From owner-freebsd-questions@freebsd.org Thu Apr 15 14:44:40 2021 Return-Path: Delivered-To: freebsd-questions@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 6B00F5F28D7 for ; Thu, 15 Apr 2021 14:44:40 +0000 (UTC) (envelope-from tomek@cedro.info) Received: from mail-ej1-x635.google.com (mail-ej1-x635.google.com [IPv6:2a00:1450:4864:20::635]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "GTS CA 1O1" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4FLhvC3N32z4SkH for ; Thu, 15 Apr 2021 14:44:39 +0000 (UTC) (envelope-from tomek@cedro.info) Received: by mail-ej1-x635.google.com with SMTP id u21so37247450ejo.13 for ; Thu, 15 Apr 2021 07:44:39 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cedro.info; s=google; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=i3iiDG+i1/4OCsq3s4Jbv9O6pe1xeE8K0ja7EC1NSF0=; b=O0D1G9yL0B0OjNdmkQUxEYzFpRhItHR/FtOanw61/xzGEMc/uowIIl1ss4V9aYRoJQ m0w3CMKCtnH8m/42M+jVMrOonujHlmUOsQMYGa1DAdJo0coWKxMpjQUIx7TmD5PmtKUT HBS9aFcenPNJjH1c0bZkyshYiUeclysvZso069ZrtXofakM7H6VXyZ4s4WfdzSJibnIQ 8oqbS4Gmi7UeCIizWPOdlloIJVFFsTUgrfx90o1VEgxtgd58dKMO9wEvC0CApdaqe1OL FmpWqimnHrPZUFgwO9iArYEyajQCKgQ2aC4a7GzdWQw074YU0nNvwbzDhH2A4/icCFPX NjbA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=i3iiDG+i1/4OCsq3s4Jbv9O6pe1xeE8K0ja7EC1NSF0=; b=fIr4vDqavJOGVtg4oNzBhdawBb4e0jGP+Ddg7TqIjLHLdzuDS/vmns/rk/VDLTCCSe vjY4a31ap/CczPc0rmQ7s4Pv+csynkF5mU2p4LQ2/8m9cqCqJAo09ivETTaKPgQqh506 WL4Imy0zDZl8Ym0dHEwGDB04aI75yr8+pMm1emCAgeQD9HjTlmQ57oHCDENuzLzRkVVm 7iZPBM1RBYT2QlX495yzF5EFB3GExQlzxlcNDxqU8YF9wEf8Gf/AwkkhbJ6t0mcoje7F jkM7ctPX85wUymxlzrupp99L5ysjmqzlKH7Ax1lNDfGZz1n3aKW5VMCWYKnUYkc4Ab93 tE0A== X-Gm-Message-State: AOAM530D/DxbyNoRzNZVNQE/HQg1XSXpukRls4v6BtSAB2QDqf9VkMTp ijiKBfThA/QmGvsaPIJHSCUgHmMJjMXvnHaOFkZtrTZJ1Ck= X-Google-Smtp-Source: ABdhPJzNrgUoLX3HRNbSbDbHa0Xbate2r6IzfTqVjxq0DFyw4ZZHdEDN/yLsfXKCkyQuKfq8HU70O79aXXBhgUj6Ws4= X-Received: by 2002:a17:906:6896:: with SMTP id n22mr3311665ejr.316.1618497877514; Thu, 15 Apr 2021 07:44:37 -0700 (PDT) MIME-Version: 1.0 References: <20210403095442.jow4pekmbpw7dg5e@ozzmosis.com> <20210415141129.ietvrbndqvdpp7ui@ozzmosis.com> In-Reply-To: <20210415141129.ietvrbndqvdpp7ui@ozzmosis.com> From: Tomasz CEDRO Date: Thu, 15 Apr 2021 16:44:26 +0200 Message-ID: Subject: Re: OpenZFS from ports To: andrew clarke Cc: Andrea Venturoli , FreeBSD Questions Mailing List X-Rspamd-Queue-Id: 4FLhvC3N32z4SkH X-Spamd-Bar: - Authentication-Results: mx1.freebsd.org; dkim=pass header.d=cedro.info header.s=google header.b=O0D1G9yL; dmarc=none; spf=none (mx1.freebsd.org: domain of tomek@cedro.info has no SPF policy when checking 2a00:1450:4864:20::635) smtp.mailfrom=tomek@cedro.info X-Spamd-Result: default: False [-1.30 / 15.00]; RCVD_TLS_ALL(0.00)[]; ARC_NA(0.00)[]; R_DKIM_ALLOW(-0.20)[cedro.info:s=google]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; FROM_HAS_DN(0.00)[]; RCPT_COUNT_THREE(0.00)[3]; NEURAL_SPAM_SHORT(1.00)[1.000]; NEURAL_HAM_LONG(-1.00)[-1.000]; MIME_GOOD(-0.10)[multipart/alternative,text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org]; DMARC_NA(0.00)[cedro.info]; SPAMHAUS_ZRD(0.00)[2a00:1450:4864:20::635:from:127.0.2.255]; TO_MATCH_ENVRCPT_SOME(0.00)[]; TO_DN_ALL(0.00)[]; DKIM_TRACE(0.00)[cedro.info:+]; RCVD_IN_DNSWL_NONE(0.00)[2a00:1450:4864:20::635:from]; R_SPF_NA(0.00)[no SPF record]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+,1:+,2:~]; RBL_DBL_DONT_QUERY_IPS(0.00)[2a00:1450:4864:20::635:from]; ASN(0.00)[asn:15169, ipnet:2a00:1450::/32, country:US]; RCVD_COUNT_TWO(0.00)[2]; MAILMAN_DEST(0.00)[freebsd-questions] Content-Type: text/plain; charset="UTF-8" X-Content-Filtered-By: Mailman/MimeDel 2.1.34 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 15 Apr 2021 14:44:40 -0000 On Thu, Apr 15, 2021, 16:11 andrew clarke wrote: > Evidently development on PEFS seems to have stalled, so I'm not expecting > a patch to fix the build on 13.0 any time soon. Consequently I'm looking at > moving the data to a ZFS encrypted filesystem on the 13.0 machine, but for > various reasons I'm a bit hesitant. Just use defaul zfs on encrypted geli as installer suggests. Use aesni module to use hardware for encryption. It works fine :-) PEFS may be good for local encryption of selected directory / files. zfs + geli is better for system wide. Please report PEFS to bugzilla it ma be fixed soon :-) ZFS provides you with (differential) snapshot (and then standard stream) mechanism that you can put into cron to create automatic incremental backups and export. -- CeDeROM, SQ7MHZ, http://www.tomek.cedro.info