<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">Thank you, Teddy. I finally got time to work on this again. I am replying to your email as I haven’t found a way to reply on the archive site. I’m going to attach a log file from setting --debug for mandos-client. <div class=""><br class=""></div><div class="">The dual-drive automatic unlock is not working. From what I can gather:</div><div class=""><br class=""></div><div class="">1) plugin-runner runs early in the cryptsetup process and it actually contacts the server and gets the correct passphrase</div><div class="">2) However, it appears that cryptsetup ignores the output and asks for interactive entry of the passphrase for both file systems to be unlocked</div><div class="">3) The debug log shows that mandos-client has exited and this is still on the screen when I see the prompt for the passphrase for the first file system <br class=""><div class=""><br class=""></div><div class="">I’m attaching the debug output, with decrypted passphrase removed. The debug output scrolls by on the screen before I see the passphrase prompt, but it could be that the prompt occurs early and scrolls off the screen quickly and then is printed again.</div><div class=""><br class=""></div><div class="">I am using initramfs-tools.</div><div class=""><br class=""></div><div class="">I also agree that ZFS should be underneath and encryption on top, and this is the long term intent, but this is not available until ZFS implements native encryption, which also provides other features e.g. snapshots are encrypted so sending and saving snapshots offsite is encrypted throughout. If the dual-unlock does not work, I will probably go back to LUKS over software RAID1.</div><div class=""><br class=""></div><div class="">Many thanks,</div><div class=""><br class=""></div><div class=""><span class="Apple-tab-span" style="white-space:pre"> </span>-Mike</div><div class=""><br class=""></div><div class=""></div></div></body></html>