Page MenuHomeFreeBSD

adduser(8): Add documentation for ZFS encrypted home dataset
Needs ReviewPublic

Authored by lme on Dec 8 2024, 10:18 PM.
Tags
None
Referenced Files
F160168449: D47996.id.diff
Sun, Jun 21, 9:08 PM
Unknown Object (File)
Sun, Jun 21, 4:34 PM
Unknown Object (File)
Sat, Jun 20, 6:47 PM
Unknown Object (File)
Sat, Jun 20, 8:49 AM
Unknown Object (File)
Fri, Jun 19, 7:24 PM
Unknown Object (File)
Sun, Jun 14, 3:22 AM
Unknown Object (File)
Sat, Jun 13, 5:28 PM
Unknown Object (File)
Wed, Jun 3, 8:18 PM

Details

Summary

Fill in missing documentation on how to configure a ZFS encrypted
home dataset to auto mount during login and provide an example
configuration through commented lines in PAM configuration that
match test plan from https://reviews.freebsd.org/D28018

PR: 282957
Reported by: Mike Watkins <git@mikewatkins.ca>

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Skipped
Unit
Tests Skipped
Build Status
Buildable 61149
Build 58033: arc lint + arc unit

Event Timeline

grahamperrin added inline comments.
usr.sbin/adduser/adduser.8
148
150
151–152
153–154
163
166
167
168
169
usr.sbin/adduser/adduser.sh
260–261
261
639
This revision now requires changes to proceed.Dec 12 2024, 12:18 AM

Updated language to match Graham's suggestions

Thanks. With all inlines hidden, the language looks OK, to me.

(I can't comment on the effects; I have not tested.)

This revision is now accepted and ready to land.Dec 19 2024, 6:10 PM
This revision now requires review to proceed.Feb 24 2026, 8:28 PM

Add a note that ZFS encryption needs at least a password length of 8 characters

Add des@ as reviewer because the change touches PAM.

wosch added a subscriber: wosch.

The manual page changes looks good.

This revision is now accepted and ready to land.Apr 25 2026, 1:13 PM
lib/libpam/pam.d/login
7

Are you sure? First of all, I think this belongs in system, not in login. Second, if you uncomment this line in its current position, login will always prompt for a password even when an already logged-in user runs login $USER.

17

This probably belongs in system rather than in login.

Couple of manpage markup nits

usr.sbin/adduser/adduser.8
150

use the Em dash character instead of double hyphen. Also, no need to escape hyphens, that was a thing for a different manpage language and different compiler from long ago.

158–159

if you use the Pa macro, these will be added to the whatis database.

167

Moved changes to system pam.d file instead of login. Also updated manpage nits.

This revision now requires review to proceed.Sat, Jun 20, 1:51 AM