From owner-freebsd-fs@FreeBSD.ORG  Thu May 10 20:13:22 2007
Return-Path: <owner-freebsd-fs@FreeBSD.ORG>
X-Original-To: freebsd-fs@FreeBSD.org
Delivered-To: freebsd-fs@FreeBSD.org
Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52])
	by hub.freebsd.org (Postfix) with ESMTP id 6DB8716A404
	for <freebsd-fs@FreeBSD.org>; Thu, 10 May 2007 20:13:22 +0000 (UTC)
	(envelope-from des@des.no)
Received: from tim.des.no (tim.des.no [194.63.250.121])
	by mx1.freebsd.org (Postfix) with ESMTP id 2C5BF13C458
	for <freebsd-fs@FreeBSD.org>; Thu, 10 May 2007 20:13:22 +0000 (UTC)
	(envelope-from des@des.no)
Received: from tim.des.no (localhost [127.0.0.1])
	by spam.des.no (Postfix) with ESMTP id 8B9C620AA;
	Thu, 10 May 2007 22:13:18 +0200 (CEST)
X-Spam-Tests: AWL
X-Spam-Learn: disabled
X-Spam-Score: 0.0/3.0
X-Spam-Checker-Version: SpamAssassin 3.1.7 (2006-10-05) on tim.des.no
Received: from dwp.des.no (des.no [80.203.243.180])
	by smtp.des.no (Postfix) with ESMTP id 7FBF920A6;
	Thu, 10 May 2007 22:13:18 +0200 (CEST)
Received: by dwp.des.no (Postfix, from userid 1001)
	id 5862D5263; Thu, 10 May 2007 22:13:18 +0200 (CEST)
From: des@des.no (Dag-Erling =?utf-8?Q?Sm=C3=B8rgrav?=)
To: Dennis Berger <db@nipsi.de>
References: <46432346.1060202@nipsi.de>
Date: Thu, 10 May 2007 22:13:18 +0200
In-Reply-To: <46432346.1060202@nipsi.de> (Dennis Berger's message of "Thu, 10
	May 2007 15:51:02 +0200")
Message-ID: <866470309t.fsf@dwp.des.no>
User-Agent: Gnus/5.110006 (No Gnus v0.6) Emacs/21.3 (berkeley-unix)
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Cc: freebsd-fs@FreeBSD.org
Subject: Re: encrypt ZFS with geli
X-BeenThere: freebsd-fs@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Filesystems <freebsd-fs.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-fs>,
	<mailto:freebsd-fs-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-fs>
List-Post: <mailto:freebsd-fs@freebsd.org>
List-Help: <mailto:freebsd-fs-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-fs>,
	<mailto:freebsd-fs-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 10 May 2007 20:13:22 -0000

Dennis Berger <db@nipsi.de> writes:
> I would like to know whats the best way to encrypt zfs filesystem.
> Currently I created a zfs volume with zfs create -V4g data/test. Encrypt
> it with geli init /dev/zvol/data/test.
> And create a new zpool with zpool create encrypted /dev/zvol/data/test.el=
i.
> What do you suggest to do?

so you're running zfs on geli on zfs...

why not just run geli directly on the raw device and zfs on top of that?

DES
--=20
Dag-Erling Sm=C3=B8rgrav - des@des.no