4 ms·
I use it all over with LUKS on Ubuntu. It works fine, but there's one little hitch: when calling anything that ultimately calls grub-probe (e.g. apt-get upgrad
by drvdevd 10y ago
I use it all over with LUKS on Ubuntu. It works fine, but there's one little hitch:
when calling anything that ultimately calls grub-probe (e.g. apt-get upgrade), you have to symlink the decrypted device mapper volume up a layer into /dev because grub-probe can't seem to find the ZFS vdev(s) otherwise. ie: "ln -s /dev/mapper/encrypted-zfs-vdev /dev".
This is in fact the case on every Linux distribution I've run ZFS over dm-crypt on.
EDIT: IOW its a grub bug not an Ubuntu bug.
- XorNot 10y agoThe other problem I've found is that grub's update-grub scripts do not handle mirrored ZFS volumes well at all - they wind up just spraying doubled up invalid commands everywhere even up to yakkety so far. I've had it on my backlog to at some point go in and sort out my initramfs's insanity when it comes to handling crypt'd disks in general - it should be a lot less brittle then it is.
- weitzj 10y agoWe are rolling our own update grub as a bash script, which does some sanity checks: - is the crypto module still present in GRUB config? - is grub running in text only mode? Otherwise we cannot see the LUKS prompt to decrypt the devices. - does initramfs know about all mirror devices (instead of an early return after the first)