Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 10 Oct 2007 11:15:48 -0400
From:      Steve Bertrand <iaccounts@ibctech.ca>
To:        Daniel Marsh <jahilliya@gmail.com>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: Booting a GELI encrypted hard disk
Message-ID:  <470CECA4.2090402@ibctech.ca>
In-Reply-To: <ba5e78ea0710100811y56d28b7dma1e0771e7ed2e75b@mail.gmail.com>
References:  <470CCDE2.9090603@ibctech.ca> <ba5e78ea0710100811y56d28b7dma1e0771e7ed2e75b@mail.gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help
Daniel Marsh wrote:
> On 10/10/07, Steve Bertrand <iaccounts@ibctech.ca> wrote:
>> Hi all,
>>
>> I am voraciously attempting to get a FreeBSD system to boot from a GELI
>> encrypted hard disk, but am having problems.
>>
>> All of my searches lead to the same problem...GELI passphrase can not be
>> entered correctly upon boot. I have tried everything I have found on the
>> web (including disabling 'kbdmux' in the kernel) to no avail.
>>
>> Is there any chance that anyone here has found a resolution to this
>> problem, in the 6.x branch, and if not, has it been looked/resolved
>> within -current?
>>
>> Does anyone have a suggestion for a workaround?
> 
> 
> You could always use a key without a passphrase... unsafe as it is, put the
> key on a usb device that you remove once the machine has booted?

That is what I was going to try next. The 'howtos' I've been reading
require putting many of the boot files on the thumb drive, so would it
even be possible to unmount/remove the usb stick after the machine is
booted up?

If I was to do it this way, I would likely use two separate key files,
on two separate USB sticks.

Reference:

http://www.proportion.ch/index.php?page=31

Thanks for your feedback.

Steve



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?470CECA4.2090402>