Hi I am concerned about the availabilities of these encryptions in freebsd releases that are marked stable. It seems gbde has a problem when the the data written goes over the lba boundary around lba48. http://lists.freebsd.org/pipermail/freebsd-geom/2007-August/002524.html I suffered this problem error example below. Usage at the time was approx 150gig when I first noticed it. g_vfs_done():ad6s1c.bde[WRITE(offset=493964558336, length=131072)]error = 1 After reading about this problem on a few diff hits (all with no response on fixes) I tried geli. However I seen this in geli within an hour of using it. GEOM_ELI: Crypto WRITE request failed (error=1). ad6s1c.eli[WRITE(offset=0, length=131072)] couldnt really found much info on it so I have given up on freebsd encryption for now and using the disk unencrypted. No dma errors etc. all running fine. I expect the gbde is a problem and would like it to come with some warning as a modern drive is now often larger then the lba48 limit whilst I am unsure of geli as I couldnt really found much information on the problem I had so I understand its possible I had set something incorrectly although I followed the handbooks guidelines. The data itself was actually written and not corrupt but the server did crash whilst was in use occasionally so needed reboots which is no good for a production server. Chris
Chris wrote:> Hi I am concerned about the availabilities of these encryptions in > freebsd releases that are marked stable. > > It seems gbde has a problem when the the data written goes over the > lba boundary around lba48.Could you please test the attached patch to /usr/src/sys/dev/ata/ata-all.c ? I believe this may be due to the error in the underlying ata driver rather than specifically to do with encryption. As a side note - Soren, could we get this commited to both -current and -stable if there aren't any significant objections? Michael -------------- next part -------------- A non-text attachment was scrubbed... Name: ata-all.c.diff Type: text/x-patch Size: 560 bytes Desc: not available Url : http://lists.freebsd.org/pipermail/freebsd-stable/attachments/20070926/36afbd66/ata-all.c.bin
On Wed, Sep 26, 2007 at 11:09:22PM +0100, Chris wrote:> Hi I am concerned about the availabilities of these encryptions in > freebsd releases that are marked stable. > > It seems gbde has a problem when the the data written goes over the > lba boundary around lba48. > > http://lists.freebsd.org/pipermail/freebsd-geom/2007-August/002524.html > > I suffered this problem error example below. Usage at the time was > approx 150gig when I first noticed it. > > g_vfs_done():ad6s1c.bde[WRITE(offset=493964558336, length=131072)]error = 1 > > After reading about this problem on a few diff hits (all with no > response on fixes) I tried geli. > > However I seen this in geli within an hour of using it. > > GEOM_ELI: Crypto WRITE request failed (error=1). > ad6s1c.eli[WRITE(offset=0, length=131072)]I've been running a GELI encrypted /home partition on 6.2-STABLE amd64 for months without problems. I've had trouble with GELI on usb harddisks, but that seems to be related to the USB/ATAPI controller. The message seems to come from /usr/src/sys/geom/eli/g_eli_integrity.c, in the function g_eli_auth_write_done. But for a more detailed analysys, you'd have to set kern.geom.eli.debug to 3, and see what else pops up. The headers indicate that the error number is used according to errno.h, which lists 1 as being "Operation not permitted". Both GELI and GBDE fail with the same length of request. So the error might depend on the underlaying code in the kernel (bio* functions). Are you sure that the disk and controller are working properly? Roland -- R.F.Smith http://www.xs4all.nl/~rsmith/ [plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated] pgp: 1A2B 477F 9970 BA3C 2914 B7CE 1277 EFB0 C321 A725 (KeyID: C321A725) -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 187 bytes Desc: not available Url : http://lists.freebsd.org/pipermail/freebsd-stable/attachments/20070927/716afc30/attachment.pgp
Chris wrote:> Hi I am concerned about the availabilities of these encryptions in > freebsd releases that are marked stable. > > It seems gbde has a problem when the the data written goes over the > lba boundary around lba48.I wonder if this is a problem in 5.4? I'm using 3x300G (separate partitions) on my 5.4 box for a year now, no problems, one of them is full. I'm preparing to update to 6.2 so this could put a big damper on that... -- br, Tommi