how-to: encryption + journaling (geli + gjournal)

RW fbsd06 at mlists.homeunix.com
Sun Jan 13 17:37:00 PST 2008


On Sun, 13 Jan 2008 23:42:07 +0100
Volker <volker at vwsoft.com> wrote:

> For the archives (as I haven't found a nice how-to on this topic):
> 
> A short how-to to get geli + gjournal running smoothly (the lazy way,
> depending mostly on OS infrastructure, no script hacking needed).
> 
> - set up your geli provider:
> geli load
> geli init /dev/ad0s1d # check geli(8) for this
> geli attach /dev/ad0s1d
> dd if=/dev/random of=/dev/ad0s1d.eli bs=1m # (use higher values bs=...
> for faster operation)

It would probably be faster to fill /dev/ad0s1d from /dev/random before
doing the geli init - there's no point in encrypting the random numbers.
It would also ensure that the whole of ad0s1d is pre-filled, and not
just the part accessible as ad0s1d.eli.

 


More information about the freebsd-geom mailing list