From owner-freebsd-geom@FreeBSD.ORG Mon Jan 14 21:15:52 2008 Return-Path: Delivered-To: freebsd-geom@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 54F5516A418 for ; Mon, 14 Jan 2008 21:15:52 +0000 (UTC) (envelope-from fbsd06+SE=0ff4ba91@mlists.homeunix.com) Received: from mxout-04.mxes.net (mxout-04.mxes.net [216.86.168.179]) by mx1.freebsd.org (Postfix) with ESMTP id 2405E13C4E7 for ; Mon, 14 Jan 2008 21:15:52 +0000 (UTC) (envelope-from fbsd06+SE=0ff4ba91@mlists.homeunix.com) Received: from gumby.homeunix.com. (unknown [87.81.140.128]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by smtp.mxes.net (Postfix) with ESMTP id CA34CD05AC for ; Mon, 14 Jan 2008 16:15:46 -0500 (EST) Date: Mon, 14 Jan 2008 21:15:37 +0000 From: RW To: freebsd-geom@freebsd.org Message-ID: <20080114211537.1f8ed0ff@gumby.homeunix.com.> In-Reply-To: <478B5F8A.7090408@vwsoft.com> References: <478A93BF.4070404@vwsoft.com> <20080114011412.33a91fac@gumby.homeunix.com.> <478B5F8A.7090408@vwsoft.com> X-Mailer: Claws Mail 3.0.2 (GTK+ 2.12.5; i386-portbld-freebsd7.0) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Subject: Re: how-to: encryption + journaling (geli + gjournal) X-BeenThere: freebsd-geom@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: GEOM-specific discussions and implementations List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 14 Jan 2008 21:15:52 -0000 On Mon, 14 Jan 2008 13:11:38 +0000 Volker wrote: > On 12/23/-58 19:59, RW wrote: > > It would probably be faster to fill /dev/ad0s1d from /dev/random > > before doing the geli init - there's no point in encrypting the > > random numbers. It would also ensure that the whole of ad0s1d is > > pre-filled, and not just the part accessible as ad0s1d.eli. > > If you think it doesn't make sense or is a fault, please file a PR as > filling the data provider with random data has been taken from the > manpage geli(8). It's only an example. > > Otherwise I'm considering this being a bike shed. > > If you know it better, I'm wondering why you haven't written a how to > in the past? There's no need to be rude, I'm only trying to help. In my experience writing from /dev/random to a raw partition is almost twice as fast as writing to an .eli device - essentially it's single verses double encryption. I recently filled a raw partition on a 500GB drive and it took 6 hours, doing it on the eli device would have taken about 11 hours. I think you'd have to have a lot of time on your hands to consider this a bike shed.