From owner-freebsd-geom@FreeBSD.ORG Sun Apr 17 21:45:07 2011 Return-Path: Delivered-To: freebsd-geom@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id E23B21065674 for ; Sun, 17 Apr 2011 21:45:07 +0000 (UTC) (envelope-from gcubfg-freebsd-geom@m.gmane.org) Received: from lo.gmane.org (lo.gmane.org [80.91.229.12]) by mx1.freebsd.org (Postfix) with ESMTP id 9D0AB8FC12 for ; Sun, 17 Apr 2011 21:45:07 +0000 (UTC) Received: from list by lo.gmane.org with local (Exim 4.69) (envelope-from ) id 1QBZmC-0002H9-L4 for freebsd-geom@freebsd.org; Sun, 17 Apr 2011 23:45:04 +0200 Received: from dtmd-4d0bcd07.pool.mediaways.net ([77.11.205.7]) by main.gmane.org with esmtp (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Sun, 17 Apr 2011 23:45:04 +0200 Received: from christian.baer by dtmd-4d0bcd07.pool.mediaways.net with local (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Sun, 17 Apr 2011 23:45:04 +0200 X-Injected-Via-Gmane: http://gmane.org/ To: freebsd-geom@freebsd.org From: Christian Baer Date: Sun, 17 Apr 2011 23:41:40 +0200 Lines: 21 Message-ID: References: <20110417171659.GD22319@garage.freebsd.pl> Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-Complaints-To: usenet@dough.gmane.org X-Gmane-NNTP-Posting-Host: dtmd-4d0bcd07.pool.mediaways.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.16) Gecko/20101125 Lightning/1.0b1 Thunderbird/3.0.11 In-Reply-To: <20110417171659.GD22319@garage.freebsd.pl> Subject: Re: Maximum secure filesystem-size with geli X-BeenThere: freebsd-geom@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: GEOM-specific discussions and implementations List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 17 Apr 2011 21:45:08 -0000 On 17.04.2011 19:16, Pawel Jakub Dawidek wrote: > Recent GELI uses one key for every 2^20 sectors, so no more than > (2^20)*sectorsize bytes is encrypted using one key, so file system size > should not be an issue. Hmm, then I guess it was a good idea to update from 8.0 before I set up the new drive. :-) Thank you for the infomation so far! This however makes another question arise: Is there some recommendation on the ratio between geli's -s option and the options -b and -f of newfs (I don't think -i option is important to geli)? Basicly: If I use different block sizes for the file system (in my case much larger than the default), would it be a good idea to use the same size as geli's sector size? If so, which sizes should be the same? Sector size (geli) and blocksize or frag size (newfs). I intend to use UFS. Best regards and good night! Chris