similar to: 6740837 zfs-crypto, buffer modified while frozen!

Author: Darren Moffat <Darren.Moffat at Sun.COM> Repository: /hg/zfs-crypto/gate Latest revision: 3636389b926ac9417373320caedb256016ad521a Total changesets: 1 Log message: 6740837 zfs-crypto, buffer modified while frozen! (locking/assert oops) Files: update: usr/src/uts/common/fs/zfs/zio.c

Author: Darren Moffat <Darren.Moffat at Sun.COM> Repository: /hg/zfs-crypto/gate Latest revision: 5eb1c91e55b41ddcb2da4c9ecb74d0fbdfa07833 Total changesets: 1 Log message: 6766659 zfscrypto: assertion failed: iovcnt != 0, file: ../../common/fs/zfs/zio_crypt.c, line: 1890 Files: update: usr/src/uts/common/fs/zfs/zio.c update: usr/src/uts/common/fs/zfs/zvol.c

Author: Darren Moffat <darrenm at opensolaris.org> Repository: /hg/zfs-crypto/gate Latest revision: 6dded109490e79f82f24b9ba0b3465cb1e6a96e6 Total changesets: 1 Log message: Some of AES_CBC_PAD team missed the last bus home pam_zfs_key module not in this phase fs-local failure if ''zfs mount -a'' fails isn''t our call zoneadm/zfs.c 1866 libzfs_jni needs updated or

Author: Darren Moffat <darrenm at opensolaris.org> Repository: /hg/zfs-crypto/gate Latest revision: 09d6ac706d1fcce8c5e20487fd47af73c4684b98 Total changesets: 1 Log message: 6729887 zio_encrypt_data/zio_decrypt_data should use crypto ctx templates Files: update: usr/src/uts/common/fs/zfs/dmu.c update: usr/src/uts/common/fs/zfs/sys/zio_crypt.h update: usr/src/uts/common/fs/zfs/zio_crypt.c

Author: Darren Moffat <Darren.Moffat at Sun.COM> Repository: /hg/zfs-crypto/gate Latest revision: 32a041998ab168dc335d487020fc0cb59c85d81f Total changesets: 1 Log message: 6745678 zio->io_checksum == ZIO_CHECKSUM_SHA256_CCM_MAC (0x5 == 0x9), file: zio.c, line: 1498 Files: update: usr/src/uts/common/fs/zfs/zio.c

Author: Darren Moffat <darrenm at opensolaris.org> Repository: /hg/zfs-crypto/gate Latest revision: 4c9597e1e4e9b6cbd6c20be06f0cdf9c409d3629 Total changesets: 1 Log message: 885 dataset creation panics if pool keystatus not ''available''. 360 check for key on creation should be in dmu_objset_create_check() 782 zfs keysource=raw fails with keyscope=dataset when file

Author: Darren Moffat <darrenm at opensolaris.org> Repository: /hg/zfs-crypto/gate Latest revision: b44ed1cdde88c002bba91ae1bac55f456adcc95d Total changesets: 1 Log message: 293 AES_CBC_PAD keywrap Fix key load once and for all by using xcopyin & uint64_t everywhere Files: update: usr/src/cmd/zfs/zfs_main.c update: usr/src/lib/libzfs/common/libzfs.h update:

Author: Darren Moffat <darrenm at opensolaris.org> Repository: /hg/zfs-crypto/gate Latest revision: a75f21839b8aba305660e5746fe66c1171d8b2d3 Total changesets: 1 Log message: ZIL encryption preparation work Files: update: usr/src/uts/common/fs/zfs/sys/zio.h update: usr/src/uts/common/fs/zfs/sys/zio_impl.h update: usr/src/uts/common/fs/zfs/zfs_log.c update: usr/src/uts/common/fs/zfs/zil.c

Author: Darren Moffat <darrenm at opensolaris.org> Repository: /hg/zfs-crypto/gate Latest revision: d22dab8b3cf8927274becf145e811389891f4fb7 Total changesets: 1 Log message: lint nits and CCM IV/nonce size fix Files: update: usr/src/common/zfs/zcrypt_common.c update: usr/src/uts/common/fs/zfs/zio_crypt.c

Author: Darren Moffat <darrenm at opensolaris.org> Repository: /hg/zfs-crypto/gate Latest revision: 71562fc59afd47d2db9236f8b5ab505c74140a63 Total changesets: 1 Log message: CRYPTO_INVALID_MAC can be given as errno ECKSUM full fix depends on 6712231 being implemented in ON but this is safe without it Files: update: usr/src/uts/common/fs/zfs/zio_crypt.c

Author: billm Repository: /hg/zfs-crypto/gate Revision: 33640e100342f4a847c599f1a1671dda6faf4e05 Log message: 6410698 ZFS metadata needs to be more highly replicated (ditto blocks) 6410700 zdb should support reading raw blocks out of storage pool 6410709 ztest: spa config can change before pool export Files: update: usr/src/cmd/mdb/common/modules/zfs/zfs.c update: usr/src/cmd/zdb/zdb.c update:

Author: Darren Moffat <darrenm at opensolaris.org> Repository: /hg/zfs-crypto/gate Latest revision: 9bb308a0778101fcef9ff65336bcec8e68a7bd06 Total changesets: 40 Log message: resynv onnv-gate Files: .hgtags deleted_files/usr/src/cmd/fps/Makefile.inc deleted_files/usr/src/cmd/fps/Makefile.subdirs deleted_files/usr/src/common/crypto/aes/aes_cbc_crypt.c

Here''s my comments for the preliminary ZFS Crypto review. - Dan Webrev: http://cr.opensolaris.org/~darrenm/zfs-crypto-gate/webrev/ General comments: DEA-1 - SCCS keywords need to be removed DEA-2 - Copyright updated ------------------------------------------------------------------ usr/src/lib/libcryptoutil/common/keyfile.c pkcs11_read_data() This code in pkcs11_read_data() scares

Author: Darren Moffat <darrenm at opensolaris.org> Repository: /hg/zfs-crypto/zfs-crypto-gate Latest revision: f2267f9eb807cc96d0d8ed72b186a4fae3490010 Total changesets: 1 Log message: merge with zfs-crypto-gate Files: delete: usr/src/lib/libcryptoutil/common/mechkeygen.c

Author: Anthony Scarpino <Anthony.Scarpino at Sun.COM> Repository: /hg/zfs-crypto/gate Latest revision: 04f168232992beb7ebec3b25a69735bb3e2ab678 Total changesets: 1 Log message: zpool create now loads/prompts for key. Use random salt instead of guid. Fix 654 Files: update: usr/src/cmd/zfs/zfs_main.c update: usr/src/cmd/zoneadm/zfs.c update: usr/src/cmd/zpool/zpool_main.c update:

Author: Darren Moffat <Darren.Moffat at Sun.COM> Repository: /hg/zfs-crypto/gate Latest revision: 957d30a3607ed9f3cbe490da5894d1e1b2104033 Total changesets: 28 Log message: resync onnv_105 partial for 6713916 Files: usr/src/Makefile.lint usr/src/Targetdirs usr/src/cmd/Makefile usr/src/cmd/Makefile.cmd usr/src/cmd/acctadm/Makefile usr/src/cmd/acctadm/acctadm.xcl

I''m pleased to announce that the ZFS Crypto project now has Alpha release binaries that you can download and try. Currently we only have x86/x64 binaries available, SPARC will be available shortly. Information on the Alpha release of ZFS Crypto and links for downloading the binaries is here: http://opensolaris.org/os/project/zfs-crypto/phase1/alpha/ Please pay particular note to

Author: Darren Moffat <darrenm at opensolaris.org> Repository: /hg/zfs-crypto/gate Latest revision: 2b29daa2195d09df740d6a13d5677c09974205e5 Total changesets: 1 Log message: last update to AES_CBC_PAD buffer size support broke CCM mode (oops!) Files: update: usr/src/uts/common/crypto/io/aes.c

Author: Darren Moffat <Darren.Moffat at Sun.COM> Repository: /hg/zfs-crypto/gate Latest revision: 1e618d9450da12a8cb6d6068c3b7cd02c82d7214 Total changesets: 1 Log message: SHAMAC checksum should be truncated left most 128 bits of SHA256 Files: update: usr/src/uts/common/fs/zfs/sha256.c

First let me say I''m deeply sorry for the mail storm that seeding the new hg/zfs-crypto/gate repository caused. An explanation of what happened and why can be found on my blog: http://blogs.sun.com/darren/entry/sorry_mercurial_hg_push_oops There is also a discussion going on in the tools community on how to ensure this doesn''t happen again: