MichaIng

@Joulinar Jep, no chance without having the key stored somewhere, breaks concept in most cases. So buttom line: You cannot reasonably encrypt a filesystem/directory that needs to be accessed by...

@notDavid You could exclude all services from DietPi-Services control: `dietpi-services` There is not yet a feature to skip service start all together, would be actually nice 🤔. But your error...

> ``` > /dev/sdb1: UUID="018e7437-0373-4374-a473-0d2d821e4061" TYPE="crypto_LUKS" PARTUUID="b641c4df-88f0-473b-90de-2195d093ff1f" > /dev/mapper/usb02: LABEL="USB02" UUID="b889e08c-c083-4f86-a594-514f27898fc3" TYPE="ext4" > ... > sdb 8:16 0 4.6T 0 disk > └─sdb1 8:17 0 4.6T 0 part > └─usb02...

@notDavid Jep, this is not an issue, since `dietpi-drive_manager` handles drives with and without partition table just the same. The identifiers are the same, `TYPE="crypto_LUKS"` + `/dev/mapper/*` + `* 254:0...

> Also I notice that there is no option in DietPi Drive Manager to transfer dietpi_userdata to the /dev/mapper/sdb mounted volume that dietpi drive manager sees. The drive manager detects...

Supporting request: #4365 I renamed this issue to be more generic. General support for dm-crypt/LUKS filesystem detection and creation is the first step, before we can think about allowing to...

> a separate boot partion that handles the login first A "login" like on local console or via SSH to a shell is not possible without the root partition. But...

Sounds good indeed. A little downside with WireGuard is that it's not yet 100% supported on all SBCs. Also I'm not sure what WireGuard is actually used for in this...

> I think it is ment to use with reomte VPS/RS or simliar servers and secure the exposed SSH Port. Well, on the other hand then you have the VPN...

I didn't even know this flag, interesting. Can you try to remove `--use-gl=egl` from `/etc/chromium.d/dietpi`?