From owner-freebsd-current@freebsd.org Thu Sep 19 16:54:17 2019 Return-Path: Delivered-To: freebsd-current@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 7C67D1287AB for ; Thu, 19 Sep 2019 16:54:17 +0000 (UTC) (envelope-from fjwcash@gmail.com) Received: from mail-lf1-x129.google.com (mail-lf1-x129.google.com [IPv6:2a00:1450:4864:20::129]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) server-signature RSA-PSS (4096 bits) client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "GTS CA 1O1" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 46Z2xh35KSz40NK; Thu, 19 Sep 2019 16:54:16 +0000 (UTC) (envelope-from fjwcash@gmail.com) Received: by mail-lf1-x129.google.com with SMTP id r22so2909722lfm.1; Thu, 19 Sep 2019 09:54:16 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=biCEBS++PDKqNMhNSCiNcHZnwP//i2Aq4zdXaik3s54=; b=FakiIHDMoa3lPgybKLsO7jNxI3HT8r/0BKRA0LJiho2jcyBOjPieKJE7YM+/Bi+ctY NPzP9UiobI+XWcEXoaecOfFmc2qBli6McRVRFfgNn6DNhZOSeUycVb0eEZhy8HmO9qnN JQ+DLbDH3EzOzVZoB5tcpMsQDZzbxPz/wKXc4rhxPlni8mbjTx2ePX6AjeJvB726PXNU xXCo9DJk9MAVenKIvPIUjVWmU9H6tfHCFsEg0hKoY5uc8ksaXMley4xY6UjLAML7mdYP EaNBN3L78Y1bu2MHc6wfKCdBLpb1UXDolv/w6DrmNdSi7Lx6DtET5Q4JzokErrwdqoIV DgWg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=biCEBS++PDKqNMhNSCiNcHZnwP//i2Aq4zdXaik3s54=; b=jX7SakK/3o0DqRcgdOkacWkoF15ajCRE0kmFW5b1EeO0L9RufYBzVKxIaAG/embBsO mqfHgBwYTyY1M1/IaTY0zAS3qSJXzXnALXh3osr5UZOvWeB/PeWy7KlrlZbt4KFnJx7D DrhpKCSGqdLpQHam+dMj1B/bBTAInAyoabyyCrMaTPgmWGXf7zXYo43+bjKC5NVOK2oZ 3I0nNBt2SzLu+jgUoowqK2Jae/MXQ6aFyBbll0dC8y4f7S7J4ck9E7o3iDn9XzlWMPJO dGXGKvqQOvKwydMhA28qDC7AHIpD6jSeoeEZ587p+rZ3iwvxLuyNI+s5o/0DmharcbNt qFow== X-Gm-Message-State: APjAAAXl/pBMotWhVtVYmWmkeTK2BXblbkYgTfF0RshHPibvSr+D9008 5xA9nYmuJ1g12ZdwOjHHmquwDSZ+Tqhsm0bOoNJnTQ== X-Google-Smtp-Source: APXvYqxcB2QopGXrV5gSQkxxOIA17vgB/h96FrEhw/rTXv8hGK9eGIcwx7dHy4t8gqCm7GJURg1BpAzYIY5YwE0/wlo= X-Received: by 2002:ac2:43cb:: with SMTP id u11mr5631278lfl.38.1568912054510; Thu, 19 Sep 2019 09:54:14 -0700 (PDT) MIME-Version: 1.0 References: <20190919140219.GE2863@home.opsec.eu> <7E0AE025-596C-457E-BC40-41217857A3CD@me.com> <20190919155713.GG2863@home.opsec.eu> <3C855A39-BF79-4430-98CB-CB9174768E11@freebsd.org> <2cadfea9-e3da-f672-e12f-35109f11ad34@madpilot.net> In-Reply-To: <2cadfea9-e3da-f672-e12f-35109f11ad34@madpilot.net> From: Freddie Cash Date: Thu, 19 Sep 2019 09:54:03 -0700 Message-ID: Subject: Re: Lockdown adaX numbers to allow booting ? To: Guido Falsi Cc: Michael Gmelin , Kurt Jaeger , Toomas Soome , FreeBSD-Current X-Rspamd-Queue-Id: 46Z2xh35KSz40NK X-Spamd-Bar: - Authentication-Results: mx1.freebsd.org; dkim=pass header.d=gmail.com header.s=20161025 header.b=FakiIHDM; dmarc=pass (policy=none) header.from=gmail.com; spf=pass (mx1.freebsd.org: domain of fjwcash@gmail.com designates 2a00:1450:4864:20::129 as permitted sender) smtp.mailfrom=fjwcash@gmail.com X-Spamd-Result: default: False [-2.00 / 15.00]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000,0]; R_DKIM_ALLOW(-0.20)[gmail.com:s=20161025]; FROM_HAS_DN(0.00)[]; R_SPF_ALLOW(-0.20)[+ip6:2a00:1450:4000::/36:c]; FREEMAIL_FROM(0.00)[gmail.com]; MIME_GOOD(-0.10)[multipart/alternative,text/plain]; SUBJECT_ENDS_QUESTION(1.00)[]; NEURAL_HAM_LONG(-1.00)[-1.000,0]; IP_SCORE_FREEMAIL(0.00)[]; RCPT_COUNT_FIVE(0.00)[5]; TO_MATCH_ENVRCPT_SOME(0.00)[]; TO_DN_ALL(0.00)[]; DKIM_TRACE(0.00)[gmail.com:+]; DMARC_POLICY_ALLOW(-0.50)[gmail.com,none]; RCVD_IN_DNSWL_NONE(0.00)[9.2.1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.0.4.6.8.4.0.5.4.1.0.0.a.2.list.dnswl.org : 127.0.5.0]; IP_SCORE(0.00)[ip: (-9.11), ipnet: 2a00:1450::/32(-2.94), asn: 15169(-2.22), country: US(-0.05)]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+,1:+,2:~]; FREEMAIL_ENVFROM(0.00)[gmail.com]; ASN(0.00)[asn:15169, ipnet:2a00:1450::/32, country:US]; RCVD_COUNT_TWO(0.00)[2]; RCVD_TLS_ALL(0.00)[]; DWL_DNSWL_NONE(0.00)[gmail.com.dwl.dnswl.org : 127.0.5.0] Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Content-Filtered-By: Mailman/MimeDel 2.1.29 X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 19 Sep 2019 16:54:17 -0000 On Thu, Sep 19, 2019 at 9:47 AM Guido Falsi wrote: > On 19/09/19 18:04, Michael Gmelin wrote: > > > > What about gpart output of the pool drives? > > > > In general you would create zpools using gptids or gpt labels, not the > devices, so you=E2=80=99re independent of device numbering. The boot load= er should > only be installed on drives that contain the boot pool (maybe you have ol= d > boot loaders on data drives?). > > > > Actually the installer will at least some times use the adaX device to > create ZFS pools. At least it did for me when I recently rebuilt a > machine after a (multiple) disk crash. > > So it could not be Kurt fault if he has a pool with adaX devices in it. > > I installed the system on one disk and the installed used adaX to create > the pool. I added the second disk to the mirror a few days later. > > Now I have: > > pool: zroot > state: ONLINE > scan: resilvered 24.6G in 0 days 00:09:41 with 0 errors on Tue Sep 3 > 16:10:08 2019 > config: > > NAME STATE READ WRITE CKSUM > zroot ONLINE 0 0 0 > mirror-0 ONLINE 0 0 0 > ada0p4 ONLINE 0 0 0 > gpt/zfs1 ONLINE 0 0 0 > > errors: No known data errors > > Now, in the case of a mirror (or a zraid) this could be fixed by > detaching adaX devices and reattaching them using the label. Disvantage > is the cluster will need to resilver, causing some degraded time and > extra disk load. > Boot off a LiveCD/USB stick. Export the pool. Import the pool with -d /dev/gpt and it will use the GPT labels instead. Reboot into the system, and it should continue to use the GPT labels. No resilvering required. --=20 Freddie Cash fjwcash@gmail.com