2026-10-11 14:38 UTC
@indigoparadox@mastodon.social I used a very handy guide using GPT, but it should be more or less the same for MBR. https://www.dwarmstrong.org/netbsd-encrypt-install/
This also should be totally possible through the TUI installer with its GCD configuration.
However, it is not a full disk encryption; the rootfs must be unencrypted, afaik
tl;dr the encrypted partition should be of type cgd, in which other partitions can be created
Replies (1)
-
@indigoparadox@mastodon.social 2026-10-11 14:49
@nina_kali_nina@tech.lgbt That was the guide I started with, but it requires multiple GPT partitions and does the disklabel inside of cgd. Also, an unencrypted root just isn't acceptable in 2026. With FreeBSD I had to cheese it a bit, with a script that pivots to an encrypted root, and that might be feasible with NetBSD, but... the result is so far from what it's setup to do outside of the box that it might conflict if they ever do catch up. I'll check in in another decade. 😔