How to mirror a geli partition?

[Ivan Voras]

Christian Baer wrote:

> This is actually the biggest problem I am facing. In what order do I do
> this? I was thinking along this way:
> 1 - Create partions and try to get them the same size. :-)
> 2 - Fill one (or both?) with random data.
> 3 - Make a geli provider out of one of them, newfs it.
> 4 - Do something like 'gmirror label -v -b load secret 1.eli'
>     and 'gmirror insert 2.eli'
> I am not sure if I should reverse the order of 3 and 4. Or have I gotten
> the whole idea wrong?
> 
> Can someone point me in the right direction?

First mirror the partitions and then create geli drive on top of it. If
you do it the other way (encrypt each of the partition separately), you
will be asked for password twice and each drive will (AFAIK) get its own
internal key even if you use the same password (I'm not sure about that
one, though).

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 250 bytes
Desc: OpenPGP digital signature
Url : http://lists.freebsd.org/pipermail/freebsd-geom/attachments/20070112/107d690c/signature.pgp