cvs commit: src/sbin/geom/class/eli geli.8 geom_eli.c src/tools/regression/geom_eli attach-d.t configure-b-B.t delkey.t detach-l.t init-B.t init-a.t init-i-P.t init.t integrity-copy.t integrity-data.t integrity-hmac.t kill.t nokey.t readonly.t ...

[Pawel Jakub Dawidek]

pjd         2008-08-29 18:10:18 UTC

  FreeBSD src repository

  Modified files:
    sbin/geom/class/eli  geli.8 geom_eli.c 
    tools/regression/geom_eli attach-d.t configure-b-B.t delkey.t 
                              detach-l.t init-a.t init-i-P.t 
                              init.t integrity-copy.t 
                              integrity-data.t integrity-hmac.t 
                              kill.t nokey.t readonly.t setkey.t 
  Added files:
    tools/regression/geom_eli init-B.t 
  Log:
  SVN rev 182452 on 2008-08-29 18:10:18Z by pjd
  
  By default backup geli metadata to a file. It is quite critical 512 bytes,
  once it is lost, all data is gone.
  
  Option '-B none' can by used to prevent backup. Option '-B path' can be
  used to backup metadata to a different file than the default, which is
  /var/backups/<prov>.eli.
  
  The 'geli init' command also prints backup file location and gives short
  procedure how to restore metadata.
  
  The 'geli setkey' command now warns that even after passphrase change or keys
  update there could be version of the master key encrypted with old
  keys/passphrase in the backup file.
  
  Add regression tests to verify that new functionality works as expected.
  
  Update other regression tests so they don't create backup files.
  
  Reviewed by:    keramida, rink
  Dedicated to:   a friend who lost 400GB of his live by accidentally overwritting geli metadata
  MFC after:      2 weeks
  
  Revision  Changes    Path
  1.25      +42 -2     src/sbin/geom/class/eli/geli.8
  1.26      +68 -15    src/sbin/geom/class/eli/geom_eli.c
  1.2       +1 -1      src/tools/regression/geom_eli/attach-d.t
  1.2       +2 -2      src/tools/regression/geom_eli/configure-b-B.t
  1.2       +1 -1      src/tools/regression/geom_eli/delkey.t
  1.2       +1 -1      src/tools/regression/geom_eli/detach-l.t
  1.1       +106 -0    src/tools/regression/geom_eli/init-B.t (new)
  1.4       +1 -1      src/tools/regression/geom_eli/init-a.t
  1.2       +1 -1      src/tools/regression/geom_eli/init-i-P.t
  1.5       +1 -1      src/tools/regression/geom_eli/init.t
  1.4       +1 -1      src/tools/regression/geom_eli/integrity-copy.t
  1.4       +1 -1      src/tools/regression/geom_eli/integrity-data.t
  1.4       +1 -1      src/tools/regression/geom_eli/integrity-hmac.t
  1.2       +2 -2      src/tools/regression/geom_eli/kill.t
  1.3       +2 -2      src/tools/regression/geom_eli/nokey.t
  1.2       +1 -1      src/tools/regression/geom_eli/readonly.t
  1.2       +1 -1      src/tools/regression/geom_eli/setkey.t