DaemonForums  

Go Back   DaemonForums > FreeBSD > FreeBSD Security

FreeBSD Security Securing FreeBSD.

Reply
 
Thread Tools Display Modes
  #1   (View Single Post)  
Old 5th October 2015
bashrules bashrules is offline
Fdisk Soldier
 
Join Date: Mar 2010
Location: Here
Posts: 48
Default Entering geli password on boot works after 20 min

I mount / partition on startup via this fstab entry:

Code:
/dev/ada0p2     /unenc             ufs          rw              1       1
/dev/ada0p3.eli /                  ufs          rw              2       2
On boot, I'm asked "Enter passphrase fo ada0p3" and then a few more kernel messages about umass and an external usb drive show up.

I'm then supposed to enter my passphrase. Sometimes, it's accepted instantly, most of the times, my keyboard typing is not accepted - it's like haven't typed anything. After say 20 min, my keyboard typing is finally accepted and my passphrase mounts / and booting continues. That's not supposed to be.

I don't think it a keyboard issue: it's a usb keyboard that works after booting flawlessly on the console and in X. I'm running FreeBSD 10.2.
Reply With Quote
  #2   (View Single Post)  
Old 6th November 2015
bashrules bashrules is offline
Fdisk Soldier
 
Join Date: Mar 2010
Location: Here
Posts: 48
Default

I just wonder if others run into the same issue or not. So, is anyone mounting an encrypted partition via fstab during boot and if so, does it work flawlessly or now?


BTW: I can mount encrypted partitions after boot without any issues (external usb drives).
Reply With Quote
  #3   (View Single Post)  
Old 7th November 2015
gpatrick gpatrick is offline
Package Pilot
 
Join Date: Nov 2009
Posts: 192
Default

You'd be better off asking your question at forums.freebsd.org .
Reply With Quote
  #4   (View Single Post)  
Old 7th November 2015
jmccue jmccue is offline
Real Name: John McCue
New User
 
Join Date: Aug 2012
Location: here
Posts: 4
Default

You are using geli on / ? I have one geli partition for /home and there is no delay during booting.

This is my /boot/loader.conf.local in case that helps.

Code:
geli_ada0s4d_keyfile0_load="YES"
geli_ada0s4d_keyfile0_type="ada0s4d:geli_keyfile0"
geli_ada0s4d_keyfile0_name="keyfile_location"
I doubt I can help in regards to using a geli on root (/), but for me I get a keyboad usb message once I start typing. I almost wonder if i is a keyboard/usb issue.

John
Reply With Quote
Reply

Tags
boot, geli, keyboard

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
softraid crypto compared to geom_eli (geli) hanzer OpenBSD Security 10 26th December 2013 01:49 AM
geli attach during boot problems libertas FreeBSD Installation and Upgrading 2 9th April 2013 01:45 PM
first install, first boot on netbsd, change password length wesley NetBSD General 0 26th August 2010 08:18 AM
FreeBSD + Geli graudeejs Guides 9 26th October 2008 10:03 AM
VIA sound device fails on boot, works with kldload robbak FreeBSD General 0 16th June 2008 07:16 AM


All times are GMT. The time now is 09:25 AM.


Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2017, Jelsoft Enterprises Ltd.
Content copyright © 2007-2010, the authors
Daemon image copyright ©1988, Marshall Kirk McKusick