svn commit: r363363 - head/lib/geom/eli

Fabian Keil freebsd-listen at fabiankeil.de
Tue Jul 21 13:56:05 UTC 2020


Gordon Bergling <gbe at FreeBSD.org> wrote:

> Author: gbe (doc committer)
> Date: Mon Jul 20 13:24:50 2020
> New Revision: 363363
> URL: https://svnweb.freebsd.org/changeset/base/363363
> 
> Log:
>   geli(8): Add an example on how to use geli(8) with a file as encrypted storage
>   
>   Reviewed by:	bcr (mentor)
>   Approved by:	bcr (mentor)
>   MFC after:	1 week
>   Differential Revision:	https://reviews.freebsd.org/D25741
> 
> Modified:
>   head/lib/geom/eli/geli.8
> 
> Modified: head/lib/geom/eli/geli.8
> ==============================================================================
> --- head/lib/geom/eli/geli.8	Mon Jul 20 13:01:19 2020	(r363362)
> +++ head/lib/geom/eli/geli.8	Mon Jul 20 13:24:50 2020	(r363363)
[...]
> +This key should be protected by a passphrase, which
> +is requested when geli init is called.
> +.Bd -literal -offset indent
> +# dd if=/dev/random of=/root/private0.key bs=64 count=1
> +# geli init -K /root/private0.key -s 4096 /dev/md0
> +Enter new passphrase:
> +Reenter new passphrase:
> +# dd if=/dev/random of=/dev/md0.eli bs=1m

There seems to be a "geli attach ..." missing after
the "geli init ...".

> +The call of geli attach will ask for the passphrase.
> +It is recommended to do this procedure after the boot, because otherwise
> +the boot process would be waiting for the passphrase input.
> +.Bd -literal -offset indent
> +# geli attach -k /root/private0.key /dev/md0
> +Enter new passphrase:

The expected prompt is just "Enter passphrase:".

Fabian
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 195 bytes
Desc: OpenPGP digital signature
URL: <http://lists.freebsd.org/pipermail/svn-src-all/attachments/20200721/954d42ee/attachment.sig>


More information about the svn-src-all mailing list