encrypt ZFS with geli

Gergely CZUCZY phoemix at harmless.hu
Thu May 10 20:15:33 UTC 2007


On Thu, May 10, 2007 at 10:13:18PM +0200, Dag-Erling Smørgrav wrote:
> Dennis Berger <db at nipsi.de> writes:
> > I would like to know whats the best way to encrypt zfs filesystem.
> > Currently I created a zfs volume with zfs create -V4g data/test. Encrypt
> > it with geli init /dev/zvol/data/test.
> > And create a new zpool with zpool create encrypted /dev/zvol/data/test.eli.
> > What do you suggest to do?
> 
> so you're running zfs on geli on zfs...
> 
> why not just run geli directly on the raw device and zfs on top of that?
Can geli handle the resize of the partition that it encrypts? If not, then
i really don't see the point in encrypting a wossname provided by zfs with
geli.

Bye,

Gergely Czuczy
mailto: gergely.czuczy at harmless.hu

-- 
Weenies test. Geniuses solve problems that arise.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 1081 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-fs/attachments/20070510/6845384f/attachment.pgp


More information about the freebsd-fs mailing list