[SOLVED] Having trouble reconnecting encrypted volumes after rebuild

[SteveBallantyne]

This morning I performed up in-place upgrade/install from 9.3-STABLE to 11.0-U1. I immediately ran into ugly issues with error messages about databases on the console, and none of my Windows SMB volumes were accessible via Windows permissions. This was likely the result of all the ugly DB errors I was seeing.

I exported my "geli" keys for my two encrypted volumes. Exported a config backup. Then reinstalled 11.0-U1 again. This time, I chose to format the drive and start anew. The install went just fine. Importing my config went just fine too. Except that I did have to manually reboot. As it said it was rebooting, and hung there.

When it came back online, I could no longer Unlock either of my encrypted volumes. This is the error that I get in the WebUI ...

Code:

FreeNAS® © 2017 - iXsystems, Inc. - 11.0-U1
Unlock
Environment: Software Version: FreeNAS-11.0-U1 (aa82cc58d) Request Method: POST Request URL: http://bignas/storage/volume/4/unlock/?X-Progress-ID=0a54bb32-029d-4180-88eb-9201c5d73e63 Traceback: File "/usr/local/lib/python3.6/site-packages/django/core/handlers/exception.py" in inner 39. response = get_response(request) File "/usr/local/lib/python3.6/site-packages/django/core/handlers/base.py" in _legacy_get_response 249. response = self._get_response(request) File "/usr/local/lib/python3.6/site-packages/django/core/handlers/base.py" in _get_response 178. response = middleware_method(request, callback, callback_args, callback_kwargs) File "./freenasUI/freeadmin/middleware.py" in process_view 162. return login_required(view_func)(request, *view_args, **view_kwargs) File "/usr/local/lib/python3.6/site-packages/django/contrib/auth/decorators.py" in _wrapped_view 23. return view_func(request, *args, **kwargs) File "./freenasUI/storage/views.py" in volume_unlock 1190. form.done(volume=volume) File "./freenasUI/storage/forms.py" in done 2616. raise MiddlewareError(msg) Exception Type: MiddlewareError at /storage/volume/4/unlock/ Exception Value: [MiddlewareError: b'Volume could not be imported: 1 devices failed to decrypt']

I have tried using the passphrase, the geli key, and both. I get the error every time. Any idea what I did wrong?

 

[SteveBallantyne]

This information from /var/log/messages may be more useful ...

Code:

Jul 18 12:52:51 bignas uwsgi: [middleware.exceptions:36] [MiddlewareError: b'Unable to geli attach gptid/ef3067b3-c7ed-11e4-aff7-fcaa14280aff: geli: Cannot open keyfile /data/geli/29152f7d-e4d4-409e-850d-2f36527c23ce.key: No such file or directory.\n']
Jul 18 12:52:51 bignas uwsgi: [middleware.notifier:654] [MiddlewareError: b'Unable to geli attach gptid/ef3067b3-c7ed-11e4-aff7-fcaa14280aff: geli: Cannot open keyfile /data/geli/29152f7d-e4d4-409e-850d-2f36527c23ce.key: No such file or directory.\n']
Jul 18 12:52:51 bignas uwsgi: [middleware.notifier:2975] Importing PARAGON [7892756615625694677] failed with: cannot import '7892756615625694677': no such pool available
Jul 18 12:52:51 bignas uwsgi: [middleware.exceptions:36] [MiddlewareError: b'Volume could not be imported: 1 devices failed to decrypt']

 

[SteveBallantyne]

OK, turns out I am a horse that lead itself to water.

All I needed to do was to copy those geli keys to /data/geli and name them to what FreeNAS was expecting ... which I was able to determine from the above error messages.

With the keys named correctly, and in the correct place, the passphrase unlocked the volumes.

SOLVED!