From owner-freebsd-geom@FreeBSD.ORG Wed Sep 26 18:58:38 2012 Return-Path: Delivered-To: freebsd-geom@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 13C8A106564A for ; Wed, 26 Sep 2012 18:58:38 +0000 (UTC) (envelope-from sullivanms@gmail.com) Received: from mail-bk0-f54.google.com (mail-bk0-f54.google.com [209.85.214.54]) by mx1.freebsd.org (Postfix) with ESMTP id 987618FC16 for ; Wed, 26 Sep 2012 18:58:37 +0000 (UTC) Received: by bkcje9 with SMTP id je9so547973bkc.13 for ; Wed, 26 Sep 2012 11:58:36 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:from:date:message-id:subject:to:content-type; bh=PGTud3CUC+XjFgf3NUPL2yEOeLyFv5fQ4UH8DKAGgu8=; b=zcL03fgzqo+1yVT9ccErW5vcOSATYJYMacKO9iyABrbJ9qVbwwdd/zY8MIb9gWeLhY 6cPnZuM1hV/ht3sEmz1ADiwgxhvwMdmYBvnUXneWemMpEBSpT5csITtAR4xYG606GlmQ q7odI/h5hL3cHh3dzI8yS7OATyIKeTcn03szDVvlwPK8BUyFCtTwYXy/adVqVTgGp/dO ggP0LEC4jc6UX8kYBfR69WViKTklOGF5EEt+9oBk9RFp+Un1V3Ai6HVMDUbxhqtG/jPd GCS3Jh+xgQubuBMWDh3mfDvJoTiJLSXihHiAz0hiViHCnH41yGgcv15hqhE78P2IynNo EaYg== Received: by 10.204.4.149 with SMTP id 21mr1040865bkr.122.1348685916133; Wed, 26 Sep 2012 11:58:36 -0700 (PDT) MIME-Version: 1.0 Received: by 10.204.48.136 with HTTP; Wed, 26 Sep 2012 11:58:15 -0700 (PDT) From: Michael Sullivan Date: Wed, 26 Sep 2012 14:58:15 -0400 Message-ID: To: freebsd-geom@freebsd.org Content-Type: text/plain; charset=ISO-8859-1 Subject: GELI tastes partitions before labels, prompts for passphrase for both X-BeenThere: freebsd-geom@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: GEOM-specific discussions and implementations List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 26 Sep 2012 18:58:38 -0000 Hello, I'm running 9.1-RC1. I configured an encrypted root disk with GELI using the GPT label ("gpt/zsystem0") rather than the partition name ("ada0p3"). Everything works fine, but as it boots, I'm prompted for the passphrase for the partition and have to make that fail before I get prompted for the passphrase for the label. It's a minor annoyance but might be worse on a server with many disks. I've seen a few other people mention this behavior but haven't seen anything to indicate that anybody is working on it. Is there a solution out there that I'm not aware of? My understanding of GEOM is rudimentary at this point, but poking around in the code the only ideas I have are to create a blacklist of providers (through a tunable string?) and check against it during tasting; or something like adding a flag to the ELI metadata and, if it's set, checking the provider's class and giving up if it's not a label. Do either of those approaches sound reasonable? Thanks Michael