From owner-freebsd-geom@FreeBSD.ORG  Wed Sep 23 09:59:59 2009
Return-Path: <owner-freebsd-geom@FreeBSD.ORG>
Delivered-To: freebsd-geom@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id DF261106566C
	for <freebsd-geom@freebsd.org>; Wed, 23 Sep 2009 09:59:59 +0000 (UTC)
	(envelope-from petefrench@ticketswitch.com)
Received: from constantine.ticketswitch.com (constantine.ticketswitch.com
	[IPv6:2002:57e0:1d4e:1::3])
	by mx1.freebsd.org (Postfix) with ESMTP id A8DFA8FC1C
	for <freebsd-geom@freebsd.org>; Wed, 23 Sep 2009 09:59:59 +0000 (UTC)
Received: from dilbert.rattatosk ([10.64.50.6] helo=dilbert.ticketswitch.com)
	by constantine.ticketswitch.com with esmtps (TLSv1:AES256-SHA:256)
	(Exim 4.69 (FreeBSD)) (envelope-from <petefrench@ticketswitch.com>)
	id 1MqOdc-000M9U-Bv; Wed, 23 Sep 2009 10:59:52 +0100
Received: from petefrench by dilbert.ticketswitch.com with local (Exim 4.69
	(FreeBSD)) (envelope-from <petefrench@ticketswitch.com>)
	id 1MqOdc-000BZU-B0; Wed, 23 Sep 2009 10:59:52 +0100
To: a.n.s.i@gmx.net, freebsd-geom@freebsd.org
In-Reply-To: <20090923083313.55390@gmx.net>
Message-Id: <E1MqOdc-000BZU-B0@dilbert.ticketswitch.com>
From: Pete French <petefrench@ticketswitch.com>
Date: Wed, 23 Sep 2009 10:59:52 +0100
Cc: 
Subject: Re: geom_eli, N disks, zfs
X-BeenThere: freebsd-geom@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: GEOM-specific discussions and implementations
	<freebsd-geom.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-geom>,
	<mailto:freebsd-geom-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-geom>
List-Post: <mailto:freebsd-geom@freebsd.org>
List-Help: <mailto:freebsd-geom-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-geom>,
	<mailto:freebsd-geom-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 23 Sep 2009 09:59:59 -0000

> Yes, it will be one solution. But your setup we must mount root-fs first to read rc.conf, then we can attach disk to initialize ZFS volume. Or?

Yes, this is true - but then I only encrypt the drives which have sensetive
data on them. My boot drive doesnt come under that heading, though all
the data is then mounted from an encrypted zpool.

> But what about zfs-only system with one zpool using all N-disks?

I havent though about that - I have two zpools, one unencrpted on the boot
drive, and then a pair of mirrored encrypted drives for the rest. I never
quite saw the mileage in encrypting the boot device really - as long as
the actual data is protected then I am happy.

-pete.