
Just to make sure; the idea is to use a known plaintext password for the encryption and then use cryptsetup luksChangeKey to change the key, right?
(edited) Yes. Previously I tested and confirmed that luks can add and remove key of mounted root file system