geli

  1. Jake0162

    Solved ASM1153E Causing system Lockup?

    Issue: System will lock up on on file transfers(sometimes) to a External USB drive. HDD: Segate IronWolf 4TB, GELI encrypted with ZFS pool on it usb chipset: ASM1153E Memory: 32GB DDR4 PNY CPU: Ryzen 5 Pro 2400GE Description: External USB 3.1 drive using ASM1153E IC will lock up the entire...
  2. X

    GELI, change default integrity algorithm at installation time

    Intro: Hi, I'm about to switch to FreeBSD for main dailly desktop usage, and I'm concerned about my data and slightly about performance. Context: My machine is 64bit and i know (based on what I've read online) that, SHA-512 is faster than SHA-256 on a 64bit system. Goal: So, i was wondering if...
  3. spmzt

    Solved How to move the entire OS to another disk?

    Hi, I want to move the entire OS (GELI+ZFSOnRoot) to another disk. I had execute these commands to make this happen: Setup my new disk partition table (similar to old one): gpart create -s gpt nvd0 gpart add -a 1M -s 260M -t efi -l efiboot1 nvd0 gpart add -a 1M -s 4G -t freebsd-swap -l swap1...
  4. markmcb

    Other Auto-decrypt geli at boot with key, or fallback to password

    I'm looking to implement a way to optionally auto-decrypt a single drive system at boot. The flow would be like this: Install FreeBSD, one disk, use GELI encryption Login, create a key: /root/quick-boot-with-no-password.key Create a reboot/shutdown script that offers two option: reboot with...
  5. J

    ZFS GELI vs ZFS encrypted dataset

    I've been using ZFS encrypted datasets pretty much since the first day of availability. On this forum and also the mailing lists I see a lot of people running ZFS "on top of" GELI. I'd like to ask: Is that usually more of a legacy thing or are there situations where one would prefer ZFS on GELI...
  6. chiefsucker

    Solved Encrypted & Mirrored ZFS vdevs Stopped Booting After Resilvering

    I had a setup with 4x4 TB disks, with two mirrors consisting of two disks each, giving me about 8 TB of usable storage space. One mirror consists of ada0 & ada2, the other mirror of ada1 & ada3. I needed to upgrade storage space, so I decided to upgrade one mirror by resilvering two times. I...
  7. spmzt

    Solved ZFS/GELI Reboot Failure

    Hi, In a fresh installed FreeBSD 13 with ZFS/GELI, When I reboot or power on the system, I get the following error after entering the storage password. GELI Passphrase for disk0p4: Calculating GELI Decryption Key for disk0p4: 2224665 iterations... .... zio_read error: 45 zio_read error: 45...
  8. rafael_grether

    Solved ZFS Encrypted Volume to another FreeBSD

    Hi Guys, I need to create a Encrypted Volume, backup it and transfer to another FreeBSD machine without SSH access. I was successful in doing this, but I don't know if I do it the best way. If there is a better way,, please let me know. 1 - First I create de zroot Volume $ zfs create -V 1g...
  9. F

    Solved Geli passphrase prompt and keyboard layout

    Hi, I'm experimenting with geli encryption on a spare laptop. I've activated ZFS root encryption from the FreeBSD installer. I'm using a french keyboard layout. After POST, Geli prompts me for the passphrase with a US keyboard layout. That's annoying. I've set the...
  10. X

    Solved How can I do Geli automount (when system boot) couple of disk (system disk SSD and data disk HDD)?

    Hello! Could you help me to get ahead in solving the problem installation of FreeBSD12.2 with GELI encrypt? My installation steps: SSD (ada0) - system will install here # gpart destroy -F ada0 # gpart create -s gpt ada0 HDD (ada1) - data disk # gpart destroy -F ada1 # gpart create -s gpt ada1...
  11. B

    Solved System wide GELI encryption password change

    I've set up remote VPS systems with GELI disk encryption, including swap encryption, during FreeBSD 12.2 installation. I've locked down SSH quite securely too so I presume now when remoting in, security is reasonably assured. I want to address the possibility that within the VPS terminal's web...
  12. T

    Other GELI - cannot read metadata

    I have a drive that has been sitting around for quite some time. I have tried multiple SATA USB adapters to no avail. When attempting to decrypt the device with GELI, I get this: geli: Cannot read metadata from da0: Invalid argument. geli: There was an error with at least one provider. Of...
  13. T

    Unlock GELI on boot with USB stick

    My system is encrypted with GELI and uses the AUTOZFS partition schema. I can successfully boot up without issues. I would like to make a backup system that boots up with a USB key, and then after booted, I will remove the USB key. The backup system is completely headless, but if needed, I...
  14. Aeterna

    Boot splash kills geli encrypted FreeBSD

    Hello, Just installed in VM FreeBSD on geli encrypted ZFS. All went well however after installing Xorg password prompt is hidden behind splash screen so no way to enter password. Unfortunately there is nothing to unset at boot prompt (option 3). I could just remove splash picture from single...
  15. asteriskRoss

    ZFS Native ZFS encryption coming to FreeBSD 13

    The March/April 2020 edition of the FreeBSD Journal reports that native ZFS encryption is on its way to FreeBSD. Thank you, developers! No more need for stuffing ZFS pools inside GELI containers :) And here was me thinking that having repartitioned my latop to use 12.1 with the fancy new UEFI...
  16. A

    ZFS Horribly slow performance after reboot when attaching HDD with geli and mounting pool

    Hey all, I'm getting a little uncomfortable in my current situation: FreeBSD 11.3, using zfs. I just did a reboot because of some adjustments and after attaching every HDD to geli and mounting my 'tank0' the performance drops to unusable levels, mounting the pool itself takes ~1 minute. Right...
  17. `Orum

    Bootable system with UEFI + GELI + ZFS?

    From reading other posts, it looks like a UEFI + GELI + ZFS root system should be possible with 12.1. I used both the -b and the -g flags when setting up GELI, but I'm not even prompted for a password at boot. It looks like there might be an error, but it flashes by so quickly I can't read it...
  18. `Orum

    UFS GELI hash changes depending on if hardware or software crypto is used?

    I'm trying to set up a new system using EFI + GELI + UFS2 + encrypted root, with GELI configured to use AES-XTS 256 and HMAC/SHA256. After dding over areas of the disk (start/end, to set up initial HMACs) and then newfsing, I noticed that GELI was not using hardware crypto, but software. After...
  19. N

    Other GELI on Epyc Using Software AES Despite Saying its Using Hardware

    I have two similar systems I'm testing as database hardware. Both consist of 8x Samsung 860 Pro SSD's attached to LSI9003-8i, 256GB ram, equal chassis/backplane. The only variance is one server is an Epyc 7371, and the other a Xeon Gold 6130. Some snippets to get the lay of the land, first the...
  20. D

    ZFS (solved) zfs on geli encrypted disks

    I have two drives which are both geli encrypted and have the same partition scheme. I added both to an zfs mirror pool and created some smaller partitions in that pool. After a reboot im facing these problems: I can decrypt both drives, but only the first decrypted is shown as online and the...
Top