The purpose of this website is to provide the user a personalized and encrypted installation of FreeBSD. The operation is simple, you just have to fill the forms properly with the desired installation preferences: hard drive, system size, number of partitions and their mount points. To complete the process you will automatically install fully encrypted BSD just executing it (100% For Dummies).You may use the web to automate fully encrypted FreeBSD installations with curl or wget.

- Operating system: FreeBSD 9.X, 10.X, 11.X, 12.X and 13.X
- Partition table and filesystem: MBR y UFS
- Software and encryption algorithms available: Geli (AES-XTS,AES-CBC,Blowfish-CBC y Camellia-CBC)

Instructions for installing FreebBSD (Video)

1.- Download the desired FreeBSD version and start 'Live CD'.
2.- Run the script generated by this site.
3.- Enter the required password and wait.

What you should know before starting

- Set the installation size with a blank value to use the entire disk.
- Specify Mbytes with 'm' and Gigabytes with 'g' (no spaces between number and letter).
- The site does not control the name of the units and the logic of the specified sizes, so you should be careful when entering values
- One possible separate partition (/ home or / var) in the step 2 can be defined. - The values in brackets are just recommendations, feel free to configure the system as you like..
- If you'd rather not lose your present disk contents, this isn't the place you are looking for: you can find more information about disk encryption in the official FreBSD manuals.
- All of the present disk partitions will be deleted, if you want to have multiple systems in the same unit, reserve enough space before installing the other operating systems.

Usage example

root / 20 Gb, /home 50 Gigabytes, 2 Gigabytes for swap and 512 MB for /boot in disk ada0: We set ada0 as a unit; in the second form a total installation size of 70g, 2g for swap and 512m for the /boot partition (the only non-encrypted partition).

Preparing the disk to install FreeBSD

It is strongly recommended to have a completely partition-free disk.
For this you can use any software like gparted or even the FreeBSD disk itself.

Remove and destroy ada0 Slices (Simple example).

# gpart delete -i 1 ada0s1
# gpart destroy ada0s1
# gpart delete -i 1 ada0
# gpart destroy ada0

Check ada0 partitions

# gpart show ada0 -p
# gpart list

Run the script using a USB-memory

Once FreeBSD is booted in live-CD mode, run the following commands:

# gpart show -p

Insert the device, run the above command to identify the new drive and partition (Example: ad0s1)

# mkdir /tmp/usb
# mount_msdosfs /dev/ada0s1 /tmp/usb # Dispositivo FAT
# mount_ntfs /dev/ada0s1 /tmp/usb # Dispositivo NTFS

Run the script in FreeBSD using ssh

Once booted FreeBSD in Live CD mode, run the following commands:

Configure the keyboard language and activate sshd.

# sysinstall
# mkdir /tmp/etc
# mount_unionfs /tmp/etc /etc
# echo 'PermitRootLogin yes' >> /etc/ssh/sshd_config
# passwd root
# service sshd onestart
# dhclient em0

You may change the interface name 'em0' as required.
Now you can connect to FreeBSD via ssh.

Run the FreeBSD script using Netcat

Configure the keyboard language and send the file using NC.

Send it.

# nc -l 8080 < script.sh

Received in /tmp.

# sysinstall
# dhclient em0
# nc target_ip 8080 > /tmp/script.sh

Using Curl or wget to copy the script

boot: 3Gb / root: 20Gb / swap: 5Gb / AES-XTS.

# curl 'http://www.freebsdencryption.org/index_en.php?unica=y&unidad=ada0&parte=20g&swap=5g&boot=3g&cifrado=AES-XTS' > /tmp/script && sh /tmp/script

boot: 1Gb / root: 60Gb / var: 40 (parte: 100g - root: 60g) / swap: 5Gb / Blowfish-CBC.

# curl 'http://www.freebsdencryption.org/index_en.php?directorio=var&unica=n&unidad=ada0&parte=100g&swap=4g&boot=1g&cifrado=Blowfish-CBC&root=60g' > /tmp/script && sh /tmp/script

Hard Drive: ada0, ada1,...
*root / partition size [ > 10g ]
Swap partition size [ < 3g ]
Boot partition size [ 1g ]
Encryption Algorithm:

# gpart delete -i 1 ada0s1 # gpart destroy ada0s1 # gpart delete -i 1 ada0 # gpart destroy ada0

# gpart show ada0 -p # gpart list

# gpart show -p

# mkdir /tmp/usb # mount_msdosfs /dev/ada0s1 /tmp/usb # Dispositivo FAT # mount_ntfs /dev/ada0s1 /tmp/usb # Dispositivo NTFS

# sysinstall # mkdir /tmp/etc # mount_unionfs /tmp/etc /etc # echo 'PermitRootLogin yes' >> /etc/ssh/sshd_config # passwd root # service sshd onestart # dhclient em0