Hello,

Changes brought to bce(4) prevents booting a R410 Dell server with 
GELI-encrypted root ZFS partition requiring a passphrase, something that was 
possible with 9-RELEASE.

Using a binary search, the bug comes from the following revision:

Updating collection src-all/cvs
 Edit src/sys/dev/bce/if_bce.c
  Add delta 1.89.2.4 2012.01.09.19.07.14 yongari
 Edit src/sys/dev/bce/if_bcereg.h
  Add delta 1.35.2.3 2012.01.09.19.07.14 yongari
Shutting down connection to server

RELEASE as well as STABLE with date=2012.01.09.19.00.00 boot properly.
The boot fails with date=2012.01.09.19.08.00

For more details: the box is configured to boot from a plain ZFS pool that 
contains the kernel (zboot) and then to request passphrase for a GELI-encrypted 
ZFS pool containing everything else (including /etc/rc.d), in a way similar to 
what is described here: http://www.keltia.net/howtos/freebsd-dedibox

The passphrase should be entered from the virtual console (KVM) simulated by 
the ipmi controller (through Dell's "iDRAC6").

On RELEASE, the boot works properly and can be followed from the KVM console, 
where the passphrase can be entered. On STABLE, the KVM gets disconnected. 
Besides, the ipmi is down, and the box is eventually bricked: since plugging a 
real console is not an option, the only way to get access to the server is to 
reboot it electrically (and to configure the PXE to perform a netboot in order 
to switch the kernel).

I believe the ipmi controller uses the main ethernet port to simulate a 
physical console and the change in the bce driver disables the ethernet port. 
Since the box waits from the passphrase to configure the network, the box gets 
unreachable.

Paul
-- 
Semiocast            http://semiocast.com/
+33.183627948 - 20 rue Lacaze, 75014 Paris

Reply via email to