d/freebsd-dev
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
9af2131b78
freebsd-dev/sys
History
Pawel Jakub Dawidek 9af2131b78 Teach geli how to load keyfiles before root file system is mounted. 
An example entries for loader.conf to make it possible:

geli_da0_keyfile0_load="YES"
geli_da0_keyfile0_type="da0:geli_keyfile0"
geli_da0_keyfile0_name="/boot/keys/da0.key0"
geli_da0_keyfile1_load="YES"
geli_da0_keyfile1_type="da0:geli_keyfile1"
geli_da0_keyfile1_name="/boot/keys/da0.key1"
geli_da0_keyfile2_load="YES"
geli_da0_keyfile2_type="da0:geli_keyfile2"
geli_da0_keyfile2_name="/boot/keys/da0.key2"

geli_da1s3a_keyfile0_load="YES"
geli_da1s3a_keyfile0_type="da1s3a:geli_keyfile0"
geli_da1s3a_keyfile0_name="/boot/keys/da1s3a.key"

Thanks for jhb and kan who showed me the right direction.

MFC after:	3 days
2006-02-11 13:08:24 +00:00
..
alpha Simplify system time accounting for profiling. 2006-02-08 08:09:17 +00:00
amd64 CPU time accounting speedup (step 2) 2006-02-11 09:33:07 +00:00
arm Use the correct address for the ohci device. 2006-02-11 03:58:07 +00:00
boot Remove ELF dynamic tag definitions that aren't used. Ideally, 2006-01-18 18:49:25 +00:00
bsm Merge OpenBSM 1.0 alpha 3 include file changes from contrib/openbsm/bsm 2006-02-06 01:12:46 +00:00
cam - Add a scsi_da.c and a umass.c quirk for Genesys 6-in-1 Card Reader. 2006-01-30 20:27:44 +00:00
coda - Reorder calls to vrele() after calls to vput() when the vrele is a 2006-02-01 00:25:26 +00:00
compat - Always call exec_free_args() in kern_execve() instead of doing it in all 2006-02-06 22:06:54 +00:00
conf Allow one to subset phy. If you want the kitchen sink, use device 2006-02-07 18:41:56 +00:00
contrib resolve merge conflicts 2006-02-10 19:01:02 +00:00
crypto
ddb Fix -Wundef. 2005-12-04 02:12:43 +00:00
dev Use ETHER_ADDR_LEN rather than 6. 2006-02-11 03:50:03 +00:00
doc
fs Correctly set MNTK_MPSAFE flag from the lower vnode's mount rather than 2006-02-10 18:06:49 +00:00
gdb
geom Teach geli how to load keyfiles before root file system is mounted. 2006-02-11 13:08:24 +00:00
gnu Add marker vnodes to ensure that all vnodes associated with the mount point are 2006-01-09 20:42:19 +00:00
i4b Fix -Wundef warnings found when compiling i386 LINT, GENERIC and 2005-12-05 11:58:35 +00:00
i386 CPU time accounting speedup (step 2) 2006-02-11 09:33:07 +00:00
ia64 Simplify system time accounting for profiling. 2006-02-08 08:09:17 +00:00
isa Tweak how the MD code calls the fooclock() methods some. Instead of 2005-12-22 22:16:09 +00:00
isofs/cd9660 I ran into an nfs client panic a couple of times in a row over the 2006-01-17 17:29:03 +00:00
kern CPU time accounting speedup (step 2) 2006-02-11 09:33:07 +00:00
libkern Convert function declarations to ANSI C. 2006-01-22 00:46:40 +00:00
modules Check rootvnode variable to see if we still want to ask for passphrase on 2006-02-11 12:45:01 +00:00
net Bump the MODULE_VERSION for HEAD, as the vlan(4) API is different in 2006-02-10 18:38:33 +00:00
net80211 set the mgt frame tx timer before dispatching the frame to the 2006-02-08 17:30:31 +00:00
netatalk - Store pointer to the link-level address right in "struct ifnet" 2005-11-11 16:04:59 +00:00
netatm Convert to ANSI C function declarations. 2006-01-22 01:07:11 +00:00
netgraph - Increase maximum number of interfaces to 2048. 2006-02-09 11:42:17 +00:00
netinet Set the M_ZERO flag when calling uma_zalloc() to allocate a syncache entry. 2006-02-09 21:29:02 +00:00
netinet6 Fix for an inappropriate bzero of the ICMPv6 stats. The code was zero'ing the wrong structure member but setting the correct one. 2006-02-08 07:16:46 +00:00
netipsec Fix stack corruptions on amd64. 2006-01-21 10:44:34 +00:00
netipx In spx_attach() and spx_detach(), there is no need to check whether the 2006-01-14 00:05:44 +00:00
netkey Fix stack corruptions on amd64. 2006-01-21 10:44:34 +00:00
netnatm Use sparse initializers for "struct domain" and "struct protosw", 2005-11-09 13:29:16 +00:00
netncp In ncp_sysctl_connstat(), the SLIST_FOREACH() logic to check 'error' 2006-01-14 11:40:32 +00:00
netsmb Although we check the return value of copyin(9) while determaining how 2006-01-16 17:03:21 +00:00
nfs
nfs4client Use nfs4_disconnect for connections opened with nfs4_connect. 2006-01-19 22:48:31 +00:00
nfsclient Don't log an error on tcp connection reset, even if we don't get ECONNRESET. 2006-01-20 15:07:18 +00:00
nfsserver - Reorder calls to vrele() after calls to vput() when the vrele is a 2006-02-01 00:25:26 +00:00
opencrypto
pc98 MFi386: revision 1.622. 2006-02-09 11:50:22 +00:00
pccard I don't believe these are used at all, and can be safely removed 2006-01-15 06:49:28 +00:00
pci Don't add an agp child in vgapci's attach routine if the PCIY_AGP 2006-02-01 15:45:29 +00:00
posix4 mqueue.h has been superceded by sys/mqueue.h thanks to David Xu's work. 2005-11-28 02:58:30 +00:00
powerpc Simplify system time accounting for profiling. 2006-02-08 08:09:17 +00:00
rpc Fix up some cut-n-paste damage and some out-of-date comments. 2006-01-20 15:20:41 +00:00
security Acquire vnode lock around call to VOP_GETATTR() in audit_record_write(). 2006-02-07 23:44:31 +00:00
sparc64 CPU time accounting speedup (step 2) 2006-02-11 09:33:07 +00:00
sys CPU time accounting speedup (step 2) 2006-02-11 09:33:07 +00:00
tools Fix a leftover "iwi_boot" string. 2006-01-30 16:32:08 +00:00
ufs - Reorder calls to vrele() after calls to vput() when the vrele is a 2006-02-01 00:25:26 +00:00
vm - Fix silly VI locking that is used to check a single flag. The vnode 2006-02-06 10:14:12 +00:00
Makefile add nfsclient/, nfs4client/, and rpc/ directories to the 2006-01-10 20:58:27 +00:00