Re: savecore: operation not permitted
- In reply to: David Wolfskill : "Re: savecore: operation not permitted"
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Sun, 27 Nov 2022 11:46:13 UTC
On 27/11/2022 12:23, David Wolfskill wrote: > On Sun, Nov 27, 2022 at 05:48:13AM +0000, Jonathan Vasquez wrote: >> Make sure you aren't using an encrypted swap (i.e if you have the .eli extension for your swap entry in /etc/fstab, then it's being encrypted). That was the issue I had, it makes sense that you can't get the dumped data if the swap is being re-encrypted on every boot. >> .... > > For this use case (desire to be able to get crash dumps while having > swap encrypted), I find that adding the "late" attribute to the > "swap" entry in /etc/fstab is useful, thus: > > g1-51(12.4-S)[1] grep swap /etc/fstab > /dev/ada0s4b.eli none swap sw,late 0 0 Thank you for sharing this tip! When I needed to analyze crash dumps I added another partitions just for the dump but if this can be solved by late option for geli swap it would be really nice. I will try it. Kind regards Miroslav Lachman