Date: Thu, 20 Mar 2008 15:23:45 +0100 From: Raphael Becker <rabe@uugrn.org> To: freebsd-stable@freebsd.org Subject: Re: Using /etc/rc.d/geli with labeled devices on 6.3 Message-ID: <20080320142345.GA6825@ma.sigsys.de> In-Reply-To: <20080318150452.GA1561@ma.sigsys.de> References: <20080318150452.GA1561@ma.sigsys.de>
next in thread | previous in thread | raw e-mail | index | archive | help
--ibTvN161/egqYuK8
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
On Tue, Mar 18, 2008 at 04:04:52PM +0100, Raphael Becker wrote:
[ getting /dev/label/FOOcrypt.eli configured through /etc/rc.d/geli ]
> How should I set up /etc/rc.conf to get this by /etc/rc.d/geli on boot?
>=20
> geli_enable=3D"YES"
> geli_devices=3D"label/FOOcrypt"
> geli_label/FOOcrypt_flags=3D"-k /root/keys/geli.FOO.key"
> ^^^^^^^^^^^^^^=20
> This won't work. How?
geli_label_FOOcrytp_flags=3D"-k /root/keys/geli.FOO.key"=20
^^^
from /etc/rc.d/geli:
provider_=3D`ltr ${provider} '/' '_'`
eval "flags=3D\${geli_${provider_}_flags}"
Seems to work. This should be documented in rc.conf(5) as ppl who use=20
'geli' for encryption might also know about and use 'glabel'.
Regards
Raphael Becker
--=20
Raphael Becker <rabe@uugrn.org> http://rabe.uugrn.org/
GnuPG: E7B2 1D66 3AF2 EDC7 9828 6D7A 9CDA 3E7B 10CA 9F2D
=2E........|.........|.........|.........|.........|.........|.........|..
--ibTvN161/egqYuK8
Content-Type: application/pgp-signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (FreeBSD)
iD8DBQFH4nNxnNo+exDKny0RAprAAKC41Lqbm/UmR1OFfMkOeuuX/5OUYACg2dVM
Rhf7QGPVt5T6RtDlSgndNkM=
=hCQQ
-----END PGP SIGNATURE-----
--ibTvN161/egqYuK8--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20080320142345.GA6825>