Pawel Jakub Dawidek 9af2131b78 Teach geli how to load keyfiles before root file system is mounted. ...

An example entries for loader.conf to make it possible:

geli_da0_keyfile0_load="YES"
geli_da0_keyfile0_type="da0:geli_keyfile0"
geli_da0_keyfile0_name="/boot/keys/da0.key0"
geli_da0_keyfile1_load="YES"
geli_da0_keyfile1_type="da0:geli_keyfile1"
geli_da0_keyfile1_name="/boot/keys/da0.key1"
geli_da0_keyfile2_load="YES"
geli_da0_keyfile2_type="da0:geli_keyfile2"
geli_da0_keyfile2_name="/boot/keys/da0.key2"

geli_da1s3a_keyfile0_load="YES"
geli_da1s3a_keyfile0_type="da1s3a:geli_keyfile0"
geli_da1s3a_keyfile0_name="/boot/keys/da1s3a.key"

Thanks for jhb and kan who showed me the right direction.

MFC after:	3 days

2006-02-11 13:08:24 +00:00

..

alpha

Simplify system time accounting for profiling.

2006-02-08 08:09:17 +00:00

amd64

CPU time accounting speedup (step 2)

2006-02-11 09:33:07 +00:00

arm

Use the correct address for the ohci device.

2006-02-11 03:58:07 +00:00

boot

Remove ELF dynamic tag definitions that aren't used. Ideally,

2006-01-18 18:49:25 +00:00

bsm

Merge OpenBSM 1.0 alpha 3 include file changes from contrib/openbsm/bsm

2006-02-06 01:12:46 +00:00

cam

- Add a scsi_da.c and a umass.c quirk for Genesys 6-in-1 Card Reader.

2006-01-30 20:27:44 +00:00

coda

- Reorder calls to vrele() after calls to vput() when the vrele is a

2006-02-01 00:25:26 +00:00

compat

- Always call exec_free_args() in kern_execve() instead of doing it in all

2006-02-06 22:06:54 +00:00

conf

Allow one to subset phy. If you want the kitchen sink, use device

2006-02-07 18:41:56 +00:00

contrib

resolve merge conflicts

2006-02-10 19:01:02 +00:00

crypto

…

ddb

Fix -Wundef.

2005-12-04 02:12:43 +00:00

dev

Use ETHER_ADDR_LEN rather than 6.

2006-02-11 03:50:03 +00:00

doc

…

fs

Correctly set MNTK_MPSAFE flag from the lower vnode's mount rather than

2006-02-10 18:06:49 +00:00

gdb

…

geom

Teach geli how to load keyfiles before root file system is mounted.

2006-02-11 13:08:24 +00:00

gnu

Add marker vnodes to ensure that all vnodes associated with the mount point are

2006-01-09 20:42:19 +00:00

i4b

Fix -Wundef warnings found when compiling i386 LINT, GENERIC and

2005-12-05 11:58:35 +00:00

i386

CPU time accounting speedup (step 2)

2006-02-11 09:33:07 +00:00

ia64

Simplify system time accounting for profiling.

2006-02-08 08:09:17 +00:00

isa

Tweak how the MD code calls the fooclock() methods some. Instead of

2005-12-22 22:16:09 +00:00

isofs/cd9660

I ran into an nfs client panic a couple of times in a row over the

2006-01-17 17:29:03 +00:00

kern

CPU time accounting speedup (step 2)

2006-02-11 09:33:07 +00:00

libkern

Convert function declarations to ANSI C.

2006-01-22 00:46:40 +00:00

modules

Check rootvnode variable to see if we still want to ask for passphrase on

2006-02-11 12:45:01 +00:00

net

Bump the MODULE_VERSION for HEAD, as the vlan(4) API is different in

2006-02-10 18:38:33 +00:00

net80211

set the mgt frame tx timer before dispatching the frame to the

2006-02-08 17:30:31 +00:00

netatalk

- Store pointer to the link-level address right in "struct ifnet"

2005-11-11 16:04:59 +00:00

netatm

Convert to ANSI C function declarations.

2006-01-22 01:07:11 +00:00

netgraph

- Increase maximum number of interfaces to 2048.

2006-02-09 11:42:17 +00:00

netinet

Set the M_ZERO flag when calling uma_zalloc() to allocate a syncache entry.

2006-02-09 21:29:02 +00:00

netinet6

Fix for an inappropriate bzero of the ICMPv6 stats. The code was zero'ing the wrong structure member but setting the correct one.

2006-02-08 07:16:46 +00:00

netipsec

Fix stack corruptions on amd64.

2006-01-21 10:44:34 +00:00

netipx

In spx_attach() and spx_detach(), there is no need to check whether the

2006-01-14 00:05:44 +00:00

netkey

Fix stack corruptions on amd64.

2006-01-21 10:44:34 +00:00

netnatm

Use sparse initializers for "struct domain" and "struct protosw",

2005-11-09 13:29:16 +00:00

netncp

In ncp_sysctl_connstat(), the SLIST_FOREACH() logic to check 'error'

2006-01-14 11:40:32 +00:00

netsmb

Although we check the return value of copyin(9) while determaining how

2006-01-16 17:03:21 +00:00

nfs

…

nfs4client

Use nfs4_disconnect for connections opened with nfs4_connect.

2006-01-19 22:48:31 +00:00

nfsclient

Don't log an error on tcp connection reset, even if we don't get ECONNRESET.

2006-01-20 15:07:18 +00:00

nfsserver

- Reorder calls to vrele() after calls to vput() when the vrele is a

2006-02-01 00:25:26 +00:00

opencrypto

…

pc98

MFi386: revision 1.622.

2006-02-09 11:50:22 +00:00

pccard

I don't believe these are used at all, and can be safely removed

2006-01-15 06:49:28 +00:00

pci

Don't add an agp child in vgapci's attach routine if the PCIY_AGP

2006-02-01 15:45:29 +00:00

posix4

mqueue.h has been superceded by sys/mqueue.h thanks to David Xu's work.

2005-11-28 02:58:30 +00:00

powerpc

Simplify system time accounting for profiling.

2006-02-08 08:09:17 +00:00

rpc

Fix up some cut-n-paste damage and some out-of-date comments.

2006-01-20 15:20:41 +00:00

security

Acquire vnode lock around call to VOP_GETATTR() in audit_record_write().

2006-02-07 23:44:31 +00:00

sparc64

CPU time accounting speedup (step 2)

2006-02-11 09:33:07 +00:00

sys

CPU time accounting speedup (step 2)

2006-02-11 09:33:07 +00:00

tools

Fix a leftover "iwi_boot" string.

2006-01-30 16:32:08 +00:00

ufs

- Reorder calls to vrele() after calls to vput() when the vrele is a

2006-02-01 00:25:26 +00:00

vm

- Fix silly VI locking that is used to check a single flag. The vnode

2006-02-06 10:14:12 +00:00

Makefile

add nfsclient/, nfs4client/, and rpc/ directories to the

2006-01-10 20:58:27 +00:00