From owner-svn-src-head@freebsd.org Thu Dec 14 17:06:32 2017 Return-Path: Delivered-To: svn-src-head@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id EFF6DE87975 for ; Thu, 14 Dec 2017 17:06:32 +0000 (UTC) (envelope-from shawn.webb@hardenedbsd.org) Received: from mail-wm0-x22a.google.com (mail-wm0-x22a.google.com [IPv6:2a00:1450:400c:c09::22a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 7580E6DA88 for ; Thu, 14 Dec 2017 17:06:32 +0000 (UTC) (envelope-from shawn.webb@hardenedbsd.org) Received: by mail-wm0-x22a.google.com with SMTP id n138so12670292wmg.2 for ; Thu, 14 Dec 2017 09:06:32 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hardenedbsd-org.20150623.gappssmtp.com; s=20150623; h=date:from:to:cc:subject:message-id:references:mime-version :content-disposition:in-reply-to:user-agent; bh=IqZDKuJQsP/A1oEi/3kuLJIpSNd+3m6hC6MF1jrgCz0=; b=TvECRdDyyJE/tLEyNBqvczn0/ZgTPxzzs1amW0F5jE/VaFQ/WPRdX/J3b7KXXwzwCJ vIf+vmEcIjyBqpOakVhLXdgncn1O8RATrVyUllNjHaqs6NTU4E7wqOrxwtv2rTRUvOCL 1+Ul89oQ2NGS/xcoThZyLDRPUR1p25blAUDeSrZ4q7mfEHNyxMXZJ/Uhm36YeAUsq572 dZyV5bnhZoY67K/YDYdV8Ux/tp0xhsscxUffj8l9ZUfT4tiGmSp3oxSzwIT/aJ5fgvhE hF3x3in5rMU+l27b0loHC0X7M9ntVZZyzsHHiWbzaKIEd1yN+VJK0ZrP4B5717qqyiOE 9iOw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:date:from:to:cc:subject:message-id:references :mime-version:content-disposition:in-reply-to:user-agent; bh=IqZDKuJQsP/A1oEi/3kuLJIpSNd+3m6hC6MF1jrgCz0=; b=i8Mk4elR8UfznWvTXN99SzKEiBdf5fMIqJtYsYEHIJXxgIhXuu+6sp413+Cw0D62al Hqhr4oqTWHj3O+UoH7DRVNTIeEPFZBRp6bejEE3miViJpgqnLq8BC8QGE9rDXFGgHu9X otwydBzwdHkGOUWOLykq6Kz4jaG7jQPJcbGfdqEHEW2pTlmCof83WG0XDeulVUdE78ci eaHF8D0Z4EYyN7okTrMxPYVpfnANJrg+XGfvtvz2j37vYOWeSl3OHmNeS5q0tdGtjLgp Pq85cipADHHdXkgwrPH5y8rWjXw8IgEvm9Nr0GUmcnbts5hdHRoFUe5RV3CWrSw+6fla eDng== X-Gm-Message-State: AKGB3mKghJP/qAQpiFVQfW6gYPwe8w7q9yw928XpWhGuWbk6l7tbI8Zn 5z/aT4HZ4hCp3bPDHeg4u+m/vg== X-Google-Smtp-Source: ACJfBouIO842N1ipt3c9x1E0EDx+CDPXCsMeqLcDmCLNQspDvSU49A3fsSLHu/FKhHLBRec1fr1Pew== X-Received: by 10.28.2.198 with SMTP id 189mr2860018wmc.69.1513271190637; Thu, 14 Dec 2017 09:06:30 -0800 (PST) Received: from mutt-hbsd (tor-exit.boingboing.net. [204.11.50.131]) by smtp.gmail.com with ESMTPSA id n74sm23082295wmi.1.2017.12.14.09.06.26 (version=TLS1_2 cipher=ECDHE-RSA-CHACHA20-POLY1305 bits=256/256); Thu, 14 Dec 2017 09:06:29 -0800 (PST) Date: Thu, 14 Dec 2017 12:05:52 -0500 From: Shawn Webb To: Warner Losh Cc: src-committers@freebsd.org, svn-src-all@freebsd.org, svn-src-head@freebsd.org Subject: Re: svn commit: r326857 - in head: . share/mk stand/i386/zfsboot Message-ID: <20171214170552.w4hebwnkehh5szog@mutt-hbsd> References: <201712141700.vBEH0O87072941@repo.freebsd.org> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="behblm43urzblcgz" Content-Disposition: inline In-Reply-To: <201712141700.vBEH0O87072941@repo.freebsd.org> X-Operating-System: FreeBSD mutt-hbsd 12.0-CURRENT FreeBSD 12.0-CURRENT X-PGP-Key: http://pgp.mit.edu/pks/lookup?op=vindex&search=0x6A84658F52456EEE User-Agent: NeoMutt/20171027 X-BeenThere: svn-src-head@freebsd.org X-Mailman-Version: 2.1.25 Precedence: list List-Id: SVN commit messages for the src tree for head/-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 14 Dec 2017 17:06:33 -0000 --behblm43urzblcgz Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Thu, Dec 14, 2017 at 05:00:24PM +0000, Warner Losh wrote: > Author: imp > Date: Thu Dec 14 17:00:24 2017 > New Revision: 326857 > URL: https://svnweb.freebsd.org/changeset/base/326857 >=20 > Log: > Turn loader GELI support in the boot loaders off by default as a > temporary workaround. This fixes zfs booting generally, but breaks all > GELI booting by default. Add note to UPDATING to this effect. When the > GELI issues are resolved, this will be reverted. On an existing 12-CURRENT GELI + root-on-ZFS system (so, full-disk encryption), if I upgrade to this revision, will my system now fail to boot? Or, will it only fail to boot if I update the bootloader? Thanks, --=20 Shawn Webb Cofounder and Security Engineer HardenedBSD GPG Key ID: 0x6A84658F52456EEE GPG Key Fingerprint: 2ABA B6BD EF6A F486 BE89 3D9E 6A84 658F 5245 6EEE --behblm43urzblcgz Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEKrq2ve9q9Ia+iT2eaoRlj1JFbu4FAloyr20ACgkQaoRlj1JF bu7Cdg//eyfks+KCSqD2WyuDDyscXX+xuUgcafmIkTwO1CNyNaeQQcJ6AD0eO/kk F9oj/9NS8dJK47kIKtP11Nbuun8+Zw9l/v/cyzHraCzPlWYdnMsBZi59mPAIbzKu mV6ebKIOecQl6s0mEHoXmkdo0KFZzZGPclPgfTvbyrHmO0CZSuvpOqripAdg23mb 1hidoa2pGZj5W1NCF7i+eSM+D73I4u6xW47KjmEea8eytC6GV4Dm4eTG+wCXCmxt Z7fSnJiLDzsnX74OTIffl4a0VpadXDhlPp0LrK0A8LpA/RrjSNwAct88H8XF44cU 8dAxZdE4ClFu7G07LBxEimQQzs/ylEZ7klWrF7qoxvypzVNYTu2lpi5YqGNsaAh6 c7SLZpK7V4uaWhcbxgxuTEi6n+TtMOyPFFXngPbyBwZDZg00OK2PAFeZ2NfGX4iE iftal1fObiVq8eV6qcKUSFeyFHNhtrpBYIN2IKv3c41mcV78U2Ih5A12zpIASIm3 H8wT8YKQcsKv/0Pxci07ekh2Pq6cZcPH1wMJiGcRXDD05TqpYUbEK6CFurJMX5n1 z41yv+C/Sv0cDuS9W6287jEnTGzGEmcqeVsa1L8nFOC8EaM3XWlZcZNhH+AVkzwc yXBiV8CMmKj5xSmsQ6YuRI8cWqpIENeBecBYAWGflDazvFp2xLg= =s2Wl -----END PGP SIGNATURE----- --behblm43urzblcgz--