Re: Autoattach geli device but not at startup

2007-11-09 Thread Matthias Fechner
Hi RW,

RW wrote:
 I think it would just be easier to write a script to handle the
 attach, fsck, and mount. 

yeah, seems to be the best solution, thx for the tip.

Bye
Matthias

-- 

Programming today is a race between software engineers striving to
build bigger and better idiot-proof programs, and the universe trying to
produce bigger and better idiots. So far, the universe is winning. --
Rich Cook
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Autoattach geli device but not at startup

2007-11-07 Thread Josh Paetzel
On Wednesday 07 November 2007 07:13:45 am Matthias Fechner wrote:
 Hi,

 I have here a setup where some backup directories are mounted
 encrypted (using geli).
 rc.conf:
 geli_devices=ad3
 geli_ad3_flags=-k /root/backup1.key
 ...

 But if the system must be rebooted it asks for the password before a
 network connection is available.
 The computer has no keyboard via default so it is really a pain to get
 the system up again.

 Is their a possibility to do something like that after the reboot:
 mount /mnt/backup1
 and mount starts geli and geli will ask for the passphrase?

 Thanks,
 Matthias

This is one of those cases where I would alter the base system a bit.  I'd 
fiddle with the #REQUIRE in /etc/rc.d/geli to get it to start after sshd, 
perhaps change it from initrandom to sshd.  You can check to make sure the 
changes are sane by running rcorder manually.

If you go this route the console will still prompt for the passphrase, but 
you'll be able to ssh in and run /etc/rc.d/geli start manually, which after 
it ran, would automagically run everything after it in rcorder

-- 
Thanks,

Josh Paetzel

PGP: 8A48 EF36 5E9F 4EDA 5A8C 11B4 26F9 01F1 27AF AECB


signature.asc
Description: This is a digitally signed message part.


Autoattach geli device but not at startup

2007-11-07 Thread Matthias Fechner
Hi,

I have here a setup where some backup directories are mounted
encrypted (using geli).
rc.conf:
geli_devices=ad3
geli_ad3_flags=-k /root/backup1.key
...

But if the system must be rebooted it asks for the password before a
network connection is available.
The computer has no keyboard via default so it is really a pain to get
the system up again.

Is their a possibility to do something like that after the reboot:
mount /mnt/backup1
and mount starts geli and geli will ask for the passphrase?

Thanks,
Matthias

-- 

Programming today is a race between software engineers striving to
build bigger and better idiot-proof programs, and the universe trying to
produce bigger and better idiots. So far, the universe is winning. --
Rich Cook
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Autoattach geli device but not at startup

2007-11-07 Thread RW
On Wed, 7 Nov 2007 07:25:35 -0600
Josh Paetzel [EMAIL PROTECTED] wrote:

 On Wednesday 07 November 2007 07:13:45 am Matthias Fechner wrote:
  Hi,
 
  I have here a setup where some backup directories are mounted
  encrypted (using geli).
  rc.conf:
  geli_devices=ad3
  geli_ad3_flags=-k /root/backup1.key
  ...
 
  But if the system must be rebooted it asks for the password before a
  network connection is available.
  The computer has no keyboard via default so it is really a pain to
  get the system up again.
 
  Is their a possibility to do something like that after the reboot:
  mount /mnt/backup1
  and mount starts geli and geli will ask for the passphrase?
 
  Thanks,
  Matthias
 
 This is one of those cases where I would alter the base system a
 bit.  I'd fiddle with the #REQUIRE in /etc/rc.d/geli to get it to
 start after sshd, perhaps change it from initrandom to sshd.  You can
 check to make sure the changes are sane by running rcorder manually.

I suspect they won't be and that you will run into problems with
fsck and mount not being able to find the .eli partitions. 

 If you go this route the console will still prompt for the
 passphrase, but you'll be able to ssh in and run /etc/rc.d/geli start
 manually, which after it ran, would automagically run everything
 after it in rcorder

Wouldn't you have to kill the original /etc/rc.d/gel process?


I think it would just be easier to write a script to handle the
attach, fsck, and mount. 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]