GELI cripto USB disk and fsck

[Roland Smith]

On Wed, Jul 11, 2007 at 10:50:51AM -0000, DSA - JCR wrote:
> HI all
> 
> FreeBSD 6.2 i386
> 
> I have an USB disk cryptografied with GELI in order to get external backup
> copies of an enterprise.
> 
> All work fine till somebody (not me ;D), reboot the computer (I think so)
> without unmounting the disk and then I get two things:
> 
> 1.- The main filesystem / get overfilled, it was 108% used !! because the
> USB disk files were in the mounted directory (/usb2). My question is, how
> is this possible? it was full and more, where were the files??

A part of the filesystem is reserved for the root user. If that part is
used, it is >100%. I don't think that it is because of where the USB
disk was mounted. Mounting a filesystem under / does not make its files
part of /!
 
> I reboot the system after delete the files in the /usb2 directory, i
> prefer to save the / filesystem.
> 
> 2.- When I try to mount (after this) the USB disk it says that I must use
> fsck because thera are problems in the disk (logic), but I don't find any
> utility to run a fsck in a GELI cryptografied disk (or without crypto).
> What can I do? I haven't see nothing in the handbook or man pages about
> fsck on GELI disks.

You have to attach the GELI disk first. If this disk is listed in
/etc/fstab, this will be done at boot. If not, do 'geli attach /dev/daX'
where X is the number of the disk. After that, you should fsck
/dev/daX.eli, _not_ /dev/daX!

> 3.- Also, I have a problem after this, when I try to use smbutil to
> connect to Windows computers, i can't, i get an kernel error saying that
> "smb_util_xxx is not in the kernel" (something like that, I don't have
> here the exact message now). How can I correct this?

At a guess, I think that the SMB filesystem isn't compiled into the
kernel, and you need to load the smbfs kernel module; 'kldload
smbfs'. If you want to load it automatically at boot, add
'smbfs_load="YES"' to /boot/loader.conf.

Roland
-- 
R.F.Smith                                   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-questions/attachments/20070711/0e5c61c8/attachment.pgp