From owner-freebsd-current@freebsd.org Wed Jun 13 20:46:40 2018 Return-Path: Delivered-To: freebsd-current@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 208541014D39; Wed, 13 Jun 2018 20:46:40 +0000 (UTC) (envelope-from mikej@mikej.com) Received: from mx2.paymentallianceintl.com (mx2.paymentallianceintl.com [216.26.158.171]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mx2.paymentallianceintl.com", Issuer "Go Daddy Secure Certificate Authority - G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 9C8A87AF30; Wed, 13 Jun 2018 20:46:38 +0000 (UTC) (envelope-from mikej@mikej.com) Received: from firewall.mikej.com (f [162.230.214.65]) by mx2.paymentallianceintl.com (8.15.2/8.15.2) with ESMTPS id w5DKkasm043608 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=FAIL); Wed, 13 Jun 2018 16:46:37 -0400 (EDT) (envelope-from mikej@mikej.com) X-SenderID: Sendmail Sender-ID Filter v1.0.0 mx2.paymentallianceintl.com w5DKkasm043608 Authentication-Results: mx2.paymentallianceintl.com; sender-id=pass header.from=mikej@mikej.com; spf=pass smtp.mfrom=mikej@mikej.com X-Authentication-Warning: mx2.paymentallianceintl.com: Host f [162.230.214.65] claimed to be firewall.mikej.com Received: from mail.mikej.com (firewall [192.168.6.63]) by firewall.mikej.com (8.15.2/8.15.2) with ESMTP id w5DKkZ4l002772; Wed, 13 Jun 2018 16:46:35 -0400 (EDT) (envelope-from mikej@mikej.com) X-Authentication-Warning: firewall.mikej.com: Host firewall [192.168.6.63] claimed to be mail.mikej.com MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit Date: Wed, 13 Jun 2018 16:46:35 -0400 From: Michael Jung To: Ian Lepore Cc: freebsd-current@freebsd.org, owner-freebsd-current@freebsd.org Subject: Re: GELI attach issue from r326073 -> r334996 In-Reply-To: <1528918051.12122.70.camel@freebsd.org> References: <1aa4ba2a8313f602bd0b0445987c18ec@mikej.com> <1528918051.12122.70.camel@freebsd.org> Message-ID: <174be0c8f126d47300df51392655d028@mikej.com> X-Sender: mikej@mikej.com User-Agent: Roundcube Webmail/1.3.6 X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.26 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 13 Jun 2018 20:46:40 -0000 On 2018-06-13 15:27, Ian Lepore wrote: > On Wed, 2018-06-13 at 14:29 -0400, Michael Jung wrote: >> Hi! >> >> I just tried updating current from r326073 -> r334996 and when >> I try 'geli attach' I get the following error: >> >> # geli attach -p -k mykey.key /dev/gpt/da14 >> geli: Missing keyno argument >> # >> >> If I boot the old kernel GELI attaches just fine. >> >> I ran into this once before but can not find the thread.  I recall >> it being a bug... with no resolution. >> >> I mount zfs partitions over GELI - my painful solution was to >> nuke each GPT partition in the zpool, resilver, repeat and >> rinse until everything was non-encrypted and repeat the cycle >> to re-encrypt.  NOT FUN. >> >> Looking for suggestions to supply additional information to debug >> and resolve. >> >> dmesg attached from working kernel. >> >> Thanks! > > r333439 added a '-n keyno' parameter to geli attach, but it's supposed > to default to trying all keys if you don't use -n. Is it possible > you're running a newer kernel (or geom_eli module) than your userland > or vice versa? > > -- Ian > > > _______________________________________________ > freebsd-current@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-current > To unsubscribe, send any mail to > "freebsd-current-unsubscribe@freebsd.org" Ian: Yes you are correct.... Maybe not the best method but I normally installkernel - boot into single user mode - GELI attach, zfs mount -av, then installworld. My boot volume is UFS, but many of the mount points are on zpools. What would be the best way to test a new kernel without a full installworld with new userland geli bits? I currently don't have a way to backup my 35TB of data :-( and don't want to lose anything..... and I need a back out method should a full installworld fail. Thanks for you quick reply. --mikej