Re: NetBSD 10 RFE (ramdisk-cgdroot.fs in boot.cfg)

[Arvind <arvind%protonmail.id@localhost>]

The backup files themselves will be encrypted.

-Arvind

On Apr 29, 2024, at 2:53 PM, Lucifer <renegade6969666%gmail.com@localhost> wrote:

i find it interesting that you do not encrypt the backup...

On Mon, Apr 29, 2024 at 10:10 AM Arvind <arvind%protonmail.id@localhost> wrote:

Hi friends, hoping someone might be able to help or point in the right direction. We have a NetBSD 10 machine that requires Root Filesystem Encryption (unlock using passphrase) during boot. The man pages are out of date and unfortunately not helpful (https://wiki.netbsd.org/security/cgdroot/).

We are using UEFI/GPT. We have a boot partition but also another user defined partition (/backups) that is not encrypted.

Once configured, would also like to add remote ssh unlock using something like Dropbear. This is the equivalent on the Linux platform(s): https://www.cyberciti.biz/security/how-to-unlock-luks-using-dropbear-ssh-keys-remotely-in-linux 

-Arvind

--

renegade6969666%gmail.com@localhost

https://www.facebook.com/profile.php?id=61556020800880

https://twitter.com/Rose29283220654