1
0
mirror of https://git.FreeBSD.org/src.git synced 2024-10-19 02:29:40 +00:00
Mirror of the FreeBSD src repository https://git.FreeBSD.org/src.git .
Go to file
Mateusz Piotrowski 2411090f69 zfskeys: Support autoloading of keys stored on ZFS
The zfskeys service script starts before the zfs service script, so that
dataset decryption keys are available when `zfs mount -a` is run. One of
the potential edge cases of this design is that if a key is stored on
ZFS it won't be loaded until `zfs mount -a` is issued.

In order to address that let's try to load the additional keys and mount
related ZFS datasets after the zfs script finishes its standard mounting
procedure.

PR:		262468
Reported by:	Graham Perrin <grahamperrin@gmail.com>
Reviewed by:	allanjude
Approved by:	allanjude (src)
Fixes:	33ff39796f Add zfskeys rc.d script for auto-loading encryption keys
MFC after:	3 days
Sponsored by:	Modirum
Sponsored by:	Klara Inc.
Differential Revision: https://reviews.freebsd.org/D34601

(cherry picked from commit 97aeda2243)
2022-03-21 15:47:20 +01:00
.cirrus-ci Cirrus-CI: add some timing info on pkg install failure 2022-02-09 12:39:50 -05:00
.github/workflows .github: Attempt to un-break Clang 9 action 2021-05-29 04:38:07 +01:00
bin cp: Make -P work without -R as per POSIX 2022-03-09 15:22:02 -06:00
cddl dtrace tests: Fix expected outout for tst.system.d 2022-03-09 11:42:23 +08:00
contrib Remove compat hacks from libcxxrt's _Unwind_Exception 2022-03-12 19:20:55 +01:00
crypto OpenSSL: Merge OpenSSL 1.1.1n 2022-03-15 19:48:04 -04:00
etc Add support for jail.conf.d 2022-03-09 15:21:49 -06:00
gnu Bump shared library versions after ncurses bump in 13. 2021-02-04 17:51:45 -08:00
include Install unwind.h into /usr/include 2022-02-20 13:29:44 +01:00
kerberos5 pkgbase: Create a FreeBSD-kerberos package 2022-01-05 18:23:50 +01:00
lib libpfct: factor out pfctl_get_rules_info() 2022-03-15 04:24:25 +01:00
libexec zfskeys: Support autoloading of keys stored on ZFS 2022-03-21 15:47:20 +01:00
release release: Remove references to ChallengeResponseAuthentication 2022-03-07 19:25:58 -05:00
rescue Fix building rescue/rescue when sanitizers are enabled 2021-08-05 09:59:51 +01:00
sbin devd: correct wifi regexp 2022-03-19 07:59:07 -06:00
secure OpenSSL: Merge OpenSSL 1.1.1n 2022-03-15 19:48:04 -04:00
share netmap: add a tunable for the maximum number of VALE switches 2022-03-20 09:00:50 +00:00
stand WITHOUT_BOOT build option appears to include stand, failing on libsa 2022-03-19 01:10:36 +02:00
sys fusefs: Initialize a pad word in the mknod message 2022-03-21 10:42:39 -04:00
targets Fix bootstrapping to actually build lldb-tblgen for later use 2021-09-07 13:08:18 +01:00
tests fusefs: fix a cached attributes bug during directory rename 2022-03-09 09:59:49 -07:00
tools usbtest: Fix issue when multiple devices are sharing same USB vendor and product ID. 2022-03-17 10:54:52 +01:00
usr.bin touch: don't leak descriptor if fstat(2) fails 2022-03-19 14:16:29 +01:00
usr.sbin bsdinstall: Fix typo (Instalation -> Installation). 2022-03-04 13:10:59 -08:00
.arcconfig arcconfig: add callsign again 2020-11-23 04:39:29 +00:00
.arclint
.cirrus.yml Cirrus-CI: add a manual amd64-gcc9 build and smoketest job 2022-02-22 14:53:02 -05:00
.clang-format clang-format: Add bitset loop macros 2021-11-01 09:20:11 -04:00
.gitattributes Add a basic clang-format configuration file 2019-06-07 15:23:52 +00:00
.gitignore add exuberant ctags tags file to gitignore 2022-01-11 15:25:37 +02:00
COPYRIGHT copyrights: Happy New Year 2021 2020-12-31 10:29:44 -05:00
LOCKS
MAINTAINERS Add a pointer to csprng@ for the CSPRNG driver. This is enforced anyway by 2020-09-01 08:02:12 +00:00
Makefile Fix 'make bmake' top-level bootstrapping. 2021-12-21 14:44:51 +01:00
Makefile.inc1 13.1: update stable/13 to -PRERELEASE to start the release cycle 2022-02-23 23:21:49 -05:00
Makefile.libcompat Prefer MK_SSP=no to SSP_CFLAGS= 2021-08-11 13:56:28 -03:00
Makefile.sys.inc
ObsoleteFiles.inc Install unwind.h into /usr/include 2022-02-20 13:29:44 +01:00
README README.md: update gnu directory description 2021-12-19 21:01:53 -05:00
README.md README.md: update gnu directory description 2021-12-19 21:01:53 -05:00
RELNOTES RELNOTES: Note addition of zfskeys 2022-03-06 21:28:29 +01:00
UPDATING Add UPDATING entry for PIE default 2022-01-23 11:12:28 +01:00

FreeBSD Source:

This is the top level of the FreeBSD source directory. This file was last revised on: FreeBSD

FreeBSD is an operating system used to power modern servers, desktops, and embedded platforms. A large community has continually developed it for more than thirty years. Its advanced networking, security, and storage features have made FreeBSD the platform of choice for many of the busiest web sites and most pervasive embedded networking and storage devices.

For copyright information, please see the file COPYRIGHT in this directory. Additional copyright information also exists for some sources in this tree - please see the specific source directories for more information.

The Makefile in this directory supports a number of targets for building components (or all) of the FreeBSD source tree. See build(7), config(8), https://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/makeworld.html, and https://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/kernelconfig.html for more information, including setting make(1) variables.

Source Roadmap:

bin		System/user commands.

cddl		Various commands and libraries under the Common Development
		and Distribution License.

contrib		Packages contributed by 3rd parties.

crypto		Cryptography stuff (see crypto/README).

etc		Template files for /etc.

gnu		Commands and libraries under the GNU General Public License
		(GPL) or Lesser General Public License (LGPL).  Please see
		gnu/COPYING* for more information.

include		System include files.

kerberos5	Kerberos5 (Heimdal) package.

lib		System libraries.

libexec		System daemons.

release		Release building Makefile & associated tools.

rescue		Build system for statically linked /rescue utilities.

sbin		System commands.

secure		Cryptographic libraries and commands.

share		Shared resources.

stand		Boot loader sources.

sys		Kernel sources.

sys/<arch>/conf Kernel configuration files. GENERIC is the configuration
		used in release builds. NOTES contains documentation of
		all possible entries.

tests		Regression tests which can be run by Kyua.  See tests/README
		for additional information.

tools		Utilities for regression testing and miscellaneous tasks.

usr.bin		User commands.

usr.sbin	System administration commands.

For information on synchronizing your source tree with one or more of the FreeBSD Project's development branches, please see:

https://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/current-stable.html