View Single Post
  #2   (View Single Post)  
Old 28th October 2010
ocicat ocicat is offline
Administrator
 
Join Date: Apr 2008
Posts: 3,319
Default

Quote:
Originally Posted by Noobification View Post
how can I (without blindly following tutorials and using BSD-based tools that I have no idea how it works/where to start) - put the OpenBSD install on a usb, encrypt the filesystem and make it bootable?
You won't find tutorials, & even if you did, I wouldn't trust them. The OpenBSD community does not place trust in howto's found in the wild. If you do blind Google searches, what you will find are documents either out of date, incorrect, or the author only explored a topic far enough to get past their problem; it may or may not address your problem. The best thing you can do is maintain skepticism, & correlate any information found back to the source code manpages, In fact, the order of what you can trust can be rank-ordered as follows (most trusted to least trusted):
  1. The source code itself.
  2. The manpages.
  3. Documentation posted on project's Website. This includes the official FAQ which is the single best document on the current state of OpenBSD.
  4. Pronouncements by the project developers on the project's mailing lists.
  5. Information found at third-party sites (including this one...).
  6. Cold Google searches.
Having said that, here are some vetted links you should consider.

I don't think the following encrypts, but here it is nonetheless:

http://liveusb-openbsd.sourceforge.net/

It is not difficult to create an installable USB drive having done homework. Understanding how OpenBSD boots on i386 can be learned by studying the biosboot(8), boot(8), boot_i386(8), & installboot(8) manpages.

Further help on constructing an installable USB boot drive can be found at the following:

http://azbsd.org/~marco/openbsd/flashkeyinstaller/

Encryption of an entire OpenBSD system is not possible given that the kernel cannot be encrypted, but you may find the following useful:

http://marc.info/?l=openbsd-misc&m=125694732231127&w=2

Of course, jggimi's live CD's can be found here:

http://jggimi.homeip.net/

The real work is now up to you.
Reply With Quote