Matthias Schmidt
Follow

Question towards the users here. I have a system with two disks (sd0 and sd1).

I want to install the base system on sd0 and /home on sd1. And I want both disks to be softraid encrypted and enter my password only once at boot.

Is that possible?

· · Web · 2 · 2 · 2
tedu
@_xhr_ you can go mad scientist and make the sd1 drive use a key disk on the decrypted sd0 drive (which would probably be sd2 something at that point).
1
Matthias Schmidt

@tedu that could work!

0
Bryan Steele :flan_beard:

@_xhr_ I think so, @stsp did a BSDCan talk where he setup a machine for a friend to avoid any passwords.

"Building an accessible OpenBSD laptop (Enabling secure and functional computing for a person with severe disabilities)"

openbsd.org/papers/bsdcan2019-

youtube.com/watch?v=Ma_Y1hVmK8

1
Bryan Steele :flan_beard:

@_xhr_ @stsp IIRC he used an external USB keydisk.

1
Bryan Steele :flan_beard:

@_xhr_ @stsp Hmm, having multiple disks may be more complicated, be presumably possible?

1
Matthias Schmidt

@brynet @stsp yes, having both disks encrypted will get tricky. Maybe I can cook something up with @tedu idea

1
foldl

@_xhr_ @brynet @stsp @tedu I used a passfile (bioctl -p) on an encrypted fs for an external disk, but I don't remember how automatic it gets.

0
Sign in to participate in the conversation
Mastodon

The original server operated by the Mastodon gGmbH non-profit

Trending now

Resources

Developers

What is Mastodon?

mastodon.social

More…

v3.5.3 · Privacy policy