Re: booting gbde-encrypted filesystem

2005-08-02 Thread Allan Fields
On Tue, Aug 02, 2005 at 10:30:22AM +0800, Ronnel P. Maglasang wrote: What I had in mind is perhaps I could find a way to enter the passphrase at the loader prompt, or configure the loader to get the passphrase from an external device or hardcoded the passphrase in the bootloader(really

Re: booting gbde-encrypted filesystem

2005-08-01 Thread Ronnel P. Maglasang
What I had in mind is perhaps I could find a way to enter the passphrase at the loader prompt, or configure the loader to get the passphrase from an external device or hardcoded the passphrase in the bootloader(really insecure). Alexander Leidinger wrote: Pawel Jakub Dawidek [EMAIL PROTECTED]

Kernel Source Divergence, Security (was: booting gbde-encrypted filesystem)

2005-07-31 Thread Allan Fields
On Fri, Jul 29, 2005 at 01:52:40PM +0200, Poul-Henning Kamp wrote: In message [EMAIL PROTECTED], Alexander Leidinger writes: Pawel Jakub Dawidek [EMAIL PROTECTED] wrote: This is not not possible with current GBDE. I've patches which allows this here:

Re: Kernel Source Divergence, Security (was: booting gbde-encrypted filesystem)

2005-07-31 Thread Poul-Henning Kamp
In message [EMAIL PROTECTED], Allan Fields writes: Yes, this is all very nice, but when is someone actually going to commit it? ;) I'm (as always) short of time, and GBDE is not the top priority for me for the time being. So I am more than happy to see people band together and improve gbde.

Re: Kernel Source Divergence, Security (was: booting gbde-encrypted filesystem)

2005-07-31 Thread Pawel Jakub Dawidek
On Sun, Jul 31, 2005 at 04:07:27PM +0200, Poul-Henning Kamp wrote: + In message [EMAIL PROTECTED], Allan Fields writes: + + Yes, this is all very nice, but when is someone actually going to + commit it? ;) + + I'm (as always) short of time, and GBDE is not the top priority + for me for the time

Re: Kernel Source Divergence, Security (was: booting gbde-encrypted filesystem)

2005-07-31 Thread Poul-Henning Kamp
In message [EMAIL PROTECTED], Pawel Jakub Dawidek writes: I'm starting to wonder if we couldn't create one storage-crypto-base and rewrite gbde, geli on top of it. Could be, it all depends how much you actually gain from generalizing common code. Best way to find out is to try :-) --

Re: booting gbde-encrypted filesystem

2005-07-29 Thread Pawel Jakub Dawidek
On Fri, Jul 29, 2005 at 01:18:10PM +0800, Ronnel P. Maglasang wrote: + Hello, + + I think there was already a thread on this. I just + want to raise the question again if anyone has successfully + booted an gdbe-encrypted filesystem (everything encrypted except + the bootloader). The passphrase

Re: booting gbde-encrypted filesystem

2005-07-29 Thread Jeremie Le Hen
This is not not possible with current GBDE. I've patches which allows this here: http://people.freebsd.org/~pjd/patches/gbde.patch This is great. Do you intend to commit it someday ? I know the GELI framework allows to use an encrypted root partition, but it would be interesting for

Re: booting gbde-encrypted filesystem

2005-07-29 Thread Pawel Jakub Dawidek
On Fri, Jul 29, 2005 at 09:56:18AM +0200, Jeremie Le Hen wrote: + This is not not possible with current GBDE. + I've patches which allows this here: + + http://people.freebsd.org/~pjd/patches/gbde.patch + + This is great. Do you intend to commit it someday ? I know the GELI + framework

Re: booting gbde-encrypted filesystem

2005-07-29 Thread Poul-Henning Kamp
In message [EMAIL PROTECTED], Alexander Leidinger writes: Pawel Jakub Dawidek [EMAIL PROTECTED] wrote: This is not not possible with current GBDE. I've patches which allows this here: http://people.freebsd.org/~pjd/patches/gbde.patch I fail to see how this allows an encryted root-FS, it

Re: booting gbde-encrypted filesystem

2005-07-29 Thread Alexander Leidinger
Pawel Jakub Dawidek [EMAIL PROTECTED] wrote: This is not not possible with current GBDE. I've patches which allows this here: http://people.freebsd.org/~pjd/patches/gbde.patch I fail to see how this allows an encryted root-FS, it doesn't add gbde support to boot0(ext) or to the

booting gbde-encrypted filesystem

2005-07-28 Thread Ronnel P. Maglasang
Hello, I think there was already a thread on this. I just want to raise the question again if anyone has successfully booted an gdbe-encrypted filesystem (everything encrypted except the bootloader). The passphrase is entered at the bootloader prompt or embedded in the bootloader. I appreciate