Open SWBSD opened 9 years ago
Both are encrypted with geli.
From what I know its not possible to boot from GELI encrypted ZFS on FreeBSD ...
... if its now possible, then why use two pools for that?
One of the Google Summer of Code accepted projects for 2015 is support for BEs in bootloader:
Change gptzfsboot to dynamically discover BEs during bootup https://www.google-melange.com/gsoc/project/details/google/gsoc2015/prasadjoshi/5676830073815040
Till then any work on beadm is pointless IMHO.
Also here is a fork that supports what You want: https://bitbucket.org/aasoft/beadm/src/d0efcdfc5f05cb84d8b319a0f31d7e09f56eb295/beadm?at=mydev
Regards, vermaden
What I should have said was the bootdir pool is NOT encrypted and the zroot pool IS encrypted. I basically boot off the unencrypted /boot (a USB pendrive) and after entering the geli password it then boots the zroot pool. Only /boot is on the unencrypted USB pendrive. Everything else for root is on the encrypted pool (zroot).
Are you saying I can now have a single ZFS on root pool that is encrypted with geli and that it will boot?
Is it better to wait for gptzfsboot to be developed for multiple BEs during bootup rather than use the beadm fork?
I am basically looking for a way to use BE with my setup (ie: one unencrypted pool and on encrypted pool for my ZFS on root). I didn't even know this was being worked on! Will it work with geli and multiple pools?
IMHO use this fork.
IMHO FreeBSD should allow to boot directly from GELI encrypted ZFS root without any workarounds.
Regards, vermaden
Installing FreeBSD using its installer (bsdinstall) with zfs and geli you'll get exactly this setup. So it would be nice to have this standard-setup being supported. :)
Will you address this problem in near future?
could efibootmgr be of any use here?
When will beadm support multiple ZFS pools? My setup has two pools:
bootdir (with /boot on it) zroot (with / on it)
Both are encrypted with geli.
Will beadm ever support multiple pools for a ZFS root setup?