From owner-freebsd-current@freebsd.org Tue Jun 30 12:22:51 2020 Return-Path: Delivered-To: freebsd-current@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id F2AE03493A5 for ; Tue, 30 Jun 2020 12:22:51 +0000 (UTC) (envelope-from tsoome@me.com) Received: from mr85p00im-ztdg06011201.me.com (mr85p00im-ztdg06011201.me.com [17.58.23.181]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 49x3Qz1pKnz4Lyd for ; Tue, 30 Jun 2020 12:22:51 +0000 (UTC) (envelope-from tsoome@me.com) Received: from nazgul.lan (148-52-235-80.sta.estpak.ee [80.235.52.148]) by mr85p00im-ztdg06011201.me.com (Postfix) with ESMTPSA id AB001400D7B; Tue, 30 Jun 2020 12:22:48 +0000 (UTC) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 13.4 \(3608.80.23.2.2\)) Subject: Re: Geli encryption issue on r362779 From: Toomas Soome In-Reply-To: <01000173051a6c1b-ceec77e5-6fee-4969-ada0-70ad8789e1dd-000000@email.amazonses.com> Date: Tue, 30 Jun 2020 15:22:46 +0300 Cc: freebsd-current@freebsd.org Content-Transfer-Encoding: quoted-printable Message-Id: References: <01000173051a6c1b-ceec77e5-6fee-4969-ada0-70ad8789e1dd-000000@email.amazonses.com> To: lausts@acm.org X-Mailer: Apple Mail (2.3608.80.23.2.2) X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.235, 18.0.687 definitions=2020-06-30_06:2020-06-30, 2020-06-30 signatures=0 X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 suspectscore=1 malwarescore=0 phishscore=0 bulkscore=0 spamscore=0 clxscore=1015 mlxscore=0 mlxlogscore=999 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-2004280000 definitions=main-2006300092 X-Rspamd-Queue-Id: 49x3Qz1pKnz4Lyd X-Spamd-Bar: ---- X-Spamd-Result: default: False [-4.09 / 15.00]; RCVD_VIA_SMTP_AUTH(0.00)[]; FREEMAIL_FROM(0.00)[me.com]; MV_CASE(0.50)[]; TO_DN_NONE(0.00)[]; R_SPF_ALLOW(-0.20)[+ip4:17.58.0.0/16]; DKIM_TRACE(0.00)[me.com:+]; RCPT_COUNT_TWO(0.00)[2]; DMARC_POLICY_ALLOW(-0.50)[me.com,quarantine]; NEURAL_HAM_SHORT(-0.48)[-0.484]; RECEIVED_SPAMHAUS_PBL(0.00)[80.235.52.148:received]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+]; FREEMAIL_ENVFROM(0.00)[me.com]; MID_RHS_MATCH_FROM(0.00)[]; ASN(0.00)[asn:714, ipnet:17.58.16.0/20, country:US]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.01)[-1.007]; R_DKIM_ALLOW(-0.20)[me.com:s=1a1hai]; RCVD_IN_DNSWL_LOW(-0.10)[17.58.23.181:from]; FROM_HAS_DN(0.00)[]; NEURAL_HAM_LONG(-1.00)[-0.998]; MIME_GOOD(-0.10)[text/plain]; DWL_DNSWL_LOW(-1.00)[me.com:dkim]; TO_MATCH_ENVRCPT_SOME(0.00)[]; RWL_MAILSPIKE_POSSIBLE(0.00)[17.58.23.181:from]; RCVD_COUNT_TWO(0.00)[2]; RCVD_TLS_ALL(0.00)[] X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.33 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 30 Jun 2020 12:22:52 -0000 > On 30. Jun 2020, at 15:01, Thomas Laus wrote: >=20 > This is a repost to this list because of my submission email address = did > not match the one on record. >=20 > =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D > List: >=20 > I just upgraded a couple of computers from r362220 to r362779 and have > booting issue on my Core2 duo laptop with the passphrase unlocking the > encrypted partition. If I type in the correct passphrase, my laptop > reboots. If I type in an incorrect one, it prompts me to enter = another > one. On my i5 Skylake desktop, everything works as expected. I had = to > copy an older 'gptzfsboot' file from a distribution CD to allow me to > boot my laptop. >=20 > The Core2 duo doesn't have the hardware encryption feature and uses > software emulation of AESNI. The i5 has the hardware encryption > feature. Once I copied the old 'gptzfsboot' file to my laptop, it = boots OK. >=20 > Tom >=20 The boot bits do not use hardware encryption at all, so it must be = something else. Unfortunately testing it is a bit annoying and time = consuming task, but we should go through it if we want to get to the = bottom of the issue. It means, we need to insert printf=E2=80=99s to the = code to see how far we get and why we end up with reboot. Please let me = know when you can spend time with testing. rgds, toomas=