From owner-freebsd-stable@freebsd.org Sat Mar 20 13:24:22 2021 Return-Path: Delivered-To: freebsd-stable@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 2CBD65A8539 for ; Sat, 20 Mar 2021 13:24:22 +0000 (UTC) (envelope-from ruben@verweg.com) Received: from erg.verweg.com (erg.verweg.com [IPv6:2a02:898:96::5e8e:f508]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4F2hLX5Pl6z4Vdm for ; Sat, 20 Mar 2021 13:24:20 +0000 (UTC) (envelope-from ruben@verweg.com) DKIM-Filter: OpenDKIM Filter v2.10.3 erg.verweg.com (unknown-jobid) Received: from [IPv6:2a10:3781:3e9:1:3460:de52:bbd3:ac96] ([IPv6:2a10:3781:3e9:1:3460:de52:bbd3:ac96]) (authenticated bits=0) by erg.verweg.com (8.16.1/8.15.2) with ESMTPSA id 12KDOBq0005733 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Sat, 20 Mar 2021 13:24:11 GMT (envelope-from ruben@verweg.com) From: Ruben van Staveren Content-Type: multipart/signed; boundary="Apple-Mail=_D83AAA30-CA8B-427F-AB6F-8471C55D1E24"; protocol="application/pgp-signature"; micalg=pgp-sha1 Mime-Version: 1.0 (Mac OS X Mail 14.0 \(3654.60.0.2.21\)) Subject: Request: Mount zfs encrypted datasets at boot? Re: FreeBSD 13.0-RC2 Now Available Date: Sat, 20 Mar 2021 14:24:10 +0100 References: <20210313001110.GP92054@FreeBSD.org> To: FreeBSD-STABLE Mailing List In-Reply-To: <20210313001110.GP92054@FreeBSD.org> Message-Id: <817D61E5-1977-46CC-B6E9-D22740B03184@verweg.com> X-Mailer: Apple Mail (2.3654.60.0.2.21) X-Rspamd-Queue-Id: 4F2hLX5Pl6z4Vdm X-Spamd-Bar: ----- X-Spamd-Result: default: False [-5.60 / 15.00]; RCVD_VIA_SMTP_AUTH(0.00)[]; MV_CASE(0.50)[]; R_SPF_ALLOW(-0.20)[+mx]; HAS_ATTACHMENT(0.00)[]; TO_DN_ALL(0.00)[]; DKIM_TRACE(0.00)[verweg.com:+]; DMARC_POLICY_ALLOW(-0.50)[verweg.com,reject]; NEURAL_HAM_SHORT(-1.00)[-1.000]; SIGNED_PGP(-2.00)[]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+,1:+,2:+,3:~,4:~]; RBL_DBL_DONT_QUERY_IPS(0.00)[2a02:898:96::5e8e:f508:from]; ASN(0.00)[asn:8283, ipnet:2a02:898::/32, country:NL]; MID_RHS_MATCH_FROM(0.00)[]; SUBJECT_HAS_QUESTION(0.00)[]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; R_DKIM_ALLOW(-0.20)[verweg.com:s=verweg]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; NEURAL_HAM_LONG(-1.00)[-1.000]; MIME_GOOD(-0.20)[multipart/signed,multipart/alternative,text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-stable@freebsd.org]; RCPT_COUNT_ONE(0.00)[1]; SPAMHAUS_ZRD(0.00)[2a02:898:96::5e8e:f508:from:127.0.2.255]; RCVD_COUNT_TWO(0.00)[2]; RCVD_TLS_ALL(0.00)[]; MAILMAN_DEST(0.00)[freebsd-stable] X-Content-Filtered-By: Mailman/MimeDel 2.1.34 X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 20 Mar 2021 13:24:22 -0000 --Apple-Mail=_D83AAA30-CA8B-427F-AB6F-8471C55D1E24 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Hi, > On 13 Mar 2021, at 1:11, Glen Barber wrote: >=20 > The second RC build of the 13.0-RELEASE release cycle is now = available. Might it be interesting to change the zfs mount -a / zfs unmount -a in /etc/rc.d/zfs to zfs mount -al / zfs unmount -au so that filesystems using the openzfs encryption feature can be = automatically mounted? given their keylocation is not =E2=80=9Cprompt" and accessible during = boot. This would make it possible for me to move away from my current dual = pool boot setup, in where the boot pool has the geli keys for my geli = encrypted system pool, which seems to be incompatible with beadm/bectl = handling of things these days=E2=80=A6 The single geli encrypted pool does not work for me as it doesn=E2=80=99t = allow for unattended reboots. Best regards, Ruben --Apple-Mail=_D83AAA30-CA8B-427F-AB6F-8471C55D1E24 Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP -----BEGIN PGP SIGNATURE----- iQIzBAEBAgAdFiEEJ5YXTZtFY5bgSLwXiG9r7NR3qT8FAmBV93oACgkQiG9r7NR3 qT84ehAAio941FCMWseGuIeDmEuHsNk8ylg3P4n2Dt7izHEjl/MeZ5KehDGiziId k0oakV3bDBqgRkTNatCLGlBsXJwoUtV6Q1vQ6Gem9JM5WYY9QNJg0NkRv1408da7 kkcHKN3VjMGOQU7MxP9BWuzx8Xx/qQwCu8noNomIO/19UP9WSSrpodlwHe8P8n+q 8zLIucDo/0gn/bvQ9tWKN3oN67afjrvL/gqyZJVnL/w+t2CFCDfl7aSjCqOSDeBi hhHPzuikIuZ5YnzF4WHoUX1766DKhCOI8fo9Z4sQtpHTiI99GRjBSWQEAjpVr9kq jkBhOit6VmYQr7/HyyWkVY5jOFCVErRwDPgn/JIkwObd9Zb8SH8v63RBuCIgRcBx Iuq5A6A9L4lAENvwDwlyH06zV2WgKJrTpqboJBAKn67yk4OH4oRiSZTC7+iajR4e Q2wpBuEW58pSsGsiuNE1xrEfTOiktVtAtaFVyhasIEw4vgf/g7BbbqUIbSt/iJzO ygU8yvOTfYHD6ay1v+iJwWZ6IxYDiQYVvdcWsRFlk8bipIDGr9ehYasE+5GW4GGT dxxLyf9NEEv81munFF8FS4+M+wiU/fAIj3dlU6/M9kZEUoQ/71fRqKNALpTmMXiZ Isnoo7B6NOyo9hgMDKAW059Dr3LYEKiUr7gYVaIOPJgnUVY5yLE= =xsmP -----END PGP SIGNATURE----- --Apple-Mail=_D83AAA30-CA8B-427F-AB6F-8471C55D1E24--