Page MenuHomeFreeBSD
Files F157557861

D15866.id43946.diff
No OneTemporary
Actions

D15866.id43946.diff
View Options

Index: en_US.ISO8859-1/books/handbook/disks/chapter.xml
===================================================================
--- en_US.ISO8859-1/books/handbook/disks/chapter.xml
+++ en_US.ISO8859-1/books/handbook/disks/chapter.xml
@@ -2822,15 +2822,20 @@
<step>
<title>Generate the Master Key</title>
- <para>The following commands generate a master key
- (<filename>/root/da2.key</filename>) that is protected
- with a passphrase. The data source for the key file is
- <filename>/dev/random</filename> and the sector size of
- the provider (<filename>/dev/da2.eli</filename>) is 4kB as
- a bigger sector size provides better performance:</para>
+ <para>The following commands generate a master key that all
+ data will be encrypted with. This key can never be changed
+ so rather than using it directly, it is encrypted with one
+ or more user keys. The user keys are made up of an
+ optional combination of random bytes from a file,
+ <filename>/root/da2.key</filename>, and/or a passphrase.
+ In this case, the data source for the key file is
+ <filename>/dev/random</filename>. This command also
+ configures the sector size of the provider
+ (<filename>/dev/da2.eli</filename>) as 4kB, for better
+ performance:</para>
<screen>&prompt.root; <userinput>dd if=/dev/random of=/root/da2.key bs=64 count=1</userinput>
-&prompt.root; <userinput>geli init -s 4096 -K /root/da2.key /dev/da2</userinput>
+&prompt.root; <userinput>geli init -K /root/da2.key -s 4096 /dev/da2</userinput>
Enter new passphrase:
Reenter new passphrase:</screen>

File Metadata

Mime Type
text/plain
Expires
Sat, May 23, 7:42 PM (15 h, 49 m)
Storage Engine
blob
Storage Format
Raw Data
Storage Handle
33452784
Default Alt Text
D15866.id43946.diff (1 KB)

Event Timeline