Re: geli + journal

2011-11-16 Thread Ivan Voras
On 15/11/2011 19:33, Коньков Евгений wrote:
 Здравствуйте, RW.
 
 Вы писали 15 ноября 2011 г., 1:50:54:
 
 R On Tue, 15 Nov 2011 00:06:00 +0200
 R Коньков Евгений wrote:
 
 catch idea, but some question:
 in this situation .eli.journal  journal device will not be encrypted?
  can you describe how data flow will be?
 
 R The journal is encrypted unless you choose to put it on a separate
 R non-encrypted device. 
 
 R In principle the data is encrypted into the journal, decrypted from
 R the journal and then re-encrypted into its final location. In practice
 R I've found that in file copying between disks, writing uses about
 R twice as much cpu time as reading, so maybe the decryption  from the
 R journal can be avoided by caching.
 
 Are there differences between .eli.journal or .journal.eli?

Yes, UFS gjournal support will only work with .eli.journal.



signature.asc
Description: OpenPGP digital signature


Re[2]: geli + journal

2011-11-15 Thread Коньков Евгений
Здравствуйте, RW.

Вы писали 15 ноября 2011 г., 1:50:54:

R On Tue, 15 Nov 2011 00:06:00 +0200
R Коньков Евгений wrote:

catch idea, but some question:
 in this situation .eli.journal  journal device will not be encrypted?
  can you describe how data flow will be?

R The journal is encrypted unless you choose to put it on a separate
R non-encrypted device. 

R In principle the data is encrypted into the journal, decrypted from
R the journal and then re-encrypted into its final location. In practice
R I've found that in file copying between disks, writing uses about
R twice as much cpu time as reading, so maybe the decryption  from the
R journal can be avoided by caching.

Are there differences between .eli.journal or .journal.eli?

-- 
С уважением,
 Коньков  mailto:kes-...@yandex.ru

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: geli + journal

2011-11-15 Thread RW
On Tue, 15 Nov 2011 20:33:21 +0200
Коньков Евгений wrote:

 Are there differences between .eli.journal or .journal.eli?

AFAIK it only works one way round 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


geli + journal

2011-11-14 Thread Коньков Евгений
hi

Is it possible to create journaled FS which is crypted with geli?

I can create crypted or journaled FS, but it is complicated to me to
create both in time, can you help me clue?

-- 
С уважением,
 Коньков  mailto:kes-...@yandex.ru

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: geli + journal

2011-11-14 Thread RW
On Mon, 14 Nov 2011 21:57:28 +0200
Коньков Евгений wrote:

 hi
 
 Is it possible to create journaled FS which is crypted with geli?
 
 I can create crypted or journaled FS, but it is complicated to me to
 create both in time, can you help me clue?

You have to encrypt first and then create the gjournal device on
the .eli device so you end-up with device that ends in .eli.journal.

However, FreeBSD 9 supports journaled soft-updates which is much faster
than full data journalling, and it can be enabled on existing
filesystems. 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re[2]: geli + journal

2011-11-14 Thread Коньков Евгений

R On Mon, 14 Nov 2011 21:57:28 +0200
R Коньков Евгений wrote:

 hi
 
 Is it possible to create journaled FS which is crypted with geli?
 
 I can create crypted or journaled FS, but it is complicated to me to
 create both in time, can you help me clue?

R You have to encrypt first and then create the gjournal device on
R the .eli device so you end-up with device that ends in .eli.journal.

R However, FreeBSD 9 supports journaled soft-updates which is much faster
R than full data journalling, and it can be enabled on existing
R filesystems. 

I catch idea, but some question:
in this situation .eli.journal  journal device will not be encrypted?
 can you describe how data flow will be?


-- 
С уважением,
 Коньков  mailto:kes-...@yandex.ru

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: geli + journal

2011-11-14 Thread RW
On Tue, 15 Nov 2011 00:06:00 +0200
Коньков Евгений wrote:

catch idea, but some question:
 in this situation .eli.journal  journal device will not be encrypted?
  can you describe how data flow will be?

The journal is encrypted unless you choose to put it on a separate
non-encrypted device. 

In principle the data is encrypted into the journal, decrypted from
the journal and then re-encrypted into its final location. In practice
I've found that in file copying between disks, writing uses about
twice as much cpu time as reading, so maybe the decryption  from the
journal can be avoided by caching.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org