Re: Order of geli "passphrase prompt" on boot

On 11/04/2014 10:24, Kurt Jaeger wrote:
> Hi!
>
>> If you don't need any USB devices to boot, you can delay their
>> detection by loading the modules through /etc/rc.d/kld instead
>> of the loader:
>>
>> fk_at_r500 ~ $grep kld /etc/rc.conf
>> kld_list="usb.ko usb_quirk.ko ehci.ko umass.ko"
> Does this really help with the GENERIC kernel ?
>
> If I add this to /etc/rc.conf and do
>
> /etc/rc.d/kld start
>
> this spews a load of errors.
>

Colin added this to HEAD recently:

https://github.com/freebsd/freebsd/commit/bdb0ac02b9fd8f331fa70c8a4c29495b7ee43293

This will allow setting the passphrase at the boot-loader, so it doesn't
get prompted for again during boot. I think there was some work by
dteske_at_ to add this to the FreeBSD boot menus, but maybe you can use it
manually for now.

We are using it in PC-BSD to supply the passphrase directly from GRUB,
so we only get prompted a single time.

(Before somebody asks why we use grub)
We are using grub to do full-disk encryption, without a unencrypted
/boot, among other things :)


-- 
Kris Moore
PC-BSD Software
iXsystems