HomeFreeBSD

zfskeys: Support autoloading of keys stored on ZFS

Description

zfskeys: Support autoloading of keys stored on ZFS

The zfskeys service script starts before the zfs service script, so that
dataset decryption keys are available when zfs mount -a is run. One of
the potential edge cases of this design is that if a key is stored on
ZFS it won't be loaded until zfs mount -a is issued.

In order to address that let's try to load the additional keys and mount
related ZFS datasets after the zfs script finishes its standard mounting
procedure.

PR: 262468
Reported by: Graham Perrin <grahamperrin@gmail.com>
Reviewed by: allanjude
Approved by: allanjude (src)
Fixes: 33ff39796ffe Add zfskeys rc.d script for auto-loading encryption keys
MFC after: 3 days
Sponsored by: Modirum
Sponsored by: Klara Inc.
Differential Revision: https://reviews.freebsd.org/D34601

Details

Provenance
0mpAuthored on Mar 18 2022, 12:35 PM
Reviewer
rG33ff39796ffe: Add zfskeys rc.d script for auto-loading encryption keys
Differential Revision
D34601: zfskeys: Support autoloading of keys stored on ZFS
Parents
rG5c6935a64560: mixer.3: Fix spelling
Branches
Unknown
Tags
Unknown