Some time ago, I’ve given my laptop yet another FreeBSD reinstall – mostly beause I wanted to encrypt its contents (hey, you never know!). It turns out the best way to do this is to use GEOM_ELI. Of course, I can’t quite live without ZFS, so the idea was that I have a minimal /boot paritition and everything else lives on ZFS, which is encrypted using ELI.

Step-by-step instructions on (14/11/2008)