From owner-freebsd-current@FreeBSD.ORG  Tue Mar 31 07:25:54 2009
Return-Path: <owner-freebsd-current@FreeBSD.ORG>
Delivered-To: freebsd-current@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 3385F106564A
	for <freebsd-current@freebsd.org>; Tue, 31 Mar 2009 07:25:54 +0000 (UTC)
	(envelope-from crapsh@monkeybrains.net)
Received: from ape.monkeybrains.net (mail.monkeybrains.net [208.69.40.9])
	by mx1.freebsd.org (Postfix) with ESMTP id 1D5BF8FC12
	for <freebsd-current@freebsd.org>; Tue, 31 Mar 2009 07:25:54 +0000 (UTC)
	(envelope-from crapsh@monkeybrains.net)
Received: from [192.168.2.105] (adsl-76-203-172-200.dsl.pltn13.sbcglobal.net
	[76.203.172.200]) (authenticated bits=0)
	by ape.monkeybrains.net (8.14.1/8.14.1) with ESMTP id n2V7PrMV017841
	(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO)
	for <freebsd-current@freebsd.org>; Tue, 31 Mar 2009 00:25:53 -0700 (PDT)
	(envelope-from crapsh@monkeybrains.net)
Message-ID: <49D1C57C.9050202@monkeybrains.net>
Date: Tue, 31 Mar 2009 00:25:48 -0700
From: Rudy <crapsh@monkeybrains.net>
User-Agent: Thunderbird 2.0.0.19 (X11/20090105)
MIME-Version: 1.0
To: freebsd-current@freebsd.org
References: <49D1B7CD.1080702@monkeybrains.net>
In-Reply-To: <49D1B7CD.1080702@monkeybrains.net>
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
X-Virus-Scanned: ClamAV version 0.94.2,
	clamav-milter version 0.94.2 on pita.monkeybrains.net
X-Virus-Status: Clean
Subject: Re: Geli in a Jail? geli: Cannot lock memory: Operation not
	permitted.
X-BeenThere: freebsd-current@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Discussions about the use of FreeBSD-current
	<freebsd-current.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-current>, 
	<mailto:freebsd-current-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-current>
List-Post: <mailto:freebsd-current@freebsd.org>
List-Help: <mailto:freebsd-current-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-current>,
	<mailto:freebsd-current-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 31 Mar 2009 07:25:54 -0000

Rudy wrote:
> I could't init a geli in a jail.  Anyone know how?
>
> Here is what I tried
>
> jail# geli init -s 4096 -K /root/gelitest.key /dev/zvol/tank/testgeli
> geli: Cannot lock memory: Operation not permitted.
>   

Running truss, it seems to be mlockall...

mlockall(0x2,0x7fffffffb240,0x800e058b0,0x800ac1c9c,0xfffffffeee007d40,0x7fffffffadb8)
ERR#1 'Operation not permitted'
geli: write(2,"geli: ",6)                 = 6 (0x6)
Cannot lock memory: Operation not permitted.write(2,"Cannot lock memory:
Operation no"...,44) = 44 (0x2c)


Is this a mlock() in jail issue or an can't talk to a kernel module issue?

Rudy