Re: savecore: operation not permitted

From: Miroslav Lachman <>
Date: Sun, 27 Nov 2022 11:46:13 UTC
On 27/11/2022 12:23, David Wolfskill wrote:
> On Sun, Nov 27, 2022 at 05:48:13AM +0000, Jonathan Vasquez wrote:
>> Make sure you aren't using an encrypted swap (i.e if you have the .eli extension for your swap entry in /etc/fstab, then it's being encrypted). That was the issue I had, it makes sense that you can't get the dumped data if the swap is being re-encrypted on every boot.
>> ....
> For this use case (desire to be able to get crash dumps while having
> swap encrypted), I find that adding the "late" attribute to the
> "swap" entry in /etc/fstab is useful, thus:
> g1-51(12.4-S)[1] grep swap /etc/fstab
> /dev/ada0s4b.eli        none            swap    sw,late         0       0

Thank you for sharing this tip!
When I needed to analyze crash dumps I added another partitions just for 
the dump but if this can be solved by late option for geli swap it would 
be really nice. I will try it.

Kind regards
Miroslav Lachman