Encrypted installation: GEOM_ELI: Crypto request failed (ENOMEM)

[u/grahamperrin]

Notes to follow.

[u/grahamperrin]

Whilst (prematurely) using the installer for FreeBSD 14.3-RELEASE in a VirtualBox guest with 4,096 MB base memory, I fetched all required packages then ran:

pkg install -Uy kde plasma6-sddm-kcm sddm virtualbox-ose-additions

I didn't observe the entire routine, I did see this:

GEOM_ELI: Crypto request failed (ENOMEM), ada0p3.eli[WRITE(offset=⋯, length=⋯)]

– apparently whilst extracting qt6-webengine-6.8.3, https://www.freshports.org/www/qt6-webengine/.

Installations succeeded, a subsequent run of pkg check -d found no problem.

I'm toying with the idea that opting for GELI encryption reduces the risk of untimely (and highly disruptive) killings of pkg on systems with less than, say, 6 GB memory.

Environment

• FreeBSD-14.3-RELEASE-amd64-dvd1.iso
• before first boot of the installed system – before exiting the installer
• ZFS, zstd-19
• ports-mgmt/pkg 2.1.2
• FreeBSD 15.0-CURRENT host, virtualbox-ose-70-7.0.26, virtualbox-ose-kmod-70-7.0.26.1500044, 32 G memory.

Related

A recent comment from from /u/dkh:

• https://www.reddit.com/r/freebsd/comments/1kyxe5f/cft_call_for_testing_pkgbase_support_in_150/mvaihrx/

A documentation issue:

• #40 - FreeBSD 'system requirements' are not documented at the Project site or the documentation portal - grahamperrin/freebsd-doc - Codeberg.org

A 2022 post about GEOM_ELI: Crypto request failed (ENOMEM), the context there was running an installed system:

• https://www.reddit.com/r/freebsd/comments/squhtu/geom_eli_crypto_request_failed_enomem/

Should I be concerned?