Re: Encrypted swap partition no longer encrypted

From: David Wolfskill <david_at_catwhisker.org>
Date: Fri, 27 Aug 2021 03:38:23 -0700
On Fri, Aug 27, 2021 at 11:10:26AM +0200, Ronald Klop wrote:
> Hi,
> 
> For encrypted swap you can put ".eli" behind the device name in fstab.
> 
> So change "/dev/ada0p2" to "/dev/ada0p2.eli" in the new fstab and reboot.
> NB: after encryption is enabled the device is not available as dumpdev anymore.

If one uses "sw,late" in the "Options" field of the swap fstab entry, thus:

# Device                Mountpoint      FStype  Options         Dump    Pass#
/dev/ada0s4b.eli        none            swap    sw,late         0       0

I find that it permits (in this case) /dev/ada0s4b to be used for the
dumpdev, whlie using /dev/ada0s4b.eli for swap.

(This is for stable/12, stable/13, and head -- though I haven't updated
since 10 August.)

> ...

Peace,
david
-- 
David H. Wolfskill                              david_at_catwhisker.org
Life is not intended to be a zero-sum game.

See https://www.catwhisker.org/~david/publickey.gpg for my public key.

Received on Fri Aug 27 2021 - 10:38:23 UTC

Original text of this message