Date: Sat, 17 Apr 2021 22:03:49 +0200 From: Clayton Milos <clay@milos.co.za> To: Pete French <petefrench@ingresso.co.uk> Cc: FreeBSD Stable Mailing List <freebsd-stable@freebsd.org> Subject: Re: geli - is it better to partition then encrypt, or vice versa ? Message-ID: <6AE407B1-6559-4D60-86BF-68C3774F90A4@milos.co.za> In-Reply-To: <c2905507-ea7b-a0ba-a167-8835f600f040@ingresso.co.uk> References: <c2905507-ea7b-a0ba-a167-8835f600f040@ingresso.co.uk>
next in thread | previous in thread | raw e-mail | index | archive | help
I encrypt the whole disk and then add it to the pool. No need to partition i= t. If I remember correctly zfs prefers unpartitioned disks. \\Clay > On 17 Apr 2021, at 21:54, Pete French <petefrench@ingresso.co.uk> wrote: >=20 > =EF=BB=BFSo, am building a zpool on some encrypted discs - and what I have= done is to partition the disc with GPT add a single big partition, and encr= ypt that. So the pool is on nda1p1.eli. >=20 > But I could, of course, encrypt the disc first, and then partition the enc= rypted disc, or indded just put the zpool directly onto it. >=20 > Just wondering what the general consensus is as to the best way to go here= ... if there is one! :-) What do other people do ? >=20 > -pete. > _______________________________________________ > freebsd-stable@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-stable > To unsubscribe, send any mail to "freebsd-stable-unsubscribe@freebsd.org"
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?6AE407B1-6559-4D60-86BF-68C3774F90A4>