On 2012-11-11, Jiri B <ji...@devio.us> wrote: > On Sun, Nov 11, 2012 at 11:20:53AM +0000, hepta tor wrote: >> Thanks for the pointer. Do you know if there are any guidelines on how >> to configure FDE with what's implemented in -current? >> At >> http://geekyschmidt.com/2011/01/19/configuring-openbsd-softraid-fo-encryption >> there is a kind of mini tutorial on how to configure softraid for >> encryption - does anyone know if this is compatible with what's >> implemented in -current? >> -h > > 1. During installation jump to shell > 2. fdisk sd0 > 3. disklabel sd0, so sd0a is RAID, no sd0b as swap! > 4. cd /dev ; sh ./MAKEDEV sd1 ; cd / > 5. bioctl -c C -l /dev/sd0a softraid0 > 6. dd if=/dev/zero of=/dev/rsd1c bs=1m count=1 > 7. /install and use sd1 as your disk for usual installation > 8. couple of enters... > 9. change /mnt/etc/sysctl.conf to have 'vm.swapencrypt.enable=0' > 10. reboot > > Of course, no warranty. > > jirib > >
This is missing a very important step 11: Configure backups.