Boot-time pass for geli on 7.0-BETA2 (and RELENG_7) not working for me.

Marc Olzheim marcolz at
Tue Nov 6 18:48:17 PST 2007


I can't get the kernel to accept my passphrase at boot time.

Excerpt from dmesg:


FreeBSD 7.0-BETA2 #0: Tue Nov  6 15:06:03 UTC 2007
    root at
Preloaded elf kernel "/boot/kernel/kernel" at 0xffffffff808a5000.
Preloaded elf obj module "/boot/kernel/geom_eli.ko" at 0xffffffff808a5288.
Preloaded elf obj module "/boot/kernel/crypto.ko" at 0xffffffff808a58f8.
Preloaded elf obj module "/boot/kernel/zlib.ko" at 0xffffffff808a5f60.
Preloaded ad4s3e:keyfile0 "/boot/keys/ad4s3e.key" at 0xffffffff808a64c8.
Calibrating clock(s) ... i8254 clock: 1193193 Hz
CLK_USE_I8254_CALIBRATION not specified - using default frequency
Timecounter "i8254" frequency 1193182 Hz quality 0
Calibrating TSC clock ... TSC clock: 1496263977 Hz
CPU: Intel(R) Core(TM)2 Duo CPU     T5250  @ 1.50GHz (1496.26-MHz K8-class CPU)
  Origin = "GenuineIntel"  Id = 0x6fd  Stepping = 13
  AMD Features=0x20100800<SYSCALL,NX,LM>
  AMD Features2=0x1<LAHF>
  Cores per package: 2
usable memory = 2128379904 (2029 MB)


ad4: 114473MB <FUJITSU MHW2120BH 8918> at ata2-master SATA150
ad4: 234441648 sectors [232581C/16H/63S] 16 sectors/interrupt 1 depth queue
GEOM: new disk ad4
battery0: battery initialization done, tried 1 times
GEOM_LABEL: Label for provider ad4s4 is ntfs/HP_RECOVERY.
Enter passphrase for ad4s3e: (probe4:sbp0:0:4:0): error 22
(probe4:sbp0:0:4:0): Unretryable Error
(probe5:sbp0:0:5:0): error 22
(probe5:sbp0:0:5:0): Unretryable Error
(probe6:sbp0:0:6:0): error 22
(probe6:sbp0:0:6:0): Unretryable Error
(probe0:sbp0:0:0:0): error 22
(probe0:sbp0:0:0:0): Unretryable Error
(probe1:sbp0:0:1:0): error 22
(probe1:sbp0:0:1:0): Unretryable Error
(probe2:sbp0:0:2:0): error 22
(probe2:sbp0:0:2:0): Unretryable Error
(probe3:sbp0:0:3:0): error 22
(probe3:sbp0:0:3:0): Unretryable Error

GEOM_ELI: Wrong key for ad4s3e. Tries left: 2.
Enter passphrase for ad4s3e: 
GEOM_ELI: Wrong key for ad4s3e. Tries left: 1.
Enter passphrase for ad4s3e: 
GEOM_ELI: Wrong key for ad4s3e. No tries left.
SMP: AP CPU #1 Launched!
cpu1 AP:
     ID: 0x01000000   VER: 0x00050014 LDR: 0x00000000 DFR: 0xffffffff
  lint0: 0x00010700 lint1: 0x00000400 TPR: 0x00000000 SVR: 0x000001ff
  timer: 0x000200ef therm: 0x00010000 err: 0x00010000 pcm: 0x00010000


Trying to mount root from ufs:/dev/ad4s3a
start_init: trying /sbin/init
Loading configuration files.
No suitable dump device was found.
Entropy harvesting:
Starting file system checks:
Setting hostuuid: 434e4637-3332-3352-3451-001b24850b51.
Setting hostid: 0x55ee28a8.
Mounting local file systems:


But when trying after boot, "geli attach -k /boot/keys/ad4s3e.key":

GEOM_ELI: Device ad4s3e.eli created.
GEOM_ELI: Encryption: AES-CBC 128
GEOM_ELI:     Crypto: software

Then it works fine.

Any ideas ?

Another issue with BETA1.5 was that when disklabeling /dev/ad4s3e.eli
into multiple slices, after newfsing and mounting, I could create files
and fsck the filesystem, but as soon as I created a directory, it caused
a panic. I didn't see that after cvsuping to RELENG_7 then though, so i
assume something was already fixed in that department.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url :

More information about the freebsd-stable mailing list