GELI Swap password on boot

Michael Sierchio kudzu at tenebras.com
Thu Nov 8 00:30:36 UTC 2012


On Wed, Nov 7, 2012 at 4:20 PM, Mike Barnard <mike.barnardq at gmail.com> wrote:
> Hi,
>
> I am running FreeBSD 9.0-RELEASE and I am experiencing some strange
> behaviour with GELI.
>
> Every time I boot up my computer, I get a request to enter the Encryption
> password for swap. swap is not encrypted and should not be asking for an
> encryption password.
>
> I have checked and ensured that there are no providers for geli for the
> ada0p3 partition. Any one have pointers on what I could check for to
> rectify this.

in /etc/fstab you should have:

/dev/ada0p3.eli           none            swap    sw                      0 0

in /etc/rc.conf you should have (something like):

geli_swap_flags="-e aes -l 256 -s 4096 -d"

/etc/rc.d/encswap will generate a random password


More information about the freebsd-questions mailing list