Date: Fri, 07 Mar 2014 09:28:29 +0000 From: Matthew Seaman <m.seaman@infracaninophile.co.uk> To: freebsd-questions@freebsd.org Subject: Re: FreeBSD 10 RELEASE amd64 how to install on single drive with encrypted ZFS root? Message-ID: <5319913D.4040207@infracaninophile.co.uk> In-Reply-To: <53197EF6.4070902@holgerdanske.com> References: <53197EF6.4070902@holgerdanske.com>
next in thread | previous in thread | raw e-mail | index | archive | help
This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --RcRQV5J7H1ubFAKBErWNEcVQ6CVPUEEdg Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable On 03/07/14 08:10, David Christensen wrote: > The FreeBSD manual covers 9 and the wiki "Root on ZFS" article covers 8= =2E >=20 > STFW I've found several things for 9, but no direct hits for 10 with > encrypted ZFS root. (There is a Flash video that might cover it, but I= > don't do Adobe.) The 10.0 installer does ZFS natively, which is why you can't find any instructions on how to set up ZFS manually on that platform. However, to set up an encrypted root, you'll need to set up the encrypted partition with geli and then set up your ZFSes on top of that. Which is basically a manual job. You can follow the instructions here: https://wiki.freebsd.org/RootOnZFS/GPTZFSBoot/9.0-RELEASE except that after item (7) -- gnop -- you'll need to insert creating your encrypted partitions and then modify the subsequent bits to refer to the /dev/gpt/foo.eli devices you create. As far as ZFS goes, the sequence is essentially the same for 9.0 as for 10.0 except that wherever it says to use lzjb, you should substitute lz4. Cheers, Matthew --RcRQV5J7H1ubFAKBErWNEcVQ6CVPUEEdg Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (FreeBSD) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQJ8BAEBCgBmBQJTGZFEXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXQxOUYxNTRFQ0JGMTEyRTUwNTQ0RTNGMzAw MDUxM0YxMEUwQTlFNEU3AAoJEABRPxDgqeTnUSsP/3J2cvdfrOMNC9QO8IEDX7Mo GSaDCL7mP2H+lspj14cJ3mA8ZRGUT4mvkWjqoaJ+4NEmXelilGrZk6tgenqTTlvp cPsrtfkpXujPubFFLJQ33RmQEQyq1DzoZcOAwpnH6uA9UkXAkznP/VjmG9peIiv4 +TeKzn4EheWobUnZK+c3sHNbdDlnPtc+mpuYt7rPpLL04oJVNJUVhASFL5nbNyng 0LPh6TW5J8auTfu8jtJzCuljq/2Wi4+UU2EVLeU16Q3R1eXfER2Qe6prc0cTPJJE pHGbuZrogjt3SuTkQwlFERcrKWvJsiLX7Qu06MzZzbxOUTLDhXE3Qw9RH5l5dAGr dIUw6P9b2XwmgCHcuYTPNg6KBZDJvXp6bK9aVTsGgdvKsfJyCfQFEpzDvmL3gw/U EdA/Qqqd0qF2FL/l3g5WS011kIQZ/9/XT6QRZFkM4WeLX5dfiCqahwcU5B2ifB81 k5ig5rnG2UPdzAasS4xShmk5+CYyrfdMJdgLvu82nCC/Q7FkaA/IYcwlVCaUtQDl O+bI3Gd7PGMZ3gWdNp7GWCJdu/qeimiNeTjYl2a1/4EgspTGqvn8Zl7Sb7TiU5YE m5HHc82/mtNkZ22bJAWlfUr8UYN54J4Kek7wxdSBgOSWjphPBJDyOi9SpZL4zoXV EbnAT3t1FpQgByzSFQrX =Li/p -----END PGP SIGNATURE----- --RcRQV5J7H1ubFAKBErWNEcVQ6CVPUEEdg--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?5319913D.4040207>