Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 19 Dec 2006 13:02:03 +0000
From:      Chris <phatfish@gmail.com>
To:        aanton@spintech.ro
Cc:        freebsd-questions@freebsd.org
Subject:   Re: geli load key before rootfs is mounted
Message-ID:  <718eeb340612190502k4a378889g2d1327316928da8a@mail.gmail.com>
In-Reply-To: <4585FDC9.2080802@spintech.ro>
References:  <4585FDC9.2080802@spintech.ro>

next in thread | previous in thread | raw e-mail | index | archive | help
I think you maybe running into a bug in 6.1 where the keyboard wont respond
during the boot process. Of course you don't notice because keystrokes have
no visual feedback at password input.

Try adding this line to "/boot/device.hint" on your boot media:

hint.kbdmux.0.disabled="1"

I'm booting an encrypted root file system fine with GELI.

On 18/12/06, Alin-Adrian Anton <aanton@spintech.ro> wrote:
> I've been playing around with geli and I was wondering if anyone
> managed to actually use the feature which loads the keyfile before the
> root filesystem is mounted.
>
> Specifically, to use something similar in /boot/loader.conf:
>
> geli_da1s3a_keyfile0_load="YES"
> geli_da1s3a_keyfile0_type="da1s3a:geli_keyfile0"
> geli_da1s3a_keyfile0_name="/boot/keys/da1s3a.key"
>
> If it worked, please let me know. I couldn't do it on a 6.1-REL0.
> (keeps saying password is wrong, probably because it doesn't "see" the
> keyfile). Of course, the .key file is on unencrypted media.
>
> I appreciate your time and suggestions.
>
> Thanks,



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?718eeb340612190502k4a378889g2d1327316928da8a>