Asking for review of an article about CGD installlations

vsis

I have no idea how to have full-disk-encryption in UEFI systems with NetBSD. I've read a tutorial in this forum about that for MBR systems. But I haven't be able to reproduce it for UEFI.

What I'm doing now, in my laptop, is to have a plain-text root file-system, and encrypted /home, /usr, /var and swap. And I wrote an article about that. I'd be happy if someone have observations/corrections for that article.

Also, if someone could guide me to root file-system in CGD and LVM for UEFI systems I'd appreciate that a lot.

Jay

vsis you might also like this https://www.unitedbsd.com/d/771-netbsd-desktop-part-1-manual-netbsd-installation-on-gptuefi

rvp

vsis I have no idea how to have full-disk-encryption in UEFI systems with NetBSD. I've read a tutorial in this forum about that for MBR systems. But I haven't be able to reproduce it for UEFI.

That post has UEFI partitions throughout (except for the cgd) but geared for an old-fashioned BIOS boot. Should be fairly easy to create another EFI ESP partition to hold the /usr/mdec/*.EFI files and get the system to boot using those (along with some slight fiddling here and there...).

vsis

rvp While I tried something like that, and failed. I didn't try hard enough to be fair.

I got some EFI errors that I didn't look for.

So, yeah, that post is very close to what I want.