On 07/12/17 21:37, Frank Steinmetzger wrote: > Ooooh, I just came up with another good reason for raidz over mirror: > I don't encrypt my drives because it doesn't hold sensitive stuff. (AFAIK > native ZFS encryption is available in Oracle ZFS, so it might eventually > come to the Linux world). > > So in case I ever need to send in a drive for repair/replacement, noone can > read from it (or only in tiny bits'n'pieces from a hexdump), because each > disk contains a mix of data and parity blocks. > > I think I'm finally sold. :) > And with that, good night.
So you've never heard of LUKS? GPT LUKS MD-RAID Filesystem Simple stack so if you ever have to pull a disk, just delete the LUKS key from it and everything from that disk is now random garbage. (Oh - and md raid-5/6 also mix data and parity, so the same holds true there.) Cheers, Wol