Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 7 Mar 2014 10:28:48 -0800
From:      <dteske@FreeBSD.org>
To:        "'David Christensen'" <dpchrist@holgerdanske.com>, <freebsd-questions@freebsd.org>
Subject:   RE: FreeBSD 10 RELEASE amd64 how to install on single drive with encrypted ZFS root?
Message-ID:  <1a9d01cf3a33$15f032c0$41d09840$@FreeBSD.org>
In-Reply-To: <531A072A.8020809@holgerdanske.com>
References:  <53197EF6.4070902@holgerdanske.com> <5319913D.4040207@infracaninophile.co.uk> <531A072A.8020809@holgerdanske.com>

next in thread | previous in thread | raw e-mail | index | archive | help


> -----Original Message-----
> From: David Christensen [mailto:dpchrist@holgerdanske.com]
> Sent: Friday, March 7, 2014 9:52 AM
> To: freebsd-questions@freebsd.org
> Subject: Re: FreeBSD 10 RELEASE amd64 how to install on single drive with
> encrypted ZFS root?
> 
> On 03/07/2014 01:28 AM, Matthew Seaman wrote:
> > The 10.0 installer does ZFS natively, which is why you can't find any
> > instructions on how to set up ZFS manually on that platform.
> 
> Thanks for the reply.  :-)
> 
> 
> I tried that, but ended up with a system that would not boot -- my BIOS
didn't
> think the hard drive was bootable.
> 
[Devin Teske] 

Try changing GTP to MBR.

> 
> > However, to set up an encrypted root, you'll need to set up the
> > encrypted partition with geli and then set up your ZFSes on top of that.
> > Which is basically a manual job.
> > You can follow the instructions here:
> >     https://wiki.freebsd.org/RootOnZFS/GPTZFSBoot/9.0-RELEASE
> > except that after item (7) -- gnop -- you'll need to insert creating
> > your encrypted partitions and then modify the subsequent bits to refer
> > to the /dev/gpt/foo.eli devices you create.  As far as ZFS goes, the
> > sequence is essentially the same for 9.0 as for 10.0 except that
> > wherever it says to use lzjb, you should substitute lz4.
> 
> I don't have the knowledge or skills to accomplish the goals you've
listed.
> 
> 
> I'm looking for a console session I can study and type in, or a
> walk-through for the installer.
> 
[Devin Teske] 

What you really want to walk through is /var/log/bsdinstall_log after you've
performed a successful install with disk encryption enabled.

The installer logs everything that it's doing to /tmp/bsdinstall_log and
then
copies that to /var/log right before rebooting.
-- 
Devin


_____________
The information contained in this message is proprietary and/or confidential. If you are not the intended recipient, please: (i) delete the message and all copies; (ii) do not disclose, distribute or use the message in any manner; and (iii) notify the sender immediately. In addition, please be aware that any message addressed to our domain is subject to archiving and review by persons other than the intended recipient. Thank you.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?1a9d01cf3a33$15f032c0$41d09840$>