5 ms·
Wow, nice. Do you know how straightforward it is to get it with ZFS?
by oskarth 10y ago
Wow, nice. Do you know how straightforward it is to get it with ZFS?
- __jal 10y agoZFS is native in FreeBSD, so it is exactly as straightforward as the above.
- djsumdog 10y agoEven the last release supports full ZFS+encryption with the default installer.
- floatboth 10y agoBut you don't use the installer with "cloud" / VPS providers. It's usually more like cloning a VM image where the system is already installed.
- RJIb8RBYxzAMX9u 10y agoThis is still geli+zfs, and not native zfs encryption that was recently presented in OpenZFS Developer Summit [0]. [0] https://www.youtube.com/watch?v=frnLiXclAMo https://www.youtube.com/watch?v=frnLiXclAMo
- mioelnir 10y agoCorrect, it is full disk encryption instead of dataset encryption. But on the other hand, if you install 11.0 from installer and chose Auto(ZFS) with EncryptedZFS and MBR(GPT) then you will get a GeliBoot installation. There is no boot pool anymore, instead the early boot stages decrypt the root zpool to load the rest of the boatloader, which then decrypts the pool to load the kernel. With bootloader-selectable boot environments.
- mioelnir 10y ago...and I meant BIOS(GPT). Hmpf.