From owner-freebsd-questions@FreeBSD.ORG Thu Dec 9 06:11:58 2010 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id BDCF4106566C for ; Thu, 9 Dec 2010 06:11:58 +0000 (UTC) (envelope-from amvandemore@gmail.com) Received: from mail-fx0-f49.google.com (mail-fx0-f49.google.com [209.85.161.49]) by mx1.freebsd.org (Postfix) with ESMTP id 4FC1C8FC0C for ; Thu, 9 Dec 2010 06:11:58 +0000 (UTC) Received: by fxm19 with SMTP id 19so1852473fxm.36 for ; Wed, 08 Dec 2010 22:11:57 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:received:in-reply-to :references:date:message-id:subject:from:to:cc:content-type; bh=X8WDzMK2SPApujzmFVJfx2iJ3O417h3Wbf+mSVH3P6g=; b=hMvYU4YeCOQXUXJI365YIbsNRAa2o8DWhMvo1iynDrIK4VMItt7mgPYAX0hP7L+mkk mTptpcECHGDh9ENKfDHdxCWKJGy1x5N0HJIz2QZZKeleeHgSidZ3jua1CIo+qTAod/8+ OMnajMEaxHFf7awhtrXpUcxmRt/3aAijF3uFI= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; b=pVAXz4y2I9YNAgADGp9ItCxVqT1SDBDRwvTtEqLhII24b4IHzXwaeM1kZMWbGVUI5Z aRK9Tvli2S0bpVNB2XAUxzQhcOoICv/dKQf/e8ITNHpu5RzYSaVLb1aXoKGqDVaIFZmL k2DDXJQah1HGshTSD3IbBi2mC8UPtEmDZGL7c= MIME-Version: 1.0 Received: by 10.223.97.13 with SMTP id j13mr736607fan.146.1291875117427; Wed, 08 Dec 2010 22:11:57 -0800 (PST) Received: by 10.223.107.79 with HTTP; Wed, 8 Dec 2010 22:11:57 -0800 (PST) In-Reply-To: References: Date: Thu, 9 Dec 2010 00:11:57 -0600 Message-ID: From: Adam Vande More To: Andre Goree Content-Type: text/plain; charset=ISO-8859-1 X-Content-Filtered-By: Mailman/MimeDel 2.1.5 Cc: freebsd-questions@freebsd.org Subject: Re: Disk encryption on a headless box? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 Dec 2010 06:11:58 -0000 On Wed, Dec 8, 2010 at 10:52 PM, Andre Goree wrote: > I was looking at encrypting my data on a headless server I have, and found > a > good tutorial using ZFS+geli. Easy enough to setup, but one thing I just > realized is that I wouldn't be able to enter the passphrase on the server > since I keep it headless. > > I wonder if there is some type of encryption I can use that does not > require > entering a passphrase. For example, perhaps I can set it up in a way that > it'll automatically read from certain files on a thumb drive? > GELI has both man pages and handbook entries. Those should typically be your first line of questioning. -- Adam Vande More