Encrypted volume - how?
Norberto Meijome
freebsd at meijome.net
Sun Jan 22 16:12:00 PST 2006
Brooks Davis wrote:
> On Mon, Jan 23, 2006 at 09:39:52AM +1100, Norberto Meijome wrote:
>
>>Hi all,
>>I'm looking for a way to recreate the functionality of PGP Disk (under
>>Win32). Basically, create an encrypted file, which contains a filesystem
>>which can then be mounted in any mount point.
>>
>>I know I can use GELI in FreeBSD 6 - as I understand, it performs the
>>encryption at the partition level (the whole partition is encrypted).
>>I'd like to be able to simply unmount my 'secure volume', and be able to
>>back it up as a whole, or move it to another computer without having to
>>repartition the destination. I think GELI wouldn't be good for this.
>
>
> GELI or GBDE are probably what you're looking for, you just need to use
> mdconfig to create a vnode (file) backed disk image which you will
> encrypt and then create a file system on.
>
Thanks Brooks and everyone else who kindly pointed me in the right
direction :) I think I will use GELI (i like the 2 key system, and it
seems to be newer technology.)
cheers,
Beto
More information about the freebsd-security
mailing list