From owner-freebsd-questions@FreeBSD.ORG Fri Jul 24 15:38:26 2009 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 28BF1106564A for ; Fri, 24 Jul 2009 15:38:26 +0000 (UTC) (envelope-from wmoran@potentialtech.com) Received: from mail.potentialtech.com (internet.potentialtech.com [66.167.251.6]) by mx1.freebsd.org (Postfix) with ESMTP id EF6798FC23 for ; Fri, 24 Jul 2009 15:38:25 +0000 (UTC) (envelope-from wmoran@potentialtech.com) Received: from vanquish.ws.pitbpa0.priv.collaborativefusion.com (pr40.pitbpa0.pub.collaborativefusion.com [206.210.89.202]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mail.potentialtech.com (Postfix) with ESMTPSA id F1AE7EBC0A; Fri, 24 Jul 2009 11:38:24 -0400 (EDT) Date: Fri, 24 Jul 2009 11:38:24 -0400 From: Bill Moran To: Stefan Miklosovic Message-Id: <20090724113824.3dfc1b09.wmoran@potentialtech.com> In-Reply-To: References: X-Mailer: Sylpheed 2.6.0 (GTK+ 2.14.7; i386-portbld-freebsd7.1) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Cc: freebsd-questions@freebsd.org Subject: Re: disk encryption with geli X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 24 Jul 2009 15:38:26 -0000 In response to Stefan Miklosovic : > hi all > > i am going to encrypt my /home directory > which is mounted in /etc/fstab like > > /dev/ad0s2f /home ufs rw,noatime > 2 2 > > I did like is wrote in > http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/disks-encrypting.html > everything looks good. ad0s2f.eli appears in /dev and so on. I can mount it, > umount and so. > > but after reboot, I am dropped to single user mode because of en error > message which says that > there is an inconsistency at /dev/ad0s2f > > do i have to encrypt whole ad0 or it is possible to encrypt only my /home? You can do what you're attempting, I'm doing it in several places without problem. I suspect that you have the startup config wrong in /etc/rc.conf or in /etc/fstab. Make sure you're mounting the encrypted partition in /etc/fstab (i.e. /dev/ad0s2f.eli and not /dev/ad0s2f) and make sure you have all the geli startup config in /etc/rc.conf per the document you referenced. If that's not enough to help you, please provide your /etc/rc.conf, and /etc/fstab, along with copy/paste of the exact error message you're seeing. -- Bill Moran http://www.potentialtech.com http://people.collaborativefusion.com/~wmoran/