GELI changes?

Krassimir Slavchev krassi at bulinfo.net
Wed Feb 21 15:13:10 UTC 2018


Hi All,

On FreeBSD 8 & 9 I was able to use GELI on preloaded image providing
keys either via loader.conf or via custom usb driver.
On FreeBSD 11 & CURRENT I can not make usb drivers to load before GELI
(e.g. MODULE_DEPEND(g_eli, my_usb_device, 1, 1, 1) in g_eli.c). Also,
loading keys from loader.conf is not working (Cannot decrypt Master Key)
which may be related to current EFI changes. On CURRENT loading keys
from loader.conf produces kernel panic because cryptosoft is not
initialized (opencrypto/crypto.c:497, CRYPTO_DRIVER_LOCK() spin mutex
(null)).

So, could we load USB layer before GELI?
Is there a way to re-taste a GEOM provider a bit later but before root
mount?

Best regards,

-- 
Krassimir Slavchev           Bulinfo Ltd.
krassi at bulinfo.net           (+359 2) 9699 166
http://www.bulinfo.net       (+359 2) 9699 160


More information about the freebsd-current mailing list