Thanks for the info. It sounds like I should stick to Ubuntu for now, until IcedTea and disk encryption can become more mature. I realize Tomcat is in the ports but actually I'll be using JBoss and other things. I don't want to have to roll my own IcedTea or work on it.
I assume that IcedTea will be in ports sooner or later, and then I can reconsider going to OpenBSD.
Also for disk encryption... I know OpenBSD created OpenSSH and has done a lot of work in security, but if the disk is not encrypted, the easiest attack is to just grab the machine. The vnconfig stuff seems like a total kludge. It's unfortunate that both Linux and FreeBSD have better-integrated disk encryption than security-focused OpenBSD.
|