Page MenuHomeFreeBSD

adduser(8): Add documentation for ZFS encrypted home dataset
AcceptedPublic

Authored by lme on Dec 8 2024, 10:18 PM.
Tags
None
Referenced Files
Unknown Object (File)
Sat, Apr 25, 11:49 AM
Unknown Object (File)
Fri, Apr 17, 11:58 AM
Unknown Object (File)
Sat, Apr 11, 5:47 PM
Unknown Object (File)
Sat, Apr 11, 2:11 AM
Unknown Object (File)
Tue, Apr 7, 9:09 PM
Unknown Object (File)
Tue, Apr 7, 12:59 AM
Unknown Object (File)
Mon, Apr 6, 10:51 AM
Unknown Object (File)
Mon, Apr 6, 8:56 AM

Details

Summary

Fill in missing documentation on how to configure a ZFS encrypted
home dataset to auto mount during login and provide an example
configuration through commented lines in PAM configuration that
match test plan from https://reviews.freebsd.org/D28018

PR: 282957
Reported by: Mike Watkins <git@mikewatkins.ca>

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Skipped
Unit
Tests Skipped
Build Status
Buildable 61149
Build 58033: arc lint + arc unit

Event Timeline

grahamperrin added inline comments.
usr.sbin/adduser/adduser.8
148
150
151–152
153–154
163
166
167
168
169
usr.sbin/adduser/adduser.sh
260–261
261
639
This revision now requires changes to proceed.Dec 12 2024, 12:18 AM

Updated language to match Graham's suggestions

Thanks. With all inlines hidden, the language looks OK, to me.

(I can't comment on the effects; I have not tested.)

This revision is now accepted and ready to land.Dec 19 2024, 6:10 PM
This revision now requires review to proceed.Feb 24 2026, 8:28 PM

Add a note that ZFS encryption needs at least a password length of 8 characters

Add des@ as reviewer because the change touches PAM.

wosch added a subscriber: wosch.

The manual page changes looks good.

This revision is now accepted and ready to land.Sat, Apr 25, 1:13 PM
lib/libpam/pam.d/login
7

Are you sure? First of all, I think this belongs in system, not in login. Second, if you uncomment this line in its current position, login will always prompt for a password even when an already logged-in user runs login $USER.

17

This probably belongs in system rather than in login.