freebsd with flexible iflib nic queues
Go to file
Devin Teske ba22fa80f2 Add "GELI Passphrase:" prompt to boot loader.
Summary:
Add "GELI Passphrase:" prompt to boot loader.

A new loader.conf(5) option of geom_eli_passphrase_prompt="YES" will now
allow you to enter your geli(8) root-mount credentials prior to invoking
the kernel.

See check-password.4th(8) for details.

Differential Revision:	https://reviews.freebsd.org/D2105
Reviewed by:	(your name[s] here)
MFC after:	3 days
X-MFC-to:	stable/10
Relnotes:	yes

Test Plan:
Drop a head copy of check-password.4th into /boot and then apply the patch
(only the patch to /boot/check-password.4th is required; no other changes are
required but you do have to have a HEAD copy of check-password.4th to
apply the patch).

NB: The rest of your /boot files can be up to 2 years old but no older.
NB: The test won't work unless your kernel has the following change

https://svnweb.freebsd.org/base?view=revision&revision=273489

Now, put into /boot/loader.conf:

geom_eli_passphrase_prompt="YES"

and reboot.

You should be prompted for a GELI passphrase before the menu (if enabled),
just after loading loader.conf(5).

NB: It doesn't matter if you're using GELI or not. However if you are using
GELI and a sufficiently new enough release (has SVN r273489) and you entered
the proper passphrase to mount your GELI encrypted root device(s), you should
notice that the boot process did not stop (you went from loader all the way to login).

Reviewers: cperciva, allanjude, scottl, kmoore

Subscribers: jkh, imp

Differential Revision: https://reviews.freebsd.org/D2105
2015-04-01 02:01:34 +00:00
bin sh: Add more tests for exotic IFS splitting. 2015-03-31 20:59:37 +00:00
cddl Fix a misparenthesization that could cause a crash if TERM is not set. 2015-03-31 02:49:05 +00:00
contrib Update elftoolchain to upstream revision 3179 2015-04-01 01:08:01 +00:00
crypto Document "none" for VersionAddendum. 2015-03-23 02:45:12 +00:00
etc Add limited to the default restrictions. 2015-03-31 19:56:46 +00:00
games Step 2 of eliminating the "games" distribution: Remove punch card 2015-02-22 08:50:05 +00:00
gnu Switch to ELF toolchain readelf(1) 2015-03-30 17:38:25 +00:00
include Clean some spaces vs tabs. 2015-03-29 20:20:45 +00:00
kerberos5 Add a ${CP} alias for copying files in the build. 2015-01-16 21:39:08 +00:00
lib Fix "MOVS" instruction memory to MMIO emulation. Currently updates to 2015-04-01 00:15:31 +00:00
libexec Correct copyright typo 2015-03-31 12:53:07 +00:00
release Add code for creating an EC2 AMI. 2015-04-01 00:00:17 +00:00
rescue Significant upgrades to sa(4) and mt(1). 2015-02-23 21:59:30 +00:00
sbin Constify. 2015-03-31 19:12:13 +00:00
secure Add the openssl header for arm64. As it is based on MACHINE_CPUARCH it 2015-03-24 14:16:14 +00:00
share MFV ntp 4.2.8p1 (r258945, r275970, r276091, r276092, r276093, r278284) 2015-03-30 13:30:15 +00:00
sys Add "GELI Passphrase:" prompt to boot loader. 2015-04-01 02:01:34 +00:00
tests Add some new modes to OpenCrypto. These modes are AES-ICM (can be used 2014-12-12 19:56:36 +00:00
tools - Fix -Wsign issue 2015-03-31 06:51:13 +00:00
usr.bin Remove bogus cast. 2015-03-31 15:03:58 +00:00
usr.sbin Add "GELI Passphrase:" prompt to boot loader. 2015-04-01 02:01:34 +00:00
.arcconfig Update the URL to the phabricator instance. 2014-08-14 16:25:43 +00:00
.arclint arc: add linting for python files 2014-06-02 00:21:42 +00:00
COPYRIGHT Bump copyright year. 2014-12-31 10:00:43 +00:00
LOCKS
MAINTAINERS Remove cokane@ from MAINTAINERS for 3dfx(4)/tdfx(4) because their email 2014-11-25 05:25:12 +00:00
Makefile Make TARGET_ARCH=powerpc64 work without TARGET=powerpc. 2015-03-21 16:54:01 +00:00
Makefile.inc1 Add --sysroot to the compiler flags for clang or gcc external toolchains 2015-03-26 23:37:03 +00:00
ObsoleteFiles.inc Remove the bootconfig parsing. We never used it and always passed either an 2015-03-29 20:37:28 +00:00
README
UPDATING Remove from legacy ata(4) driver support for hardware, supported by newer 2015-03-24 18:09:07 +00:00

This is the top level of the FreeBSD source directory.  This file
was last revised on:
$FreeBSD$

For copyright information, please see the file COPYRIGHT in this
directory (additional copyright information also exists for some
sources in this tree - please see the specific source directories for
more information).

The Makefile in this directory supports a number of targets for
building components (or all) of the FreeBSD source tree, the most
commonly used one being ``world'', which rebuilds and installs
everything in the FreeBSD system from the source tree except the
kernel, the kernel-modules and the contents of /etc.  The ``world''
target should only be used in cases where the source tree has not
changed from the currently running version.  See:
http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/makeworld.html
for more information, including setting make(1) variables.

The ``buildkernel'' and ``installkernel'' targets build and install
the kernel and the modules (see below).  Please see the top of
the Makefile in this directory for more information on the
standard build targets and compile-time flags.

Building a kernel is a somewhat more involved process, documentation
for which can be found at:
   http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/kernelconfig.html
And in the config(8) man page.
Note: If you want to build and install the kernel with the
``buildkernel'' and ``installkernel'' targets, you might need to build
world before.  More information is available in the handbook.

The sample kernel configuration files reside in the sys/<arch>/conf
sub-directory (assuming that you've installed the kernel sources), the
file named GENERIC being the one used to build your initial installation
kernel.  The file NOTES contains entries and documentation for all possible
devices, not just those commonly used.  It is the successor of the ancient
LINT file, but in contrast to LINT, it is not buildable as a kernel but a
pure reference and documentation file.


Source Roadmap:
---------------
bin		System/user commands.

cddl		Various commands and libraries under the Common Development
		and Distribution License.

contrib		Packages contributed by 3rd parties.

crypto		Cryptography stuff (see crypto/README).

etc		Template files for /etc.

games		Amusements.

gnu		Various commands and libraries under the GNU Public License.
		Please see gnu/COPYING* for more information.

include		System include files.

kerberos5	Kerberos5 (Heimdal) package.

lib		System libraries.

libexec		System daemons.

release		Release building Makefile & associated tools.

rescue		Build system for statically linked /rescue utilities.

sbin		System commands.

secure		Cryptographic libraries and commands.

share		Shared resources.

sys		Kernel sources.

tools		Utilities for regression testing and miscellaneous tasks.

usr.bin		User commands.

usr.sbin	System administration commands.


For information on synchronizing your source tree with one or more of
the FreeBSD Project's development branches, please see:

  http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/synching.html