From nobody Fri Mar 10 11:18:35 2023 X-Original-To: freebsd-hackers@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4PY3TP0rw9z3xQJL for ; Fri, 10 Mar 2023 11:18:49 +0000 (UTC) (envelope-from ltning-freebsd-hackers@anduin.net) Received: from mail.anduin.net (mail.anduin.net [185.42.170.45]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4PY3TK6fB4z3FBV for ; Fri, 10 Mar 2023 11:18:45 +0000 (UTC) (envelope-from ltning-freebsd-hackers@anduin.net) Authentication-Results: mx1.freebsd.org; dkim=pass header.d=anduin.net header.s=dkim2021 header.b=TIiIc59K; spf=pass (mx1.freebsd.org: domain of ltning-freebsd-hackers@anduin.net designates 185.42.170.45 as permitted sender) smtp.mailfrom=ltning-freebsd-hackers@anduin.net; dmarc=pass (policy=reject) header.from=anduin.net DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=anduin.net; s=dkim2021; h=Content-Transfer-Encoding:Content-Type:In-Reply-To:From: References:To:Subject:MIME-Version:Date:Message-ID:Sender:Reply-To:Cc: Content-ID:Content-Description:Resent-Date:Resent-From:Resent-Sender: Resent-To:Resent-Cc:Resent-Message-ID:List-Id:List-Help:List-Unsubscribe: List-Subscribe:List-Post:List-Owner:List-Archive; bh=RDvwIovWdVcN0RMV2gyNL+OaqRRdL8zbA16qdZBlB3s=; t=1678447125; x=1679311125; b=TIiIc59KZK0zXAJ6y/+h9Y/OE6qBDwf58b/V1n+f1W9PJGdfi/pX6wc6TSEeb5/3cPsm/tVJ2Qu f6RddJnCkO3Dp4SbeROxs36mzNFA0k9hZ1pqjOJiJILnBGoN9lzjZBz2ZS2eBL8Paj4+KdgBoZMaj AwKTYXWMumr66RQGBRxGy3Fw7Y19wqXl2D6oJ/H4K9c0NwI1uCKAdmer4TiiJwzZxzqwlSv2btU3G fThmC1/4VmUKLEAUhb2xY6vO8nBdvhpgtMMYB0FZ+3WhEyRdNAxE4yy4Wv/hofKY83qanqr2z5waS E9roVYriWok4DlhqVojdH/IX17SViHuP0bww==; Received: by mail.anduin.net with esmtpsa (TLS1.3:TLS_AES_256_GCM_SHA384:256) (Exim 4.95 (FreeBSD)) (envelope-from ) id 1paalg-000CVB-5R for freebsd-hackers@freebsd.org; Fri, 10 Mar 2023 11:18:37 +0000 Message-ID: Date: Fri, 10 Mar 2023 12:18:35 +0100 List-Id: Technical discussions relating to FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-hackers List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-hackers@freebsd.org MIME-Version: 1.0 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:102.0) Gecko/20100101 Thunderbird/102.4.2 Subject: Re: ZFS and Encryption at dataset level To: freebsd-hackers@freebsd.org References: <8BAC3BC0-63B2-449D-BF0E-8E5A0A42F1E0@webweaving.org> Content-Language: en-US From: ltning-freebsd-hackers@anduin.net In-Reply-To: <8BAC3BC0-63B2-449D-BF0E-8E5A0A42F1E0@webweaving.org> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit X-SA-Authenticated: Yes X-Spam-Score: -1.9 X-Spam-Level: - X-Spam-Report: host: mail.modirum.com | contact: hostmaster@modirum.com | scores: BAYES_00=-1.9,NICE_REPLY_A=-0.001,NO_RELAYS=-0.001 | autolearn=no autolearn_force=no, score=-0.001 X-Spamd-Result: default: False [-4.00 / 15.00]; NEURAL_HAM_LONG(-1.00)[-1.000]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; NEURAL_HAM_SHORT(-1.00)[-0.998]; DMARC_POLICY_ALLOW(-0.50)[anduin.net,reject]; R_DKIM_ALLOW(-0.20)[anduin.net:s=dkim2021]; R_SPF_ALLOW(-0.20)[+ip4:185.42.170.45/32]; MIME_GOOD(-0.10)[text/plain]; MIME_TRACE(0.00)[0:+]; MLMMJ_DEST(0.00)[freebsd-hackers@freebsd.org]; ASN(0.00)[asn:62248, ipnet:185.42.170.0/24, country:EE]; FROM_EQ_ENVFROM(0.00)[]; RCVD_TLS_ALL(0.00)[]; RCVD_VIA_SMTP_AUTH(0.00)[]; DKIM_TRACE(0.00)[anduin.net:+]; MID_RHS_MATCH_FROM(0.00)[]; ARC_NA(0.00)[]; FROM_NO_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; RCPT_COUNT_ONE(0.00)[1]; TO_DN_NONE(0.00)[]; RCVD_COUNT_TWO(0.00)[2] X-Rspamd-Queue-Id: 4PY3TK6fB4z3FBV X-Spamd-Bar: --- X-ThisMailContainsUnwantedMimeParts: N On 3/8/23 12:50, Dirk-Willem van Gulik wrote: > Just some words of thanks & praise -- compliments to those & all the hard work of getting ZFS encryption at data set into 13.1. > > Was an absolute breeze to configure & install - and very easy to manage ! And flexible enough to integrate with PKCS11 and HSM's. This sounds really interesting! We've done some hackery to achieve something similar, but I'd be really interested in knowing what you've done in this respect, and how! Hope it's something you can share publicly :) /Eirik > > My compliments to all ! > > Dw >