With crypto being deprecated (and possibly removed in future versions
- depending on dev direction) from vnconfig, would the following be
assumed one way of providing an encrypted container?

To create 200MB encrypted container:

sudo dd if=/dev/zero of=/var/encrypt/container.encrypt bs=1m count=200
sudo chmod 600 /var/encrypt/container.encrypt
sudo vnconfig vnd0 /var/encrypt/container.encrypt
printf "a\n\n\n\nRAID\nw\nq\n\n" | sudo disklabel -E vnd0
sudo bioctl -c C -l vnd0a softraid0
## Enter your secret passphrase here....
sudo dd if=/dev/zero of=/dev/rsd1c bs=1m count=1
printf "a\n\n\n\n4.2BSD\nw\nq\n\n" | sudo disklabel -E sd1
sudo newfs /dev/rsd1a
sudo mount /dev/sd1a /encrypt
##
sudo umount /encrypt
sudo bioctl -d sd1
sudo vnconfig -u vnd0


Then to re-use:

sudo vnconfig vnd0 /var/encrypt/container.encrypt
sudo bioctl -c C -l vnd0a softraid0
## Enter your secret passphrase here....
sudo mount /dev/sd1a /encrypt
##
sudo umount /encrypt
sudo bioctl -d sd1
sudo vnconfig -u vnd0

Reply via email to