From owner-freebsd-fs@FreeBSD.ORG Sun Jan 27 11:13:57 2008 Return-Path: Delivered-To: freebsd-fs@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 240AF16A473 for ; Sun, 27 Jan 2008 11:13:57 +0000 (UTC) (envelope-from freebsd-fs@m.gmane.org) Received: from ciao.gmane.org (main.gmane.org [80.91.229.2]) by mx1.freebsd.org (Postfix) with ESMTP id CF87B13C459 for ; Sun, 27 Jan 2008 11:13:56 +0000 (UTC) (envelope-from freebsd-fs@m.gmane.org) Received: from list by ciao.gmane.org with local (Exim 4.43) id 1JJ5SQ-0006VQ-OU for freebsd-fs@freebsd.org; Sun, 27 Jan 2008 11:13:50 +0000 Received: from host71-40-static.74-81-b.business.telecomitalia.it ([81.74.40.71]) by main.gmane.org with esmtp (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Sun, 27 Jan 2008 11:13:50 +0000 Received: from lapo by host71-40-static.74-81-b.business.telecomitalia.it with local (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Sun, 27 Jan 2008 11:13:50 +0000 X-Injected-Via-Gmane: http://gmane.org/ To: freebsd-fs@freebsd.org From: Lapo Luchini Date: Sun, 27 Jan 2008 12:13:46 +0100 Lines: 14 Message-ID: Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit X-Complaints-To: usenet@ger.gmane.org X-Gmane-NNTP-Posting-Host: host71-40-static.74-81-b.business.telecomitalia.it User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.8.1.9) Gecko/20071031 Thunderbird/2.0.0.9 Mnenhy/0.7.5.0 X-Enigmail-Version: 0.95.6 OpenPGP: id=C8F252FB; url=http://www.lapo.it/pgpkey.txt Sender: news Subject: dumpdev on encrypted swap? X-BeenThere: freebsd-fs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Filesystems List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 27 Jan 2008 11:13:57 -0000 Is it possible to use an automatically-encrypted GELI swap (such as putting ad0s1b.eli in the fstab) as a dump device? Of course ad0s1b.eli is not useful, as dump would be one-time encrypted and unreadable at next boot. dumpdev="ad0s1b" should work (I guess at dump time swap is used no more, so it wouldn't overwrite the crashdump), but of course ad0s1b is a provider consumed by ad0s1b.eli... so kern.geom.debugflags shuold probably be used to allow that, but I don't feel very at home with the idea that then *every* device is protected no more by accidental overwrite. Is there a way to have that kind of configuration "automatically work"? (other than, I guess, hack the dump code to set the debugflags itself just before attempting the dump, or something like that) Lapo