From owner-freebsd-geom@FreeBSD.ORG  Sun Dec  3 20:22:40 2006
Return-Path: <owner-freebsd-geom@FreeBSD.ORG>
X-Original-To: freebsd-geom@freebsd.org
Delivered-To: freebsd-geom@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [69.147.83.52])
	by hub.freebsd.org (Postfix) with ESMTP id 4D14816A518
	for <freebsd-geom@freebsd.org>; Sun,  3 Dec 2006 20:22:40 +0000 (UTC)
	(envelope-from a.bramley@gmail.com)
Received: from py-out-1112.google.com (py-out-1112.google.com [64.233.166.178])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 794F243D2F
	for <freebsd-geom@freebsd.org>; Sun,  3 Dec 2006 20:21:36 +0000 (GMT)
	(envelope-from a.bramley@gmail.com)
Received: by py-out-1112.google.com with SMTP id f31so2127190pyh
	for <freebsd-geom@freebsd.org>; Sun, 03 Dec 2006 12:22:04 -0800 (PST)
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com;
	h=received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references;
	b=k2L2VPzSV+CRBBHS2O0mLzgcBxg//liaEv+Chj64+sDfGZF4IMvd7Z9p61cSBqWir4ZvGxYempxg1w3Qo3tLypsR3pFrMMVDZIYMSV7kXmBhbWrcWXcX77EuvQGXWdzaW6UT/JKiax77afBCvkZ9GwzYULDFWP0H/oOKUyQdzig=
Received: by 10.35.98.6 with SMTP id a6mr13741937pym.1165177323783;
	Sun, 03 Dec 2006 12:22:03 -0800 (PST)
Received: by 10.35.70.13 with HTTP; Sun, 3 Dec 2006 12:22:03 -0800 (PST)
Message-ID: <8cffb8c80612031222h180cde0ch790707802ada44a1@mail.gmail.com>
Date: Sun, 3 Dec 2006 20:22:03 +0000
From: "Alex Bramley" <a.bramley@gmail.com>
To: "Pawel Jakub Dawidek" <pjd@freebsd.org>
In-Reply-To: <20061203195004.GA3183@garage.freebsd.pl>
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
References: <8cffb8c80612031132s2cdd69d6ia812e3f4e017f69e@mail.gmail.com>
	<20061203195004.GA3183@garage.freebsd.pl>
Cc: freebsd-geom@freebsd.org
Subject: Re: Resurrecting a GELI volume
X-BeenThere: freebsd-geom@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: GEOM-specific discussions and implementations
	<freebsd-geom.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-geom>,
	<mailto:freebsd-geom-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-geom>
List-Post: <mailto:freebsd-geom@freebsd.org>
List-Help: <mailto:freebsd-geom-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-geom>,
	<mailto:freebsd-geom-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sun, 03 Dec 2006 20:22:40 -0000

On 12/3/06, Pawel Jakub Dawidek <pjd@freebsd.org> wrote:
> On Sun, Dec 03, 2006 at 07:32:29PM +0000, Alex Bramley wrote:
> > Hi,
> >
> > First, please CC me in any replies to the list, as I am (temporarily)
> > off list due to moving jobs.
> >
> > I accidentally overwrote the metadata of a GELI volume by using geli
> > init on the wrong device node (never try to do sysadmin tasks when
> > hungover). I have the correct key and passphrase, and I would like to
> > know whether it is possible to regain access to my lost data. I have
> > already tried running init again on the volume with the correct key
> > and passphrase, but (somewhat unsurprisingly) to no avail. Any
> > assistance would be much appreciated.
>
> Passphrase is only used to encrypt the master key, which is stored in
> metadata. That means you overwrote the master key and I'm afraid your
> data is lost if you haven't backed the master key up before (with 'geli
> backup').

I don't suppose you could put some kind of check in to make this kind
of slip more difficult to achieve in future? I can't see many times
where you'd want to re-init an already encrypted volume. Hopefully it
won't be too difficult to taste the volume for already existing
metadata and ask for confirmation if it exists...

Many Thanks,
Alex