From owner-freebsd-questions@FreeBSD.ORG  Fri Mar  7 18:10:16 2014
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by hub.freebsd.org (Postfix) with ESMTPS id 1B9F7646
 for <freebsd-questions@freebsd.org>; Fri,  7 Mar 2014 18:10:16 +0000 (UTC)
Received: from holgerdanske.com (unknown [IPv6:2001:470:0:19b::b869:801b])
 by mx1.freebsd.org (Postfix) with SMTP id E8571CC1
 for <freebsd-questions@freebsd.org>; Fri,  7 Mar 2014 18:10:15 +0000 (UTC)
Received: from ::ffff:184.23.143.12 ([184.23.143.12]) by holgerdanske.com for
 <freebsd-questions@freebsd.org>; Fri, 7 Mar 2014 10:03:55 -0800
Message-ID: <531A0A0B.3010902@holgerdanske.com>
Date: Fri, 07 Mar 2014 10:03:55 -0800
From: David Christensen <dpchrist@holgerdanske.com>
User-Agent: Mozilla/5.0 (X11; Linux i686;
 rv:17.0) Gecko/20131104 Icedove/17.0.10
MIME-Version: 1.0
To: freebsd-questions@freebsd.org
Subject: Re: FreeBSD 10 RELEASE amd64 how to install on single drive with
 encrypted ZFS root?
References: <53197EF6.4070902@holgerdanske.com>
 <5319913D.4040207@infracaninophile.co.uk>
 <10334f5b74b05d9445d071bd08f73a24@dweimer.net>
In-Reply-To: <10334f5b74b05d9445d071bd08f73a24@dweimer.net>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-questions>, 
 <mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions/>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
 <mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 07 Mar 2014 18:10:16 -0000

On 03/07/2014 06:18 AM, dweimer wrote:
> Actually, when using the 10 installer after you select ZFS install, you
> get an options screen that allows you to configure it to use encryption.
> Full options configurable are as follows:
> Pool Type/Disks
> Poll Name
> Force 4k Sectors
> Encrypt Disks
> Partition Scheme
> Swap Size

Thanks for the reply.  :-)


I tried that, but ended up with a system that would not boot -- my BIOS 
didn't think the hard drive was bootable.


> I did a test install in vmware with the encryption options with no
> problems.  However I did end up choosing the manual method when I did my
> laptop setup for one simple reason.  I wanted to understand it fully in
> case I ran into a boot issue down the road and needed to go through a
> recovery process, and couldn't think of a better to know I understood it
> better than manually doing the setup.

Understanding how to build a bootable disk with FreeBSD and encrypted 
ZFS root by hand, and being able to make adjustments as desired, are 
worthy goals.  But for now, I just want to get a working system by the 
simplest means.  If I can use the installer to produce a bootable system 
with encrypted ZFS root, I'll be happy.


David