Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 27 Jan 2017 12:33:38 -0500
From:      Shawn Webb <shawn.webb@hardenedbsd.org>
To:        Allan Jude <allanjude@freebsd.org>
Cc:        Warner Losh <imp@bsdimp.com>, Toomas Soome <tsoome@me.com>, "Ngie Cooper (yaneurabeya)" <yaneurabeya@gmail.com>, FreeBSD Current <current@freebsd.org>
Subject:   Re: gptzfsboot grew a lot after skein support was added; need knob to control bloat
Message-ID:  <20170127173338.wv6dul7zhxaaw4f4@mutt-hardenedbsd>
In-Reply-To: <444df1a4-1f27-49a8-6fa6-81f5853e6d80@freebsd.org>
References:  <A33154F2-70E1-4047-8496-7D4D85CFF292@gmail.com> <EF719374-BF9D-44EF-9F45-53B2B506047C@me.com> <CANCZdfrzOr3YdbAKRrwUXsFDhdQ3hErf1vbYSG7MdpV_m%2B=YRQ@mail.gmail.com> <444df1a4-1f27-49a8-6fa6-81f5853e6d80@freebsd.org>

next in thread | previous in thread | raw e-mail | index | archive | help

--xu7ii3maskdfee2p
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Fri, Jan 27, 2017 at 12:30:17PM -0500, Allan Jude wrote:
> On 2017-01-27 12:05, Warner Losh wrote:
> > On Fri, Jan 27, 2017 at 12:34 AM, Toomas Soome <tsoome@me.com> wrote:
> >>
> >>> On 27. jaan 2017, at 1:40, Ngie Cooper (yaneurabeya) <yaneurabeya@gma=
il.com> wrote:
> >>>
> >>> Hi,
> >>>       I tried upgrading one of my workstations and unfortunately the =
freebsd-boot partition is too small (I follow manpage directions, exactly, =
and those seem to be too small as of 10.3-RELEASE timeframe), and I don???t=
 have enough space or ability to resize the partition and make it bigger. S=
o, I???m in need of a build knob to control the bloat, and/or having an alt=
ernative boot loader without geli/skein/crypto support compiled in. Would y=
ou be opposed to the work?
> >>> Thanks,
> >>> -Ngie
> >>
> >>
> >> I do agree that since the geli knob is already there, it may do. Of co=
urse we also can think of additional knobs, but there is an issue - it wont=
 help just to exclude some files, the additional features also do sit in th=
e code, so the replacement stubs will be needed, also testing them all over=
 will take some time. And the preprocessor spaghetti really is nasty thing =
to deal with;)
> >>
> >> And then there is another issue (partly why I did the feature support =
in first place) - as the kernel does not block user from enabling the featu=
res, the user can end up facing non-bootable setup which is also not good, =
as user is using perfectly legal options, and still the whole thing is just=
 rendered unusable???
> >=20
> > I'm curious why you can't find the space for a bigger partition?
> > Almost all drives these days are partitioned with a little wasted
> > space, and that wasted space should be more than enough to cover us
> > here. Also, most drives have a swap partition that can be shrunk a
> > trivial amount to get space for this...
> >=20
> > Warner
> >=20
>=20
> I need to do some testing to make a recipe that works for it, but the
> other option is to use the ZFS bootcode area.
>=20
> ZFS it self, reserves something like 3.5 mb of space in the ZFS
> partition, for boot code. This is how we boot ZFS on MBR.
>=20
> It should be possible to use this on GPT as well, we just don't.

In the future, maybe it'd be a good idea for the installer to leave
more space (a few MB, perhaps?) between the freebsd-boot and
freebsd-swap partitions? At least, for ZFS installs.

Thanks,

--=20
Shawn Webb
Cofounder and Security Engineer
HardenedBSD

GPG Key ID:          0x6A84658F52456EEE
GPG Key Fingerprint: 2ABA B6BD EF6A F486 BE89  3D9E 6A84 658F 5245 6EEE

--xu7ii3maskdfee2p
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=Jchw
-----END PGP SIGNATURE-----

--xu7ii3maskdfee2p--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20170127173338.wv6dul7zhxaaw4f4>