Date: Thu, 21 Oct 2010 02:02:08 -0700 From: Garrett Cooper <gcooper@FreeBSD.org> To: Pawel Jakub Dawidek <pjd@freebsd.org> Cc: svn-src-head@freebsd.org, svn-src-all@freebsd.org, src-committers@freebsd.org, Rui Paulo <rpaulo@freebsd.org> Subject: Re: svn commit: r214118 - in head: sbin/geom/class/eli sys/geom/eli Message-ID: <AANLkTinpmpc15=Esvuma0k14QnX2MU4WHdo1gc7AQ7%2B1@mail.gmail.com> In-Reply-To: <20101021085551.GC3838@garage.freebsd.pl> References: <201010202050.o9KKot6o068512@svn.freebsd.org> <F7129DDD-7754-4421-AC9A-44E5E62BE691@FreeBSD.org> <20101021085551.GC3838@garage.freebsd.pl>
next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, Oct 21, 2010 at 1:55 AM, Pawel Jakub Dawidek <pjd@freebsd.org> wrot=
e:
> On Thu, Oct 21, 2010 at 07:25:53AM +0100, Rui Paulo wrote:
>> Great work. Might be worth adding the geli commands to /etc/rc.suspend &=
/etc/rc.resume.
>>
>> You could do something that requires the minimum user configuration, lik=
e:
>>
>> ---
>> geli list 2>&1 > /dev/null
>> if [ $? -eq 0 ]; then
>> =A0 =A0 =A0 geli suspend -a
>> fi
>
> Well, this is not always safe. As I mentioned in the commit message this
> will cause deadlock if geli(8) command is stored on encrypted file
> system (you won't be able to resume). Good example of such situation is
> when you encrypt even your root file system.
I think it's pretty safe to say that if the user understands this
limitation that they can add the relevant code to the end of
rc.resume. Maybe rc.{resume,suspend}.local script hooks should be
added for user-defined commands like this?
Thanks,
-Garrett
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?AANLkTinpmpc15=Esvuma0k14QnX2MU4WHdo1gc7AQ7%2B1>