<div dir="ltr"><div>It should already work with serno device names, of the form: serno/blahblah.s1b<br><br></div>-Matt<br></div><div class="gmail_extra"><br><div class="gmail_quote">On Sun, May 24, 2015 at 12:06 AM, Tim Darby <span dir="ltr"><<a href="mailto:t+dfbsd@timdarby.net" target="_blank">t+dfbsd@timdarby.net</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div class="gmail_default" style="font-family:trebuchet ms,sans-serif;font-size:small"><span style="font-family:arial,sans-serif">On Sat, May 16, 2015 at 2:04 PM, Matthew Dillon </span><span dir="ltr" style="font-family:arial,sans-serif"><<a href="mailto:dillon@apollo.backplane.com" target="_blank">dillon@apollo.backplane.com</a>></span><span style="font-family:arial,sans-serif"> wrote:</span><br></div><div class="gmail_extra"><div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">A more sophisticated encrypted swap using LUKS was already available and<br>
could be set up via the installer, capable of encrypting swap and dumps.<br>
Manual configuration through luks is a bit messy though.<br>
<br>
This feature provides a simpler way to just encrypt swap with a random key<br>
via /etc/fstab, perhaps as a preface to potentially implementing more<br>
sophisticated crypto features in /etc/fstab in the future that use dm-crypt<br>
directly and bypass LUKS.<br>
<br>
The master branch now has experimental automatic crypting of swap available.<br>
If using master, simply recompile and reinstall the /usr/src/sbin/swapon<br>
utility and then specify 'crypt' as a swap option in your /etc/fstab.<br>
For example:<br>
<br>
# Device Mountpoint FStype Options Dump Pass#<br>
/dev/da0s1b none swap sw,crypt,trim 0 0<br></blockquote><div><br></div><div><div class="gmail_default" style="font-family:'trebuchet ms',sans-serif;font-size:small;display:inline">I set this up today and so far it's working great (with swapcache). Will this eventually work with serno device names?</div></div><span class="HOEnZb"><font color="#888888"><div><div class="gmail_default" style="font-family:'trebuchet ms',sans-serif;font-size:small;display:inline"><br></div></div><div><div class="gmail_default" style="font-family:'trebuchet ms',sans-serif;font-size:small;display:inline">Tim</div> </div></font></span></div></div></div>
</blockquote></div><br></div>