From owner-freebsd-stable@FreeBSD.ORG Thu Mar 20 14:23:34 2008 Return-Path: Delivered-To: freebsd-stable@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id F3B20106564A for ; Thu, 20 Mar 2008 14:23:33 +0000 (UTC) (envelope-from rabe@uugrn.org) Received: from mail.uugrn.org (mail.uugrn.org [195.49.138.123]) by mx1.freebsd.org (Postfix) with ESMTP id 6DF628FC33 for ; Thu, 20 Mar 2008 14:23:33 +0000 (UTC) (envelope-from rabe@uugrn.org) Received: from rabe.uugrn.org (root@rabe.uugrn.org [195.49.138.102]) by mail.uugrn.org (8.13.8/8.13.8) with ESMTP id m2KENMXm074322 for ; Thu, 20 Mar 2008 15:23:32 +0100 (CET) (envelope-from rabe@uugrn.org) Received: from daemon.ma.sigsys.de (rabe@rabe.uugrn.org [195.49.138.102]) by rabe.uugrn.org (8.13.8/8.13.8) with ESMTP id m2KENLj7074295 for ; Thu, 20 Mar 2008 15:23:21 +0100 (CET) (envelope-from rabe@uugrn.org) Received: from daemon.ma.sigsys.de (localhost.ma.sigsys.de [127.0.0.1]) by daemon.ma.sigsys.de (8.14.2/8.13.1) with ESMTP id m2KENji2007874 for ; Thu, 20 Mar 2008 15:23:45 +0100 (CET) (envelope-from rabe@uugrn.org) Received: (from rabe@localhost) by daemon.ma.sigsys.de (8.14.2/8.14.2/Submit) id m2KENjC4007873 for freebsd-stable@freebsd.org; Thu, 20 Mar 2008 15:23:45 +0100 (CET) (envelope-from rabe@uugrn.org) X-Authentication-Warning: daemon.ma.sigsys.de: rabe set sender to rabe@uugrn.org using -f Date: Thu, 20 Mar 2008 15:23:45 +0100 From: Raphael Becker To: freebsd-stable@freebsd.org Message-ID: <20080320142345.GA6825@ma.sigsys.de> References: <20080318150452.GA1561@ma.sigsys.de> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="ibTvN161/egqYuK8" Content-Disposition: inline In-Reply-To: <20080318150452.GA1561@ma.sigsys.de> User-Agent: Mutt/1.4.2.3i Subject: Re: Using /etc/rc.d/geli with labeled devices on 6.3 X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 20 Mar 2008 14:23:34 -0000 --ibTvN161/egqYuK8 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Tue, Mar 18, 2008 at 04:04:52PM +0100, Raphael Becker wrote: [ getting /dev/label/FOOcrypt.eli configured through /etc/rc.d/geli ] > How should I set up /etc/rc.conf to get this by /etc/rc.d/geli on boot? >=20 > geli_enable=3D"YES" > geli_devices=3D"label/FOOcrypt" > geli_label/FOOcrypt_flags=3D"-k /root/keys/geli.FOO.key" > ^^^^^^^^^^^^^^=20 > This won't work. How? geli_label_FOOcrytp_flags=3D"-k /root/keys/geli.FOO.key"=20 ^^^ from /etc/rc.d/geli: provider_=3D`ltr ${provider} '/' '_'` eval "flags=3D\${geli_${provider_}_flags}" Seems to work. This should be documented in rc.conf(5) as ppl who use=20 'geli' for encryption might also know about and use 'glabel'. Regards Raphael Becker --=20 Raphael Becker http://rabe.uugrn.org/ GnuPG: E7B2 1D66 3AF2 EDC7 9828 6D7A 9CDA 3E7B 10CA 9F2D =2E........|.........|.........|.........|.........|.........|.........|.. --ibTvN161/egqYuK8 Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2 (FreeBSD) iD8DBQFH4nNxnNo+exDKny0RAprAAKC41Lqbm/UmR1OFfMkOeuuX/5OUYACg2dVM Rhf7QGPVt5T6RtDlSgndNkM= =hCQQ -----END PGP SIGNATURE----- --ibTvN161/egqYuK8--