Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 1 Jun 2016 08:25:32 -0700
From:      Freddie Cash <fjwcash@gmail.com>
To:        FreeBSD Hackers <freebsd-hackers@freebsd.org>
Subject:   Re: EFI GELI support ready for testers
Message-ID:  <CAOjFWZ68GNKXr1FoTxcupqxQy764mbkS8ti_MNrt71Z8GjaAVQ@mail.gmail.com>
In-Reply-To: <20160601144738.GA14531@britannica.bec.de>
References:  <519CC1FC-84DF-4710-8E62-AF26D8AED2CF@metricspace.net> <20160528083656.GT38613@kib.kiev.ua> <d6b96a6c-4e92-35a5-e78b-cc674b6d2f25@freebsd.org> <20160528172618.GB38613@kib.kiev.ua> <6A9DADE0-B214-424A-BB14-0B0848F0D08D@metricspace.net> <20160529091827.GD38613@kib.kiev.ua> <46B3F9E2-A25B-4F9D-B35F-11AC782495B1@metricspace.net> <alpine.BSF.2.20.1606011623410.3503@laptop.wojtek.intra> <20160601144738.GA14531@britannica.bec.de>

next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, Jun 1, 2016 at 7:47 AM, Joerg Sonnenberger <joerg@bec.de> wrote:

> On Wed, Jun 01, 2016 at 04:29:16PM +0200, Wojciech Puchar wrote:
> > > It's undesirable because the whole point of ZFS is to have one ZFS
> > > volume for the whole system.
> > This sounds more like a religious dogma than anything else.
>
> If "ZFS volume" means "ZFS pool" here, it is also blatant bullshit.
> There are a lot of reasons for having more than one ZFS pool, the
> easiest being separating SSDs and HDDs for fast vs cheap storage.
>

=E2=80=8BNo one is saying you can't have multiple ZFS pools in a system.  F=
or
example, there's nothing wrong with having a "system" pool where the OS is
installed (say, on SSD), and a "storage" pool where all your data goes
(say, on a dozen hard drives).

But, in order to properly support ZFS Boot Environments, you *NEED* to have
/boot as a directory on the / (root) filesystem in a ZFS pool.=E2=80=8B

=E2=80=8B  When you create BEs, you snapshot and clone the root filesystem
(ideally, which includes the entire base OS install).  If you have a
separate /boot partition outside of the BE, things get hairy, out-of-sync,
hard-to-manage, and cause all kinds of issues with versioning of boot
blocks, loader, kernel, modules, and OS.

If you want to encrypt a ZFS-on-root install *AND*=E2=80=8B use Boot Enviro=
nments,
then you need to have a way to load the GELI stuff and access the ZFS pool
... without having a separate /boot; ie from the loader.


--=20
Freddie Cash
fjwcash@gmail.com



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAOjFWZ68GNKXr1FoTxcupqxQy764mbkS8ti_MNrt71Z8GjaAVQ>