How to change passphrase for FreeBSD 11.0 encrypted ZFS root?
Jov
amutu at amutu.com
Wed Jun 14 16:28:03 UTC 2017
Not a ufs?
What's the output of gpart show?
Jov
2017年6月15日 12:13 AM,"David Christensen" <dpchrist at holgerdanske.com>写道:
On 06/14/2017 05:35 AM, Jov wrote:
> On 06/14/2017 2:20 PM,"David Christensen wrote:
>
>> I issued the following command:
>>
>> toor at freebsd:/root # geli setkey -n 0 /dev/ada0s1d Enter new
>> passphrase: Reenter new passphrase: Note, that the master key
>> encrypted with old keys and/or passphrase may still exists in a
>> metadata backup file.
>>
>> Now when I boot, I enter the passphrase at the boot menu, a bunch
>> of stuff scrolls by, and then I see:
>>
>> Enter passphrase for ada0s1d:
>>
>> I enter the new passphrase and I see:
>>
>> GEOM_ELI: Wrong key for ada0s1d. Tries left: 2. Enter passphrase
>> for ada0s1d:
>>
>
> You change the passphrase without key file? the default geli boot
> will read key files in /boot dir,the key file name is set in
> /boot/loader.conf, you shoud remove the settings if you not set it.
>
Thank you for the clue.
I would now like to edit /boot/loader, to see if I can adjust the settings
so that GELI will decrypt my root partition using just a passphrase.
When I boot the FreeBSD 11.0 i386 installer into single-user mode:
# mount /dev/ada0s1a /mnt
mount /dev/ada0s1a: Invalid argument
Why is mount(8) complaining?
# ls -l /dev/ada0s1a
crw-r----- 1 root operator 0x5b Jun 14 15:53 /dev/ada0s1a
David
_______________________________________________
freebsd-questions at freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscribe at freebsd.org"
More information about the freebsd-questions
mailing list