Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 30 May 2016 10:41:28 +0000
From:      bugzilla-noreply@freebsd.org
To:        freebsd-bugs@FreeBSD.org
Subject:   [Bug 209856] GELI-encrypted nvd0 doesn't get automounted at boot
Message-ID:  <bug-209856-8@https.bugs.freebsd.org/bugzilla/>

next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D209856

            Bug ID: 209856
           Summary: GELI-encrypted nvd0 doesn't get automounted at boot
           Product: Base System
           Version: 10.3-RELEASE
          Hardware: amd64
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: kern
          Assignee: freebsd-bugs@FreeBSD.org
          Reporter: ciaby@autistici.org
                CC: freebsd-amd64@FreeBSD.org
                CC: freebsd-amd64@FreeBSD.org

I have a server running with multiple disks, all encrypted with the same
keyfile and password.=20
I have these three option in loader.conf:
geom_eli_load=3D"YES"
geom_eli_passphrase_prompt=3D"YES"
geom_mirror_load=3D"YES"

These allow me to type the password only once, at the bootloader prompt, and
have all the disks automatically mounted at boot.
Everything works fine, but then I added a NVMe device to speed up the diffe=
rent
ZFS pools, using it as a SLOG and CACHE device.
The problem is that I added these lines to loader.conf, to make sure that t=
he
nvd0 device gets mounted before the system tries to import the pools:
geli_nvd0_keyfile0_load=3D"YES"
geli_nvd0_keyfile0_type=3D"nvd0:geli_keyfile0"
geli_nvd0_keyfile0_name=3D"/boot/encryption.key"

It's exactly the same as all the others disks, but it doesn't work.
Working config:
geli_ada0p4_keyfile0_load=3D"YES"
geli_ada0p4_keyfile0_type=3D"ada0p4:geli_keyfile0"
geli_ada0p4_keyfile0_name=3D"/boot/encryption.key"
geli_ada1p4_keyfile0_load=3D"YES"
geli_ada1p4_keyfile0_type=3D"ada1p4:geli_keyfile0"
geli_ada1p4_keyfile0_name=3D"/boot/encryption.key"
[...]

What could be the problem? I checked the kernel log, the nvd0 device gets
recognized _before_ the other disks, so it should be automatically
mounted/decrypted like the other ones.

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-209856-8>