全盘加密安装OpenBSD
发表于 : 2012-11-06 15:43
http://www.openbsd.org/plus.html
All softraid(4) boot(8) support is now enabled by default, including support for booting from crypto volumes. Can be completely enabled or disabled at compile time.
2012年11月之后的current,已经支持从加密卷启动系统。
启动安装盘,在(I)nstall, (U)pgrade, (S)hell 提示那里, 选 Shell。
以下步骤仅供参考,请仔细阅读相关文章和手册之后再操作!
将实体磁盘初始化
# fdisk -iy sd0
Writing MBR at offset 0.
看看初始化后的磁盘信息
# fdisk sd0
# disklabel -E sd0
仅添加一个分区a,fstype项目输入大写RAID
If device nodes for the disk do not already exist in /dev, they must be created first:
# cd /dev
# ls sd* 看看情况,可能需要运行以下命令
# sh ./MAKEDEV sd1
创建加密虚拟盘
# bioctl -c C -l /dev/sd0a softraid0
enter passphrase
此时可能会显示发现新磁盘的信息
scsibus3 at softraid0: 1 targets
sd1 at scsibus3 targ 0 lun 0: <OPENBSD, SR CRYPTO, 004> SCSI2 0/direct fixed
sd1: 56899MB, 512 bytes/sec, 116529312 sec total
初始化加密虚拟盘,
# fdisk -iy sd1
# install
按正常方式安装操作系统。
---
man softraid
可以参考旧文章,这些文章的写作背景是“OpenBSD不支持从加密卷启动”
http://www.undeadly.org/cgi?action=arti ... 0530221728
http://brycv.com/blog/2012/encrypted-ro ... n-slc-ssd/
http://vinvin.dyndns.org/projects/softraid.html
All softraid(4) boot(8) support is now enabled by default, including support for booting from crypto volumes. Can be completely enabled or disabled at compile time.
2012年11月之后的current,已经支持从加密卷启动系统。
启动安装盘,在(I)nstall, (U)pgrade, (S)hell 提示那里, 选 Shell。
以下步骤仅供参考,请仔细阅读相关文章和手册之后再操作!
将实体磁盘初始化
# fdisk -iy sd0
Writing MBR at offset 0.
看看初始化后的磁盘信息
# fdisk sd0
# disklabel -E sd0
仅添加一个分区a,fstype项目输入大写RAID
If device nodes for the disk do not already exist in /dev, they must be created first:
# cd /dev
# ls sd* 看看情况,可能需要运行以下命令
# sh ./MAKEDEV sd1
创建加密虚拟盘
# bioctl -c C -l /dev/sd0a softraid0
enter passphrase
此时可能会显示发现新磁盘的信息
scsibus3 at softraid0: 1 targets
sd1 at scsibus3 targ 0 lun 0: <OPENBSD, SR CRYPTO, 004> SCSI2 0/direct fixed
sd1: 56899MB, 512 bytes/sec, 116529312 sec total
初始化加密虚拟盘,
# fdisk -iy sd1
# install
按正常方式安装操作系统。
---
man softraid
可以参考旧文章,这些文章的写作背景是“OpenBSD不支持从加密卷启动”
http://www.undeadly.org/cgi?action=arti ... 0530221728
http://brycv.com/blog/2012/encrypted-ro ... n-slc-ssd/
http://vinvin.dyndns.org/projects/softraid.html