From owner-freebsd-questions@FreeBSD.ORG Fri Apr 20 11:49:45 2012 Return-Path: Delivered-To: freebsd-questions@FreeBSD.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 804C2106564A for ; Fri, 20 Apr 2012 11:49:45 +0000 (UTC) (envelope-from matthew@FreeBSD.org) Received: from smtp.infracaninophile.co.uk (smtp6.infracaninophile.co.uk [IPv6:2001:8b0:151:1:3cd3:cd67:fafa:3d78]) by mx1.freebsd.org (Postfix) with ESMTP id DF0B18FC08 for ; Fri, 20 Apr 2012 11:49:44 +0000 (UTC) Received: from seedling.black-earth.co.uk (seedling.black-earth.co.uk [IPv6:2001:8b0:151:1:fa1e:dfff:feda:c0bb]) (authenticated bits=0) by smtp.infracaninophile.co.uk (8.14.5/8.14.5) with ESMTP id q3KBnGMW013126 (version=TLSv1/SSLv3 cipher=DHE-RSA-CAMELLIA256-SHA bits=256 verify=NO); Fri, 20 Apr 2012 12:49:16 +0100 (BST) (envelope-from matthew@FreeBSD.org) X-DKIM: OpenDKIM Filter v2.5.2 smtp.infracaninophile.co.uk q3KBnGMW013126 Authentication-Results: smtp.infracaninophile.co.uk/q3KBnGMW013126; dkim=none (no signature); dkim-adsp=none Message-ID: <4F914D34.9070102@FreeBSD.org> Date: Fri, 20 Apr 2012 12:49:08 +0100 From: Matthew Seaman User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:11.0) Gecko/20120327 Thunderbird/11.0.1 MIME-Version: 1.0 To: Frank Lanitz References: <4F912A7D.2010106@frank.uvena.de> In-Reply-To: <4F912A7D.2010106@frank.uvena.de> X-Enigmail-Version: 1.4 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="------------enigFDD200949A7C4BECD62AB93A" X-Virus-Scanned: clamav-milter 0.97.4 at lucid-nonsense.infracaninophile.co.uk X-Virus-Status: Clean X-Spam-Status: No, score=-2.8 required=5.0 tests=ALL_TRUSTED,AWL,BAYES_00 autolearn=ham version=3.3.2 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on lucid-nonsense.infracaninophile.co.uk Cc: freebsd-questions@FreeBSD.org Subject: Re: Does 9.0-stable installer support full disc encryption X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 20 Apr 2012 11:49:45 -0000 This is an OpenPGP/MIME signed message (RFC 2440 and 3156) --------------enigFDD200949A7C4BECD62AB93A Content-Type: text/plain; charset=ISO-8859-15 Content-Transfer-Encoding: quoted-printable On 20/04/2012 10:21, Frank Lanitz wrote: > Wasn't able to find something about this: Do I have a chance to do > direct installation of a FreeBSD into a full encrpyted environment wher= e > not only /home, but also e.g. /usr is encrypted? Currently I've got suc= h > a setup running with Linux inside a crypto lvm and don't want to miss i= t > ;) However, currently looking what's the best way in getting a fresh > installed FreeBSD into this state. This isn't provided as one of the standard options in bsdinstall. However, you can set it up by booting the install media into Live CD mode, and doing the disk partitioning, encryption setup and so forth by hand. It's a bit tedious, but not really difficult, so long as you know how to work commands like gpart(8) and newfs(8). Cheers, Matthew --=20 Dr Matthew J Seaman MA, D.Phil. PGP: http://www.infracaninophile.co.uk/pgpkey --------------enigFDD200949A7C4BECD62AB93A Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.16 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk+RTTwACgkQ8Mjk52CukIy3MACggQ+f3L1ESfQQoKvHYsTG3J8F T+QAn2I29oZ0S2lTW8Zjlbq6NWsj0N+T =PeF2 -----END PGP SIGNATURE----- --------------enigFDD200949A7C4BECD62AB93A--