GELI doesn't ask passphrase on boot

[Pawel Jakub Dawidek]

On Sun, Nov 13, 2005 at 12:59:15PM +0200, Alexey Luckyanchikov wrote:
+> Hi.
+> 
+> I want GELI to ask password on boot as described in GELI(8):
+> -b       Ask for the passphrase on boot, before the root parti-
+>          tion is mounted.  This makes it possible to use an
+>          encrypted root partition.  One will still need bootable
+>          unencrypted storage with a /boot/ directory, which can
+>          be a CD-ROM disc or USB pen-drive, that can be removed
+>          after boot.
+> But on boot GELI doesn't ask passphrase and doesn't create provider.
+> 
+> FreeBSD version is 6.0-RELEASE, provider was initialized with:
+> geli init -b -v -l 256 -s 2048 /dev/ad1s1a
+> 
+> /boot/loader.conf contain:
+> geom_eli_load="YES"
+> kern.geom.eli.debug="255"
+> kern.geom.debugflags="1"
+> 
+> After boot "dmesg -a | fgrep -i eli" show:
+> GEOM_ELI[1]: Start tasting.
+> g_modevent(ELI, LOAD)
+> g_load_class(ELI)
+> g_eli_taste(ELI, ad0)
+> GEOM_ELI[3]: Tasting ad0.
+> g_destroy_geom(0xc1257300(eli:taste))
+> g_eli_taste(ELI, ad0s1)
+> GEOM_ELI[3]: Tasting ad0s1.
+> g_destroy_geom(0xc1256e80(eli:taste))
+> GEOM_ELI[1]: Tasting no more.
+> g_eli_taste(ELI, ad0s1a)
+> g_eli_taste(ELI, ad0s1b)
+> g_eli_taste(ELI, ad0s1c)
+> g_eli_taste(ELI, ad1)
+> g_eli_taste(ELI, ad1s1)
+> g_eli_taste(ELI, ad1s1a)
+> g_eli_taste(ELI, ad1s1c)
+> g_eli_taste(ELI, ad0s1a)
+> 
+> It seems that problem is in g_eli.c, line 1092:
+> SYSINIT(geli_boot_end, SI_SUB_RUN_SCHEDULER, SI_ORDER_ANY, g_eli_on_boot_end, NULL)
+> geli_boot_end() called before GELI finish tasting.

Use this feature only for encrypting root file system.
In case of other file systems, check out /etc/defaults/rc.conf for
examples of geli configuration on boot.

-- 
Pawel Jakub Dawidek                       http://www.wheel.pl
pjd at FreeBSD.org                           http://www.FreeBSD.org
FreeBSD committer                         Am I Evil? Yes, I Am!
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-geom/attachments/20051113/b90e8909/attachment.bin