Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 09 Jan 2015 09:07:00 -0600
From:      dweimer <dweimer@dweimer.net>
To:        Patryk Hanckowiak <patryk.hanckowiak@e-safeguard.pl>
Cc:        freebsd-questions@freebsd.org, owner-freebsd-questions@freebsd.org
Subject:   Re: custom full disk encryption with ZFS
Message-ID:  <93bcfc622d17ac4759e07c43f7633809@dweimer.net>
In-Reply-To: <54AFE53C.5050508@e-safeguard.pl>
References:  <54AFE53C.5050508@e-safeguard.pl>

Next in thread | Previous in thread | Raw E-Mail | Index | Archive | Help
On 01/09/2015 8:27 am, Patryk Hanckowiak wrote:
> Hello.
> The installer seems to allow for an encrypted setup using the whole
> disk ... Or can you just use the installer to install FreeBSD on
> selected partitions of the disk with the ZFS encrypted setup? Is there
> a resource that shows how to create a custom full disk encryption with
> ZFS, something similar to LVM on LUKS in Linux?
> 
> Regards,
> Patryk Hanckowiak
> _______________________________________________
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to 
> "freebsd-questions-unsubscribe@freebsd.org"

FreeBSD requires part of the boot to not be encrypted, this can be done 
using a USB thumb drive if you absolutely must have the full hard disk 
encrypted.

The USB drive or unencrypted part the hard drive needs to have a copy of 
/boot portion of the installation this doesn't contain any user data so 
its fairly safe if someone sees it.

-- 
Thanks,
    Dean E. Weimer
    http://www.dweimer.net/



Want to link to this message? Use this URL: <http://docs.FreeBSD.org/cgi/mid.cgi?93bcfc622d17ac4759e07c43f7633809>