Protect your Raspberry PI SD card, use Read-Only filesystem
-
-
Trying to make a ro mediaplayer, but when I install omxplayer dbus is a dependency, and dbus do not like a ro filesystem. What are the tricks to make dbus run on a read only filesystem?
-
@smartypants_no
Not sure it's possible, may be setting up dbus to works on tmpfs Filesystem like I suggested in previous post ?
Works is to find out which folder/file need to be on this system. -
Hello there,
Thank you for posting this great tutorial!
I tried following your instructions on both Lubuntu 16.04 and on Ubuntu Mate 16.04 but unfortunately my Raspi3 no longer boots after adding the magic word "ro" on the fstab file.
Everything else seems to be working including the tmpfs commands
Any ideas why this would happen? Do these distros differ fundamentally from Rasbian Jessie?Below are the errors shown on the screen when it hangs:
[34.800508] brcmfmac: brcmf_add_if: ERROR: netdev:wlan0 already exists
[34.800657] brcmfmac: brcmf_add_if: ignore IF event
[35.852809] brcmfmac: brcmf_add_if: ERROR: netdev:wlan0 already exists
[35.853037] brcmfmac: brcmf_add_if: ignore IF eventThanks much!
-
Hello again,
I realized what my problem was...I was trying to make the GUI system read only (i.e. without removing the x server stuff). This leads me to a second question: Is it possible to make a basic Debian system with a GUI truly read only (like squashfs for an i386 architecture)? I assume the risks of running out of the 1GB Raspi memory, if only I knew how to get there.
Many thanks -
Hi
If you ever want to go "one step further", then please have a look at my project Nard SDK. Everything runs from RAM. The SD card isn't used at all (except for boot).
http://www.arbetsmyra.dyndns.org/nard/ -
Hi,
Thank you very much for this tutorial. It helped me a lot! I have one issue that I can't solve by myself! I followed this tutorial step by step on my Raspian Jessie Lite system and it works perfectly...but when I put SD Card into another Raspberry Pi (same model RPi B+), it always boot with the IP (through Ethernet) 169.254.xxx.xxx. To fix it, I have to boot (only one time) without ",ro" in /etc/fstab for the disk "/". Then I can put back ",ro"! Do you think that I have some missing symlinks??
Thanks -
I've made a couple of scripts for this as I keep needing it for various projects.
These work with the standard desktop and with the chrome browser as I use it for kiosk mode.
The main problem I had was making the file system RO only to realize I needed to install/update something so I've included a script to re-enable RW mode.
Nothing complicated, but they seem to work reliably.
One caviat, if you riu the makerw script when the file system is already RW you'll screw up your OS, I should add a check at the start of the script really...
https://github.com/MarkDurbin104/rPi-ReadOnly -
Hi,
great tutorial, helped me a lot! Hopefully this will end my SD card corruption problems. One thing I noticed is that there is a constant error in syslog:
frequency file /var/lib/ntp/ntp.drift.TEMP: Read-only file system- ntp wants to writedriftfilebut is unable to. I fixed that so thatdriftfilecommand in/etc/ntp.confpoints to/tmp/ntp.drift.# /etc/ntp.conf, configuration for ntpd; see ntp.conf(5) for help driftfile /tmp/ntp.driftAnother thing - I added loggly integration so I'm able to debug my Pi after reboots when syslogs are gone. I kept
rsyslogand followed this guide (besides Python specific logging it also adds adds syslogs).Some info about driftfile: https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Deployment_Guide/s1-Understanding_the_Drift_File.html
-
@Gregor-Ratajc
Thanks for the tip, I updated the tuturial according driftfile
-
I've used this multiple times, great resource.
One thing that could be made clearer is the tmpfs additions to fstab, I missed them and couldn't ssh in -
Thanks a lot for this tutorial!
On debian jessie /usr/lib/tmpfiles.d/var.conf chmods /var/spool to 0755. This means that /tmp is changed to 0755 as well because we changed /var/spool to point to /tmp. So the /var/spool line in /usr/lib/tmpfiles.d/var.conf has to be commented out.
/run and /run/lock are tmpfs already, maybe they are better softlink targets than /tmp. -
Hello,
There is a (rather new) Olimex single board card with onboard 4GB eMMC MLC/SLC Flash
Do you think this could be an answer to the corruption of data for an always on card ?
(with regular backup...of cours...) or the problem is not related to SD card ???
thx. -
I tried this tutorial twice and both times couldn't SSH in after the final reboot. I found this tutorial a little more helpful - http://petr.io/en/blog/2015/11/09/read-only-raspberry-pi-with-jessie/. I susptec the difference was the part they mentione specifically enables SSH after changing these settings. That tutorial also makes it a little more clear that you have to add three lines in /etc/fstab, not just add ro twice.
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login