From owner-freebsd-current@freebsd.org Sun Apr 19 01:16:48 2020 Return-Path: Delivered-To: freebsd-current@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 9DD882B3E5E for ; Sun, 19 Apr 2020 01:16:48 +0000 (UTC) (envelope-from allanjude@freebsd.org) Received: from tor1-11.mx.scaleengine.net (tor1-11.mx.scaleengine.net [IPv6:2001:470:1:474::25]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) server-signature RSA-PSS (4096 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 494X3g5L1Xz4G6x for ; Sun, 19 Apr 2020 01:16:47 +0000 (UTC) (envelope-from allanjude@freebsd.org) Received: from [10.1.1.2] (Seawolf.HML3.ScaleEngine.net [209.51.186.28]) (Authenticated sender: allanjude.freebsd@scaleengine.com) by tor1-11.mx.scaleengine.net (Postfix) with ESMTPSA id 27C8E28A23 for ; Sun, 19 Apr 2020 01:16:41 +0000 (UTC) DKIM-Filter: OpenDKIM Filter v2.10.3 tor1-11.mx.scaleengine.net 27C8E28A23 To: freebsd-current@freebsd.org References: <8abb14b2-7426-559d-af7e-c339fa130515@bluerosetech.com> From: Allan Jude Autocrypt: addr=allanjude@freebsd.org; prefer-encrypt=mutual; keydata= xsFNBFVwZcYBEADwrZDH0xe0ZVjc9ORCc6PcBLwS/RTXA6NkvpD6ea02pZ8lPOVgteuuugFc D34LdDbiWr+479vfrKBh+Y38GL0oZ0/13j10tIlDMHSa5BU0y6ACtnhupFvVlQ57+XaJAb/q 7qkfSiuxVwQ3FY3PL3cl1RrIP5eGHLA9hu4eVbu+FOX/q/XVKz49HaeIaxzo2Q54572VzIo6 C28McX9m65UL5fXMUGJDDLCItLmehZlHsQQ+uBxvODLFpVV2lUgDR/0rDa0B9zHZX8jY8qQ7 ZdCSy7CwClXI054CkXZCaBzgxYh/CotdI8ezmaw7NLs5vWNTxaDEFXaFMQtMVhvqQBpHkfOD 7rjjOmFw00nJL4FuPE5Yut0CPyx8vLjVmNJSt/Y8WxxmhutsqJYFgYfWl/vaWkrFLur/Zcmz IklwLw35HLsCZytCN5A3rGKdRbQjD6QPXOTJu0JPrJF6t2xFkWAT7oxnSV0ELhl2g+JfMMz2 Z1PDmS3NRnyEdqEm7NoRGXJJ7bgxDbN+9SXTyOletqGNXj/bSrBvhvZ0RQrzdHAPwQUfVSU2 qBhQEi2apSZstgVNMan0GUPqCdbE2zpysg+zT7Yhvf9EUQbzPL4LpdK1llT9fZbrdMzEXvEF oSvwJFdV3sqKmZc7b+E3PuxK6GTsKqaukd/3Cj8aLHG1T1im1QARAQABzSJBbGxhbiBKdWRl IDxhbGxhbmp1ZGVAZnJlZWJzZC5vcmc+wsF/BBMBAgApBQJVcGXGAhsjBQkSzAMABwsJCAcD AgEGFQgCCQoLBBYCAwECHgECF4AACgkQGZU1PhKYC34Muw/+JOKpSfhhysWFYiRXynGRDe07 Z6pVsn7DzrPUMRNZfHu8Uujmmy3p2nx9FelIY9yjd2UKHhug+whM54MiIFs90eCRVa4XEsPR 4FFAm0DAWrrb7qhZFcE/GhHdRWpZ341WAElWf6Puj2devtRjfYbikvj5+1V1QmDbju7cEw5D mEET44pTuD2VMRJpu2yZZzkM0i+wKFuPxlhqreufA1VNkZXI/rIfkYWK+nkXd9Efw3YdCyCQ zUgTUCb88ttSqcyhik/li1CDbXBpkzDCKI6I/8fAb7jjOC9LAtrZJrdgONywcVFoyK9ZN7EN AVA+xvYCmuYhR/3zHWH1g4hAm1v1+gIsufhajhfo8/wY1SetlzPaYkSkVQLqD8T6zZyhf+AN bC7ci44UsiKGAplB3phAXrtSPUEqM86kbnHg3fSx37kWKUiYNOnx4AC2VXvEiKsOBlpyt3dw WQbOtOYM+vkfbBwDtoGOOPYAKxc4LOIt9r+J8aD+gTooi9Eo5tvphATf9WkCpl9+aaGbSixB tUpvQMRnSMqTqq4Z7DeiG6VMRQIjsXDSLJEUqcfhnLFo0Ko/RiaHd5xyAQ4DhQ9QpkyQjjNf /3f/dYG7JAtoD30txaQ5V8uHrz210/77DRRX+HJjEj6xCxWUGvQgvEZf5XXyxeePvqZ+zQyT DX61bYw6w6bOwU0EVXBlxgEQAMy7YVnCCLN4oAOBVLZ5nUbVPvpUhsdA94/0/P+uqCIh28Cz ar56OCX0X19N/nAWecxL4H32zFbIRyDB2V/MEh4p9Qvyu/j4i1r3Ex5GhOT2hnit43Ng46z5 29Es4TijrHJP4/l/rB2VOqMKBS7Cq8zk1cWqaI9XZ59imxDNjtLLPPM+zQ1yE3OAMb475QwN UgWxTMw8rkA7CEaqeIn4sqpTSD5C7kT1Bh26+rbgJDZ77D6Uv1LaCZZOaW52okW3bFbdozV8 yM2u+xz2Qs8bHz67p+s+BlygryiOyYytpkiK6Iy4N7FTolyj5EIwCuqzfk0SaRHeOKX2ZRjC qatkgoD/t13PNT38V9tw3qZVOJDS0W6WM8VSg+F+bkM9LgJ8CmKV+Hj0k3pfGfYPOZJ/v18i +SmZmL/Uw2RghnwDWGAsPCKu4uZR777iw7n9Io6Vfxndw2dcS0e9klvFYoaGS6H2F13Asygr WBzFNGFQscN4mUW+ZYBzpTOcHkdT7w8WS55BmXYLna+dYer9/HaAuUrONjujukN4SPS1fMJ2 /CS/idAUKyyVVX5vozoNK2JVC1h1zUAVsdnmhEzNPsvBoqcVNfyqBFROEVLIPwq+lQMGNVjH ekLTKRWf59MEhUC2ztjSKkGmwdg73d6xSXMuq45EgIJV2wPvOgWQonoHH/kxABEBAAHCwWUE GAECAA8FAlVwZcYCGwwFCRLMAwAACgkQGZU1PhKYC34w5A//YViBtZyDV5O+SJT9FFO3lb9x Zdxf0trA3ooCt7gdBkdnBM6T5EmjgVZ3KYYyFfwXZVkteuCCycMF/zVw5eE9FL1+zz9gg663 nY9q2F77TZTKXVWOLlOV2bY+xaK94U4ytogOGhh9b4UnQ/Ct3+6aviCF78Go608BXbmF/GVT 7uhddemk7ItxM1gE5Hscx3saxGKlayaOsdPKeGTVJCDEtHDuOc7/+jGh5Zxpk/Hpi+DUt1ot 8e6hPYLIQa4uVx4f1xxxV858PQ7QysSLr9pTV7FAQ18JclCaMc7JWIa3homZQL/MNKOfST0S 2e+msuRwQo7AnnfFKBUtb02KwpA4GhWryhkjUh/kbVc1wmGxaU3DgXYQ5GV5+Zf4kk/wqr/7 KG0dkTz6NLCVLyDlmAzuFhf66DJ3zzz4yIo3pbDYi3HB/BwJXVSKB3Ko0oUo+6/qMrOIS02L s++QE/z7K12CCcs7WwOjfCYHK7VtE0Sr/PfybBdTbuDncOuAyAIeIKxdI2nmQHzl035hhvQX s4CSghsP319jAOQiIolCeSbTMD4QWMK8RL/Pe1FI1jC3Nw9s+jq8Dudtbcj2UwAP/STUEbJ9 5rznzuuhPjE0e++EU/RpWmcaIMK/z1zZDMN+ce2v1qzgV936ZhJ3iaVzyqbEE81gDxg3P+IM kiYh4ZtPB4Q= Subject: Re: OpenZFS port updated Message-ID: Date: Sat, 18 Apr 2020 21:16:36 -0400 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:68.0) Gecko/20100101 Thunderbird/68.7.0 MIME-Version: 1.0 In-Reply-To: <8abb14b2-7426-559d-af7e-c339fa130515@bluerosetech.com> Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="aFNgBpUkUMaRdwS3wLpFYmmm7bKyVzrRV" X-Rspamd-Queue-Id: 494X3g5L1Xz4G6x X-Spamd-Bar: - Authentication-Results: mx1.freebsd.org; none X-Spamd-Result: default: False [-1.86 / 15.00]; local_wl_from(0.00)[freebsd.org]; NEURAL_HAM_MEDIUM(-0.92)[-0.921,0]; NEURAL_HAM_LONG(-0.94)[-0.942,0]; ASN(0.00)[asn:6939, ipnet:2001:470::/32, country:US] X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 19 Apr 2020 01:16:48 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --aFNgBpUkUMaRdwS3wLpFYmmm7bKyVzrRV Content-Type: multipart/mixed; boundary="OzXY0E1RdFLfRgbrZSc7V1sh0SDIoGoGi"; protected-headers="v1" From: Allan Jude To: freebsd-current@freebsd.org Message-ID: Subject: Re: OpenZFS port updated References: <8abb14b2-7426-559d-af7e-c339fa130515@bluerosetech.com> In-Reply-To: <8abb14b2-7426-559d-af7e-c339fa130515@bluerosetech.com> --OzXY0E1RdFLfRgbrZSc7V1sh0SDIoGoGi Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: quoted-printable On 2020-04-17 17:40, Mel Pilgrim wrote: > On 2020-04-17 13:31, Kyle Evans wrote: >> On Fri, Apr 17, 2020 at 3:14 PM Mel Pilgrim >> wrote: >>> >>> On 2020-04-17 11:35, Ryan Moeller wrote: >>>> The FreeBSD platform support in OpenZFS does not yet include all >>>> features present in FreeBSD=E2=80=99s ZFS. Some notable changes/miss= ing >>>> features include: >>> [...] >>>> * pre-mountroot zpool.cache loading (for automatic pool imports) >>>> >>>> To the last point, this mainly effects the case where / is on ZFS an= d >>>> /boot is not or is on a different pool. OpenZFS cannot handle this >>>> case yet, but work is in progress to cover that use case. Booting >>>> directly from ZFS does work. >>> >>> To be clear, this means OpenZFS currently does not support / on >>> GELI-encrypted disks, correct? >> >> If you have a legacy setup with a bootpool, that is correct. Since >> 12.0+ the bootpool is almost completely redundant except for some odd >> setup that I can never remember. For legacy setups, the bootpool >> can/should be merged into your root pool if it's feasible. >=20 > Yes, these are the "legacy" configuration with a small, unecrypted pool= > containing /boot and the keys to attach the encrypted root pool. >=20 > Could the case you're thinking of be avoiding manual entry of a passwor= d > at boot? > _______________________________________________ > freebsd-current@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-current > To unsubscribe, send any mail to "freebsd-current-unsubscribe@freebsd.o= rg" If you still have a bootpool, you can migrate to a single pool (so boot environments work), using these instructions: https://ftfl.ca/blog/2016-09-17-zfs-fde-one-pool-conversion.html If the pool would boot without GELI, it still will with GELI, however, if you use any of the newer features not supported by the boot loader, then it will not be able to read the kernel from the boot (encrypted or n= ot) --=20 Allan Jude --OzXY0E1RdFLfRgbrZSc7V1sh0SDIoGoGi-- --aFNgBpUkUMaRdwS3wLpFYmmm7bKyVzrRV Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (MingW32) iQIcBAEBAgAGBQJem6Z4AAoJEBmVNT4SmAt+gysP/Rzg7t5T4imGxo/yyT/CwuBw WbJXGm+cySihedm0CJd+CnmBR1LnV3G/qZFLReOsoqnf3UZTGBr8TE51lUwELIMc oKxS5hi68YmL0gvn2PvXQpEXkPLuRUVTlYBlrnxPuCdsXySS4HUOPw66/xLeiRdl Yht/uZ/e68sQirWMSIo9ez8Jig4TfFDXIFXHOywWIou/ti2FZYd/PhLhkOCSTn6t 28tsIn4r/FwMdPhQ8siZK3hPDCXJ4l5EB+pNXInS2LbG5ws6R7d1Qr+UdDG+WVk2 QK7GS2s6d+O9qbEnblS1Ul5o8/8PxJP1tU24PSLF6reVV+gZz09AITFexZsKFvEL ptKlxsHtuI/UZjPIvF4p5kIBp5i/6+moUHbbNv2Rn076kQgve0JfyaUGRuY7soFU S7DUTtZNangi5ccGMSiL46FA0wL3rY9BzisEPKO8hLS4wOcv2bibCCJGjU/6smTr Q4xjHUTXe8LbOJEe0IMBXGNGUT+g5UAlo48VTIWlR6HO+rE7CT333GVAeLJHBsou OeP+QsCOOqNi19vWmNYqUzAP0mPE7j2j/tv0H9RFrQl0KhDBeI9jfTY+cM35eCkM 93Qc467QNsR3/mgugb28rqCFj+Dddl+Vuo2NTK+bI2FPQ9pgIjixdQKb9wCZ5uSq x0IBMH3my9vnZi6/2Rp2 =Vww/ -----END PGP SIGNATURE----- --aFNgBpUkUMaRdwS3wLpFYmmm7bKyVzrRV--