From owner-freebsd-hackers@FreeBSD.ORG  Wed Feb 20 07:48:26 2013
Return-Path: <owner-freebsd-hackers@FreeBSD.ORG>
Delivered-To: hackers@freebsd.org
Received: from mx1.freebsd.org (mx1.FreeBSD.org [8.8.178.115])
 by hub.freebsd.org (Postfix) with ESMTP id E950764D
 for <hackers@freebsd.org>; Wed, 20 Feb 2013 07:48:26 +0000 (UTC)
 (envelope-from yerenkow@gmail.com)
Received: from mail-wg0-f50.google.com (mail-wg0-f50.google.com [74.125.82.50])
 by mx1.freebsd.org (Postfix) with ESMTP id 716E08A4
 for <hackers@freebsd.org>; Wed, 20 Feb 2013 07:48:26 +0000 (UTC)
Received: by mail-wg0-f50.google.com with SMTP id es5so6282556wgb.5
 for <hackers@freebsd.org>; Tue, 19 Feb 2013 23:48:25 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113;
 h=mime-version:x-received:in-reply-to:references:date:message-id
 :subject:from:to:cc:content-type;
 bh=fHUgcWPr0Moz9nGM/yvTQ5rlajb/7gQ6teRgdr0K4Ew=;
 b=Qi60gwHS91OSZpVLoGvBQiCajzm9lBJAaF/tM6JljSeMQPJs2WTPjrMJzhtTDSlOtZ
 OJYijTOaeCKSSR0qIskffagqFVL5J4mqnqWOkqN0APak02qlFBORXgpYJTiZuVP77Rnu
 ePrvXY2NuVPIvj3TKEcFV93G4q2HjjNMIWK99xK0l4VSD7ca3nVj61foAPT35hfpBHH/
 iBzrfcxLd9cVHiwBvAblinuWdeyFHPBD07m5TDefNvUv1PGv1gpVazq3br2R9jUamnDO
 VG0l71tTJZRycupfutKB4VNBEwvWhfgJYi4yASE56xn6jZnbgi1mYaaiZ7KZvpOK4OcD
 3pPw==
MIME-Version: 1.0
X-Received: by 10.194.172.197 with SMTP id be5mr31501281wjc.20.1361346505406; 
 Tue, 19 Feb 2013 23:48:25 -0800 (PST)
Received: by 10.194.85.116 with HTTP; Tue, 19 Feb 2013 23:48:25 -0800 (PST)
Received: by 10.194.85.116 with HTTP; Tue, 19 Feb 2013 23:48:25 -0800 (PST)
In-Reply-To: <20130220073930.GA59518@psconsult.nl>
References: <20130220065810.GA25027@psconsult.nl>
 <CAPJF9wns_sjpnNmk9bjnrUfqMKZ9jseRNB2oQdZsXFLkhgNVZw@mail.gmail.com>
 <20130220073930.GA59518@psconsult.nl>
Date: Wed, 20 Feb 2013 09:48:25 +0200
Message-ID: <CAPJF9w=4ycYZ4wq9nXROePF-YnLMO+a3x1mbLnJhU4hSnnezxA@mail.gmail.com>
Subject: Re: Chicken and egg, encrypted root FS on remote server
From: Alexander Yerenkow <yerenkow@gmail.com>
To: Paul Schenkeveld <freebsd@psconsult.nl>
Content-Type: text/plain; charset=ISO-8859-1
X-Content-Filtered-By: Mailman/MimeDel 2.1.14
Cc: FreeBSD Hackers <hackers@freebsd.org>
X-BeenThere: freebsd-hackers@freebsd.org
X-Mailman-Version: 2.1.14
Precedence: list
List-Id: Technical Discussions relating to FreeBSD
 <freebsd-hackers.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-hackers>, 
 <mailto:freebsd-hackers-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-hackers>
List-Post: <mailto:freebsd-hackers@freebsd.org>
List-Help: <mailto:freebsd-hackers-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-hackers>,
 <mailto:freebsd-hackers-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 20 Feb 2013 07:48:27 -0000

As you may notice, I go way readonly freebsd, the upgrade is simply replace
disk A with disk B, and all stays working. In my home setup there's no Vm,
but SD card with base system, also in RO mode. This setup succesfully
survived two upgrade-by-replace. And you always can keep old Os as backup.

Regards, Alexander Yerenkow