On 10/28/26 12:46 AM, Ellie wrote:
I just thought I'd document the sort of things here I would have
expected to find in the official NetBSD disk encryption guide:
https://www.netbsd.org/docs/guide/en/chap-cgd.html
[...]
Perhaps this will inspire somebody who knows how to fill in the gaps:
It was brought to my attention NetBSD 11 likely doesn't support the
system partition / being encrypted and using ZFS, at all.
Then I think the logical next best setup is, for both the guide and
perhaps a hypothetical future "install it for me please" option:
1. A GPT partition layout, and
2. /etc/cgd boot partition unencrypted, and
3. optionally an EFI partition for modern GPT UEFI boot setup, and
4. / system disk encrypted using UFS2, and
5. /home encrypted using ZFS (or in the future perhaps GeFS), and
[...]
I was linked this guide now:
https://indigoparadox.zone/tutorials/netbsd11c.html I tried it, hoping
to add an encrypted ZFS /home later once the base install works.
Sadly I can't get it to boot.
Perhaps my UEFI doesn't like legacy boot, but even with legacy boot mode
enabled it doesn't find it (complains no boot disk can be found). I'm a
bit at a loss!
If somebody knows a guide that works with NetBSD 11, ideally with GPT
EFI non-legacy boot, perhaps written for a NetBSD noob like me, I'm
desperate to find one!
Regards,
Ellie
