Re: Creating a bootable CD with CD Loader

2006-09-23 Thread Chris

Hi Gary, thanks for the reply.

How do you mean it doesn't boot fully? Creating a bootable cd is in the

handbook.



My first test cd didn't boot because it couldn't find a root filesystem to
mount i think. I sorted that by just borrowing my fstab from my running
system and put in on the cd in /etc/fstab.

# mkisofs -R -no-emul-boot -b boot/cdboot -o /tmp/bootable.iso /tmp/cdfiles


Your tmp/cdfiles should contain a boot folder matching that on the
encrypted system. You'll only need the kernel and modules that you load
though and gzipping them will speed up the slow boot. You'll also need
to modify your loader.conf:



Thanks for that, i was wondering where that cdboot binary was, it seems it's
in the /boot directory. Dunno how i missed that :)
Unfortunately my BIOS wont boot from a pendrive, so ill just run it all off
a CD. But making the bootable CD ended up being harder than it should have.

Chris
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Creating a bootable CD with CD Loader

2006-09-22 Thread Chris

Hi, I'm looking to create my own custom boot CD that will be used to
bootstrap fully encrypted system using GEOM ELI. All the CD needs to do is
load a kernel to initialize the encrypted root partition on the HDD, and
read a key file to decrypt it.

Ive looked at some tutorials for creating your own boot CD's but often they
seem overly complicated or old. It seems to me the easiest way to do this is
either: To use one of the FreeBSD floppy images and get it to boot from CD
correctly. Or to use the CD Loader that the the distributed FreeBSD CD's
use.

I ripped the CD Loader image out of one of the FreeBSD 6.1 CD's, and it
seems to work as wanted. It loads the kernel from the system I'm running at
the moment, I just put my current /boot directory on the CD (although it
doesn't fully boot, i guess it just needs some config changes).

But I'm a little wary of using something that i don't really understand.
Rather than just ripping the CD Loader out of an already made ISO i would be
interested in knowing how it is created. So i could create a bootable CD
without needing to borrow parts from a distributed one, and get a better
idea of how it works.

Any help appreciated.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Creating a bootable CD with CD Loader

2006-09-22 Thread Gary Newcombe

On Fri, 22 Sep 2006 17:45:36 +0100
Chris [EMAIL PROTECTED] wrote:

 Hi, I'm looking to create my own custom boot CD that will be used to
 bootstrap fully encrypted system using GEOM ELI. All the CD needs to do is
 load a kernel to initialize the encrypted root partition on the HDD, and
 read a key file to decrypt it.

Hi Chris,
I recently did this for two laptops, one booting from usb and the other
from cd with both of them getting the key from a usb drive. If your key
is on the cd, then it's no problem. A bit harder if you have to boot
from cd and then mount a usb drive to read the key.

 I ripped the CD Loader image out of one of the FreeBSD 6.1 CD's, and it
 seems to work as wanted. It loads the kernel from the system I'm running at
 the moment, I just put my current /boot directory on the CD (although it
 doesn't fully boot, i guess it just needs some config changes).

How do you mean it doesn't boot fully? Creating a bootable cd is in the
handbook.

# mkisofs -R -no-emul-boot -b boot/cdboot -o /tmp/bootable.iso /tmp/cdfiles

Your tmp/cdfiles should contain a boot folder matching that on the
encrypted system. You'll only need the kernel and modules that you load
though and gzipping them will speed up the slow boot. You'll also need
to modify your loader.conf:

geom_eli_load=YES
kern.geom.eli.debug=0
kern.geom.eli.visible_passphrase=0

geli_ad0_keyfile0_load=YES
geli_ad0_keyfile0_type=ad0:geli_keyfile0
geli_ad0_keyfile0_name=/ad0.key

You'll also need an /etc/fstab in /tmp/cdfiles with the root partition: eg 
/dev/ad0.elia   /   ufs rw  1   1

The other thing I recall is that bug kbdmux bug in 6.1. Shows up on
some but not all from what I can remember. If you are using a password
as well as a key, and the keyboard seems to have frozen when you try to
enter the password, try this in device.hints:

hint.kbdmux.0.disabled=1

Cheers
Gary
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Creating a bootable CD

2003-07-13 Thread Lee Harr
I have been reading
http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/creating-cds.html
and
the info there is easy to understand, but I am confused on how to go about 
do a
buildworld and installing it to the path I am going to use for the creating 
the
ISO from?

You may also want to look at:

/usr/ports/sysutils/freesbie

_
Protect your PC - get McAfee.com VirusScan Online 
http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=3963

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Creating a bootable CD

2003-07-12 Thread Vulpes Velox
I have been reading
http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/creating-cds.html and
the info there is easy to understand, but I am confused on how to go about do a
buildworld and installing it to the path I am going to use for the creating the
ISO from?

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]