Dear openbsd users,

I wanted to test this new feature of openbsd 5.3

"softraid(4) RAID1 and crypto volumes are now bootable on i386 and amd64 (full 
disk encryption)"

In fact I wanted to have both RAID and Crypto simultaneously. A bootable 
encrypted RAID1 partition.

Here's the steps I followed

Boot from pxe the am64 openbsd 5.3 image

1. drop a shell
2. cd /dev then sh MAKEDEV sd1 (I use sata disks)
3. fdisk -iy sd0
4. fdisk -iy sd1
5. disklabel -E sd0
5.1 a a, create a 2GB swap partition
5.2 a b, create a RAID partition with all the remaining space
5.3 write and quit
6. do the same for sd1
7. create RAID1 device with previously created sd0b and sd1b partitions
7.1 bioctl -c 1 -l /dev/sd0b,/dev/sd1b softraid0
7.3 cd /dev, sh MAKEDEV sd2
8. zeroes the first sectors of the partition
8.1 dd if=/dev/zero of=/dev/rsd2c bs=1m count=1
9. create a partition on the RAID device
9.1 disklabel -E sd2
9.2 a a, type RAID on the whole disk
9.3 write and quit
10. create the encrypted volume on top of the RAID device
10.1 bioctl -c C -r 8190 -l /dev/sd2a softraid0
10.2 type a passphrase two time
10.3 cd /dev, sh MAKEDEV sd3
11. return to the installer, typing "install"
12. install the OS with the normal wizard on the encrypted partition sd3

The setup will continue and crash at the bootloader setup part, just before the 
end of the setup with the error: Installboot: invalid boot record signature 
(0x0000) @ sector 0

As a workaround what I did is create two RAID partition, one without crypting 
the root filesystem and one crypted with few mount points on it (home, var, 
tmp, ...).

Do you think this kind of setup is possible ? Is it an installer problem or did 
I miss something ?

Thanks for your help

Romain

Reply via email to