Re: zfs native encryption best practices on RELENG13

2021-04-23 Thread Xin Li via freebsd-stable
On 4/23/21 13:53, mike tancsa wrote: > Starting to play around with RELENG_13 and wanted explore ZFS' built in > encryption.  Is there a best practices doc on how to do full disk > encryption anywhere thats not GELI based  ?  There are lots for > GELI, > but nothing I could find for native

Is stable/13 going to start getting snapshot builds?

2021-04-23 Thread Mark Millard via freebsd-stable
Is stable/13 going to start getting snapshot builds? (As stands, main , stable/12 , and stable/11 are getting them.) === Mark Millard marklmi at yahoo.com ( dsl-only.net went away in early 2018-Mar) ___ freebsd-stable@freebsd.org mailing list

Re: Is stable/13 going to start getting snapshot builds?

2021-04-23 Thread Glen Barber
On Fri, Apr 23, 2021 at 12:02:50PM -0700, Mark Millard via freebsd-stable wrote: > Is stable/13 going to start getting snapshot builds? > > (As stands, main , stable/12 , and stable/11 are getting them.) > Yes. I plan to have them available next week. I fell behind on upgrading the build

zfs native encryption best practices on RELENG13

2021-04-23 Thread mike tancsa
Starting to play around with RELENG_13 and wanted explore ZFS' built in encryption.  Is there a best practices doc on how to do full disk encryption anywhere thats not GELI based  ?  There are lots for GELI, but nothing I could find for native OpenZFS encryption on FreeBSD i.e box gets rebooted,

Re: zfs native encryption best practices on RELENG13

2021-04-23 Thread Peter Libassi
> 23 apr. 2021 kl. 23:23 skrev Xin Li via freebsd-stable > : > > On 4/23/21 13:53, mike tancsa wrote: >> Starting to play around with RELENG_13 and wanted explore ZFS' built in >> encryption. Is there a best practices doc on how to do full disk >> encryption anywhere thats not GELI based ?

https://artifact.ci.freebsd.org/snapshot/stable-13/?C=M=D messed up dates and HASHID-only use make things extremely hard to find "in time order"

2021-04-23 Thread Mark Millard via freebsd-stable
Using an example to illustrate problems finding artifacts, the problems not being limited to the example's specifics. I have historically used https://artifact.ci.freebsd.org/snapshot/ to do build-less approximate bisecting (and other things). Such use is very messed up since the git-related URL

etcupdate -p vs. root on zfs (and bectl use and such): no /usr/src/etc/master.passwd (for example)

2021-04-23 Thread Mark Millard via freebsd-stable
FYI: The default bsdinstall result for auto ZFS that I tried has a separate zroot/usr/src dataset, which zfs mounts at /usr/src . UPDATING and such places indicate sequences like: (think etcupdate where it lists mergemaster and ignore -F and -Fi) make buildworld make