Cryptsetup na RaspberryPi

RaspberryPi imam kot iSCSI initiator priključen na iSCSI target. Na tem targetu sem naredil z fdisk novo particijo, se pravi imam napravo /dev/sdd1.

Še par tehnikalij:

cryptsetup --version
cryptsetup 2.1.0

cat /etc/debian_version 
10.3

OK, sedaj skušam to napravo sdd1 formatirati z integrity checkom:

sudo cryptsetup -v luksFormat --type luks2 --integrity hmac-sha256 /dev/sdd1

In dobim error:
WARNING!
========

This will overwrite data on /dev/sdd1 irrevocably.

Are you sure? (Type uppercase yes): YES
Enter passphrase for /dev/sdd1: 
Verify passphrase: 
device-mapper: reload ioctl on   failed: Invalid argument
Cannot format integrity for device /dev/sdd1.
Command failed with code -1 (wrong or missing parameters).

Ampak če pa dam --integrity none...

sudo cryptsetup -v luksFormat --type luks2 --integrity none /dev/sdd1

Pa zadeva začne delati:

WARNING!
========
This will overwrite data on /dev/sdd1 irrevocably.

Are you sure? (Type uppercase yes): YES
Enter passphrase for /dev/sdd1: 
Verify passphrase: 
Key slot 0 created.
Wiping device to initialize integrity checksum.
You can interrupt this by pressing CTRL+c (rest of not wiped device will contain invalid checksum).
Progress:   0.0%, ETA 4439:07,  179 MiB written, speed   7.9 MiB/s

Vprašanje - v čem je problem?

Tudi če dam --integrity poly1305 je problem podoben:

sudo cryptsetup -v luksFormat --type luks2 --integrity poly1305 /dev/sdd1 --verbose
WARNING: Device /dev/sdd1 already contains a 'crypto_LUKS' superblock signature.

WARNING!
========
This will overwrite data on /dev/sdd1 irrevocably.

Are you sure? (Type uppercase yes): YES
Enter passphrase for /dev/sdd1: 
Verify passphrase: 
Existing 'crypto_LUKS' superblock signature on device /dev/sdd1 will be wiped.
Existing 'crypto_LUKS' superblock signature on device /dev/sdd1 will be wiped.
Cipher aes-xts-plain64 (key size 512 bits) is not available.
Command failed with code -1 (wrong or missing parameters).

Ja, seveda ni...

Sem pa pogledal kako je s fscryptom... in seveda tudi tukaj ni omogočen v kernelu:
https://github.com/raspberrypi/linux/is...

Oštja, a bo res treba kernel ročno kompajlat??