Hello FreeBSD community,
with the availability of native zfs(8) encryption in the upcoming FreeBSD 13.0-RELEASE I was wondering if we can boot a native encrypted zfs(8) root on uefi(8). I couldn't find the answer on the interwebs. So I grabbed the FreeBSD-13.0-RC2-amd64-disc1.iso, started it with emulators/virtualbox-ose, switched to Live CD, logged in as
Unfortunately the loader responds with:
Now back to geli(8)? No problem with that. Will booting a native encrypted zfs(8) root be supported in the future?
with the availability of native zfs(8) encryption in the upcoming FreeBSD 13.0-RELEASE I was wondering if we can boot a native encrypted zfs(8) root on uefi(8). I couldn't find the answer on the interwebs. So I grabbed the FreeBSD-13.0-RC2-amd64-disc1.iso, started it with emulators/virtualbox-ose, switched to Live CD, logged in as
root
and made a simple manual installation:
Code:
# partition disk
gpart create -s gpt ada0
gpart add -t efi -a 1m -s 256m -l efi ada0
gpart add -t freebsd-zfs -a 1m -l zroot ada0
# format partitions
newfs_msdos /dev/gpt/efi
zpool create -m / \
-o ashift=12 \
-o autotrim=on \
-O atime=off \
-O canmount=noauto \
-O compression=on \
-O encryption=on \
-O keyformat=passphrase \
-R /mnt \
zroot /dev/gpt/zroot
# mount filesystems (zroot already mounted at /mnt)
mkdir /tmp/efi
mount -t msdosfs /dev/gpt/efi /tmp/efi
# install base system
tar -xf /usr/freebsd-dist/base.txz -C /mnt
tar -xf /usr/freebsd-dist/kernel.txz -C /mnt
echo 'zfs_load="YES"' >> /mnt/boot/loader.conf
# install bootloader
mkdir -p /tmp/efi/efi/boot
cp -a /mnt/boot/loader.efi /tmp/efi/efi/boot/bootx64.efi
# set bootfs property
zpool set bootfs=zroot zroot
# unmount and reboot
umount /tmp/efi
zpool export zroot
reboot
Code:
Setting currdev to zfs:zroot:
zio_read error: 5
zio_read error: 5
ZFS: i/o error - all block copies unavailable
Failed to find bootable partition