Unable to Select Volume when Importing Encrypted Disk (one disk of a formerly a two-disk clone)

[K_REY_C]

Looking for some guidance on how to re-import my encrypted disk (1 disk of a formerly 2-disk, encrypted, cloned). I've tried this on a the legacy and new interface. I suspect I'm missing something critical, but would love some guidance. The encryption key and passphrase seem to get past step #2 (image below) without issue, but when it comes to importing the volume there are no volumes to select and I'm unable to progress.

Some output from `dmidecode`

Code:

BIOS Information

    Vendor: American Megatrends Inc.

    Version: 1805

    Release Date: 12/19/2012

    Address: 0xF0000

    Runtime Size: 64 kB

    ROM Size: 8192 kB

    Characteristics:

        PCI is supported

        BIOS is upgradeable

        BIOS shadowing is allowed

        Boot from CD is supported

        Selectable boot is supported

        BIOS ROM is socketed

        EDD is supported

        5.25"/1.2 MB floppy services are supported (int 13h)

        3.5"/720 kB floppy services are supported (int 13h)

        3.5"/2.88 MB floppy services are supported (int 13h)

        Print screen service is supported (int 5h)

        8042 keyboard services are supported (int 9h)

        Serial services are supported (int 14h)

        Printer services are supported (int 17h)

        ACPI is supported

        USB legacy is supported

        BIOS boot specification is supported

        Targeted content distribution is supported

        UEFI is supported

    BIOS Revision: 4.6

camcontrol devlist: (relevant disk is at scbus4)

Code:

<ST4000DM000-2AE166 0001>          at scbus0 target 0 lun 0 (pass0,ada0)
<WDC WD60EFRX-68MYMN1 82.00A82>    at scbus1 target 0 lun 0 (pass1,ada1)
<ST4000DM000-2AE166 0001>          at scbus2 target 0 lun 0 (pass2,ada2)
<WDC WD60EFRX-68L0BN1 82.00A82>    at scbus3 target 0 lun 0 (pass3,ada3)
<ST2000DM001-1ER164 CC25>          at scbus4 target 0 lun 0 (pass4,ada4)
<SanDisk Ultra Fit 1.00>           at scbus9 target 0 lun 0 (pass5,da0)
<SanDisk Ultra Fit 1.00>           at scbus10 target 0 lun 0 (pass6,da1)

gpart show:

Code:

=>        40  7814037088  ada0  GPT  (3.6T)
          40          88        - free -  (44K)
         128     4194304     1  freebsd-swap  (2.0G)
     4194432  7809842688     2  freebsd-zfs  (3.6T)
  7814037120           8        - free -  (4.0K)

=>         40  11721045088  ada1  GPT  (5.5T)
           40           88        - free -  (44K)
          128      4194304     1  freebsd-swap  (2.0G)
      4194432  11716850688     2  freebsd-zfs  (5.5T)
  11721045120            8        - free -  (4.0K)

=>        40  7814037088  ada2  GPT  (3.6T)
          40          88        - free -  (44K)
         128     4194304     1  freebsd-swap  (2.0G)
     4194432  7809842688     2  freebsd-zfs  (3.6T)
  7814037120           8        - free -  (4.0K)

=>         40  11721045088  ada3  GPT  (5.5T)
           40           88        - free -  (44K)
          128      4194304     1  freebsd-swap  (2.0G)
      4194432  11716850688     2  freebsd-zfs  (5.5T)
  11721045120            8        - free -  (4.0K)

=>        40  3907029088  ada4  GPT  (1.8T)
          40          88        - free -  (44K)
         128     4194304     1  freebsd-swap  (2.0G)
     4194432  3902834688     2  freebsd-zfs  (1.8T)
  3907029120           8        - free -  (4.0K)

=>      40  60063664  da0  GPT  (29G)
        40    204800    1  efi  (100M)
    204840  59858856    2  freebsd-zfs  (29G)
  60063696         8       - free -  (4.0K)

=>      40  60063664  da1  GPT  (29G)
        40    204800    1  efi  (100M)
    204840  59858856    2  freebsd-zfs  (29G)
  60063696         8       - free -  (4.0K)

Happy to share anything else that would be of help. I'm at a loss on how to progress.

My main goal is to load the disk to migrate the data to one of the other drives, then reformat.

Thank you for any help.

 

[Redcoat]

I don't have any way to verify this, nor do I know that it's an answer to your dilemma, but I suspect that you may need to click on "ada4p2" to select it before clicking OK in Step2. If you do so I believe it will be highlighted by reverse type.

 

[K_REY_C]

I don't have any way to verify this, nor do I know that it's an answer to your dilemma, but I suspect that you may need to click on "ada4p2" to select it before clicking OK in Step2. If you do so I believe it will be highlighted by reverse type.

Redcoat, Thanks for the response. I did indeed select the "ada4p2" before moving forward to step 3 and it is still blank. Apologies for the screenshot not reflecting this.

 

[Redcoat]

OK- it was a long shot...
I hope you find a solution.

 

[K_REY_C]

OK- it was a long shot...
I hope you find a solution.

Me too! My next step, barring a breakthrough here, will be to discover how to add an encrypted pool via command line -- maybe there will be better error messages there (or more options)?

 

[K_REY_C]

Minor update after reading the guides more closely. It's possible one (or both) of the issues below are affecting my case, but I'm not sure how to test for them. My pool may have not been:

1. exported and/or
2. disconnected

This works for pools that were exported/disconnected from the current system, created on another system, or to reconnect a pool after reinstalling the FreeNAS® system.

When physically installing ZFS pool disks from another system, use the zpool export poolname command or a web interface equivalent to export the pool on that system. Then shut it down and connect the drives to the FreeNAS® system. This prevents an “in use by another machine” error during the import to FreeNAS®.

Is there any way for me to test this? It seems that the geli.key and my password successfully decrypt the disk (in step #2 from my original post), but I lack the ability to import it from the GUI.

Thanks!

 

[K_REY_C]

I'm going to add some notes here for attempting later tonight. This thread on the forums looks promising for CLI-based decryption/attaching.

 

[K_REY_C]

Another update from my CLI-based decryption and import. If I enter the incorrect passphrase it acknowledges that and displays the following:

However, if I enter the correct passphrase, it fails with (error=1).

Any thoughts on what this failure is -- also, does it explain the issue with the GUI failing?

Thanks for any guidance!

 

[K_REY_C]

So I'm still unable to import the pool, but when running "zpool import" I get confirmation (I think) that at least part of the issue is that the other encrypted drive had failed. Do I need to have another disk present to decrypt when the drives were mirrored? What next step could I take when the other disk failed?

 

[K_REY_C]

At the link in the output above I see the following line: "The pool cannot be imported until the missing device is attached to the system. If the device has been made available in an alternate location, use the '-d' option to 'zpool import' to search for devices in a different directory. If the missing device is unavailable, then the pool cannot be imported."

So, am I out of luck entirely on unencrypting and salvaging data from this drive?

 

[K_REY_C]

As I'm still seeking advice (while looking), any particular thoughts about importing this disk to recover the data (maybe in a read-only state) or following the thoughts in this post?

# zpool import -D -fFXNnm -R /mnt <poolname-or-ID> -t newname

 

[SweetAndLow]

Why are you missing 3 out of your 4 disks?

 

[K_REY_C]

Why are you missing 3 out of your 4 disks?

Ah! I'm lacking a "complete" set of the mirrored disks. That makes all of this make sense. I'm assuming that salvage, in this case, is impossible then and I should just restore from backup?

Thank you for helping me interpret the output of some of these commands. Since this data is available via CLI I'm assuming this is an area where the GUI could be improved in some way with the error message. Is there a way to make a recommendation to that effect?