4 ms·

> In return, we get more complexity by splitting the system into at least three components*, and going back into the partitioning mess ("You only gave 300GB to

> In return, we get more complexity by splitting the system into at least three components*, and going back into the partitioning mess ("You only gave 300GB to /home, in order to download the ISO you want you need to repartition the system"). Is there anything akin to APFS containers [1] in the Linux space? APFS's ability to share space between multiple filesystems is, among other features, how Apple is able to get away with splitting the filesystem up similarly to Poettering's proposal. (They don't go quite as far; they have a signed, sealed system volume plus a single user volume rather than Poettering's multiple user volumes, but the split is still there and therefore runs into the same issue of space allocation.) [1] https://en.wikipedia.org/wiki/Apple_File_System#Partition_scheme https://en.wikipedia.org/wiki/Apple_File_System#Partition_sc...

yyyk 5y ago
I think btrfs subvolumes can do this? However btrfs doesn't (yet?) support encryption.
- Iolaum 5y ago
  I am using BTRFS and FDE encryption right now on Fedora Silverblue for a year if not more. And like the post says, I am typing two passwords.
  - yyyk 5y ago
    I'm talking about filesystem level support, not block level support. FDE is block level and of course will work on any supported filesystem including btrfs. What btrfs doesn't do is support encryption inside the filesystem a la fscrypt - where we can encrypt specific directories - or ZFS encryption, where we can encrypt specific filesystems inside a pool. If I understand btrfs right, supporting encryption/verification on subvolume or directory levels would allow splitting the system so only part of it is encrypted/verified (so we get Poettering's performance gains), while avoiding space issues between the subvolumes. Also, using only one password is easy on fscrypt style systems, though this may not suit everyone's threat model.
    - curt15 5y ago
      fscrypt support for btrfs is apparently under development; see the most recent comments at https://github.com/btrfs/btrfs-todo/issues/25 https://github.com/btrfs/btrfs-todo/issues/25

yyyk 5y ago

I think btrfs subvolumes can do this? However btrfs doesn't (yet?) support encryption.

Iolaum 5y ago
I am using BTRFS and FDE encryption right now on Fedora Silverblue for a year if not more. And like the post says, I am typing two passwords.
- yyyk 5y ago
  I'm talking about filesystem level support, not block level support. FDE is block level and of course will work on any supported filesystem including btrfs. What btrfs doesn't do is support encryption inside the filesystem a la fscrypt - where we can encrypt specific directories - or ZFS encryption, where we can encrypt specific filesystems inside a pool. If I understand btrfs right, supporting encryption/verification on subvolume or directory levels would allow splitting the system so only part of it is encrypted/verified (so we get Poettering's performance gains), while avoiding space issues between the subvolumes. Also, using only one password is easy on fscrypt style systems, though this may not suit everyone's threat model.
  - curt15 5y ago
    fscrypt support for btrfs is apparently under development; see the most recent comments at https://github.com/btrfs/btrfs-todo/issues/25 https://github.com/btrfs/btrfs-todo/issues/25