1. T

    Unlock GELI on boot with USB stick

    My system is encrypted with GELI and uses the AUTOZFS partition schema. I can successfully boot up without issues. I would like to make a backup system that boots up with a USB key, and then after booted, I will remove the USB key. The backup system is completely headless, but if needed, I...
  2. A

    Boot splash kills geli encrypted FreeBSD

    Hello, Just installed in VM FreeBSD on geli encrypted ZFS. All went well however after installing Xorg password prompt is hidden behind splash screen so no way to enter password. Unfortunately there is nothing to unset at boot prompt (option 3). I could just remove splash picture from single...
  3. asteriskRoss

    ZFS Native ZFS encryption coming to FreeBSD 13

    The March/April 2020 edition of the FreeBSD Journal reports that native ZFS encryption is on its way to FreeBSD. Thank you, developers! No more need for stuffing ZFS pools inside GELI containers :) And here was me thinking that having repartitioned my latop to use 12.1 with the fancy new UEFI...
  4. A

    ZFS Horribly slow performance after reboot when attaching HDD with geli and mounting pool

    Hey all, I'm getting a little uncomfortable in my current situation: FreeBSD 11.3, using zfs. I just did a reboot because of some adjustments and after attaching every HDD to geli and mounting my 'tank0' the performance drops to unusable levels, mounting the pool itself takes ~1 minute. Right...
  5. `Orum

    Bootable system with UEFI + GELI + ZFS?

    From reading other posts, it looks like a UEFI + GELI + ZFS root system should be possible with 12.1. I used both the -b and the -g flags when setting up GELI, but I'm not even prompted for a password at boot. It looks like there might be an error, but it flashes by so quickly I can't read it...
  6. `Orum

    UFS GELI hash changes depending on if hardware or software crypto is used?

    I'm trying to set up a new system using EFI + GELI + UFS2 + encrypted root, with GELI configured to use AES-XTS 256 and HMAC/SHA256. After dding over areas of the disk (start/end, to set up initial HMACs) and then newfsing, I noticed that GELI was not using hardware crypto, but software. After...
  7. N

    Other GELI on Epyc Using Software AES Despite Saying its Using Hardware

    I have two similar systems I'm testing as database hardware. Both consist of 8x Samsung 860 Pro SSD's attached to LSI9003-8i, 256GB ram, equal chassis/backplane. The only variance is one server is an Epyc 7371, and the other a Xeon Gold 6130. Some snippets to get the lay of the land, first the...
  8. D

    ZFS (solved) zfs on geli encrypted disks

    I have two drives which are both geli encrypted and have the same partition scheme. I added both to an zfs mirror pool and created some smaller partitions in that pool. After a reboot im facing these problems: I can decrypt both drives, but only the first decrypted is shown as online and the...
  9. vlig

    Encrypted ZFS and liveUSB

    Hello! I have a laptop with FreeBSD on encrypted ZFS. When I try to load with FreeBSD USB stick I always asked for geli passphrase. What is the strange behavior?? It is boot USB drive, isn't it? And if I wish to make a clean FreeBSD install? Tried with nomadBSD - all the same, tried with Arch...

    geli initialization at rc.conf for gmirror drive

    How can I do that? user@serv:~ % l /dev/mirror/mirror 119 crw-r----- 1 root operator - 0x77 Aug 8 14:01:02 2019 /dev/mirror/mirro rc.conf geli_devices="mfid0p8 mirror" geli_mfid0p8_flags="-p -k /root/1.key" geli_mirror_flags="-p -k /root/2.key" mirror/mirror does not work as well.

    Solved GELI issue - geli: Wrong key

    First time, I have the following error. user@hpv3:/root % sudo dd if=/dev/random of=/root/data1.key bs=64 count=1 1+0 records in 1+0 records out 64 bytes transferred in 0.000215 secs (297142 bytes/sec) user@hpv3:/root % sudo geli init -s 4096 -K /root/da2.key /dev/mfid0p8 Enter new passphrase...
  12. Petr Fischer

    Solved How to mount FreeBSD 12 GELI encrypted ZFS root manually?

    Hello! I have FreeBSD 12 installation with GELI encrypted ZFS root partition (created automatically from the installer). But now, my HW died and I need to import and mount the root filesystem as external disk. How can I mount this GELI encrypted ZFS root partition manually please? Note: In the...
  13. D

    mountroot error 19 when using GPT label on GELI encrypted root on 12.0-Release

    Hello, I'm installing FreeBSD 12.0-Release and I'm using the Shell option in the installer to partition my disk by hand. I have a swap and a root partition. I'm using GPT label to label them, and GELI for the encryption. After completing the installation and rebooting the host, I'm asked for...
  14. goshanecr

    Right way to migrate 11.1 r326098 to 11.2 r348355 with zroot on geli

    Good day! I have a box with FreeBSD 11.1-STABLE r326098 amd64. It have a ZFS root on GELI encrypted providers: zpool status pool: bootpool state: ONLINE scan: none requested config: NAME STATE READ WRITE CKSUM bootpool ONLINE 0 0 0...
  15. Q

    Mounting an encrypted zfs GELI partition - zpool?

    Using a live media, I have taken a dd image of my main encrypted zfs GELI FreeBSD partition (not the entire disk) and of the encrypted key file as well. The dd image and the encrypted file are on an external disk now. Now I started FreeBSD normally, I did mdconfig and did a geli attach of the dd...
  16. Nyakov

    EFI Full disc encryption with GELI and key file

    Can someone clarify how to use removable flash drive with encryption key with new full disc encryption process? The new approach is to encrypt /boot altogether with /root filesystem. So, as I understand, initial encryption performed by EFI loader. Is there a way to pass keyfile to EFI loader...
  17. D

    Geli and default US

    Hello, I want try to change the US keymap (Stdin?) that GELI uses to input the password. I used the automatic ZFS Geli encryption. Is it possible to change to spanish keyboard? I was reading this: But not solution found. Thanks, I am newbie at Freebsd. Sorry for my English.
  18. Yosi

    HP ML110 G6 - Unable to use the keyboard at the BSD Loader.

    Hello, So this is a long story. Last week i've upgraded from a ML110 G5 -> ML110 G6. I've been using FreeBSD for quite a while and been happy with it for a long time. I've read multiple threads about the ML110G6 being unable to use the keyboard at the BSD Bootloader. Thread #1 Thread #2 I've...
  19. vermaden

    HOWTO: FreeBSD Desktop - Part 2.1 - Install FreeBSD 12

    I would like to share HOWTO in 𝐅𝐫𝐞𝐞𝐁𝐒𝐃 𝐃𝐞𝐬𝐤𝐭𝐨𝐩 series about fonts and frameworks. 𝗙𝗿𝗲𝗲𝗕𝗦𝗗 𝗗𝗲𝘀𝗸𝘁𝗼𝗽 - 𝗣𝗮𝗿𝘁 𝟮.𝟭 - 𝗜𝗻𝘀𝘁𝗮𝗹𝗹 𝗙𝗿𝗲𝗲𝗕𝗦𝗗 𝟭𝟮 You may also like earlier articles in the series. Part 1 – Simplified Boot...
  20. D

    Solved Cannot upgrade to FreeBSD 11.X – cannot find the pool (zfs) / ada0 not listed

    Hello everyone! Last week I tried to upgrade from source from 10.3-STABLE to 11.2-STABLE on my laptop but the new kernel (GENERIC) failed to boot. I thought that it might be safer to upgrade from binary, so I built and installed 10.3-RELEASE in order to get freebsd-update working and then I...