Am 29.10.2016 um 18:34 schrieb Stefan Sperling <s...@stsp.name>: > On Sat, Oct 29, 2016 at 06:08:37PM +0200, Jonathan Schleifer wrote: >> Hm, my main problem seems to be that whenever I decrypt something from the >> disk, all other 23 cores seem to get stalled. >> >> So, would you recommend doing the following then: >> >> * Have a partition for the main system on a softraid crypto >> * Have an unencrypted partition for the LDOMs >> * Do softraid crypto in every LDOM > > I don't care about encrypting the host. It has no secrets. > Some of my guests boot from softraid crypto disks (see 'man boot_sparc64').
Yeah, that's what I'm doing on the host. My main reason for encrypting the host was that this does not allow leaking something (and giving some authentication, so only the bootloader could be changed - I was actually considering writing some FORTH to check it before loading it). > On the host (single 3.5" SAS disk which came with the system, no softraid): > > # dd if=/dev/rsd0c of=/dev/null bs=10m count=50 > 50+0 records in > 50+0 records out > 524288000 bytes transferred in 8.658 secs (60551625 bytes/sec) > # dd if=/dev/rsd0c of=/dev/null bs=10m count=500 > 500+0 records in > 500+0 records out > 5242880000 bytes transferred in 83.572 secs (62734555 bytes/sec) > # sysctl hw.ncpu > hw.ncpu=2 > > In a guest which uses softraid crypto as its root disk: > > # dd if=/dev/rsd0c of=/dev/null bs=10m count=50 > 50+0 records in > 50+0 records out > 524288000 bytes transferred in 11.481 secs (45663843 bytes/sec) > # dd if=/dev/rsd0c of=/dev/null bs=10m count=500 > 500+0 records in > 500+0 records out > 5242880000 bytes transferred in 128.997 secs (40643390 bytes/sec) > # sysctl hw.ncpu > hw.ncpu=2 Oh, wow, these are *much* better than what I get. Which CPU do you have? I have 6x 1 GHz (meaning 24 threads). Are you running 6.0? Thank you for these numbers, they make me much more hopeful about this machine. -- Jonathan
