GELI - disk encryption GEOM class committed.

[Niki Denev]

On Friday 29 July 2005 16:28, Eric Anderson wrote:
> Niki Denev wrote:
> > Pawel Jakub Dawidek wrote:
> >  > +> Booting from Encrypted Root:
> >>
> >> +>   GELI - Works. How'd one load the kernel from an encrypted root
> >> though?
> >>
> >> Kernel has to be loaded from a USB Pen-Drive or a CD-ROM.
> >> You need to put /boot/ directory in there. GELI will ask for the
> >> passphrase
> >> before root file system is mounted. After that you can remove
> >> Pen-Drive/CD-ROM.
> >
> > Wouldn't it work if /boot is small separate unencrypted partition?
> > ( Well, there is the possibility that someone replaces your kernel
> > with one with keylogger to catch your password next time you type it :))
> > I use this method for bootable RAID1+0 with GEOM's stripe and mirror,
> > and it seems to work great.
>
> Maybe you could write up a quick howto on your setup, and post it/submit
> it to the doc@ team.
>
> Eric

I've thought about that, and will do it when time permits.
Right now i have as present for sysadminday
8 production servers with failed disks ... :(

--niki