From owner-freebsd-questions@FreeBSD.ORG Thu Sep 6 16:20:53 2007 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 407BC16A41B for ; Thu, 6 Sep 2007 16:20:53 +0000 (UTC) (envelope-from mymailfloods@googlemail.com) Received: from nz-out-0506.google.com (nz-out-0506.google.com [64.233.162.227]) by mx1.freebsd.org (Postfix) with ESMTP id 0139513C46B for ; Thu, 6 Sep 2007 16:20:52 +0000 (UTC) (envelope-from mymailfloods@googlemail.com) Received: by nz-out-0506.google.com with SMTP id l8so144768nzf for ; Thu, 06 Sep 2007 09:20:52 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlemail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:to:subject:mime-version:content-type; bh=NbcGQJB9YNmqGJZ4vZKCT/zkt8O37GbdbEh3d1W+Ygc=; b=HWWug/vkXnomddKWfazqirWOYjnLqfnn4XqoGYVxPH8OaweO3zXG9qitrqHEP2yL9JKH1GTyIG9UUdVKKV0e7uvAPXdGVguBa+daughYO9GJgiXt4zIhw2GBCNG7TbeNBli45L3pRunVdJ4NRaJK4+7DoB+VmDkpvFpQsppBnwo= DomainKey-Signature: a=rsa-sha1; c=nofws; d=googlemail.com; s=beta; h=received:message-id:date:from:to:subject:mime-version:content-type; b=oeHkrklvc5V2eep4JPCPYPlwQwIJVXcSvcmyBpd034vJZzpllIYVLdAo6tBr1QuehbEBHwLB736QugHxBeQXa7cAk5apnsI2X+hYI+nCDgUdufQWaxjta8OLLAIKyNbT6EvfhU4eniCh0lPFi1kRaqVZEJRi18mGWW+66nmYlzU= Received: by 10.114.24.1 with SMTP id 1mr62884wax.1189094017797; Thu, 06 Sep 2007 08:53:37 -0700 (PDT) Received: by 10.115.32.5 with HTTP; Thu, 6 Sep 2007 08:53:37 -0700 (PDT) Message-ID: Date: Thu, 6 Sep 2007 17:53:37 +0200 From: "Thomas Hobbes" To: freebsd-questions@freebsd.org MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Content-Disposition: inline X-Content-Filtered-By: Mailman/MimeDel 2.1.5 Subject: Encrypting mirrored device with geli fails X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 06 Sep 2007 16:20:53 -0000 # uname -a FreeBSD 6.2-RELEASE FreeBSD 6.2-RELEASE #0: Fri Jan 12 10:40:27 UTC 2007 root@dessler.cse.buffalo.edu:/usr/obj/usr/src/sys/GENERIC i386 # cat /boot/loader.conf beastie_disable="YES" geom_eli_load="YES" geom_mirror_load="YES" padlock_load="YES" Swap space is encrypted by appending '.eli' to /dev/mirror/gm0s1b in /etc/fstab. According to the ouput of swapinfo that works fine. /dev/mirror/gm0s1a is mounted on / /dev/mirror/gm0s1d is mounted on /var /dev/mirror/gm0s1e is mounted on /usr /dev/mirror/gm0s1f is mounted on /crypt I was trying to encrypt /dev/mirror/gm0s1f but a "MD5 mismatch" occurred: # umount /crypt # dd if=/dev/random of=/root/gm0s1f.key bs=64 count=1 1+0 records in 1+0 records out 64 bytes transferred in 0.000580 secs (110331 bytes/sec) # geli init -K /root/gm0s1f.key -l 256 -s 4096 /dev/mirror/gm0s1f Enter new passphrase: Reenter new passphrase: # geli attach -k /root/gm0s1f.key /dev/mirror/gm0s1f MD5 hash mismatch for /dev/mirror/gm0s1f. I don't know what I'm doing wrong. Was anybody successful in this respect? I'd appreciate every hint.