Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 19 Jun 2018 22:18:03 +0800
From:      thor <thor@irk.ru>
To:        freebsd-questions@freebsd.org
Subject:   Re: How to disable GELI selectively?
Message-ID:  <56706cc1-39c1-c657-5eaf-ef1d97145481@irk.ru>
In-Reply-To: <20180619214341.46a49211.freebsd.ed.lists@sumeritec.com>
References:  <07733d85-d212-8866-b3eb-56ee42340294@irk.ru> <20180619095059.7e3ef341.freebsd.ed.lists@sumeritec.com> <089a5476-0fb5-53ec-8713-033916e556c3@irk.ru> <20180619122434.4384c781.freebsd.ed.lists@sumeritec.com> <16158446-3c89-befe-7b99-644b1002699f@irk.ru> <20180619214341.46a49211.freebsd.ed.lists@sumeritec.com>

next in thread | previous in thread | raw e-mail | index | archive | help
Already tried. No effect.


On 06/19/18 21:43, Erich Dollansky wrote:
> Hi,
>
> On Tue, 19 Jun 2018 18:35:29 +0800
> thor <thor@irk.ru> wrote:
>
>>    % cat /boot/loader.conf
>> geom_eli_load="YES"
>> geli_ada0p3_keyfile0_load="YES"
>> geli_ada0p3_keyfile0_type="ada0p3:geli_keyfile0"
>> geli_ada0p3_keyfile0_name="/boot/key"
> I do not understand this ether. It should attach only the partition
> mentioned above.
>
> Can you try the following for the partitions not to attach:
>
> geli_adaXp3_keyfile0_load="NO"
>
> replacing the X with the real number.
>
> Erich
>
>
>> vfs.root.mountfrom="ufs:ada0p3.eli"
>>
>> kern.vty="sc"
>> aesni_load="YES"
>> nvidia_load="YES"
>> linux_load="YES"
>>
>>
>>
>>
>> On 06/19/18 12:24, Erich Dollansky wrote:
>>> Hi,
>>>
>>> On Tue, 19 Jun 2018 11:39:24 +0800
>>> thor <thor@irk.ru> wrote:
>>>   
>>>> The other partitions are NOT in fstab. They are mounted manually
>>>> with explicit mount and geli attach commands. Moreover, it occurs
>>>> during a boot well before init gets control and spawns the mount
>>>> process.
>>> what is then in your /boot/loader.conf?
>>>
>>> Erich
>>>
>>>   
>>>> On 06/19/18 09:50, Erich Dollansky wrote:
>>>>> Hi,
>>>>>
>>>>> On Tue, 19 Jun 2018 00:19:01 +0800
>>>>> thor <thor@irk.ru> wrote:
>>>>>      
>>>>>> Hello!
>>>>>>
>>>>>> Here I have a computer with 2 HDDs partitioned identically with
>>>>>> GELI encrypted root as in
>>>>>> https://forums.freebsd.org/threads/howto-full-disk-encryption-fast-way.19082/
>>>>>>
>>>>>> When I boot the computer it properly asks the passphrase
>>>>>> for /dev/ada0p3 and mounts /dev/ada0p3.eli as a root.
>>>>>>
>>>>>> Then, it asks "Enter passphrase for gptid...." which I don't want
>>>>>> since the second HDD should be attached manually when needed ONLY
>>>>>> and all other time it should be unmounted. I am to press enter
>>>>>> enough times to make me mad.
>>>>>>
>>>>>> What should I do?
>>>>>>      
>>>>> just take all other partitions / slices out of /etc/fstab.
>>>>>
>>>>> Erich
>>>>> _______________________________________________
>>>>> freebsd-questions@freebsd.org mailing list
>>>>> https://lists.freebsd.org/mailman/listinfo/freebsd-questions
>>>>> To unsubscribe, send any mail to
>>>>> "freebsd-questions-unsubscribe@freebsd.org"
>>>> _______________________________________________
>>>> freebsd-questions@freebsd.org mailing list
>>>> https://lists.freebsd.org/mailman/listinfo/freebsd-questions
>>>> To unsubscribe, send any mail to
>>>> "freebsd-questions-unsubscribe@freebsd.org"
>>> _______________________________________________
>>> freebsd-questions@freebsd.org mailing list
>>> https://lists.freebsd.org/mailman/listinfo/freebsd-questions
>>> To unsubscribe, send any mail to
>>> "freebsd-questions-unsubscribe@freebsd.org"
>> _______________________________________________
>> freebsd-questions@freebsd.org mailing list
>> https://lists.freebsd.org/mailman/listinfo/freebsd-questions
>> To unsubscribe, send any mail to
>> "freebsd-questions-unsubscribe@freebsd.org"
> _______________________________________________
> freebsd-questions@freebsd.org mailing list
> https://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org"




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?56706cc1-39c1-c657-5eaf-ef1d97145481>