zfs crypto discuss - May 2008 - [Bug 2046] New: ''zpool key -u/-l'' doesn'' t work after changing from a dataset key to a pool key

http://defect.opensolaris.org/bz/show_bug.cgi?id=2046

           Summary: ''zpool key -u/-l'' doesn''t work
after changing from a
                    dataset key to a pool key
    Classification: Development
           Product: zfs-crypto
           Version: unspecified
          Platform: Other
        OS/Version: Solaris
            Status: NEW
          Severity: normal
          Priority: P3
         Component: other
        AssignedTo: darrenm at opensolaris.org
        ReportedBy: hua.tang at sun.com
         QAContact: hua.tang at sun.com
                CC: zfs-crypto-discuss at opensolaris.org
   Estimated Hours: 0.0


# zpool create -f -o keysource=raw,file:///export/home/raw_key_file test
/export/home/testfile
# zfs create -o keysource=raw,file:///export/home/raw_key_file -o encryption=on
-o keyscope=dataset test/fs
# zfs key -c -o keyscope=pool test/fs
Key change successful.
# cp /export/home/passfile /test/fs
# zpool key -u test   
# ls /test/fs/
passfile
# df -h | grep test/fs
test/fs                984M    18K   984M     1%    /test/fs
# zpool key -l test
cannot mount ''/test/fs'': directory is not empty
Key error in ''test'': crypto key failure
#

Two issues:
1) ''zpool key -u'' doesn''t unmount test/fs.
2) ''zpool key -l'' doesn''t know test/fs is still
mounted.

-- 
Configure bugmail: http://defect.opensolaris.org/bz/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.

http://defect.opensolaris.org/bz/show_bug.cgi?id=2046


Darren J Moffat <darrenm at opensolaris.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |ACCEPTED




-- 
Configure bugmail: http://defect.opensolaris.org/bz/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.

http://defect.opensolaris.org/bz/show_bug.cgi?id=2046


Darren J Moffat <darrenm at opensolaris.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|ACCEPTED                    |FIXINPROGRESS




--- Comment #1 from Darren J Moffat <darrenm at opensolaris.org> 
2008-05-27 07:46:31 ---
A few issues here:

1) dsl_dataset_keystatus was returning the key as available when it
wasn''t.

2) We didn''t properly move the key from the dataset to pool in memory
keystore.

-- 
Configure bugmail: http://defect.opensolaris.org/bz/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.

http://defect.opensolaris.org/bz/show_bug.cgi?id=2046


Darren J Moffat <darrenm at opensolaris.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|FIXINPROGRESS               |CLOSED
         Resolution|                            |FIXINSOURCE




-- 
Configure bugmail: http://defect.opensolaris.org/bz/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.