Yes. The man pages are out of date and unfortunately not helpful (https://wiki.netbsd.org/security/cgdroot/). See the top of the page.
-Arvind -------- Original Message -------- On 4/29/24 7:52 PM, Lucifer wrote: > theres a handbook online > have you checked there? > > On Mon, Apr 29, 2024, 4:05 PM Arvind <arv...@protonmail.id> wrote: > >> I am not interested in using Linux. I would like to setup Root Filesystem >> Encryption (unlock using passphrase) during boot. The man pages are out of >> date and unfortunately not helpful >> (https://wiki.netbsd.org/security/cgdroot/). >> >> -Arvind >> >>> On Apr 29, 2024, at 3:57 PM, Lucifer <renegade6969...@gmail.com> wrote: >>> >>> i dont fully understand >>> >>> On Mon, Apr 29, 2024, 3:12 PM Arvind <arv...@protonmail.id> wrote: >>> >>>> Sure, was just using the linux remote unlock as an example of what we’re >>>> trying to get configured (after encrypting the root partition with >>>> passphrase unlock). Any help from the group would be much appreciated. >>>> >>>> -Arvind >>>> >>>>> On Apr 29, 2024, at 2:57 PM, Lucifer <renegade6969...@gmail.com> wrote: >>>>> >>>>> i recommend against third party for mission critical. >>>>> >>>>> stay away from Linux. >>>>> >>>>> On Mon, Apr 29, 2024 at 2:55 PM Arvind <arv...@protonmail.id> wrote: >>>>> >>>>>> The backup files themselves will be encrypted. >>>>>> >>>>>> -Arvind >>>>>> >>>>>>> On Apr 29, 2024, at 2:53 PM, Lucifer <renegade6969...@gmail.com> wrote: >>>>>>> >>>>>>> i find it interesting that you do not encrypt the backup... >>>>>>> >>>>>>> On Mon, Apr 29, 2024 at 10:10 AM Arvind <arv...@protonmail.id> wrote: >>>>>>> >>>>>>>> Hi friends, hoping someone might be able to help or point in the right >>>>>>>> direction. We have a NetBSD 10 machine that requires Root Filesystem >>>>>>>> Encryption (unlock using passphrase) during boot. The man pages are >>>>>>>> out of date and unfortunately not helpful >>>>>>>> (https://wiki.netbsd.org/security/cgdroot/). >>>>>>>> >>>>>>>> We are using UEFI/GPT. We have a boot partition but also another user >>>>>>>> defined partition (/backups) that is not encrypted. >>>>>>>> >>>>>>>> Once configured, would also like to add remote ssh unlock using >>>>>>>> something like Dropbear. This is the equivalent on the Linux >>>>>>>> platform(s): >>>>>>>> https://www.cyberciti.biz/security/how-to-unlock-luks-using-dropbear-ssh-keys-remotely-in-linux >>>>>>>> >>>>>>>> -Arvind >>>>>>> >>>>>>> -- >>>>>>> >>>>>>> renegade6969...@gmail.com >>>>>>> https://www.facebook.com/profile.php?id=61556020800880 >>>>>>> >>>>>>> https://twitter.com/Rose29283220654 >>>>> >>>>> -- >>>>> >>>>> renegade6969...@gmail.com >>>>> https://www.facebook.com/profile.php?id=61556020800880 >>>>> >>>>> https://twitter.com/Rose29283220654
