Date: Thu, 15 Jun 2017 00:28:01 +0800 From: Jov <amutu@amutu.com> To: David Christensen <dpchrist@holgerdanske.com> Cc: freebsd-questions@freebsd.org Subject: Re: How to change passphrase for FreeBSD 11.0 encrypted ZFS root? Message-ID: <CADyrUxN_QW0StUvRwKFC9KwkfErhn6YBBxeDYhWxxGz-SWVC0w@mail.gmail.com> In-Reply-To: <CADyrUxMXoDMkumHUSU3=vMSU-PwXyJs73utph8KSaUeoz32Tdw@mail.gmail.com> References: <1fb7f3d1-dfb5-ab75-ab75-12dcc81423ca@holgerdanske.com> <CADyrUxNgfu-g24hcQA9Fc-YATTJA0tmkq%2BN9u3Rta%2B1-Cp%2B=hw@mail.gmail.com> <b1143059-fe17-e024-4e6d-d6dfd4e56464@holgerdanske.com> <CADyrUxNwxNHqWCDXCezCgSWwGmOdshzZZnS09cepF5FZWx1=YA@mail.gmail.com> <CADyrUxMXoDMkumHUSU3=vMSU-PwXyJs73utph8KSaUeoz32Tdw@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
Not a ufs? What's the output of gpart show? Jov 2017=E5=B9=B46=E6=9C=8815=E6=97=A5 12:13 AM=EF=BC=8C"David Christensen" <dp= christ@holgerdanske.com>=E5=86=99=E9=81=93=EF=BC=9A On 06/14/2017 05:35 AM, Jov wrote: > On 06/14/2017 2:20 PM=EF=BC=8C"David Christensen wrote: > >> I issued the following command: >> >> toor@freebsd:/root # geli setkey -n 0 /dev/ada0s1d Enter new >> passphrase: Reenter new passphrase: Note, that the master key >> encrypted with old keys and/or passphrase may still exists in a >> metadata backup file. >> >> Now when I boot, I enter the passphrase at the boot menu, a bunch >> of stuff scrolls by, and then I see: >> >> Enter passphrase for ada0s1d: >> >> I enter the new passphrase and I see: >> >> GEOM_ELI: Wrong key for ada0s1d. Tries left: 2. Enter passphrase >> for ada0s1d: >> > > You change the passphrase without key file=EF=BC=9F the default geli boot > will read key files in /boot dir=EF=BC=8Cthe key file name is set in > /boot/loader.conf, you shoud remove the settings if you not set it. > Thank you for the clue. I would now like to edit /boot/loader, to see if I can adjust the settings so that GELI will decrypt my root partition using just a passphrase. When I boot the FreeBSD 11.0 i386 installer into single-user mode: # mount /dev/ada0s1a /mnt mount /dev/ada0s1a: Invalid argument Why is mount(8) complaining? # ls -l /dev/ada0s1a crw-r----- 1 root operator 0x5b Jun 14 15:53 /dev/ada0s1a David _______________________________________________ freebsd-questions@freebsd.org mailing list https://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org= "
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CADyrUxN_QW0StUvRwKFC9KwkfErhn6YBBxeDYhWxxGz-SWVC0w>