GELI without passphrase on ZFS root

___ freebsd-geom@freebsd.org mailing list https://lists.freebsd.org/mailman/listinfo/freebsd-geom To unsubscribe, send any mail to "freebsd-geom-unsubscr...@freebsd.org"

GELI without passphrase on ZFS root

Hi,   Has anyone been able to achieve this?   I installed FreeBSD 11.2 using AutoZFS option with encryption turned on.  Passphrase is specified as part of install.   I want to switch to only a keyfile and no passphrase:   geli setkey -K /boot/encryption.key -P /dev/xyz   This completes, but I'm st

[Bug 232671] [gmirror] gmirror fails to recover from degraded mirror sets in some circumstances

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=232671 --- Comment #2 from Mark Johnston --- Nice. JFYI, there's a number of test cases in tests/sys/geom/class/mirror which attempt to reproduce issues like the one you described. Regarding the proposed fix, check out r306743. It aimed to fix

[Bug 232671] [gmirror] gmirror fails to recover from degraded mirror sets in some circumstances

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=232671 --- Comment #3 from Conrad Meyer --- (In reply to Mark Johnston from comment #2) Yep, I did this code inspection on CURRENT from yesterday-ish, so that revision was present. I'm not sure I want us to flip flop between STARTING and RUNNING

[Bug 232671] [gmirror] gmirror fails to recover from degraded mirror sets in some circumstances

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=232671 --- Comment #4 from Conrad Meyer --- Oh, and one more thing to consider: gmirror is really aggressive about destroying itself when it gets into a bad state. That might not be the best thing for resiliency, even if all mirrors are dead? I.

[Bug 232671] [gmirror] gmirror fails to recover from degraded mirror sets in some circumstances

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=232671 --- Comment #5 from Conrad Meyer --- I'll start cloning some bugs for the sub issues. -- You are receiving this mail because: You are the assignee for the bug. ___ freebsd-geom@freebsd.org maili

[Bug 232671] [gmirror] gmirror fails to recover from degraded mirror sets in some circumstances

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=232671 --- Comment #6 from Conrad Meyer --- @Mark, any thoughts on this from comment #1? * When a stale mirror is detected at runtime *and* we've already got a complete mirrorset (#6 above), zero out the gmirror superblock or otherwise disassocia

[Bug 232683] [gmirror] gmirror could provide much better administrative introspection into decision-making processes

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=232683 Bug ID: 232683 Summary: [gmirror] gmirror could provide much better administrative introspection into decision-making processes Product: Base System Version

[Bug 232671] [gmirror] gmirror fails to recover from degraded mirror sets in some circumstances

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=232671 Conrad Meyer changed: What|Removed |Added Blocks||232683 Referenced Bugs: https://b

[Bug 232683] [gmirror] gmirror could provide much better administrative introspection into decision-making processes

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=232683 Conrad Meyer changed: What|Removed |Added CC|g...@freebsd.org| Assignee|b...@freebsd.or

[Bug 232671] [gmirror] gmirror fails to recover from degraded mirror sets in some circumstances

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=232671 Conrad Meyer changed: What|Removed |Added Blocks||232684 Referenced Bugs: https://b

[Bug 232683] [gmirror] gmirror could provide much better administrative introspection into decision-making processes

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=232683 Conrad Meyer changed: What|Removed |Added Depends on|232684 | Referenced Bugs: https://bugs.fr

[Bug 232684] [gmirror] gmirror overly aggressive provider destruction

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=232684 Bug ID: 232684 Summary: [gmirror] gmirror overly aggressive provider destruction Product: Base System Version: CURRENT Hardware: Any OS: Any

[Bug 232683] [gmirror] gmirror could provide much better administrative introspection into decision-making processes

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=232683 Conrad Meyer changed: What|Removed |Added Depends on||232684 Referenced Bugs: https://b

[Bug 232684] [gmirror] gmirror overly aggressive provider destruction

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=232684 Conrad Meyer changed: What|Removed |Added CC|g...@freebsd.org| Assignee|b...@freebsd.or

[Bug 232684] [gmirror] gmirror overly aggressive provider destruction

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=232684 Conrad Meyer changed: What|Removed |Added Blocks|232683 | Referenced Bugs: https://bugs.fr

Re: GELI without passphrase on ZFS root

Hi! I believe geom_eli asks for passphrase, when it finds BOOT flag in metadata. It doesn't check whether you really have passphrase set up, or not, just the flag status. Therefore, you have to do geli configure -B to clear the flag. See "configure" subcommand in man geli. Best, Alaksiej Carniaj

Re: GELI without passphrase on ZFS root

Michael .. wrote this message on Thu, Oct 25, 2018 at 12:25 +0200: > Has anyone been able to achieve this? >   > I installed FreeBSD 11.2 using AutoZFS option with encryption turned on.  > Passphrase is specified as part of install. >   > I want to switch to only a keyfile and no passphrase: >   >