FreeBSD encrypted ZFS root in Vultr hosting

       185 words, 1 minutes

During some rclone thoughts and tries, I had to build a FreeBSD VM in the Cloud. Because I got a trial coupon from Vultr, I tried building a VM there. And because I come from OpenBSD, I looked a encrypting the FreeBSD root file-system. Here’s how I did it.

The process is really simple and straight forward. Vultr provides console access and ISO support to boot the system. This way, installing FreeBSD is done “comme à la maison”.

Create FreeBSD VM from ISO Library

Simple create the VM specifying the FreeBSD 11.1 RELEASE x86_64 from the ISO Library in the Server Type section.

Deploy New Server Select Server Location Select Server Type from ISO Library Use FreeBSD 11.1 RELEASE x86_64 Select Server Size Input Server Hostname and Label Have the VM boot

The VM will boot from the ISO. So connect to the virtual console and proceed to FreeBSD installation.

Begin the installation Even with a french keyboard, use the default keymap Specify the hostname Install whatever you like Select the Guided Root-on-ZFS partitioning mode Check the Encrypt Disks option Proceed to ZFS configuration Enter the passphrase that will protect the disk Don't mess twice Wait for encryption proces Wait for distribution fetch Wait for archive extraction Enter the root password Retype the root password Select the NIC Use IPv4, why not? Have DHCP configure it Also use IPv6 Configure name resolving Select your Time Zone region Select your Time Zone country Validate Date Validate Time Choose your favorite services Harden your system No users for this test Apply and exit No more thing Reboot

The server will reboot using the ISO. So you have to shut the VM down, unmount the ISO and reboot to gain access to your system.

Use the Vultr GUI to stop the VM Be sure! Remove the installation ISO Be sure once again! Now, turn the VM on Connect to the console and enter your passphrase² And watch FreeBSD boot encrypted

That’s all. Really easy. Far more than my current OVH instance - only officially supporting Linux.

If you’re looking for a Cloud provider, you may want to read this article: Which cloud hosting company to choose in 2017?

Related posts: