From owner-freebsd-questions@FreeBSD.ORG Fri Mar 7 17:51:46 2014 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 7E7B920A for ; Fri, 7 Mar 2014 17:51:46 +0000 (UTC) Received: from holgerdanske.com (unknown [IPv6:2001:470:0:19b::b869:801b]) by mx1.freebsd.org (Postfix) with SMTP id 56E98B79 for ; Fri, 7 Mar 2014 17:51:46 +0000 (UTC) Received: from ::ffff:184.23.143.12 ([184.23.143.12]) by holgerdanske.com for ; Fri, 7 Mar 2014 09:51:39 -0800 Message-ID: <531A072A.8020809@holgerdanske.com> Date: Fri, 07 Mar 2014 09:51:38 -0800 From: David Christensen User-Agent: Mozilla/5.0 (X11; Linux i686; rv:17.0) Gecko/20131104 Icedove/17.0.10 MIME-Version: 1.0 To: freebsd-questions@freebsd.org Subject: Re: FreeBSD 10 RELEASE amd64 how to install on single drive with encrypted ZFS root? References: <53197EF6.4070902@holgerdanske.com> <5319913D.4040207@infracaninophile.co.uk> In-Reply-To: <5319913D.4040207@infracaninophile.co.uk> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 07 Mar 2014 17:51:46 -0000 On 03/07/2014 01:28 AM, Matthew Seaman wrote: > The 10.0 installer does ZFS natively, which is why you can't find any > instructions on how to set up ZFS manually on that platform. Thanks for the reply. :-) I tried that, but ended up with a system that would not boot -- my BIOS didn't think the hard drive was bootable. > However, to set up an encrypted root, you'll need to set up the > encrypted partition with geli and then set up your ZFSes on top of that. > Which is basically a manual job. > You can follow the instructions here: > https://wiki.freebsd.org/RootOnZFS/GPTZFSBoot/9.0-RELEASE > except that after item (7) -- gnop -- you'll need to insert creating > your encrypted partitions and then modify the subsequent bits to refer > to the /dev/gpt/foo.eli devices you create. As far as ZFS goes, the > sequence is essentially the same for 9.0 as for 10.0 except that > wherever it says to use lzjb, you should substitute lz4. I don't have the knowledge or skills to accomplish the goals you've listed. I'm looking for a console session I can study and type in, or a walk-through for the installer. David