CVSROOT: /cvs
Module name: src
Changes by: s...@cvs.openbsd.org 2013/10/20 07:25:21
Modified files:
sys/arch/amd64/stand/boot: conf.c
sys/arch/amd64/stand/libsa: softraid.c
sys/arch/i386/stand/boot: conf.c
sys/arch/i386/stand/cdboot: conf.c
sys/arch/i386/stand/libsa: softraid.c
sys/arch/i386/stand/pxeboot: conf.c
Log message:
Add i386/amd64 boot(8) support for keydisk-based softraid crypto volumes.
So far, only passphrase-based crypto volumes were bootable. Full disk
encryption with keydisks required a non-crypto partition to load the kernel.
The bootloader now scans all BIOS-visible disks for RAID partitions and
automatically associates keydisk partitions with their crypto volume.
Attempting to boot from a volume without its keydisk currently results
in a passphrase prompt (this might be changed in the future).
There is no need to re-create existing volumes. Moving the root partition
onto the crypto disk and running installboot(8) is all that's needed.
help & ok jsing
