Geli Encrypted DVDs

[Pawel Jakub Dawidek]

On Sun, Apr 08, 2007 at 03:31:14AM +0100, RW wrote:
> On Sun, 8 Apr 2007 02:32:33 +0200
> Pawel Jakub Dawidek <pjd at FreeBSD.org> wrote:
> 
> > On Sun, Apr 08, 2007 at 12:59:42AM +0100, RW wrote:
> > > 
> > > In the questions list Roland Smith suggested that a geli encrypted
> > > dvd could be created by burning the backing file from an geli
> > > encrypted md device as a disk image. 
> > > 
> > > We were neither able to attach the DVD device though, see:
> > > 
> > > http://lists.freebsd.org/pipermail/freebsd-questions/2007-March/145433.html
> > > 
> > > Does anyone know if this can be made to work?
> > > 
> > > FWIW I have no problem putting a UFS2 filesystem on a DVD-R without
> > > geli.
> > 
> > Could you give me the output of:
> > 
> > 	# ls -l $HOME/backupDVD.img 
> > 	# diskinfo -v /dev/acd0
> > 	# geli dump /dev/acd0
> > 
> 
> 
> # ls -l /home/t/dvd.img
> -rw-r--r--  1 bob  bob  4613734400 Mar 21 13:15 /home/t/dvd.img
> 
> # diskinfo -v /dev/acd0
> /dev/acd0
>         2048            # sectorsize
>         4613734400      # mediasize in bytes (4.3G)
>         2252800         # mediasize in sectors
> 
> # geli dump /dev/acd0
> Cannot read metadata from /dev/acd0: Invalid argument.
> Not fully done.
> 
>  -------------------------------------------------
> 
> If I run the last command on the image file's md device instead:
> 
> # geli dump /dev/md0
> Metadata on /dev/md0:
>      magic: GEOM::ELI
>    version: 3
>      flags: 0x0
>      ealgo: AES-CBC
>     keylen: 256
>   provsize: 4613734400
> sectorsize: 512

The problem is different size between CD and your image. Try to create
image with -S 2048 option.

-- 
Pawel Jakub Dawidek                       http://www.wheel.pl
pjd at FreeBSD.org                           http://www.FreeBSD.org
FreeBSD committer                         Am I Evil? Yes, I Am!
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-geom/attachments/20070408/1705bc4f/attachment.pgp