From owner-freebsd-geom@FreeBSD.ORG Thu Sep 6 15:12:35 2007 Return-Path: Delivered-To: freebsd-geom@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id E784C16A41A for ; Thu, 6 Sep 2007 15:12:35 +0000 (UTC) (envelope-from mymailfloods@googlemail.com) Received: from wa-out-1112.google.com (wa-out-1112.google.com [209.85.146.182]) by mx1.freebsd.org (Postfix) with ESMTP id BE68813C4CA for ; Thu, 6 Sep 2007 15:12:35 +0000 (UTC) (envelope-from mymailfloods@googlemail.com) Received: by wa-out-1112.google.com with SMTP id k17so211274waf for ; Thu, 06 Sep 2007 08:12:26 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlemail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:to:subject:mime-version:content-type; bh=L5hA4inrCRDv1jCOaI1typU7Q3XRBF/WRx/aB8Dz3K4=; b=B+hMbV+4GMIpjvjePenuqig4OXk2lPNz7hmekUu8ilXGLtD8KXTXjRnOT/FSaku/DtfOEXC/SKUqw3+XrfLBiep6289FYqrUKhKihS8cumM1ICZaLUVeWQCb7yxVCPG2JMaFMJ+S1Lq8083/F3TsCUz6RkxWvN6Ns24zr9OEu4I= DomainKey-Signature: a=rsa-sha1; c=nofws; d=googlemail.com; s=beta; h=received:message-id:date:from:to:subject:mime-version:content-type; b=EkeHFNuGXmQKbHZrn2RoqUIWT9sl5VBMUiG9Wr8TtMNT1/3O8PdkeFaI5XQipvgFiIWuGWKVxNK3u3bAnlkxhUDdSc74W9q7YLY8g3248Ag6mi2isytobM6DPxsroODeF4/gexA0OcO7ksM7qbwVE6ziu3aqH+GciMnPpccq6uE= Received: by 10.114.56.1 with SMTP id e1mr110768waa.1189089845355; Thu, 06 Sep 2007 07:44:05 -0700 (PDT) Received: by 10.115.32.5 with HTTP; Thu, 6 Sep 2007 07:44:05 -0700 (PDT) Message-ID: Date: Thu, 6 Sep 2007 16:44:05 +0200 From: "Thomas Hobbes" To: freebsd-geom@freebsd.org MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Content-Disposition: inline X-Content-Filtered-By: Mailman/MimeDel 2.1.5 Subject: Encrypt mirrored device with geli fails X-BeenThere: freebsd-geom@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: GEOM-specific discussions and implementations List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 06 Sep 2007 15:12:36 -0000 # uname -a FreeBSD 6.2-RELEASE FreeBSD 6.2-RELEASE #0: Fri Jan 12 10:40:27 UTC 2007 root@dessler.cse.buffalo.edu:/usr/obj/usr/src/sys/GENERIC i386 # cat /boot/loader.conf beastie_disable="YES" geom_eli_load="YES" geom_mirror_load="YES" padlock_load="YES" Swap space is encrypted by appending '.eli' to /dev/mirror/gm0s1b in /etc/fstab. According to the ouput of swapinfo this works fine. /dev/mirror/gm0s1a is mounted on / /dev/mirror/gm0s1d is mounted on /var /dev/mirror/gm0s1e is mounted on /usr /dev/mirror/gm0s1f is mounted on /crypt Here's what caused the error: # umount /crypt # dd if=/dev/random of=/root/gm0s1f.key bs=64 count=1 1+0 records in 1+0 records out 64 bytes transferred in 0.000580 secs (110331 bytes/sec) # geli init -K /root/gm0s1f.key -l 256 -s 4096 /dev/mirror/gm0s1f Enter new passphrase: Reenter new passphrase: # geli attach -k /root/gm0s1f.key /dev/mirror/gm0s1f MD5 hash mismatch for /dev/mirror/gm0s1f. I don't know what I'm doing wrong. Was anybody successful in this respect? I'd appreciate every hint.