3 ms·
Nice that he is using Proxmox again. I was researching and experimenting: What hyper visor is out there providing a good file system (zfs) and also full disc e
by weitzj 8y ago
Nice that he is using Proxmox again.
I was researching and experimenting: What hyper visor is out there providing a good file system (zfs) and also full disc encryption at the hyprvisor level?
tldr: FreeNAS
And it came out that this is not that trivial.
You can buy a Vsphere/ESXi license for encryption, but (probably) don’t have the same capabilities as ZFS.
You could use Hyper-V and have encryption but no ZFS.
On the other side there is Promox (Debian 9 stretch) which has an installer which uses ZFS (but no encryption). You can jump to some hoops and make a manual Debian 9 Installation with ZFS and luks (for the encryption) and then install Proxmox. Then you have to watch out to use the ZFS version Proxmox uses (instead of the Debian version)
You could use OmniOS, SmartOS to get ZFS, but again no encryption out of the box.
Solaris 11 has the ZFS and encryption part figured out, but the hypervisor part is not clear to me.
So FreeBSD has ZFS and encryption (GELI) figured out as well. For the hypervisor bhyve. Still there is manual work.
Then there is FreeNAS. It has ZFS, Encryption -and- hypervisor streamlined. :)
Some people use it as a VM guest inside Proxmox/ESXi, pass through their discs and from FreeNAS Export either NFS or ZFS over iSCSI back to the hypervisor to use as a storage pool.
Or as I found out, FreeNAS 11 has the bhyve hypervisor built in. You can have FreeBSD jails for BSD and Linux, or full VM guests via bhyve like Windows or Docker/Kubernetes.
FreeNAS ships with RancherOS as the minimal Linux vom, which can act as a Docker host.(if you don’t want to setup your own)
So for our use case of having a safe file system and full disc encryption and be able to launch VMs, and to have this very easily installed on an USB stick with minimal configuration and excellent documentation, I would recommend trying it out.
Of course Proxmox has live migrations, which is not figured out here. Probably Kubernetes would help.
Probably the other good way would be to have drives and a mainboard which support encryption at the hardware-level. Or wait until zfs on Linux v.0.8 is more in use. It contains encryption support.
https://doc.freenas.org/11/vms.html https://doc.freenas.org/11/vms.html