From owner-freebsd-current@freebsd.org Mon Jun 18 03:24:21 2018 Return-Path: Delivered-To: freebsd-current@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 95C421014406 for ; Mon, 18 Jun 2018 03:24:21 +0000 (UTC) (envelope-from julian@freebsd.org) Received: from vps1.elischer.org (vps1.elischer.org [204.109.63.16]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "vps1.elischer.org", Issuer "CA Cert Signing Authority" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 323676B991 for ; Mon, 18 Jun 2018 03:24:21 +0000 (UTC) (envelope-from julian@freebsd.org) Received: from Julian-MBP3.local (203-59-175-75.dyn.iinet.net.au [203.59.175.75]) (authenticated bits=0) by vps1.elischer.org (8.15.2/8.15.2) with ESMTPSA id w5I3ODM6082929 (version=TLSv1.2 cipher=DHE-RSA-AES128-SHA bits=128 verify=NO); Sun, 17 Jun 2018 20:24:18 -0700 (PDT) (envelope-from julian@freebsd.org) Subject: Re: GELI attach issue from r326073 -> r334996 To: freebsd-current@freebsd.org, mikej@mikej.com References: <1aa4ba2a8313f602bd0b0445987c18ec@mikej.com> <1528918051.12122.70.camel@freebsd.org> <174be0c8f126d47300df51392655d028@mikej.com> From: Julian Elischer Message-ID: <0398d5c9-5da0-3fab-38a0-2e0a60ae460b@freebsd.org> Date: Mon, 18 Jun 2018 11:24:08 +0800 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:52.0) Gecko/20100101 Thunderbird/52.8.0 MIME-Version: 1.0 In-Reply-To: <174be0c8f126d47300df51392655d028@mikej.com> Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit Content-Language: en-US X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.26 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 18 Jun 2018 03:24:21 -0000 On 14/6/18 4:46 am, Michael Jung wrote: > On 2018-06-13 15:27, Ian Lepore wrote: >> On Wed, 2018-06-13 at 14:29 -0400, Michael Jung wrote: >>> Hi! >>> >>> I just tried updating current from r326073 -> r334996 and when >>> I try 'geli attach' I get the following error: >>> >>> # geli attach -p -k mykey.key /dev/gpt/da14 >>> geli: Missing keyno argument >>> # >>> >>> If I boot the old kernel GELI attaches just fine. >>> >>> I ran into this once before but can not find the thread.  I recall >>> it being a bug... with no resolution. >>> >>> I mount zfs partitions over GELI - my painful solution was to >>> nuke each GPT partition in the zpool, resilver, repeat and >>> rinse until everything was non-encrypted and repeat the cycle >>> to re-encrypt.  NOT FUN. >>> >>> Looking for suggestions to supply additional information to debug >>> and resolve. >>> >>> dmesg attached from working kernel. >>> >>> Thanks! >> >> r333439 added a '-n keyno' parameter to geli attach, but it's supposed >> to default to trying all keys if you don't use -n. Is it possible >> you're running a newer kernel (or geom_eli module) than your userland >> or vice versa? >> >> -- Ian >> >> >> _______________________________________________ >> freebsd-current@freebsd.org mailing list >> https://lists.freebsd.org/mailman/listinfo/freebsd-current >> To unsubscribe, send any mail to >> "freebsd-current-unsubscribe@freebsd.org" > > Ian: > > Yes you are correct.... Maybe not the best method but I normally > installkernel - > boot into single user mode - GELI attach, zfs mount -av, then > installworld. Yes that is the prescribed method. if it doesn't work then whoever changed the geli code should fix it to handle this. You should be able to run older code on newer kernels with very few exceptions. I don't know if this also affects upgrades form 11. Have you tested that? > > My boot volume is UFS, but many of the mount points are on zpools. > > What would be the best way to test a new kernel without a full > installworld > with new userland geli bits? > > I currently don't have a way to backup my 35TB of data :-( and don't > want to > lose anything..... and I need a back out method should a full > installworld fail. > > Thanks for you quick reply. > > --mikej > _______________________________________________ > freebsd-current@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-current > To unsubscribe, send any mail to > "freebsd-current-unsubscribe@freebsd.org" > >