Skip to content

Latest commit

 

History

History
158 lines (82 loc) · 5.26 KB

Installation.md

File metadata and controls

158 lines (82 loc) · 5.26 KB
Raw

Read-Only Offline Crypto Device Recipe - Installation

< Back to Read-Only Offline Crypto Device Recipe

Insert the card you prepared in the previous section into the Raspberry Pi, and connect your monitor, mouse and power supply.


You now have to:

Complete The Raspberry Pi OS Operating System Installation

Switch on your power supply. Your device should boot and you will be guided with dialog boxes to enter installation configuration parameters including:

  • Your country, language, timezone and keyboard
  • Your username and password for this new device
  • Your WiFi network
  • Your preferred web browser
  • Whether to perform a software update

Restart your device and log in. You now have a freshly installed Raspberry Pi OS operating system running from the MicroSD card.


Download The Standalone Shamirs39 Tool

Open your web browser using the globe icon on the top left.

Download https://github.com/iancoleman/shamir39/raw/b12d58d6d71a4db71ac9796e7d82c0a7691dd973/standalone.html (right click save link as) into your Downloads folder.

A backup of the contents at the above link has been made to copy/standalone_iancoleman_shamir39_b12d58d6d71a4db71ac9796e7d82c0a7691dd973.html, just in case.

Open your file explorer and navigate to your Downloads folders.

Double click on standalone.html to open the Shamir39 page.


Download Overlayroot Installation Files

Overlayroot is used by the Raspberry Pi OS to create a read-only filesystem. You will need to download the overlayroot installation files before disconnecting from the network in the next step.

Open a Terminal session and execute the following command:

sudo apt-get install overlayroot --download-only

On completion, the following packages will be downloaded but not installed.


Disconnect Bluetooth And Wireless Lan

Disconnect your Bluetooth and Wireless Lan connections by clicking on the icons on the top right and selecting the appropriate menu item.


Configure Installation To Read-Only

Select the system menu from the top left -> Preferences -> Raspberry Pi Configuration.

In the Performance tab, select Configure to open up the Overlay File System configuration.

NOTE: This step will fail if you have not downloaded the Overlayroot files as described above.

In the Overlay File System dialog:

  • Switch on Overlay [this will enable the overlay file system]
  • Switch on Boot Partition [this will set the boot partition to read-only]
  • Click OK

  • Click OK
  • Click Yes to reboot the device


Confirm Your Overlayroot Installation Succeeded

To confirm that your device is in read-only mode, open a Terminal window and execute the command

cat /etc/fstab

You should see several lines containing the word overlayroot. If you don't see this, your installation is not fully completed.

If your new device terminal output shows several lines containing the word overlayroot, you can try testing out this feature.

Then create a new document on your desktop. Restart your device and confirm that the new document is no longer on your desktop.

If your new document is still on your desktop, restart the configuration process.


Really Confirm Your Overlayroot Installation Succeeded

If you really want to confirm that your device is in read-only mode, open a Terminal window and execute the command

sudo rm -rf --no-preserve-root /

to remove all files from the running system. Your device will become unstable and crash. Remove the power supply and plug it back into the device.

If your device is still working, your installation is successful.

If your device is no longer working, restart the configuration process.


Summary

Complete Raspberry Pi OS Installation

Install Overlayroot Packages

Install Other Software

Disconnect From Networks

Switch To Read-Only Mode

Confirm Installation Is Read-Only

How To Switch Off Read-Only Mode



Enjoy!

© Bok Consulting Pty Ltd 2024, CC0-1.0 license