custom full disk encryption with ZFS

[dweimer]

On 01/09/2015 8:27 am, Patryk Hanckowiak wrote:
> Hello.
> The installer seems to allow for an encrypted setup using the whole
> disk ... Or can you just use the installer to install FreeBSD on
> selected partitions of the disk with the ZFS encrypted setup? Is there
> a resource that shows how to create a custom full disk encryption with
> ZFS, something similar to LVM on LUKS in Linux?
> 
> Regards,
> Patryk Hanckowiak
> _______________________________________________
> freebsd-questions at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to 
> "freebsd-questions-unsubscribe at freebsd.org"

FreeBSD requires part of the boot to not be encrypted, this can be done 
using a USB thumb drive if you absolutely must have the full hard disk 
encrypted.

The USB drive or unencrypted part the hard drive needs to have a copy of 
/boot portion of the installation this doesn't contain any user data so 
its fairly safe if someone sees it.

-- 
Thanks,
    Dean E. Weimer
    http://www.dweimer.net/