Date: Sat, 27 Jun 2026 14:51:34 +0000 From: Benedict Reuschling <bcr@FreeBSD.org> To: doc-committers@FreeBSD.org, dev-commits-doc-all@FreeBSD.org Subject: git: ee930e81a0 - main - handbook/disks: Update encrypted swap instructions for geli Message-ID: <6a3fe376.20ea3.6623dfa5@gitrepo.freebsd.org>
index | next in thread | raw e-mail
The branch main has been updated by bcr: URL: https://cgit.FreeBSD.org/doc/commit/?id=ee930e81a02548fe7a5881fdaf385754a3dff07d commit ee930e81a02548fe7a5881fdaf385754a3dff07d Author: Benedict Reuschling <bcr@FreeBSD.org> AuthorDate: 2026-06-27 14:16:39 +0000 Commit: Benedict Reuschling <bcr@FreeBSD.org> CommitDate: 2026-06-27 14:48:33 +0000 handbook/disks: Update encrypted swap instructions for geli Add instructions to initialize the geli swap device first. Also, be a bit clearer on the /etc/fstab line to add for geli. While here: fix a typo in the Camellia-CBC algorithm. PR: 282806 Reviewed by: carlavilla@ Event: Halifax Hackathon 202606 Location: Dalhousie CS Faculty building entrance hallway Differential Revision: https://reviews.freebsd.org/D57904 --- documentation/content/en/books/handbook/disks/_index.adoc | 11 +++++++++-- 1 file changed, 9 insertions(+), 2 deletions(-) diff --git a/documentation/content/en/books/handbook/disks/_index.adoc b/documentation/content/en/books/handbook/disks/_index.adoc index db966c3f67..1a83ba8f98 100644 --- a/documentation/content/en/books/handbook/disks/_index.adoc +++ b/documentation/content/en/books/handbook/disks/_index.adoc @@ -1912,7 +1912,7 @@ This control utility adds some features and uses a different scheme for doing cr It provides the following features: * Utilizes the man:crypto[9] framework and automatically uses cryptographic hardware when it is available. -* Supports multiple cryptographic algorithms such as AES-XTS, AES-CBC, and Camellia-CBCAES. +* Supports multiple cryptographic algorithms such as AES-XTS, AES-CBC, and Camellia-CBC. * Allows the root partition to be encrypted. The passphrase used to access the encrypted root partition will be requested during system boot. * Allows the use of two independent keys. * It is fast as it performs simple sector-to-sector encryption. @@ -2078,7 +2078,14 @@ To encrypt the swap partition using man:gbde[8], add the `.bde` suffix to the sw /dev/ada0s1b.bde none swap sw 0 0 .... -To instead encrypt the swap partition using man:geli[8], use the `.eli` suffix: +To instead encrypt the swap partition using man:geli[8], initialize the device with a onetime key: + +[source,shell] +.... +# geom eli onetime -d /dev/ada0s1b +.... + +Afterwards, add a line for the device with the `.eli` suffix to [.filename]#/etc/fstab#: [.programlisting] ....home | help
Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?6a3fe376.20ea3.6623dfa5>