From owner-freebsd-stable@freebsd.org Tue May 19 07:44:04 2020 Return-Path: Delivered-To: freebsd-stable@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 56ADD2FDFEF; Tue, 19 May 2020 07:44:04 +0000 (UTC) (envelope-from thierry@pompo.net) Received: from edna.lautre.net (edna.lautre.net [80.67.160.88]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "lautre.net", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 49R7Dg2ldRz487c; Tue, 19 May 2020 07:44:03 +0000 (UTC) (envelope-from thierry@pompo.net) Received: from graf.pompo.net (graf.pompo.net [78.225.128.39]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by edna.lautre.net (Postfix) with ESMTPSA id E17B011323E; Tue, 19 May 2020 09:44:00 +0200 (CEST) Received: by graf.pompo.net (Postfix, from userid 1001) id 23BBA7A02F5; Tue, 19 May 2020 09:44:00 +0200 (CEST) Date: Tue, 19 May 2020 09:44:00 +0200 From: Thierry Thomas To: freebsd-stable@freebsd.org, stable@freebsd.org Subject: Re: State of encrypted-almost-everything on ZFS in 2020 Message-ID: <20200519074400.GA63938@graf.pompo.net> Mail-Followup-To: freebsd-stable@freebsd.org, stable@freebsd.org References: <9e094a21-3a4f-5dca-897a-22200513925d@freebsd.org> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="a8Wt8u1KmwUX3Y2C" Content-Disposition: inline In-Reply-To: X-Operating-System: FreeBSD 12.1-STABLE amd64 Organization: Kabbale Eros X-Face: (hRbQnK~Pt7$ct`!fupO(`y_WL4^-Iwn4@ly-.,[4xC4xc; y=\ipKMNm<1J>lv@PP~7Z<.t KjAnXLs: X-PGP: 0xF1C516B3C8359753 X-Rspamd-Queue-Id: 49R7Dg2ldRz487c X-Spamd-Bar: -- Authentication-Results: mx1.freebsd.org; dkim=none; dmarc=none; spf=pass (mx1.freebsd.org: domain of thierry@pompo.net designates 80.67.160.88 as permitted sender) smtp.mailfrom=thierry@pompo.net X-Spamd-Result: default: False [-2.99 / 15.00]; RCVD_VIA_SMTP_AUTH(0.00)[]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-0.86)[-0.864]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; R_SPF_ALLOW(-0.20)[+mx]; MIME_GOOD(-0.20)[multipart/signed,text/plain]; TO_DN_NONE(0.00)[]; DMARC_NA(0.00)[freebsd.org]; HAS_ORG_HEADER(0.00)[]; NEURAL_HAM_SHORT(-0.02)[-0.023]; RCPT_COUNT_TWO(0.00)[2]; RCVD_IN_DNSWL_NONE(0.00)[80.67.160.88:from]; SIGNED_PGP(-2.00)[]; FORGED_SENDER(0.30)[thierry@freebsd.org,thierry@pompo.net]; R_DKIM_NA(0.00)[]; MIME_TRACE(0.00)[0:+,1:+,2:~]; ASN(0.00)[asn:20766, ipnet:80.67.160.0/19, country:FR]; RCVD_TLS_ALL(0.00)[]; FROM_NEQ_ENVFROM(0.00)[thierry@freebsd.org,thierry@pompo.net]; RCVD_COUNT_TWO(0.00)[2] X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.33 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 19 May 2020 07:44:04 -0000 --a8Wt8u1KmwUX3Y2C Content-Type: text/plain; charset=iso-8859-1 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Le lun. 18 mai 20 =E0 22:52:22 +0200, Thomas Zander via freebsd-stable =E9crivait=A0: > Hi, Hello, > > Yes, this has been supported in a few varieties for a few major version= s now >=20 > ... and it's a cool feature, no doubt! Unfortunately, it requires me > to supply a password via keyboard, as you explain below, so it does > not match my use case. And entering a password via keyboard is still affected by the problem of kbdmap (See PR 242349) ! --=20 Th. Thomas. --a8Wt8u1KmwUX3Y2C Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQJ8BAEBCgBmBQJew44/XxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXRFNTM2QkU4NTM4NTM5OUQwMEI2RkFBNzZG MUM1MTZCM0M4MzU5NzUzAAoJEPHFFrPINZdTlpYP/1aM66IEX5lfOSzHLMyQAWnx 4fWaLW+0Ntm6yXJW7XTi1P+N7DGwDuHx88kWAsOT+AsGEKEERdbyqJtTC3BNGTfJ AMQLNMifAGeD9zkrHdqtStvfwpXxTpWsC+effj7+NvI/RX4RCBQE7dxxtZsPYmA6 DvYc8e7mswa3bxOZSCAq83yZRO5zaI6+Txt5Er0DlX5B9OawPwnzVkOXo/6OnsXx qRb9BBg05y1mui2jSCB1PUk+l/gnvUgioPOuHpACEgzfki21E8Nz1RCyaCZ6VqCO 2L6yvVVU1mXuquG8c2YwEPMMCMRFAbYDm/mI7iwH75PuPgfaWlKsKJX/2hthId7F 6I/oauM/9VUodUPDWqd6ZwDej4btrjVkqTUEguN1bPI86n/ST728jDjZUvgeSelh RbTNeDnSa0VoRaFHyKAd/2NGJaKmM78jrLN1jaIzmbF8gx/YNbVtDdpjkVPXMxmk sNRzxuSKOyP3vl/IODztA42qG85CF8wFAwJyBm2cyfmEVTj9BzGMLPnXbLwfnJxi DdUhMcm5vtrMBawRxJwR0Ev5FM+LcVxjE7AirHV5MsKoY5IrAwgcVnBMotwQnHrw obGJc9yddEtihsHZefMfFm+nmIbEDft8geOAua69UGS5EFlsL1Vk6AdHkN3P0CJ8 HJM/+PuQ3KLRfpfAk2fB =2iuY -----END PGP SIGNATURE----- --a8Wt8u1KmwUX3Y2C--