Other Encrypted RAID1 does not mount as expected

[skyenosaur]

Hello my new friends, it’s me again, I am now on day 3 of FreeBSD and I have almost set up all the important bits.

I set up a RAID1 for my 2 disks that hold my home directory per the handbook, and then set up a geli partition on that mirror device as described in the handbook, and then I put things in the rc.conf like so

# Kernelmodule
kld_list="amdgpu geom_eli geom_mirror"

# Decrypt mirror/home.eli
geli_enable="YES"
geli_devices="mirror/home.eli"

and in the fstab like so

/dev/mirror/home.eli   /usr/home       ufs     rw      0       1

But it does not work. It can’t mount the device and then puts me in single user mode, even if I specify noauto to save me some trouble.

For some mysterious reason, the geli script does also not run at boot. I boot with a commented-out fstab entry so that works, but I still have the script enabled. But there is no asking for any passwords. If I start the geli script manually after logging in however, it works fine.

If I, after booting, remove the # in front of the fstab entry and just say mount /usr/home, this also works fine. So I know my entry is okay, I know the script knows what drive it’s supposed to do, and everyone is simply not doing their job!

I suspect something with the order of things is just going wrong here and sure, I could just write my own script to do it, but I don’t particularly want to. So how do I configure this correctly in the way that it’s intended to be done?

 

[thutuid]

Try setting geli_devices="mirror/home". I believe you need to specify the "consumer" rather than the "provider" here. See /etc/defaults/rc.conf for an example.

 

[skyenosaur]

Try setting geli_devices="mirror/home". I believe you need to specify the "consumer" rather than the "provider" here. See /etc/defaults/rc.conf for an example.

i did that first, i think that’s how it was in the handbook, but it didn’t work so i tried the other one. they both work if i start the service manually but makes no difference for starting it automatically

 

[skyenosaur]

i did end up being able to solve this, by setting REQUIRE: login in the geli script (just to make sure it gets run as late as possible). that way it at least asks me for the password automatically. somehow, doing this resulted in my login manager no longer autostarting, so i had to fix that too... now i will need to write a rc script to do the actual mounting because that just won’t happen otherwise