From owner-freebsd-stable@FreeBSD.ORG Tue Dec 10 10:05:29 2013 Return-Path: Delivered-To: freebsd-stable@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 70D584D7; Tue, 10 Dec 2013 10:05:29 +0000 (UTC) Received: from mail-ie0-x22d.google.com (mail-ie0-x22d.google.com [IPv6:2607:f8b0:4001:c03::22d]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id 2A77E19FB; Tue, 10 Dec 2013 10:05:29 +0000 (UTC) Received: by mail-ie0-f173.google.com with SMTP id to1so8191635ieb.18 for ; Tue, 10 Dec 2013 02:05:28 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=GNZdwDymmUcS1va1uhNgWkDXKy/yD62qIbKG8qce0WE=; b=OUQispxSScXab3NZwqzF8vdua3a2gOl+GqwENIlOWVXa8Hkpcto6MMFrRd/MIZtzMz TOeX3yAImnDv29MBE4d+/wg7PoKizlQ57oV2+e6q9o6v0RtlEfBWfZZEvE44G1o9Ojgp M8eCOXo1d40Evdvdotr2SlmvJhHooQRX+EmDMlaE5HlOSkV2TWeASVXX7K3KPOBJxevd 6/38qwdUeueod7jQzKyuP8NYRlGPYmZka6mbtdwfsdp5aehF/SAimq8XabFI3l1MtHwm zq/ppcLxOTaymzKHJ/zpNqsMSoRCfASi4xhdnH0snJ9xiZq3JgjJ96LoVqPBJj7PM/7U CRJA== MIME-Version: 1.0 X-Received: by 10.42.122.146 with SMTP id n18mr30280625icr.41.1386669928687; Tue, 10 Dec 2013 02:05:28 -0800 (PST) Received: by 10.64.223.194 with HTTP; Tue, 10 Dec 2013 02:05:28 -0800 (PST) In-Reply-To: References: <099CD122-B7D8-4FC1-9C99-F19248418CD0@fisglobal.com> Date: Tue, 10 Dec 2013 11:05:28 +0100 Message-ID: Subject: Re: 10.0-BETA4 bsdinstall zfs encryption broken From: claudiu vasadi To: Pavel Timofeev Content-Type: text/plain; charset=ISO-8859-1 X-Content-Filtered-By: Mailman/MimeDel 2.1.17 Cc: Devin Teske , freebsd-stable stable , "Teske, Devin" X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 10 Dec 2013 10:05:29 -0000 No problem, it happens. FYI, here is the paragraph: "*Please note: a last-minute problem was found in 10.0-RC1 testing with this installation option that is still being investigated. Please do *not* select the GELI encryption option from the installer. Although the installation successfully completes, the GELI passphrase will *not* decrypt the GELI provider." On Tue, Dec 10, 2013 at 11:04 AM, Pavel Timofeev wrote: > Oh, I see, sorry for that noise! > > 2013/12/10 claudiu vasadi : > > Hi, > > > > When RC1 was announced, it was clearly stated to NOT install geli and ZFS > > because upon reboot, the password will not work. > > > > > > On Tue, Dec 10, 2013 at 11:01 AM, Pavel Timofeev > wrote: > >> > >> Hmm, I just tried to install new 10.0-RC1 with encryption on ZFS. > >> After installation it can't boot because of wrong passkey. I tried to > >> install 10.0-RC1 with different passphrases (even like 123) about 5 > >> times and no luck. Whatever I tried. > >> Do I do something wrong? Can anybody confirm such behaviour? > >> > >> 2013/12/9 Teske, Devin : > >> > > >> > On Dec 4, 2013, at 8:04 AM, Devin Teske wrote: > >> > > >> >> On Dec 4, 2013, at 7:54 AM, Pavel Timofeev wrote: > >> >> > >> >>> Great! But I don't know how to build new iso from source and check > >> >>> this patch =(. > >> >> > >> >> I can help you with that later tonight. > >> >> > >> >> The procedure I use is to take the existing ISO and... > >> >> > >> >> 1. use mdconfig to access it > >> >> 2. use mount_cd9660 to mount it > >> >> 3. use rsync to copy the contents to a local dir > >> >> 4. use patch to patch the files > >> >> 5. use makefs to roll the new files into a new ISO > >> >> > >> >> I've got a makefile that does the last step. > >> >> But I won't be back until later tonight. > >> >> > >> > > >> > I've attached the Makefile that I'm using as-of today > >> > which rejects the use of rsync and instead uses UnionFS. > >> > > >> > I found this to be more efficient as I'm running out of disk > >> > space on this VM/laptop. > >> > > >> > > >> > -- > >> > Devin > >> > _____________ > >> > The information contained in this message is proprietary and/or > >> > confidential. If you are not the intended recipient, please: (i) > delete > >> > the > >> > message and all copies; (ii) do not disclose, distribute or use the > >> > message > >> > in any manner; and (iii) notify the sender immediately. In addition, > >> > please > >> > be aware that any message addressed to our domain is subject to > >> > archiving > >> > and review by persons other than the intended recipient. Thank you. > >> _______________________________________________ > >> freebsd-stable@freebsd.org mailing list > >> http://lists.freebsd.org/mailman/listinfo/freebsd-stable > >> To unsubscribe, send any mail to " > freebsd-stable-unsubscribe@freebsd.org" > > > > > > > > > > -- > > Best regards, > > Claudiu Vasadi > -- Best regards, Claudiu Vasadi