Christopher J. Ruwe
2011-Jan-13 21:27 UTC
geli problems after installkernel & installworld
I use a mostly geli encrypted hd on my Thinkpad R500, with /compat, /usr, /tmp and /var all on the encrypted geli provider. After an upgrade of kernel and world (STABLE), I experience a weird issue: While booting, I am asked for the geli passphrase as usual. Completing password authentication for geli returns a success message, cryptosoft0: <software crypto> on motherboard GEOM_ELI: Device ada0p3.eli created. GEOM_ELI: Encryption: AES-CBC 256 GEOM_ELI: Crypto: software however, the zpool on geli is unavailable. Logging in a root, I can attach the geli provider manually as geli itself should do from /etc/rc.conf. After a successful zfs mount -a, I can resume as usual after manually starting the /usr/local/rc.d services. Neither have I noticed a change in the device names nor any unusual messages from dmesg. Currently, I am doing a new compile run on world and kernel to attempt anew tomorrow. Am I missing something? Kind regards, -- Christopher J. Ruwe TZ GMT + 1 -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 834 bytes Desc: not available Url : http://lists.freebsd.org/pipermail/freebsd-stable/attachments/20110113/1a5cc553/signature.pgp
Pawel Jakub Dawidek
2011-Jan-15 21:31 UTC
geli problems after installkernel & installworld
On Thu, Jan 13, 2011 at 10:00:19PM +0100, Christopher J. Ruwe wrote:> I use a mostly geli encrypted hd on my Thinkpad R500, > with /compat, /usr, /tmp and /var all on the encrypted geli provider. > > After an upgrade of kernel and world (STABLE), I experience a weird > issue: While booting, I am asked for the geli passphrase as usual. > Completing password authentication for geli returns a success message, > > cryptosoft0: <software crypto> on motherboard > GEOM_ELI: Device ada0p3.eli created. > GEOM_ELI: Encryption: AES-CBC 256 > GEOM_ELI: Crypto: software > > however, the zpool on geli is unavailable. > > Logging in a root, I can attach the geli provider manually as geli > itself should do from /etc/rc.conf. After a successful zfs mount -a, I > can resume as usual after manually starting the /usr/local/rc.d > services. > > Neither have I noticed a change in the device names nor any unusual > messages from dmesg. Currently, I am doing a new compile run on world > and kernel to attempt anew tomorrow. > > Am I missing something?Can you show the output of 'geli list' from a running system? -- Pawel Jakub Dawidek http://www.wheelsystems.com pjd@FreeBSD.org http://www.FreeBSD.org FreeBSD committer Am I Evil? Yes, I Am! -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 196 bytes Desc: not available Url : http://lists.freebsd.org/pipermail/freebsd-stable/attachments/20110115/aac8c243/attachment.pgp