Perhaps I should point out that the only reason I suggested installing OpenBSD on the stick here was for recovery purposes, and for installing the boot loader.
The boot loader allows you to select the HDD you have at the start. So edit /etc/boot.conf *on the stick* as follows: boot sr0a:/bsd That should do the trick. On your softraid volume is your plain, normal OpenBSD install (similar to how it would be installed on a non-softraided partition). No trickery needed there, and no need to store the "b" partition somewhere else either, its fine on the softraid partition. On Mon, 06 Feb 2017 05:17:22 +0000 Tinker <ti...@openmailbox.org> wrote: > On 2017-02-06 11:40, bytevolc...@safe-mail.net wrote: > > There is still an elephant in the room. > > > > What if someone has physical access to your machine's USB ports, and > > decides to boot something nasty from it, which in turn modifies the > > firmware in your system (very likely to be possible due to stupid > > "consumer-grade" junk like UEFI or OS-flashable BIOS without > > hardware write protection). > > > > This infected firmware can then scan through any keys that you > > input, including the USB key disk, and the security of this > > 'softraid "firewall"' is now compromised. > > Right, booting off USB provides no protection against physical > attacks and nor against broken firmware.
