From owner-freebsd-questions@FreeBSD.ORG  Fri Dec 28 11:30:05 2012
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52])
 by hub.freebsd.org (Postfix) with ESMTP id D7B37233
 for <freebsd-questions@freebsd.org>; Fri, 28 Dec 2012 11:30:05 +0000 (UTC)
 (envelope-from mhca12@gmail.com)
Received: from mail-ob0-f180.google.com (mail-ob0-f180.google.com
 [209.85.214.180])
 by mx1.freebsd.org (Postfix) with ESMTP id 95F7A8FC0A
 for <freebsd-questions@freebsd.org>; Fri, 28 Dec 2012 11:30:05 +0000 (UTC)
Received: by mail-ob0-f180.google.com with SMTP id wd20so9365761obb.25
 for <freebsd-questions@freebsd.org>; Fri, 28 Dec 2012 03:29:59 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113;
 h=mime-version:in-reply-to:references:date:message-id:subject:from:to
 :cc:content-type;
 bh=QAoH3iJxU7VMiy1MV1n6SeJrYSzGK3UfZWCe15c869k=;
 b=warCgTW4ORaucXugsuKbnUi629vBcNbz90+9Pjjr4N2EgfXbjWpR5DwK/DQrbC4xPa
 gG96A7YFpOg1YPoArHoT15pwcYTUtisZirximFOk71vltxAIJRXPuSxEm/ABRKlepXGA
 h3QHbxfQHXkK7Yc6gsgjJliCyYqIG72OLuzItaYLm+Df4xbgsy1xROpRGHiP3WDnKQ3m
 om6obHYbvbcXfP+yAN/jw2D4aTGRRtoy1wF6eXZvJ9M+Em+9N8qjkF4CEjEhqxe88CHv
 yvUWiBBq8xd8PnPJYqQK8rWiTnzVi3/X4+DRdbRw5YLTWQMPjiE70u3TJx60DCcHw+ho
 Dp6A==
MIME-Version: 1.0
Received: by 10.60.172.71 with SMTP id ba7mr15606054oec.50.1356694199260; Fri,
 28 Dec 2012 03:29:59 -0800 (PST)
Received: by 10.76.34.73 with HTTP; Fri, 28 Dec 2012 03:29:59 -0800 (PST)
In-Reply-To: <9295e7e163201a1fa49bf67543c7304d.squirrel@webmail.319.ch>
References: <mailman.55.1356609602.77238.freebsd-questions@freebsd.org>
 <9295e7e163201a1fa49bf67543c7304d.squirrel@webmail.319.ch>
Date: Fri, 28 Dec 2012 12:29:59 +0100
Message-ID: <CAHUOmanb=xJx7mptkxsC72tvej-Jr2LqWFwT=UEdXJoNHu-Eaw@mail.gmail.com>
Subject: Re: Full disk encryption without root partition
From: mhca12 <mhca12@gmail.com>
To: C-S <c-s@c-s.li>
Content-Type: text/plain; charset=ISO-8859-1
Cc: freebsd-questions@freebsd.org
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.14
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-questions>, 
 <mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
 <mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 28 Dec 2012 11:30:05 -0000

On Fri, Dec 28, 2012 at 9:33 AM, C-S <c-s@c-s.li> wrote:
>
>> Date: Wed, 26 Dec 2012 22:18:40 +0100
>> From: mhca12 <mhca12@gmail.com>
>> To: freebsd-questions@freebsd.org
>> Subject: Re: Full disk encryption without root partition
>> Message-ID:
>>       <CAHUOmant1m446mVY85R7EpBd2Pw14gdL03fpmVPMKsrr_epfPw@mail.gmail.com>
>> Content-Type: text/plain; charset=ISO-8859-1
>>
>> On Wed, Dec 26, 2012 at 10:17 PM, mhca12 <mhca12@gmail.com> wrote:
>>> Are there any plans or is there already support for full
>>> disk encryption without the need for a root partition?
>>
>> I am sorry, I certainly meant to write "boot partition".
>>
>
>
> Yes, it is possible to use GELI for example to do a full disk encryption
> and have the boot partition on a USB stick.

That would still keep the boot partition as unencrypted, wouldn't it?