Re: Order of geli "passphrase prompt" on boot

On 11/04/2014 11:17, Kris Moore wrote:
> On 11/04/2014 10:24, Kurt Jaeger wrote:
>> Hi!
>>
>>> If you don't need any USB devices to boot, you can delay their
>>> detection by loading the modules through /etc/rc.d/kld instead
>>> of the loader:
>>>
>>> fk_at_r500 ~ $grep kld /etc/rc.conf
>>> kld_list="usb.ko usb_quirk.ko ehci.ko umass.ko"
>> Does this really help with the GENERIC kernel ?
>>
>> If I add this to /etc/rc.conf and do
>>
>> /etc/rc.d/kld start
>>
>> this spews a load of errors.
>>
> 
> Colin added this to HEAD recently:
> 
> https://github.com/freebsd/freebsd/commit/bdb0ac02b9fd8f331fa70c8a4c29495b7ee43293
> 
> This will allow setting the passphrase at the boot-loader, so it doesn't
> get prompted for again during boot. I think there was some work by
> dteske_at_ to add this to the FreeBSD boot menus, but maybe you can use it
> manually for now.
> 
> We are using it in PC-BSD to supply the passphrase directly from GRUB,
> so we only get prompted a single time.
> 
> (Before somebody asks why we use grub)
> We are using grub to do full-disk encryption, without a unencrypted
> /boot, among other things :)
> 
> 

Yes, as Kris mentioned, the solution is being working on here at MeetBSD
by dteske_at_ (with some advice from jmg_at_) at the request of cperciva_at_,
using the functionality Colin added to head for Kris to be able to do
this for PCBSD.

Hopefully this problem will be solved soon.

-- 
Allan Jude