When GELI encrypted partitions are detected, GEOM tries to setup the parameters and asks for passphrase. There is a problem with the kernel output going on, while the system is waiting for input. On my system during this phase acd0(4) is detected and all input (the passphrase) becomes invalid. Another problem is that the passphrase prompt is not the last kernel message, but mixed with the other output. It's sometimes difficult to see what's going on. This problem is rather of cosmetic nature. Fix: A workaround is to wait for the last kernel message and THEN begin to type the password. How-To-Repeat: Initialize a GELI partition that uses a passphrase and restart the system.
Responsible Changed From-To: freebsd-bugs->freebsd-geom Over to maintainer(s).
This issue is still present in 10.1-RC2. Entry of the GELI passphrase always fails on the first try if the passphrase is entered after the password prompt appears but, at least partially, during kernel output. If I wait for ~10 seconds for all the kernel output to stop, enter some backspaces for good measure, and then proceed to enter the passphrase, it will work on the first try. Is the console device input somehow being invalidated by kernel output? How can that be prevented? Can either the kernel output or the passphrase prompt be delayed until the other has completed? I'm not sure how many other people this bug may affect, but I am willing to test patches if people have ideas.
batch change: For bugs that match the following - Status Is In progress AND - Untouched since 2018-01-01. AND - Affects Base System OR Documentation DO: Reset to open status. Note: I did a quick pass but if you are getting this email it might be worthwhile to double check to see if this bug ought to be closed.
There is a loader.conf tunable now, geom_eli_passphrase_prompt="YES" that will prompt for the GELI passphrase during the beastie menu, so the prompt does not become lost amongst the kernel device attach messages. And older bug that prevented the correct password from working on later attempts was fixed some time ago.