From owner-freebsd-questions@freebsd.org Sat Sep 19 20:53:25 2015 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 7F8369CFC2D for ; Sat, 19 Sep 2015 20:53:25 +0000 (UTC) (envelope-from tobyslight@gmail.com) Received: from mail-wi0-x22c.google.com (mail-wi0-x22c.google.com [IPv6:2a00:1450:400c:c05::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 14C721462 for ; Sat, 19 Sep 2015 20:53:25 +0000 (UTC) (envelope-from tobyslight@gmail.com) Received: by wiclk2 with SMTP id lk2so67432438wic.1 for ; Sat, 19 Sep 2015 13:53:23 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :content-type; bh=5A+jaK8TIr3ctEPuxyzGZ3Yfcn6m4QAGnfsGB05ic60=; b=grQKUt68P/UkPCYr/lvrEDnL4EWC6ext9gBm68s3XCKMXKQI594w68nTFajgYTt4pI g7AkrgiZFx2csb0BF+jXIT6rnMuALNIn/M97AqZpJJp7duficIONM3Su+eB7N8XmxJwF YWQN9zULmMv9L4ZAFXofb/OWYhTLjSWB51Pclwy2GXWNU+b/QTNeoKX4fhkAsBcr1eMi Ov3msBsnkxLvznwYN34DAz/zFhX+KlQeNnRvUTEdRiGNF0UqX2Y5TW1UhEiAekf+1CRg kGNMmj1uxj3GVgvBahwf+YDBKW64fjKTIPRMq4FHPafIzmJrnkm1ps+JgChyEui46LRx v42Q== X-Received: by 10.180.188.101 with SMTP id fz5mr5484401wic.3.1442696003048; Sat, 19 Sep 2015 13:53:23 -0700 (PDT) MIME-Version: 1.0 Received: by 10.27.179.33 with HTTP; Sat, 19 Sep 2015 13:52:43 -0700 (PDT) In-Reply-To: References: From: Toby Slight Date: Sat, 19 Sep 2015 21:52:43 +0100 Message-ID: Subject: Re: 10.2 Encrypted UFS install always fails To: FreeBSD Questions Content-Type: text/plain; charset=UTF-8 X-Content-Filtered-By: Mailman/MimeDel 2.1.20 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 19 Sep 2015 20:53:25 -0000 On 19 September 2015 at 21:03, Toby Slight wrote: > Hi there, > > I have tried 3 times on 2 separate devices (ThinkPad T430 and Gigabyte > Brix GB-BXBT-2807), to do an encrypted UFS install of 10.2, following the > instructions found here: > > http://www.bsdnow.tv/tutorials/fde > > Every time I end up at the screen pictured below, after a panic: > > http://i.imgur.com/p61geNS.jpg > > Is there something missing from that guide? Some change in 10.2 that it > doesn't account for? Or does anyone have any other ideas where I might be > going wrong? > > To paraphrase my disk setup procedure: > > gpart create -s gpt ada0 > gpart add -t freebsd-boot -s 512k -a 4k ada0 > gpart add -t freebsd-ufs -l bootfs -s 1g -a 1m ada0 > gpart add -t freebsd-ufs -l encrypted -a 1m ada0 > gpart bootcode -b /boot/pmbr -p /boot/gptboot -i 1 ada0 > geli init -b -s 4096 ada0p3 > geli attach ada0p3 > newfs -U /dev/ada0p2 > newfs -U /dev/ada0p3.eli > mount /dev/ada0p3.eli /mnt > mkdir /mnt/unenc > mount /dev/ada0p2 /mnt/unenc > mkdir /mnt/unenc/boot > ln -s unenc/boot /mnt/boot > vi /tmp/bsdinstall_etc/fstab > vi /tmp/bsdinstall_boot/loader.conf > > fstab: > > /dev/ada0p2 /unenc ufs rw,noatime 1 1 > /dev/ada0p3.eli / ufs rw,noatime 2 2 > > loader.conf: > > geom_eli_load="YES" > vfs.root.mountfrom="ufs:ada0p3.eli" > aesni_load="YES > > Any ideas? > Forgot to mention that a standard, encrypted ZFS install (using the built in utility) works flawlessly every time on both devices. -- 0x2b || !0x2b