Re: minimally non-encrypted cgd setup?

[Matthias Kretschmer <kretschm%cs.uni-bonn.de@localhost>]

Hi,

you most probably want to use a CD or USB stick and the
pivot root stuff [1].

Other methods might include booting from a medium using
a ramdisk and then do an union mount of the real root on
top over it.

Other options include the sysctl init.root which has
some problems, as you require for some things shared /dev/pts
in the chroot'ed system you're really running and the real
root.  I tried that once but dropped it due to some reasons
I cannot recall.

When you do not want to patch your kernel using the
pivot-root patches, you might want to use a ramdisk for
the boot-process and not some file system on a CD or
USB-stick itself, as otherwise you are forced to keep
the CD/USB-stick inserted the whole running time.

--
    Matthias Kretschmer


[1] http://marabu.ch/pivot_root_eurobsdcon_2012/index.html