On 07/12/17 21:37, Frank Steinmetzger wrote:
> Ooooh, I just came up with another good reason for raidz over mirror:
> I don't encrypt my drives because it doesn't hold sensitive stuff. (AFAIK
> native ZFS encryption is available in Oracle ZFS, so it might eventually
> come to the Linux world).
> 
> So in case I ever need to send in a drive for repair/replacement, noone can
> read from it (or only in tiny bits'n'pieces from a hexdump), because each
> disk contains a mix of data and parity blocks.
> 
> I think I'm finally sold. :)
> And with that, good night.

So you've never heard of LUKS?

GPT
LUKS
MD-RAID
Filesystem

Simple stack so if you ever have to pull a disk, just delete the LUKS
key from it and everything from that disk is now random garbage.

(Oh - and md raid-5/6 also mix data and parity, so the same holds true
there.)

Cheers,
Wol

Reply via email to