From owner-freebsd-current@freebsd.org Sat Oct 17 05:54:43 2020 Return-Path: Delivered-To: freebsd-current@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 0DD9842A935 for ; Sat, 17 Oct 2020 05:54:43 +0000 (UTC) (envelope-from grahamperrin@gmail.com) Received: from mail-wr1-x42f.google.com (mail-wr1-x42f.google.com [IPv6:2a00:1450:4864:20::42f]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "GTS CA 1O1" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4CCsfn6kxlz4fvY for ; Sat, 17 Oct 2020 05:54:41 +0000 (UTC) (envelope-from grahamperrin@gmail.com) Received: by mail-wr1-x42f.google.com with SMTP id t9so5717657wrq.11 for ; Fri, 16 Oct 2020 22:54:41 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:to:from:subject:message-id:date:user-agent :mime-version:content-transfer-encoding:content-language; bh=jlnRY+JNKGD2VPSQ26Sdk4DICxFbVNh0S7VRBAG8goE=; b=l2L93z0oZFLWsDL2KrRof37bV1zRvRWBw+TAOCpsurGlrSENYOMWVVRhbO0vqpKlE8 fVIwOfGAfO99Hk2ji/9dbNXLx8EaydXVVU0/PhEi94t48R2Nq+n0ZhtiSfJDCbLmkXlN 3RFgdYtCjCbDvhzoEnAsqy4b5ZmBN+vKMtr8jaQ2IUhUOZ0fnwihF3JGAhS0NFcspCc2 CWJlJDAqSqr7vxmF1Rr24lX62tqhv1W5QzfkLFcVehxqAcWBrPIn01jW9pF60ay/lE0K vb4c88J/P2syhBJjcjh3YvLzmlzqHSg1JpnKkU+9b8BzeXnu1h9eRRkAvYjY1nSQVWwW 9MzA== X-Gm-Message-State: AOAM533EqabPJftin4lRjqmlJu45MkVILGM+TOYUTVf1Pgz2EakFU4Ek WXNWYu3h/Mn4s9XzLqHawSXxN8WZS3dMhA== X-Google-Smtp-Source: ABdhPJwqrBbP0cxAXbJCM8xaexu/Pi/r4+KZq05LQ5kQVTillanuQ/aTo6TNWvmNzuk3LkgLV62XwA== X-Received: by 2002:adf:f20f:: with SMTP id p15mr8394901wro.339.1602914078737; Fri, 16 Oct 2020 22:54:38 -0700 (PDT) Received: from [192.168.1.11] (79-66-147-78.dynamic.dsl.as9105.com. [79.66.147.78]) by smtp.gmail.com with ESMTPSA id u2sm5811749wme.1.2020.10.16.22.54.37 for (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Fri, 16 Oct 2020 22:54:37 -0700 (PDT) To: freebsd-current@freebsd.org From: Graham Perrin Subject: OpenZFS: using an encrypted dataset without a prompt for its passphrase Message-ID: Date: Sat, 17 Oct 2020 06:54:37 +0100 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:78.0) Gecko/20100101 Thunderbird/78.3.2 MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit Content-Language: en-US X-Rspamd-Queue-Id: 4CCsfn6kxlz4fvY X-Spamd-Bar: --- X-Spamd-Result: default: False [-3.14 / 15.00]; RCVD_VIA_SMTP_AUTH(0.00)[]; FREEMAIL_FROM(0.00)[gmail.com]; R_SPF_ALLOW(-0.20)[+ip6:2a00:1450:4000::/36]; TO_DN_NONE(0.00)[]; RCVD_COUNT_THREE(0.00)[3]; DKIM_TRACE(0.00)[gmail.com:+]; DMARC_POLICY_ALLOW(-0.50)[gmail.com,none]; NEURAL_HAM_SHORT(-0.20)[-0.204]; RECEIVED_SPAMHAUS_PBL(0.00)[79.66.147.78:received]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+]; FREEMAIL_ENVFROM(0.00)[gmail.com]; MID_RHS_MATCH_FROM(0.00)[]; ASN(0.00)[asn:15169, ipnet:2a00:1450::/32, country:US]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-0.96)[-0.964]; R_DKIM_ALLOW(-0.20)[gmail.com:s=20161025]; FROM_HAS_DN(0.00)[]; DWL_DNSWL_NONE(0.00)[gmail.com:dkim]; TO_MATCH_ENVRCPT_ALL(0.00)[]; NEURAL_HAM_LONG(-0.97)[-0.968]; MIME_GOOD(-0.10)[text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-current@freebsd.org]; RCPT_COUNT_ONE(0.00)[1]; RCVD_IN_DNSWL_NONE(0.00)[2a00:1450:4864:20::42f:from]; RCVD_TLS_ALL(0.00)[]; MAILMAN_DEST(0.00)[freebsd-current] X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.33 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 17 Oct 2020 05:54:43 -0000 root@momh167-gjp4-8570p:~ # zfs get all Transcend/VirtualBox | grep -e creation -e key -e crypt Transcend/VirtualBox  creation              Wed Sep  2 19:02 2020     - Transcend/VirtualBox  encryption aes-256-gcm               - Transcend/VirtualBox  keylocation prompt                    local Transcend/VirtualBox  keyformat passphrase                - Transcend/VirtualBox  encryptionroot Transcend/VirtualBox      - Transcend/VirtualBox  keystatus unavailable               - root@momh167-gjp4-8570p:~ # I was prompted in early September but since then, no prompts. I can export and import the pool (Transcend) without entering the passphrase. Is this intended behaviour and if so: how does the pool – or the computer to which I connect the device (a mobile hard disk drive) – know that entry of the phrase is unnecessary?