Re: geli - is it better to partition then encrypt, or vice versa ?

2021-04-18 Thread Pete French
On 17/04/2021 21:18, Karl Denninger wrote: This also makes "geli groups" trivial in /etc/rc.conf for attachment at boot time irrespective of whether they physically come up in the same place (again typically yes, but in the case of a failure or you plug it into a different adapter.)

Re: geli - is it better to partition then encrypt, or vice versa ?

2021-04-18 Thread Pete French
On 17/04/2021 21:06, Alan Somers wrote: The answer depends on why you want to partition in the first place. What do you intend to store on those disks besides ZFS?  If the answer is nothing, then don't bother partitioning; just write ZFS over GELI over the whole disk. Well, actually thats

geli - is it better to partition then encrypt, or vice versa ?

2021-04-17 Thread Freddie Cash
On Sat., Apr. 17, 2021, 1:04 p.m. Clayton Milos, wrote: > I encrypt the whole disk and then add it to the pool. No need to partition > it. If I remember correctly zfs prefers unpartitioned disks > ZFS on Solaris used to require the use of entire, raw disks as the cache was disabled if the disk

Re: geli - is it better to partition then encrypt, or vice versa ?

2021-04-17 Thread Karl Denninger
On 4/17/2021 15:52, Pete French wrote: So, am building a zpool on some encrypted discs - and what I have done is to partition the disc with GPT add a single big partition, and encrypt that. So the pool is on nda1p1.eli. But I could, of course, encrypt the disc first, and then partition the en

Re: geli - is it better to partition then encrypt, or vice versa ?

2021-04-17 Thread Alan Somers
On Sat, Apr 17, 2021 at 1:53 PM Pete French wrote: > So, am building a zpool on some encrypted discs - and what I have done > is to partition the disc with GPT add a single big partition, and > encrypt that. So the pool is on nda1p1.eli. > > But I could, of course, encrypt the disc first, and the

Re: geli - is it better to partition then encrypt, or vice versa ?

2021-04-17 Thread Clayton Milos
I encrypt the whole disk and then add it to the pool. No need to partition it. If I remember correctly zfs prefers unpartitioned disks. \\Clay > On 17 Apr 2021, at 21:54, Pete French wrote: > > So, am building a zpool on some encrypted discs - and what I have done is to > partition the disc

geli - is it better to partition then encrypt, or vice versa ?

2021-04-17 Thread Pete French
So, am building a zpool on some encrypted discs - and what I have done is to partition the disc with GPT add a single big partition, and encrypt that. So the pool is on nda1p1.eli. But I could, of course, encrypt the disc first, and then partition the encrypted disc, or indded just put the zpo