summaryrefslogtreecommitdiffstats
path: root/sbin/geom
Commit message (Collapse)AuthorAgeFilesLines
* Allow to use the old -a option to specify an encryption algorithm to usepjd2006-06-061-9/+27
| | | | | (for backward compatibility), but print a warning to inform about the change.
* Clarify and merge two sentences.brueffer2006-06-061-4/+2
| | | | Discussed with: pjd
* Mdoc cleanup and some wording improvements.brueffer2006-06-061-15/+15
|
* Remove section committed by mistake. It is not yet ready.pjd2006-06-061-33/+0
|
* Document geli(8) data authentication.pjd2006-06-051-12/+116
| | | | Supported by: Wheel Sp. z o.o. (http://www.wheel.pl)
* Userland bits of geli(8) data authentication.pjd2006-06-051-15/+29
| | | | | | | Now, encryption algorithm is given using '-e' option, not '-a'. The '-a' option is now used to specify authentication algorithm. Supported by: Wheel Sp. z o.o. (http://www.wheel.pl)
* Correct error messages.pjd2006-05-011-4/+4
| | | | MFC after: 2 weeks
* Allocate memory for NUL-termination as well.pjd2006-04-071-1/+1
| | | | MFC after: 2 days
* Reimplementation of world/kernel build options. For details, see:ru2006-03-171-1/+3
| | | | | | | | http://lists.freebsd.org/pipermail/freebsd-current/2006-March/061725.html The src.conf(5) manpage is to follow in a few days. Brought to you by: imp, jhb, kris, phk, ru (all bugs are mine)
* Add some notes how to properly dump kernel onto gmirror provider.pjd2006-03-081-1/+42
| | | | | Reviewed and corrected by: brueffer MFC after: 3 days
* Print "clear" and "dump" only once.wkoszek2006-03-031-2/+2
| | | | | | Reviewed by: pjd Approved by: cognet (mentor) MFC after: 3 days
* Add an example how to use keyfiles for encrypted providers which should bepjd2006-02-111-1/+37
| | | | | | attached before the root file system is mounted. MFC after: 3 days
* - Allow to use -b without passphrase or with keyfiles as it will bepjd2006-02-111-20/+16
| | | | | | | | | | | | | | supported for a moment. - Don't allow to use -i when no passphrase is given. Now if iterations is equal to -1 (not set), we know that we should not ask for the passphrase on boot. It still doesn't handle situation when one key is protected with passphrase and the other is not. There is no quick fix for this. The complete solution will be to make number of iterations a per-key value. Because this need metadata format change and is only needed for devices attached on boot, I'll leave it as it is for now. MFC after: 3 days
* Deny init/attach/setkey subcommands when no key components are given.pjd2006-02-011-1/+4
| | | | | MFC after: 3 days Tested with: prove /usr/src/tools/regression/geom_eli
* Expand contractions.joel2006-02-011-2/+2
|
* Remove trailing spaces.pjd2006-02-0112-28/+28
|
* Remove unused argument.pjd2006-01-311-3/+2
| | | | MFC after: 3 days
* Allow to specify only one disk. This is helpful when we want to extendpjd2006-01-302-5/+16
| | | | | | our concatenated device later. MFC after: 1 week
* Add a reference to geli(8).pjd2006-01-291-0/+3
| | | | MFC after: 3 days
* Teach NOP GEOM class how to gather the following statistics:pjd2005-12-082-6/+25
| | | | | | | | - number of read I/O requests, - number of write I/O requests, - number of read bytes, - number of written bytes. Add 'reset' subcommand for resetting statistics.
* - The geom(8) utility only uses three types of arguments: string (char *),pjd2005-12-0710-729/+327
| | | | | | | | | | | | | | | | | value (intmax_t) and boolean (int). Based on that provide three functions: - gctl_get_ascii() - gctl_get_int() - gctl_get_intmax() - Hide gctl_get_param() function, as it is only used internally in subr.c. - Allow to provide argument name as (fmt, ...). - Assert geom(8) bugs (missing argument is a geom(8) bug). - Clean-up and simplify the code by using new functions and assumtions (no more checking for missing argument). Tested by: regression tests
* s/5.5/6.0/ in HISTORY section.joel2005-11-241-1/+1
| | | | Discussed with: ru
* gmirror.8:ceri2005-10-252-2/+4
| | | | | | | | | Note the default balancing algorithm and stripe size. geom_mirror.c: Slightly friendlier error message. Reviewed by: pjd
* Add a note in example as well, that last sector is used for metadata,pjd2005-09-291-1/+2
| | | | | | | so it don't provoke confusions. Noticed by: Victor Sudakov <sudakov@sibptus.tomsk.ru> MFC after: 2 days
* Even if there are no valid keys in metadata, but provider is attachedpjd2005-09-101-5/+5
| | | | | | | we can still use setkey subcommand. MFC after: 3 days Found by: regression tests
* As with NO_CRYPT, don't try to compile geli(8) when NO_OPENSSL is definedmarius2005-08-271-1/+1
| | | | | | either. MFC after: 1 week
* Update Document.takawata2005-08-261-0/+3
|
* By default, when doing crypto work in software, start as many threadspjd2005-08-211-1/+3
| | | | | | as we have active CPUs and bind each thread to its own CPU. MFC after: 3 days
* Allow to change number of iterations for PKCS#5v2. It can only be usedpjd2005-08-192-23/+64
| | | | | | when there is only one key set. MFC after: 3 days
* Move function for calculating number of bits into more central place.pjd2005-08-193-6/+14
| | | | | | I want to use it so more. MFC after: 3 days
* Update manual page (now dedicated kernel thread is always started).pjd2005-08-171-2/+0
| | | | MFC after: 3 days
* Unfortunately dlerror(3) returns string, so there is no clean way topjd2005-08-141-11/+12
| | | | | | | | | | ignore "no such file" errors only, which I wanted to do. Because of this I ignored all other errors on dlopen(3) failure as well, which isn't good. Fix this situation by calling access(2) on library file first and ignore only ENOENT error. This allows to report all the rest of dlopen(3) errors. MFC after: 3 days
* When keys were configured without passphrase, number of iterations inpjd2005-08-141-0/+4
| | | | | | | | | | metadata is equal to -1. if we then wanted to attach provider (or change keys) and forget about '-p' flag it failed on assertion (quite ok, without assertion it could call PKCS#5v2 with 4294967295 iterations). Instead of failing on assertion, remind about '-p' flag. MFC after: 3 days
* GELI doesn't need cryptodev.pjd2005-08-121-1/+0
| | | | MFC after: 2 days
* Add code for Ext2FS and ReiserFS labels recognition.pjd2005-08-121-0/+6
| | | | | | Submitted by: Stanislav Sedov <stas@310.ru> PR: kern/84638 MFC after: 1 week
* Add missing check for the NO_CRYPT build option.ru2005-08-021-0/+2
| | | | Reported by: Alexander Polakov
* Misc cleanup (spelling, grammar, mdoc, style, cut >80 char lines).brueffer2005-07-301-83/+93
|
* I actually do need libmd.pjd2005-07-291-2/+2
|
* I think I found the problem, reconnect geli to the build.pjd2005-07-271-1/+1
|
* - Reduce WARNS level to 3, so it will be compilabe on alpha.pjd2005-07-271-3/+4
| | | | | | | - Don't link libmd, it is not needed. - Connect manual page to the build. MFC after: 1 week
* Disconnect geli from the build for now.pjd2005-07-271-1/+1
| | | | | I need to find out first what is the cause of sha2.c compilation problem on alpha.
* Connect GEOM_ELI class to the build.pjd2005-07-271-0/+1
| | | | MFC after: 1 week
* Add GEOM_ELI class which provides GEOM providers encryption.pjd2005-07-273-0/+1774
| | | | | | | | For features list and usage see manual page: geli(8). Sponsored by: Wheel Sp. z o.o. http://www.wheel.pl MFC after: 1 week
* Don't forget to initialize 'id' field.pjd2005-07-131-0/+1
| | | | MFC after: 3 days
* Remove trailing spaces.pjd2005-04-291-1/+1
|
* Fix stripe size in example.pjd2005-04-261-1/+1
| | | | | Found by: kris MFC after: 3 days
* Remove duplicated description of 'clear' subcommand.pjd2005-04-231-2/+0
| | | | | Pointed out by: marck X-MFC-after: few seconds
* Document 'clear' and 'dump' subcommands.pjd2005-04-151-0/+11
| | | | MFC after: 1 week
* Allow classes to specify local source files.pjd2005-04-071-2/+2
| | | | MFC after: 3 weeks
* Empty error buffer is not an error.pjd2005-04-071-1/+1
| | | | MFC after: 3 weeks
OpenPOWER on IntegriCloud