Date: Thu, 10 May 2007 22:15:29 +0200 From: Gergely CZUCZY <phoemix@harmless.hu> To: Dag-Erling =?utf-8?B?U23DuHJncmF2?= <des@des.no> Cc: freebsd-fs@FreeBSD.org Subject: Re: encrypt ZFS with geli Message-ID: <20070510201529.GA79208@harmless.hu> In-Reply-To: <866470309t.fsf@dwp.des.no> References: <46432346.1060202@nipsi.de> <866470309t.fsf@dwp.des.no>
next in thread | previous in thread | raw e-mail | index | archive | help
[-- Attachment #1 --] On Thu, May 10, 2007 at 10:13:18PM +0200, Dag-Erling Smørgrav wrote: > Dennis Berger <db@nipsi.de> writes: > > I would like to know whats the best way to encrypt zfs filesystem. > > Currently I created a zfs volume with zfs create -V4g data/test. Encrypt > > it with geli init /dev/zvol/data/test. > > And create a new zpool with zpool create encrypted /dev/zvol/data/test.eli. > > What do you suggest to do? > > so you're running zfs on geli on zfs... > > why not just run geli directly on the raw device and zfs on top of that? Can geli handle the resize of the partition that it encrypts? If not, then i really don't see the point in encrypting a wossname provided by zfs with geli. Bye, Gergely Czuczy mailto: gergely.czuczy@harmless.hu -- Weenies test. Geniuses solve problems that arise. [-- Attachment #2 --] -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (FreeBSD) owFtU0FrE0EUri0iLHjooaAg+i5StNnNJm1tEpukNo2lh6JgMQdPk92XzdjNzDoz m3UDHnpSRER6LaggHgUPxVPBPyD9C/4Cr559u5voxdPOm/e9773v2zfvLi/MzS+e fz19svLm+OTCl4Xz/u1RbIwI7BFTYy7siutW7I161a3Za3atVmdu3Vu9U99Yr7pr 9zsvWEcKg8LYB2mEDTD43JSjkHFxF7whUxpNMzYDu2bNcDtcR1Jzw6VoABchF/g3 d6CY0ANUdld40uciaMCzWBr07UhxYVg/RMt6IOBgGJdgn6VQcUtQdd0NYIbOjcpq o1J7uA8rLl2WYIcFdldRhwAejZqd1eZ2TQWKjSFRRNqwWrCDQnAN26gCVLDp97cE jzR3fGwRiBvUGaoFe5DIOPQh5IcIRsKhkAkkQ2Y0mCFCH7WBhOahFApPpZGByUDD gIeoU21w5OQ0nVgp0hmmROgpZKQMWI4cyzAeISTcDPO4yIL9eC0AnxlWplGMA92C PCfjpoAHGHIyksKyj+PyhKjK/0py6D3hzxgZCExgEkkZTrvlx2l2OjyN9T+upkWt CsYeaQdfQipj0HEQZAaQeF+2rVaz6hJG58llhaBiMpn+QaZLimJe+lLoOM4MngxT ENLA05iYqKKA+Vyhl/lF+MxoxRKgwbhHQkjTlNHICOSAAMy0rQ6b1g4JEWJRhppP sMAgREyZfP/yiszHqWzdhr1BNkUpwwmLUyELqbsvxbIBjQVbJGkXyfFZWaaN0YJo LRj9w0jJMffJwn6aD5i5bAW5c9Z2iiXL2s3WjWg7k9ibpNaI8dDIBk2dXztefr1F r2dE66OdYWxZtp3Z1EMUHGnn8mXYpSDWFGoZjvO+9D5GulDFFNfoWK/aCxfnsmc6 e+KL896luY8frp2+Pjs5Ovv5rdfobt58u/5pN5x7f6u+xHo3rr+88vnq7x+/2sdL 34+O/gA= =Fa2v -----END PGP SIGNATURE-----
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20070510201529.GA79208>