I've seen documentation for this somewhere. Have you seen this?https://www.netbsd.org/docs/guide/en/chap-cgd.html
On Mon, Apr 29, 2024, 8:26 PM Arvind <arv...@protonmail.id> wrote: > Yes. The man pages are out of date and unfortunately not helpful ( > https://wiki.netbsd.org/security/cgdroot/). See the top of the page. > > -Arvind > > > -------- Original Message -------- > On 4/29/24 7:52 PM, Lucifer wrote: > > theres a handbook online > have you checked there? > > On Mon, Apr 29, 2024, 4:05 PM Arvind <arv...@protonmail.id> wrote: > >> I am not interested in using Linux. I would like to setup Root Filesystem >> Encryption (unlock using passphrase) during boot. The man pages are out of >> date and unfortunately not helpful ( >> https://wiki.netbsd.org/security/cgdroot/). >> >> -Arvind >> >> >> >> >> On Apr 29, 2024, at 3:57 PM, Lucifer <renegade6969...@gmail.com> wrote: >> >> i dont fully understand >> >> On Mon, Apr 29, 2024, 3:12 PM Arvind <arv...@protonmail.id> wrote: >> >>> Sure, was just using the linux remote unlock as an example of what we’re >>> trying to get configured (after encrypting the root partition with >>> passphrase unlock). Any help from the group would be much appreciated. >>> >>> -Arvind >>> >>> >>> >>> >>> On Apr 29, 2024, at 2:57 PM, Lucifer <renegade6969...@gmail.com> wrote: >>> >>> i recommend against third party for mission critical. >>> >>> stay away from Linux. >>> >>> On Mon, Apr 29, 2024 at 2:55 PM Arvind <arv...@protonmail.id> wrote: >>> >>>> The backup files themselves will be encrypted. >>>> >>>> -Arvind >>>> >>>> >>>> >>>> >>>> On Apr 29, 2024, at 2:53 PM, Lucifer <renegade6969...@gmail.com> wrote: >>>> >>>> i find it interesting that you do not encrypt the backup... >>>> >>>> On Mon, Apr 29, 2024 at 10:10 AM Arvind <arv...@protonmail.id> wrote: >>>> >>>>> Hi friends, hoping someone might be able to help or point in the right >>>>> direction. We have a NetBSD 10 machine that requires Root Filesystem >>>>> Encryption (unlock using passphrase) during boot. The man pages are out of >>>>> date and unfortunately not helpful ( >>>>> https://wiki.netbsd.org/security/cgdroot/). >>>>> >>>>> We are using UEFI/GPT. We have a boot partition but also another user >>>>> defined partition (/backups) that is not encrypted. >>>>> >>>>> Once configured, would also like to add remote ssh unlock using >>>>> something like Dropbear. This is the equivalent on the Linux platform(s): >>>>> https://www.cyberciti.biz/security/how-to-unlock-luks-using-dropbear-ssh-keys-remotely-in-linux >>>>> >>>>> >>>>> -Arvind >>>>> >>>>> >>>>> >>>>> >>>>> >>>> >>>> -- >>>> renegade6969...@gmail.com >>>> https://www.facebook.com/profile.php?id=61556020800880 >>>> https://twitter.com/Rose29283220654 >>>> >>>> >>>> >>> >>> -- >>> renegade6969...@gmail.com >>> https://www.facebook.com/profile.php?id=61556020800880 >>> https://twitter.com/Rose29283220654 >>> >>> >>> >>
