A cute drawing of a cat with a zipper for a mouth and pointy ears

fedi.unchat.cat

Single post

jump to replies

Since #FreeBSD people are already at #EuroBSDcon, here is a complain in the void (*):
It looks like the installer ignores the desire to encrypt the disk when using ZFS.
Realised this after setting up things and rebooting, and noticing "hey, it's not asking for the passphrase".
And, boy do I have some thoughts regarding bsdinstall zfsboot.

(*) haven't gotten the spoons yet for a proper bug report, but it will come once things are back to normal

7 replies

back to top

@ricardo latest 15.1, direct off freebsd.org's big download button.

Real hardware though, could be the difference. IIRC there have been other reports, dismissed as "not a problem" with a VM screenshot as well.

As mentioned, this is not a proper bug report. It's more: "I am an experienced #FreeBSD user that contributes patches whenever possible, and still this kind of thing happens. There is something here worth looking into, because we are doing something wrong."

Once I manage to setup my machine again I will certsinly take a good look at bsdinstall zfsboot, there are a couple things that seem off.

TomAoki , @TomAoki@bsd.cafe
(open profile)

@evilham @ricardo
Aren't you overlooking something?

See Chapter 2.6.4 of the Handbook, notably Figure 20.
docs.freebsd.org/en/books/hand

Isn't "E Encrypt Disks" configureble? If not, it would be a bug.

Note that I'm NOT using bsdinstall for installation for years (using as rescue live system when needed), so I could be wrong, though.

@TomAoki
Familiar with the option existing, as before venting I did spend a few hours in the dialog from the installation media and in the manual steps auditing bsdinstall zfsboot to make sure finally going with auto (ZFS) + "encrypted yes" after rebooting for a clean installer state would, in theory result in what I needed.

While not impossible that I personally effed up, I am reasonably confident that I activated the option and was asked the desire passphrase, only to have the disk not be protected by geli in the end.

Again, I am aware this is not a bug report and is missing info, but dismissing it as "the option is in the docs" (and in the installer, which is why I expected a specific result), just isn't helpful.

Cc: @ricardo