Repeated system reboot while trying to unlock pool on 11.2-U8

[blurtyblur]

This week I had one of the drives in my pool fail (8x4TB), so I replaced it and waited for the resilvering to complete, which it eventually did. Pool was working fine, dashboard showed everything in order. I'm planning to upgrade to Truenas Core but before I started that, I ran a scrub. At that point, kept losing access to the GUi - which I assumed was just high system load due to the scrub, so waited. It crashed at some point during this but restarted OK.
System now showing very low usage (I have 20GB of RAM on a Supermicro system) and so I went ahead to unlock the pool. At which point the system enters a repeat loop and crashes without unlocking the pool. I'm certain I'm using the correct passphrase and geli key.
I'm baffled at what might be causing this - it was all working fine before the scrub....
If I have to, I can start from scratch with Truenas Core and try to reimport the pool from there. If I lose it, I have backups BUT I'd really like to avoid all the work and time of recreating jails etc.
Any suggestions on how to get back to a working 11.2 would be gladly received, thank you!

 

[Samuel Tai]

After the resilver, did you regenerate GELI keys and recovery keys? If not, you're out of luck, and have to rebuild.

 

[blurtyblur]

Hi Samuel, thanks very much for quick reply!
Sadly I didnt - as a newbie I didn't realise that resilvering meant I need new GELI and recovery keys.
Rebuild to TrueNas Core here I come.... Grrrr!

I properly appreciate your tagline about not underestimating my own stupidity... ;-)

 

[Samuel Tai]

GELI works, but is very fragile and unforgiving of incorrect handling. In TrueNAS Core, it's better to use ZFS native encryption, which can be applied on a dataset basis, instead of a whole disk basis. Note, the root dataset of the pool serving as the system pool can't be encrypted.

 

[blurtyblur]

GELI works, but is very fragile and unforgiving of incorrect handling. In TrueNAS Core, it's better to use ZFS native encryption, which can be applied on a dataset basis, instead of a whole disk basis. Note, the root dataset of the pool serving as the system pool can't be encrypted.

Thanks for the advice - I have just proved the fragility of GELI encryption for sure! Will do.
best wishes
Andrew