From owner-freebsd-hackers@FreeBSD.ORG  Fri Jul 29 06:54:00 2005
Return-Path: <owner-freebsd-hackers@FreeBSD.ORG>
X-Original-To: freebsd-hackers@freebsd.org
Delivered-To: freebsd-hackers@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id ADF2A16A420;
	Fri, 29 Jul 2005 06:54:00 +0000 (GMT)
	(envelope-from pjd@darkness.comp.waw.pl)
Received: from darkness.comp.waw.pl (darkness.comp.waw.pl [195.117.238.136])
	by mx1.FreeBSD.org (Postfix) with ESMTP id C940F43D46;
	Fri, 29 Jul 2005 06:53:59 +0000 (GMT)
	(envelope-from pjd@darkness.comp.waw.pl)
Received: by darkness.comp.waw.pl (Postfix, from userid 1009)
	id D91B4ACAF1; Fri, 29 Jul 2005 08:53:57 +0200 (CEST)
Date: Fri, 29 Jul 2005 08:53:57 +0200
From: Pawel Jakub Dawidek <pjd@FreeBSD.org>
To: "Ronnel P. Maglasang" <rmaglasang@infoweapons.com>
Message-ID: <20050729065357.GA617@darkness.comp.waw.pl>
References: <42E9BC12.2050401@infoweapons.com>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature"; boundary="vtzGhvizbBRQ85DL"
Content-Disposition: inline
In-Reply-To: <42E9BC12.2050401@infoweapons.com>
User-Agent: Mutt/1.4.2i
X-PGP-Key-URL: http://people.freebsd.org/~pjd/pjd.asc
X-OS: FreeBSD 5.2.1-RC2 i386
Cc: freebsd-security <freebsd-security@freebsd.org>,
	freebsd-hackers <freebsd-hackers@freebsd.org>,
	freebsd-geom <freebsd-geom@freebsd.org>
Subject: Re: booting gbde-encrypted filesystem
X-BeenThere: freebsd-hackers@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Technical Discussions relating to FreeBSD
	<freebsd-hackers.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-hackers>, 
	<mailto:freebsd-hackers-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-hackers>
List-Post: <mailto:freebsd-hackers@freebsd.org>
List-Help: <mailto:freebsd-hackers-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-hackers>,
	<mailto:freebsd-hackers-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 29 Jul 2005 06:54:00 -0000


--vtzGhvizbBRQ85DL
Content-Type: text/plain; charset=iso-8859-2
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Fri, Jul 29, 2005 at 01:18:10PM +0800, Ronnel P. Maglasang wrote:
+> Hello,
+>=20
+> I think there was already a thread on this. I just
+> want to raise the question again if anyone has successfully
+> booted an gdbe-encrypted filesystem (everything encrypted except
+> the bootloader). The passphrase is entered at the bootloader prompt
+> or embedded in the bootloader.

This is not not possible with current GBDE.
I've patches which allows this here:

	http://people.freebsd.org/~pjd/patches/gbde.patch

--=20
Pawel Jakub Dawidek                       http://www.wheel.pl
pjd@FreeBSD.org                           http://www.FreeBSD.org
FreeBSD committer                         Am I Evil? Yes, I Am!

--vtzGhvizbBRQ85DL
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (FreeBSD)

iD8DBQFC6dKFForvXbEpPzQRAi03AKCrskTtDsmZFMMECdVKRC4WvDUAlwCdFZok
TQ9ygQCYujsqduk/oF61RLs=
=DTQv
-----END PGP SIGNATURE-----

--vtzGhvizbBRQ85DL--