Date: Thu, 20 Mar 2008 15:23:45 +0100 From: Raphael Becker <rabe@uugrn.org> To: freebsd-stable@freebsd.org Subject: Re: Using /etc/rc.d/geli with labeled devices on 6.3 Message-ID: <20080320142345.GA6825@ma.sigsys.de> In-Reply-To: <20080318150452.GA1561@ma.sigsys.de> References: <20080318150452.GA1561@ma.sigsys.de>
next in thread | previous in thread | raw e-mail | index | archive | help
[-- Attachment #1 --]
On Tue, Mar 18, 2008 at 04:04:52PM +0100, Raphael Becker wrote:
[ getting /dev/label/FOOcrypt.eli configured through /etc/rc.d/geli ]
> How should I set up /etc/rc.conf to get this by /etc/rc.d/geli on boot?
>
> geli_enable="YES"
> geli_devices="label/FOOcrypt"
> geli_label/FOOcrypt_flags="-k /root/keys/geli.FOO.key"
> ^^^^^^^^^^^^^^
> This won't work. How?
geli_label_FOOcrytp_flags="-k /root/keys/geli.FOO.key"
^^^
from /etc/rc.d/geli:
provider_=`ltr ${provider} '/' '_'`
eval "flags=\${geli_${provider_}_flags}"
Seems to work. This should be documented in rc.conf(5) as ppl who use
'geli' for encryption might also know about and use 'glabel'.
Regards
Raphael Becker
--
Raphael Becker <rabe@uugrn.org> http://rabe.uugrn.org/
GnuPG: E7B2 1D66 3AF2 EDC7 9828 6D7A 9CDA 3E7B 10CA 9F2D
.........|.........|.........|.........|.........|.........|.........|..
[-- Attachment #2 --]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (FreeBSD)
iD8DBQFH4nNxnNo+exDKny0RAprAAKC41Lqbm/UmR1OFfMkOeuuX/5OUYACg2dVM
Rhf7QGPVt5T6RtDlSgndNkM=
=hCQQ
-----END PGP SIGNATURE-----
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20080320142345.GA6825>