NetBSD 11 manual installation guide demonstrates disk encryption and MBR setup from scratch

This guide targets engineers who need to install NetBSD 11 on hardware where the default installer (`sysinst`) may not suffice or where custom configurations are required. The manual process involves booting from a USB drive, exiting the installer, and configuring the system directly from the command line. This approach is particularly useful for older systems using MBR partitioning, which remains relevant for refurbished or resource-constrained hardware. The guide explicitly avoids GPT, a common choice for modern UEFI systems, in favor of MBR, demonstrating NetBSD’s continued support for legacy architectures.

Disk-level encryption is a focal point of the guide, offering engineers a way to secure data at rest without relying on the installer’s automated tools. The manual process requires direct interaction with NetBSD’s partitioning and encryption utilities, such as `cgdconfig` (Cryptographic Disk Geometry), which is not covered in the default installation workflow. This level of control is valuable for engineers who need to integrate NetBSD into environments with strict security requirements or who are troubleshooting encryption-related issues. However, the trade-off is increased complexity, as the guide acknowledges that the standard installer is better documented and more straightforward.

Networking and remote access are also addressed, with steps to enable DHCP and SSH during the installation process. This allows engineers to complete the installation from another machine, which can be useful for headless systems or when documenting the process. The guide highlights NetBSD’s use of driver-specific nomenclature for network interfaces (e.g., `re0` for Realtek), which differs from the more generic `eth` naming convention in Linux. This distinction is important for engineers transitioning from other Unix-like systems or troubleshooting network configurations.

The guide emphasizes the educational value of manual installation, positioning it as a way to learn about NetBSD’s internals rather than a replacement for the default installer. It acknowledges that the standard installer is the recommended path for most users but argues that manual installation offers unparalleled flexibility. This flexibility is particularly useful for overcoming issues that may arise during conventional installation, such as hardware incompatibilities or the need for non-standard partitioning schemes. However, the guide also serves as a reminder that manual installation requires a deeper understanding of the operating system’s tools and concepts.

For engineers working with legacy or refurbished hardware, this guide provides a practical example of how NetBSD can extend the lifespan of older systems. The focus on MBR partitioning and disk encryption aligns with use cases where security and compatibility with older hardware are priorities. While the guide does not cover every possible scenario, it offers a foundation for engineers to adapt the process to their specific needs, whether for personal projects, embedded systems, or environments where automation is not feasible.