Copy stable/10@r272459 to releng/10.1 as part of
the 10.1-RELEASE process.

Approved by: re (implicit)
Sponsored by: The FreeBSD Foundation

Copy head (r256279) to stable/10 as part of the 10.0-RELEASE cycle.

Approved by: re (implicit)
Sponsored by: The FreeBSD Foundation

Fix resize regressions tests - we need to destroy BSDlabel before we can
create GPT.

MFC after: 3 days

Correct message.

Pointed out by: jhb
MFC after: 2 weeks

Add some regression tests for newly added -J and -j options.

MFC after: 2 weeks

Don't hardcode md0 in message, use $md instead.

Reported by: Ronald Klop <ronald-freebsd8@klop.yi.org>

Update regression tests after AES-XTS addition.

MFC after: 2 weeks

- Use $md instead of md0, which fixes tests when md(4) device is already
present.
- Correct message - we create GPT, not MBR.

MFC after: 2 weeks

Add a geli resize subcommand to resize encrypted filesystems prior
to growing the filesystem.

Refuse to attach providers where the metadata provider size is
wrong. This makes post-boot attaches behave consistently with
pre-boot attaches. Also refuse to restore metadata to a provider
of the wrong size without the new -f switch. The new -f switch
forces the metadata restoration despite the provider size, and
updates the provider size in the restored metadata to the correct
value.

Helped by: pjd
Reviewed by: pjd

By default backup geli metadata to a file. It is quite critical 512 bytes,
once it is lost, all data is gone.

Option '-B none' can by used to prevent backup. Option '-B path' can be
used to backup metadata to a different file than the default, which is
/var/backups/<prov>.eli.

The 'geli init' command also prints backup file location and gives short
procedure how to restore metadata.

The 'geli setkey' command now warns that even after passphrase change or keys
update there could be version of the master key encrypted with old
keys/passphrase in the backup file.

Add regression tests to verify that new functionality works as expected.

Update other regression tests so they don't create backup files.

Reviewed by: keramida, rink
Dedicated to: a friend who lost 400GB of his live by accidentally overwritting geli metadata
MFC after: 2 weeks

Hide geli warnings about sector size beeing bigger than the page size when
doing regression testing.

Add support for Camellia encryption algorithm.

PR: kern/113790
Submitted by: Yoshisato YANAGISAWA <yanagisawa@csg.is.titech.ac.jp>
Approved by: re (bmah)

Move readonly.t regression tests file to where it belongs.
I accidentally added it to a wrong directory.

Add regression tests for 'geli configure' subcommand.

MFC after: 1 week

Add regression tests for geli(8) authentication feature.

Supported by: Wheel Sp. z o.o. (http://www.wheel.pl)

- Update regression tests after recent changes.
- Verify various sector sizes.

For some time now, -i and -P options are mutually exclusive, there's even
a regression test init-i-P.t which asserts this, but it looks I forgot to
update nokey.t regression test.

MFC after: 1 day

Add regression test which verifies that options -P and -i cannot be used
together.

MFC after: 3 days

Add regression tests which will verify that giving no key components for
init/attach/setkey subcommands is really impossible.

MFC after: 3 days

Add regression tests (121 in total) for GEOM_ELI class.
To use them, run:

# prove /usr/src/tools/regression/geom_eli

Sponsored by: Wheel Sp. z o.o.
http://www.wheel.pl
MFC after: 1 week