Hacker News new | ask | show | jobs
by hamsterdam156 3700 days ago
> Hell, can someone tell me if it's dead simple to install OpenBSD with full disk encryption?

Dead simple. Full disk encryption on OpenBSD is a discipline of softraid(4). One bioctl command during the install will initialize a hard disk with true full disk encryption. When I say true, I mean, no separate un-encrypted /boot partition like LVM on LUKS requires.

3 comments

Sweet! I've been considering OpenBSD for an Internet facing server for a while, this is definitely something that makes it all that more tempting.
Thanks for answer as I was curious too.
Fwiw, in GRUB version 2 load the cryptodisk module to enable an encrypted /boot.