Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 25 May 2012 15:12:54 -0600 (MDT)
From:      Warren Block <wblock@wonkity.com>
To:        Matthias Apitz <guru@unixarea.de>
Cc:        'User Wojtek' <wojtek@wojtek.tensor.gdynia.pl>, rozhuk.im@gmail.com, freebsd-hackers@freebsd.org
Subject:   Re: proper newfs options for SSD disk
Message-ID:  <alpine.BSF.2.00.1205251507510.63238@wonkity.com>
In-Reply-To: <20120525183006.GA1259@tiny>
References:  <alpine.BSF.2.00.1205182209010.9350@wojtek.tensor.gdynia.pl> <4fb7dfd6.736a980a.186d.ffff902f@mx.google.com> <20120519180901.GA1264@tiny> <20120525183006.GA1259@tiny>

next in thread | previous in thread | raw e-mail | index | archive | help
On Fri, 25 May 2012, Matthias Apitz wrote:

> Talking about another question, related to file systems on SSD:
>
> My netbook with the two SSD has file systems mounted as:
>
> $ df -kh
> Filesystem      Size    Used   Avail Capacity  Mounted on
> /dev/ada0s1a    3.7G    567M    3.1G    15%    /
> /dev/ada1s1a     14G    8.7G    5.9G    60%    /usr/local
> /dev/md0        125M     88k    115M     0%    /tmp
>
> Below /usr/local is also my (one and only) HOME dir;
>
> I'm on the way to reinstall all with 10-CURRENT and I'd like to crypt the
> partition /dev/ada1s1a with geli(8).
>
> Any objections against running geli(8) on SSD?

Not that I know of.  The encryption happens before the write, so it 
won't (shouldn't) cause any extra writes.  Be prepared for a performance 
drop.  If you have a CPU with AESNI, it helps.

> Should I split /dev/ada1 into two separate partitions, one for real
> /usr/local and one for my HOME and only crypt this with geli(8)?

Hard to say, but I think that encrypting only the necessary data would 
be better for netbooks with relatively slow CPUs.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?alpine.BSF.2.00.1205251507510.63238>