Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 18 Sep 2020 21:06:52 -0700
From:      David Christensen <dpchrist@holgerdanske.com>
To:        freebsd-questions@freebsd.org
Subject:   Re: Create new geli file system using existing key
Message-ID:  <fef7fd7a-2f6c-0d09-e1e7-8bcd1589ed9e@holgerdanske.com>
In-Reply-To: <CAN6yY1uE-gfijR8n8+A0k6ufB=6EYEc6RbgbgpXj+V=80GOHPA@mail.gmail.com>
References:  <CAN6yY1uE-gfijR8n8+A0k6ufB=6EYEc6RbgbgpXj+V=80GOHPA@mail.gmail.com>

Next in thread | Previous in thread | Raw E-Mail | Index | Archive | Help
On 2020-09-18 15:43, Kevin Oberman wrote:
> I suspect the answer to this is "you can't" and I can understand some
> strong arguments against it, but I have a case where it would be handy and
> not a security risk.
> 
> Can I initialize a GELI partition using the same key I am currently using
> for teh file system it is replacing? I am moving to a new computer and
> would love to keep the key (not pass phrase) I am currently using as it
> will greatly simplify my backup procedure.
> 
> I could dd copy the existing raw, encrypted partition, but my new system
> has a larger disk and dd of a partition results in the partition being
> resized to match the source partition size.
> --
> Kevin Oberman, Part time kid herder and retired Network Engineer
> E-mail: rkoberman@gmail.com
> PGP Fingerprint: D03FB98AFA78E3B78C1694B318AB39EF1B055683

If by "key" you mean the GELI metadata, perhaps 'geli backup...' on the 
old provider and 'gpart create...', 'gpart add...', 'geli restore...', 
'geli resize...', 'geli setkey...', and 'geli delkey...'  on the new 
disk would meet your needs (?).  But, I would caution against installing 
both disks into the same system.


I am curious -- how does having the same GELI metadata simplify your 
backup procedure?


David



Want to link to this message? Use this URL: <http://docs.FreeBSD.org/cgi/mid.cgi?fef7fd7a-2f6c-0d09-e1e7-8bcd1589ed9e>