From owner-freebsd-questions@FreeBSD.ORG Thu Feb 27 17:31:49 2014 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id EF1C6649 for ; Thu, 27 Feb 2014 17:31:48 +0000 (UTC) Received: from mail-pa0-f46.google.com (mail-pa0-f46.google.com [209.85.220.46]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id C31071008 for ; Thu, 27 Feb 2014 17:31:48 +0000 (UTC) Received: by mail-pa0-f46.google.com with SMTP id rd3so2788031pab.33 for ; Thu, 27 Feb 2014 09:31:42 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc:content-type; bh=0U1fBbAXUkw94Apo8xr6QX6uAYA7v6jh1PKRurJvrio=; b=PXkE1j4O7RM88Q3t9OjDpL6fWdL71ocodKj0A7wDzi1I4QbER1uvuCh2wV0O5UDNNa hBlX7oPVpQACWlgt49f8lpSdRso8TXxtLtOAeShS+5cMhnuLZPyCKVBZ8rANWzBd+olf 3gDudDKuT/pmMMb15zTfmEiTsc820hGGrhn+HRJaBZ7hKeIS+yMH1A81r4scXgXEno/x g3c/WVwnb5UXkNvmzAQjchlYIm0ggzhXlEKneV8XlhT4O30hOM7t87zj9/XbKeGkTpSY 32zG7zgYlmwWzeECWw349nTGXM7mBpfedVDAJezbE0/P7l9mE2K/FGt6MKLfYTcc+chY PsPQ== X-Gm-Message-State: ALoCoQnjwC5a6enWJ608aAmkkJfawc+nFpfGtT4rPgQyFSm0t5K+0XbeASbBNeTipZvBvVLuirYk MIME-Version: 1.0 X-Received: by 10.68.108.1 with SMTP id hg1mr14456426pbb.80.1393522302438; Thu, 27 Feb 2014 09:31:42 -0800 (PST) Received: by 10.68.9.233 with HTTP; Thu, 27 Feb 2014 09:31:42 -0800 (PST) X-Originating-IP: [93.221.163.170] In-Reply-To: <20140227233053.03e44b32@X220.alogt.com> References: <20140227045904.5ba67227.freebsd@edvax.de> <20140227233053.03e44b32@X220.alogt.com> Date: Thu, 27 Feb 2014 18:31:42 +0100 Message-ID: Subject: Re: Simple disk encryption for off-site backup From: "C. P. Ghost" To: Erich Dollansky Content-Type: text/plain; charset=ISO-8859-1 X-Content-Filtered-By: Mailman/MimeDel 2.1.17 Cc: Polytropon , FreeBSD Questions X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 27 Feb 2014 17:31:49 -0000 On Thu, Feb 27, 2014 at 4:30 PM, Erich Dollansky < erichsfreebsdlist@alogt.com> wrote: > There is a huge problem in geli which is not documented. If you create > a container with FreeBSD 10, FreeBSD 9 will not be able access it. You > must use the oldest version of FreeBSD which is supposed to work with > the disk to create the encrypted container. This would be 9.x in your > case. > > Erich > Thanks for the HEADSUP! Really appreciated! I was about to set up a couple of ZFS-on-GELI volumes on a test/devel machine that was just upgraded to FreeBSD 10, and planning to access them later from production servers running FreeBSD 9.2-STABLE, wrongly assuming they would be compatible. This should REALLY be documented in the 10.0-RELEASE Errata, as more people are bound to be bit by this regression. http://www.freebsd.org/releases/10.0R/errata.html Thanks, -cpghost. -- Cordula's Web. http://www.cordula.ws/