roman 🦄🐡 Profile picture
Jul 22, 2018 34 tweets 10 min read Twitter logo Read on Twitter
Autoinstall #OpenBSD 6.3 on #ThinkPad X1C5 with full disk encryption in five minutes!

1. Turn you computer on
2. Press F1
3. Wait a second...
4. Select "Security > I/O Port Access"
5. Check devices and disable if you don't need them.
Bluetooth and Fingerprint Reader* are not supported in #OpenBSD 6.3.

* there is a patch for Fingerprint Reader (I don't use it)
6. Select "Security > Secure Boot"
7. Select "... Boot Priority > Legacy First"
8. Press F10 to save and exit.
9. Plug in USB drive with #OpenBSD 6.3 Installer and press F12 while rebooting
10. In Boot Menu select "USB HDD: ..." and press Enter.
11. Wait for #OpenBSD Installer to boot (or press Enter to skip few seconds)
12. Type "s" and press Enter to select "(S)hell".
13. Check hw.disknames

# sysctl

sd0 is SSD
rd0 is RAM disk for OpenBSD installer
sd1 is USB flash drive

14. Erase sd0

# dd if=/dev/urandom of=/dev/rsd0c bs=1m

In my case just first MB, because the disk has been erased already.
15. Wait...

Erasing a whole disk could take few minutes.
16. Reinitialize the partition table (overwrite the primary MBR bootcode and MBR partition table)

# fdisk -iy sd0
17. Create the partition layout:

# disklabel -E sd0
> z
> a a
> w
> q
18. Check the layout

# disklabel sd0
19. Check the partition table

# fdisk sd0
20. Create an encrypted volume on "a" partition:

# bioctl -c C -l sd0a softraid0

Enter your new passphrase.
21. Confirm the passphrase and wait for CRYPTO volume to be attached as sd2.
22. Exit shell

# exit
23. Type "a" and press Enter to select "(A)utoinstall"
24. Use "em0" network interface for now

* Check Ethernet cable is pluged-in.
** Check DHCP server is available.

*** Firmware for iwm0 interface will be downloaded on the first boot (when OpenBSD is installed).
25. Type-in URL to your install.conf

For example, like this:…

* Passwords may be in plaintext, encrypted with encrypt(1), or set to ‘*************’ (13 '*'s) to disable password logins, only permitting alternative access methods (e.g. ssh(1) keys).
26. Wait for OpenBSD to be installed on sd2 (your brand new encrypted volume)

Installer will reboot your computer as soon as OpenBSD is installed.
27. Hooray! OpenBSD 6.3 has been installed.
Type-in your passphrase to attach the encrypted volume.

* Don't forget to unplug your USB flash drive.
28. Wait for OpenBSD to boot (press Enter to skip few seconds)
29. OpenBSD installs firmware on its first boot...
30. Login as root with your password.
31. Enjoy OpenBSD 6.3 ;)

To be continued...
30. Switch to VT1 with Fn+CTRL+ALT and F1, and login as root.
@canadianbryan is there a way to install firmware earlier? I have it downloaded on USB flash drive.
7. Keep UEFI!
Just use -g option of fdisk on the following steps.

h/t @gsora_ and @canadianbryan
Replace with:

# fdisk -iy -g -b 960 sd0
Keep the partition created with
# fdisk -iy -g -b 960 sd0

• • •

Missing some Tweet in this thread? You can try to force a refresh

Keep Current with roman 🦄🐡

roman 🦄🐡 Profile picture

Stay in touch and get notified when new unrolls are available from this author!

Read all threads

This Thread may be Removed Anytime!


Twitter may remove this content at anytime! Save it as PDF for later use!

Try unrolling a thread yourself!

how to unroll video
  1. Follow @ThreadReaderApp to mention us!

  2. From a Twitter thread mention us with a keyword "unroll"
@threadreaderapp unroll

Practice here first or read more on our help page!

More from @romanzolotarev

Jun 23, 2018
#OpenBSD is great for web development. It's fast, consistent, reliable, well documented. Works great on hardware with limited resources.

disk usage:
- server (base, no packages installed) 1GB
- desktop (200 packages) 5GB

memory usage:
- server 200-400MB
- desktop 2-4GB
Memory: 75M/533M
xenodm + cwm + xterm + httpd

Right after reboot.
With all my web dev environment running:

... + firefox + tmux + vi

Memory: 634M/1306M
Read 10 tweets
Jun 9, 2018
I wish I could send my tutorials and my tweets to my past self :)
At least one or two years back.
First, learn English. Read more books.
Second, learn touch typing. Pick your keyboard.
Learn all of ed/nvi, before learning Vim.
ed/nvi have a really small footprint. Grok it.
Read 13 tweets

Did Thread Reader help you today?

Support us! We are indie developers!

This site is made by just two indie developers on a laptop doing marketing, support and development! Read more about the story.

Become a Premium Member ($3/month or $30/year) and get exclusive features!

Become Premium

Don't want to be a Premium member but still want to support us?

Make a small donation by buying us coffee ($5) or help with server cost ($10)

Donate via Paypal

Or Donate anonymously using crypto!


0xfe58350B80634f60Fa6Dc149a72b4DFbc17D341E copy


3ATGMxNzCUFzxpMCHL5sWSt4DVtS8UqXpi copy

Thank you for your support!

Follow Us on Twitter!