From owner-freebsd-stable@FreeBSD.ORG  Mon Jul 22 14:22:20 2013
Return-Path: <owner-freebsd-stable@FreeBSD.ORG>
Delivered-To: freebsd-stable@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115])
 by hub.freebsd.org (Postfix) with ESMTP id 0C470219
 for <freebsd-stable@freebsd.org>; Mon, 22 Jul 2013 14:22:20 +0000 (UTC)
 (envelope-from thomas@gibfest.dk)
Received: from mail.tyknet.dk (mail.tyknet.dk [176.9.9.186])
 (using TLSv1 with cipher ADH-CAMELLIA256-SHA (256/256 bits))
 (No client certificate requested)
 by mx1.freebsd.org (Postfix) with ESMTPS id BF0452139
 for <freebsd-stable@freebsd.org>; Mon, 22 Jul 2013 14:22:19 +0000 (UTC)
Received: from [192.168.18.53] (cpe.atm4-0-1301038.hknxx5.dk.customer.tdc.net
 [80.160.242.134])
 (using TLSv1 with cipher DHE-RSA-CAMELLIA256-SHA (256/256 bits))
 (No client certificate requested)
 by mail.tyknet.dk (Postfix) with ESMTPSA id A1B69182062;
 Mon, 22 Jul 2013 16:22:08 +0200 (CEST)
X-DKIM: OpenDKIM Filter v2.5.2 mail.tyknet.dk A1B69182062
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=gibfest.dk; s=default;
 t=1374502931; bh=co8ibrHWK4zwAS03YFHVEST4Pq7IQ/c5k3hsGniH2jA=;
 h=Date:From:To:CC:Subject:References:In-Reply-To;
 b=PxgI/+MifDZCLszZPqk6sYCYUXKLwFSzGuMyatoOm1/9k+pSq8y98PDYnus1rNegx
 0CxpBc3HjoK4AQZ4Ri9kRxIrV24JDKLijmmjrhj82CEzZy3ZZP084fCY2qbhvuZlFi
 xC/jVNC5Yn4o5VrDSkXkPS9ow42y+lPMZfvPHSLE=
Message-ID: <51ED400A.1080507@gibfest.dk>
Date: Mon, 22 Jul 2013 16:22:02 +0200
From: Thomas Steen Rasmussen <thomas@gibfest.dk>
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64;
 rv:17.0) Gecko/20130620 Thunderbird/17.0.7
MIME-Version: 1.0
To: "Eugene M. Zheganin" <emz@norma.perm.ru>
Subject: Re: zpool on a zvol inside zpool
References: <51ECE783.8050207@norma.perm.ru>
In-Reply-To: <51ECE783.8050207@norma.perm.ru>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Cc: freebsd-stable stable <freebsd-stable@freebsd.org>
X-BeenThere: freebsd-stable@freebsd.org
X-Mailman-Version: 2.1.14
Precedence: list
List-Id: Production branch of FreeBSD source code <freebsd-stable.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-stable>,
 <mailto:freebsd-stable-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-stable>
List-Post: <mailto:freebsd-stable@freebsd.org>
List-Help: <mailto:freebsd-stable-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>,
 <mailto:freebsd-stable-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 22 Jul 2013 14:22:20 -0000

On 22-07-2013 10:04, Eugene M. Zheganin wrote:
> Hi.
>
> I'm moving some of my geli installation to a new machine. On an old
> machine it was running UFS. I use ZFS on a new machine, but I don't have
> an encrypted main pool (and I don't want to), so I'm kinda considering a
> way where I will make a zpool on a zvol encrypted by geli. Would it be
> completely insane (should I use UFS instead ?) or would it be still
> valid  ?
Hello,

I've used this setup for a while on several servers, it works but
it is slow. I am migrating my servers to have two zpools instead,
a small one with the base system and nothing else, the other one
on top of a geli device. This performs much better and is IMO a
better solution. YMMV :)

I have this method documented on my wiki here:
http://wiki.tyk.nu/index.php?title=Ezjail_host#Further_disk_configuration


Best regards,

Thomas Steen Rasmussen