Add support for key disks. This allows a crypto volume to be constructed

without using a passphrase - instead the encryption mask key is stored on
the specified key disk partition (ideally being one on a removable device).
This also enables automatic assembly of crypto volumes at boot time.

ok marco@

1 files changed, 7 insertions, 2 deletions

diff --git a/sbin/bioctl/bioctl.8 b/sbin/bioctl/bioctl.8
index 4647a564799..a29701baa43 100644
--- a/sbin/bioctl/bioctl.8
+++ b/sbin/bioctl/bioctl.8
@@ -1,4 +1,4 @@
-.\"	$OpenBSD: bioctl.8,v 1.79 2009/12/19 16:27:54 jsing Exp $
+.\"	$OpenBSD: bioctl.8,v 1.80 2009/12/31 14:00:45 jsing Exp $
 .\"
 .\" Copyright (c) 2004, 2005 Marco Peereboom
 .\"
@@ -23,7 +23,7 @@
 .\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
 .\" SUCH DAMAGE.
 .\"
-.Dd $Mdocdate: December 19 2009 $
+.Dd $Mdocdate: December 31 2009 $
 .Dt BIOCTL 8
 .Os
 .Sh NAME
@@ -46,6 +46,7 @@
 .Op Fl dhiPqv
 .Op Fl C Ar flag[,flag,...]
 .Op Fl c Ar raidlevel
+.Op Fl k Ar keydisk
 .Op Fl l Ar special[,special,...]
 .Op Fl p Ar passfile
 .Op Fl R Ar device \*(Ba channel:target[.lun]
@@ -202,6 +203,10 @@ RAID 4 and RAID 5 require at least three devices,
 and the CRYPTO discipline requires exactly one.
 .It Fl d
 Delete volume specified by device.
+.It Fl k Ar keydisk
+Use special device
+.Ar keydisk
+as a key disk for a crypto volume.
 .It Fl l Ar special[,special,...]
 Use
 .Ar special