GELI - disk encryption GEOM class committed.

[Eric Anderson]

Niki Denev wrote:
> Pawel Jakub Dawidek wrote:
>  > +> Booting from Encrypted Root:
> 
>> +>   GELI - Works. How'd one load the kernel from an encrypted root 
>> though?
>>
>> Kernel has to be loaded from a USB Pen-Drive or a CD-ROM.
>> You need to put /boot/ directory in there. GELI will ask for the 
>> passphrase
>> before root file system is mounted. After that you can remove
>> Pen-Drive/CD-ROM.
>>
> 
> Wouldn't it work if /boot is small separate unencrypted partition?
> ( Well, there is the possibility that someone replaces your kernel
> with one with keylogger to catch your password next time you type it :))
> I use this method for bootable RAID1+0 with GEOM's stripe and mirror,
> and it seems to work great.

Maybe you could write up a quick howto on your setup, and post it/submit 
it to the doc@ team.

Eric



-- 
------------------------------------------------------------------------
Eric Anderson        Sr. Systems Administrator        Centaur Technology
Anything that works is better than anything that doesn't.
------------------------------------------------------------------------