Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 19 Oct 2011 22:13:17 +0200
From:      Pawel Jakub Dawidek <pjd@FreeBSD.org>
To:        Garrett Cooper <yanegomi@gmail.com>
Cc:        Xin LI <delphij@gmail.com>, freebsd-geom@freebsd.org
Subject:   Re: GELI devices produced with 9.0+ fail when mounted on 8.2, etc?
Message-ID:  <20111019201317.GC1982@garage.freebsd.pl>
In-Reply-To: <CAGH67wS3TVJe07pURFw7yHTzw3bR0h_vEUj9LNLFe_de%2BzRRFg@mail.gmail.com>
References:  <924643A0-0798-4FAC-8F82-4AFBC56DC8D7@gmail.com> <CAGMYy3tX=Xr1k%2B=7FqV5=Ddooopodtmv1hG=zy5G2Ye5KCuO_Q@mail.gmail.com> <7EC93C28-6405-443F-92C6-0291F8D88995@gmail.com> <CAGMYy3veJQ-pBg1BuAZyH3rvMxEaFQOYPTJYgWPteohw-HE%2BuA@mail.gmail.com> <EDE63E3A-A2BF-4422-B0F5-8DB4AFE5B573@gmail.com> <20111017132945.GG1679@garage.freebsd.pl> <CAGH67wRSVtsophbJ4cF5Y2x=5a9HHB5_SE6HqvwwyjyVtUd9oA@mail.gmail.com> <CAGH67wSbF7xazeX7GbHsghDCH2qiLd1ciyOBr_j=hfBW8kPxcw@mail.gmail.com> <20111019161833.GB1982@garage.freebsd.pl> <CAGH67wS3TVJe07pURFw7yHTzw3bR0h_vEUj9LNLFe_de%2BzRRFg@mail.gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help

--oJ71EGRlYNjSvfq7
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Wed, Oct 19, 2011 at 09:37:33AM -0700, Garrett Cooper wrote:
> On Wed, Oct 19, 2011 at 9:18 AM, Pawel Jakub Dawidek <pjd@freebsd.org> wr=
ote:
> > On Wed, Oct 19, 2011 at 08:30:39AM -0700, Garrett Cooper wrote:
> >> Patch added for the first suggestion here:
> >> http://www.freebsd.org/cgi/query-pr.cgi?pr=3D161807 . I'll see if I can
> >> get around to the other two sometime before the end of the week.
> >
> > I'm already working on this. Unfortunately 'upgrade' subcommand will be
> > much harder to implement, because in some cases we would need to rewrite
> > the data for the entire provider. I decided not to add upgrade. It also
> > doesn't buy us much. Even after upgrade you cannot switch to new
> > algorithms or to multi-key encryption, etc.
> >
> > Instead I added 'version' subcommand:
> >
> > =A0 =A0 =A0 =A0geli version [-l]
> > =A0 =A0 =A0 =A0geli version [prov ...]
> >
> > Examples:
> >
> > =A0 =A0 =A0 =A0# geli version
> > =A0 =A0 =A0 =A0kernel: 6
> > =A0 =A0 =A0 =A0userland: 5
> >
> > =A0 =A0 =A0 =A0# geli version ada0 gpt/secret
> > =A0 =A0 =A0 =A0ada0: 5
> > =A0 =A0 =A0 =A0gpt/secret: 3
> >
> > =A0 =A0 =A0 =A0# geli version -l
> > =A0 =A0 =A0 =A0FreeBSD version: highest supported GELI version:
> > =A0 =A0 =A0 =A0FreeBSD 6.0: 0
> > =A0 =A0 =A0 =A0FreeBSD 6.1: 0
> > =A0 =A0 =A0 =A0FreeBSD 6.2: 3
> > =A0 =A0 =A0 =A0FreeBSD 6.3: 3
> > =A0 =A0 =A0 =A0FreeBSD 6.4: 3
> > =A0 =A0 =A0 =A0FreeBSD 7.0: 3
> > =A0 =A0 =A0 =A0FreeBSD 7.1: 3
> > =A0 =A0 =A0 =A0FreeBSD 7.2: 3
> > =A0 =A0 =A0 =A0FreeBSD 7.3: 3
> > =A0 =A0 =A0 =A0FreeBSD 7.4: 3
> > =A0 =A0 =A0 =A0FreeBSD 8.0: 3
> > =A0 =A0 =A0 =A0FreeBSD 8.1: 3
> > =A0 =A0 =A0 =A0FreeBSD 8.2: 5
> > =A0 =A0 =A0 =A0FreeBSD 9.0: 6
>=20
> Wouldn't it be better to document this in a manpage like I suggested
> so the code could be MFCed easier?

Manual page is in the same place as source code, so it doesn't really
matter if we merge geli.8 or geom_eli.c. I was planing to put this into
manual page as well, but I think that having it only in the manual page
should be enough indeed.

> Also, I like the thought of having a separate subcommand -- version --
> for displaying the version output of a geli image. It seems like:
>=20
> geli upgrade md0

You meant 'version' here, right?

> should just upgrade md0 to the latest supported metadata format
> instead of printing out the metadata version, as the implied metadata
> version should be the latest one by default.

Well, as I said, upgrading is often not possible, as it would require
rewrite of all the data, as the code assumes for example that if this is
version X, IV should be calculated this way and if it Y some other way,
etc.

--=20
Pawel Jakub Dawidek                       http://www.wheelsystems.com
FreeBSD committer                         http://www.FreeBSD.org
Am I Evil? Yes, I Am!                     http://yomoli.com

--oJ71EGRlYNjSvfq7
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.14 (FreeBSD)

iEYEARECAAYFAk6fL10ACgkQForvXbEpPzQjhACfXARMnjUlPoOm0VMjNX0pEEJo
FnkAoIiV0jFwuJ9yI/9jIV4eZfs0DM9Z
=e96d
-----END PGP SIGNATURE-----

--oJ71EGRlYNjSvfq7--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20111019201317.GC1982>