Re: Old GPT/GELI disk issue

2013-09-18 Thread RW
On Tue, 17 Sep 2013 19:22:30 -0400
Andre Goree wrote:

 Hey list,
 
 I have a disk that was at one time part of a GPT/GELI configuration
 and thus, had a passphrase attached to it.
 
 I've since reformatted that disk and am using it for another purpose, 
 but the system still appears to think the disk should be unlocked via 
 passphrase.  I always have to enter some arbitrary passphrase to get 
 past the prompt, after which the system continues to boot as normal.
 I thought all I would need to do is comment the corresponding parts
 in /boot/loader.conf, but that doesn't appear to be the case.  Anyone
 have any insight?


geli metadata is stored in the last sector of the provider which wont
get overwritten by newfs or similar.

I guess you need to run geli clear on it.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Old GPT/GELI disk issue

2013-09-18 Thread Andre Goree

On 09/18/2013 7:44 am, RW wrote:

On Tue, 17 Sep 2013 19:22:30 -0400
Andre Goree wrote:


Hey list,

I have a disk that was at one time part of a GPT/GELI configuration
and thus, had a passphrase attached to it.

I've since reformatted that disk and am using it for another purpose,
but the system still appears to think the disk should be unlocked via
passphrase.  I always have to enter some arbitrary passphrase to get
past the prompt, after which the system continues to boot as normal.
I thought all I would need to do is comment the corresponding parts
in /boot/loader.conf, but that doesn't appear to be the case.  Anyone
have any insight?



geli metadata is stored in the last sector of the provider which wont
get overwritten by newfs or similar.

I guess you need to run geli clear on it.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to 
freebsd-questions-unsubscr...@freebsd.org



Thanks, I knew this was probably some simple command I was missing to 
erase the metadata...Googling didn't turn up much but I probably wasn't 
searching for the write thing.


I'll give this a shot, I'm sure this will resolve it.  Thanks again.

--
Andre Goree
-=-=-=-=-=-
Email - andre at drenet.net
Website   - http://www.drenet.net
PGP key   - http://www.drenet.net/0x83ADAAAB.asc
-=-=-=-=-=-
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Old GPT/GELI disk issue

2013-09-17 Thread Andre Goree

Hey list,

I have a disk that was at one time part of a GPT/GELI configuration and 
thus, had a passphrase attached to it.


I've since reformatted that disk and am using it for another purpose, 
but the system still appears to think the disk should be unlocked via 
passphrase.  I always have to enter some arbitrary passphrase to get 
past the prompt, after which the system continues to boot as normal.  I 
thought all I would need to do is comment the corresponding parts in 
/boot/loader.conf, but that doesn't appear to be the case.  Anyone have 
any insight?


/dev/ada2 is the disk in question.  It is now used in a zpool where ZFS 
has direct access (no partitioning).


root@daemon ~ # cat /boot/loader.conf
...
# Encyrption settings
aesni_load=YES
geom_eli_load=YES
#geli_ada1p2_keyfile0_load=YES
#geli_ada1p2_keyfile0_type=ada1p2:geli_keyfile0
#geli_ada1p2_keyfile0_name=/boot/encryption.key
#geli_ada2p1_keyfile0_load=YES
#geli_ada2p1_keyfile0_type=ada2p1:geli_keyfile0
#geli_ada2p1_keyfile0_name=/boot/encryption.key
geli_ada3p1_keyfile0_load=YES
geli_ada3p1_keyfile0_type=ada3p1:geli_keyfile0
geli_ada3p1_keyfile0_name=/boot/encryption.key2

root@daemon ~ # dmesg |grep ada2
ada2 at ahcich2 bus 0 scbus2 target 0 lun 0
ada2: ST31000528AS CC44 ATA-8 SATA 2.x device
ada2: 300.000MB/s transfers (SATA 2.x, UDMA6, PIO 8192bytes)
ada2: Command Queueing enabled
ada2: 953869MB (1953525168 512 byte sectors: 16H 63S/T 16383C)
ada2: Previously was known as ad8
GEOM: ada2: the primary GPT table is corrupt or invalid.
GEOM: ada2: using the secondary instead -- recovery strongly advised.
Enter passphrase for ada2p1: ugen0.2: Dell at usbus0
GEOM_ELI: Wrong key for ada2p1. Tries left: 2.
Enter passphrase for ada2p1: GEOM_ELI: Wrong key for ada2p1. Tries left: 
1.
Enter passphrase for ada2p1: GEOM_ELI: Wrong key for ada2p1. No tries 
left.


root@daemon ~ # zpool status
  pool: nas2
 state: ONLINE
  scan: resilvered 717G in 5h43m with 0 errors on Sun Apr  7 19:54:29 
2013

config:

NAME  STATE READ WRITE CKSUM
nas2  ONLINE   0 0 0
  ada3p1.eli  ONLINE   0 0 0

errors: No known data errors

  pool: nas3
 state: ONLINE
  scan: none requested
config:

NAMESTATE READ WRITE CKSUM
nas3ONLINE   0 0 0
  ada2  ONLINE   0 0 0
  ada1  ONLINE   0 0 0

root@daemon ~ # gpart list
Geom name: ada0
modified: false
state: OK
fwheads: 16
fwsectors: 63
last: 976773134
first: 34
entries: 128
scheme: GPT
Providers:
1. Name: ada0p1
   Mediasize: 65536 (64k)
   Sectorsize: 512
   Stripesize: 0
   Stripeoffset: 17408
   Mode: r0w0e0
   rawuuid: 9e6ac2d4-6a8b-11e2-bf8c-00123f7d40e2
   rawtype: 83bd6b9d-7f41-11dc-be0b-001560b84f0f
   label: (null)
   length: 65536
   offset: 17408
   type: freebsd-boot
   index: 1
   end: 161
   start: 34
2. Name: ada0p2
   Mediasize: 34359738368 (32G)
   Sectorsize: 512
   Stripesize: 0
   Stripeoffset: 82944
   Mode: r1w1e1
   length: 4294967296
   offset: 51539690496
   type: freebsd-ufs
   index: 4
   end: 109052065
   start: 100663458
5. Name: ada0p5
   Mediasize: 434865438720 (405G)
   Sectorsize: 512
   Stripesize: 0
   Stripeoffset: 82944
   Mode: r1w1e1
   rawuuid: f7a88d9e-6a8b-11e2-bf8c-00123f7d40e2
   rawtype: 516e7cb6-6ecf-11d6-8ff8-00022d09712b
   label: (null)
   length: 434865438720
   offset: 55834657792
   type: freebsd-ufs
   index: 5
   end: 958398625
   start: 109052066
6. Name: ada0p6
   Mediasize: 9407748096 (8.8G)
   Sectorsize: 512
   Stripesize: 0
   Stripeoffset: 1073824768
   Mode: r1w1e0
   rawuuid: 0040409a-6a8c-11e2-bf8c-00123f7d40e2
   rawtype: 516e7cb5-6ecf-11d6-8ff8-00022d09712b
   label: (null)
   length: 9407748096
   offset: 490700096512
   type: freebsd-swap
   index: 6
   end: 976773133
   start: 958398626
Consumers:
1. Name: ada0
   Mediasize: 500107862016 (465G)
   Sectorsize: 512
   Mode: r5w5e9

Geom name: ada3
modified: false
state: OK
fwheads: 16
fwsectors: 63
last: 1953523021
first: 34
entries: 128
scheme: GPT
Providers:
1. Name: ada3p1
   Mediasize: 1000203763712 (931G)
   Sectorsize: 512
   Stripesize: 4096
   Stripeoffset: 0
   Mode: r1w1e1
   rawuuid: 670fd8d5-7628-11e2-aecd-00123f7d40e2
   rawtype: 516e7cba-6ecf-11d6-8ff8-00022d09712b
   label: (null)
   length: 1000203763712
   offset: 20480
   type: freebsd-zfs
   index: 1
   end: 1953523015
   start: 40
Consumers:
1. Name: ada3
   Mediasize: 1000203804160 (931G)
   Sectorsize: 512
   Stripesize: 4096
   Stripeoffset: 0
   Mode: r1w1e2

--
Andre Goree
-=-=-=-=-=-
Email - andre at drenet.net
Website   - http://www.drenet.net
PGP key   - http://www.drenet.net/0x83ADAAAB.asc
-=-=-=-=-=-
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org