geli load key before rootfs is mounted

Alin-Adrian Anton aanton at spintech.ro
Sun Dec 17 19:00:49 PST 2006


Hi,

	I've been playing around with geli and I was wondering if anyone 
managed to actually use the feature which loads the keyfile before the 
root filesystem is mounted.

	Specifically, to use something similar in /boot/loader.conf:

geli_da1s3a_keyfile0_load="YES"
geli_da1s3a_keyfile0_type="da1s3a:geli_keyfile0"
geli_da1s3a_keyfile0_name="/boot/keys/da1s3a.key"

	If it worked, please let me know. I couldn't do it on a 6.1-REL0. 
(keeps saying password is wrong, probably because it doesn't "see" the 
keyfile). Of course, the .key file is on unencrypted media.

	I appreciate your time and suggestions.

Thanks,
-- 
Alin-Adrian Anton
GPG keyID 0x183087BA (B129 E8F4 7B34 15A9 0785  2F7C 5823 ABA0 1830 87BA)
gpg --keyserver pgp.mit.edu --recv-keys 0x183087BA

"It is dangerous to be right when the government is wrong." - Voltaire


More information about the freebsd-questions mailing list