freebsd-dev/sbin
Pawel Jakub Dawidek ba196edbd2 By default backup geli metadata to a file. It is quite critical 512 bytes,
once it is lost, all data is gone.

Option '-B none' can by used to prevent backup. Option '-B path' can be
used to backup metadata to a different file than the default, which is
/var/backups/<prov>.eli.

The 'geli init' command also prints backup file location and gives short
procedure how to restore metadata.

The 'geli setkey' command now warns that even after passphrase change or keys
update there could be version of the master key encrypted with old
keys/passphrase in the backup file.

Add regression tests to verify that new functionality works as expected.

Update other regression tests so they don't create backup files.

Reviewed by:	keramida, rink
Dedicated to:	a friend who lost 400GB of his live by accidentally overwritting geli metadata
MFC after:	2 weeks
2008-08-29 18:10:18 +00:00
..
adjkerntz If not compiled for debugging, redirect standard input/output/error 2006-10-23 10:48:19 +00:00
atacontrol Make atacontrol(8) rebuild work when /usr is not mounted or from /rescue 2008-08-06 18:08:02 +00:00
atm Remove netatm from HEAD as it is not MPSAFE and relies on the now removed 2008-05-25 22:11:40 +00:00
badsect
bsdlabel Remove comment about "-r" flag from readlabel. "-r" is a no-op. 2008-03-23 03:01:10 +00:00
camcontrol Add SCSI READ CAPACITY support to camcontrol. The new 'readcap' subcommand 2007-09-08 20:24:12 +00:00
ccdconfig
clri Use an intermediate pointer to avoid strict alias check warnings 2007-11-20 01:55:37 +00:00
comcontrol
conscontrol
ddb DDB scripting, textdumps, output capture, etc, all will appear in 2008-08-03 14:27:06 +00:00
devd No need to be gratuitously style(9) non-compliant here, even though 2008-03-21 20:38:28 +00:00
devfs Support for filtering on major device number was removed in rev. 1.7 or 2008-06-27 09:09:50 +00:00
dhclient Run the privileged dhclient process in its own session. 2008-06-30 20:23:49 +00:00
dmesg
dump Expand dump to allow MAX_INT dump levels. 2008-05-24 05:20:46 +00:00
dumpfs Replace incomprehensive description of -m by much clearer text from OpenBSD, 2007-05-12 22:35:22 +00:00
dumpon Whitespace and style nits. 2006-10-31 22:36:49 +00:00
fdisk Add a -q[uiet] flag for scripts. 2008-07-31 00:55:29 +00:00
fdisk_pc98 Another merging from sbin/fdisk/fdisk.8. 2007-05-10 12:33:00 +00:00
ffsinfo Don't coredump when executed with -o. 2008-01-29 00:20:00 +00:00
fsck
fsck_ffs Instead of passing MNT_UPDATE, MNT_SNAPSHOT, MNT_RELOAD from 2008-08-23 01:21:10 +00:00
fsck_msdosfs Spot two more bugs WRT adherence to the local prompt style. 2008-01-31 13:22:13 +00:00
fsdb Update after function renames. 2006-10-31 22:07:29 +00:00
fsirand
gbde Remove temporary files when there are no longer needed. 2007-04-06 11:16:11 +00:00
geom By default backup geli metadata to a file. It is quite critical 512 bytes, 2008-08-29 18:10:18 +00:00
ggate The signature for a pthread function requires that it 2008-06-26 07:05:35 +00:00
growfs Fix an int overflow on very large file systems. 2007-12-17 08:03:18 +00:00
gvinum Revise markup. 2006-09-30 11:02:17 +00:00
idmapd .PATH isn't necessary here. 2006-10-15 13:51:49 +00:00
ifconfig Add support in ifconfig to control the vlan hardware filter feature. 2008-08-28 22:13:44 +00:00
init Addition style(9) change. 2007-11-20 21:25:58 +00:00
ipf This makefile builds contrib code, so I won't try to fix all the 2007-11-18 03:29:10 +00:00
ipfw Trivial typo fix. 2008-08-27 15:30:09 +00:00
iscontrol Fix typo. 2008-02-06 08:03:27 +00:00
kldconfig
kldload Mark up lkm with .Nm, since lkm is name of an api. 2007-02-13 17:06:15 +00:00
kldstat Add the full module path name to the kld_file_stat structure 2007-10-22 04:12:57 +00:00
kldunload Mark up lkm with .Nm, since lkm is name of an api. 2007-02-13 17:06:15 +00:00
ldconfig Remove unused reference to objformat.h 2007-01-25 22:38:58 +00:00
mca Markup nit. 2006-09-30 11:12:36 +00:00
md5 style(9) (verifed no-change in .o's) 2008-02-07 18:10:24 +00:00
mdconfig Add -v (verbose) option to -l command, to show size and backing store 2008-06-21 15:04:42 +00:00
mdmfs -n is used by newfs to tell "do not generate a .snap directory" instead of 2007-05-14 19:23:13 +00:00
mknod In the previous changeset a cast of myminor to u_int were 2007-06-14 03:16:16 +00:00
mksnap_ffs Note that snapshots may cause a panic on the full UFS filesystem. 2008-07-26 13:18:33 +00:00
mount Fix markup. 2008-06-03 09:43:28 +00:00
mount_autofs
mount_cd9660
mount_ext2fs Convert mount_ext2fs to a simple program which passes "-o option" to nmount(). 2007-01-28 00:51:01 +00:00
mount_hpfs
mount_msdosfs Pass "errmsg" to nmount(), so that if nmount() fails, we can get 2007-01-29 01:49:08 +00:00
mount_nfs Fix -o mntudp after the conversion to default TCP mounts 2008-07-10 17:53:10 +00:00
mount_ntfs o Fix Dd format. 2007-11-18 09:18:20 +00:00
mount_nullfs
mount_reiserfs
mount_std
mount_udf
mount_unionfs Added whiteout behavior option. ``-o whiteout=always'' is default mode 2007-10-14 13:55:38 +00:00
natd Add exit_delay parameter to control daemon exit delay after signal. 2008-06-22 22:14:02 +00:00
newfs Replace reference from vinum.8 to gvinum.8, it was advised in the PR to 2008-03-21 20:16:25 +00:00
newfs_msdos Be more accurate in the maximum filesize, it's 4GB not 4.3GB. 2007-12-09 13:34:10 +00:00
nfsiod
nos-tun
pfctl Link pf 4.1 to the build: 2007-07-03 12:46:08 +00:00
pflogd
ping Commit IPv6 support for FAST_IPSEC to the tree. 2007-07-01 12:08:08 +00:00
ping6 Implement -R support, similar to ping(8)'s -A. 2008-08-27 15:01:23 +00:00
quotacheck Drag this code kicking and screaming into the twenty-first century. 2008-07-02 15:51:59 +00:00
rcorder Document the misleading nature of the REQUIRE line. The patch in 2008-06-09 09:07:58 +00:00
reboot - Sweep the boot(8) man page after addition of boot.config(5). 2007-08-18 07:58:36 +00:00
recoverdisk Improve reporting in recoverdisk a good deal. 2007-04-23 12:17:27 +00:00
restore Fix nits pointed out in PR bin/39905 that have not already been 2008-05-23 19:17:08 +00:00
route Fix printing of sockaddr prefixes in verbose mode. 2008-04-10 12:16:20 +00:00
routed Update routed to use the RFC 3678 protocol-independent multicast API. Use 2008-07-30 11:56:15 +00:00
rtsol
savecore Compare kernel dump header magic with textdump magic using strncmp() 2007-12-27 21:28:48 +00:00
sconfig Do not set IFF_DEBUG directly from the driver. 2008-06-30 21:18:27 +00:00
setkey o Allow setkey(8) to recognize esp as a protocoal name for spdadd. 2008-01-12 20:00:23 +00:00
shutdown
slattach
spppcontrol Use a cast that doesn't create a compiler warning. 2007-11-18 00:33:23 +00:00
startslip
sunlabel
swapon Add a -q flag to swapon(8) to suppress informational messages. Use it in 2008-06-23 22:17:08 +00:00
sysctl The sysctl(8) program exits on some errors and only emits warnings on 2008-06-23 22:06:28 +00:00
tunefs o s/filesystem/file system/g. 2007-09-23 16:06:37 +00:00
umount
Makefile Obsolete bsdlabel(8) on powerpc. Use gpart(8) instead. 2008-07-06 20:57:35 +00:00
Makefile.inc