Re: swap on encrypted softraid, performance penalty?

2015-05-21 Thread Ján Kušniar
I think you will find that hibernate doesn’t work with this setup if you try it. I found this write-up explaining a little better: http://undeadly.org/cgi?action=articlesid=20131112031806 Seems double-encrypted swap or dual swap partitions is the way to go if you want hibernate to

Re: swap on encrypted softraid, performance penalty?

2015-05-21 Thread Fredrik Alm
On 21 May 2015, at 08:48, Ján Kušniar jkusn...@gmail.com wrote: I think you will find that hibernate doesn’t work with this setup if you try it. I found this write-up explaining a little better: http://undeadly.org/cgi?action=articlesid=20131112031806 Seems double-encrypted swap or

Re: swap on encrypted softraid, performance penalty?

2015-05-20 Thread Fredrik Alm
I think you will find that hibernate doesn’t work with this setup if you try it. I found this write-up explaining a little better: http://undeadly.org/cgi?action=articlesid=20131112031806 Seems double-encrypted swap or dual swap partitions is the way to go if you want hibernate to work and

Re: swap on encrypted softraid, performance penalty?

2015-05-19 Thread Jonathan Thornburg
In message http://marc.info/?l=openbsd-miscm=143181492518064w=1, Fredrik Alm fred () fredrikalm ! com asked about how to handle the swap partition when using whole-disk softraid crypto: I've seen a few 'whole disk encryption' tutorials which puts the swap outside of the partition used for the

Re: swap on encrypted softraid, performance penalty?

2015-05-19 Thread Ted Unangst
dan mclaughlin wrote: in the end i found it easier to just leave it all in the softraid for other reasons in addition to that issue. as to swap encryption, i disabled it. no need to encrypt twice. to the contrary, uvm swap encrypt does a better job of expiring keys and making old data

Re: swap on encrypted softraid, performance penalty?

2015-05-17 Thread dan mclaughlin
On Sun, 17 May 2015 00:20:52 +0200 Fredrik Alm f...@fredrikalm.com wrote: I’ve seen a few “whole disk encryption” tutorials which puts the swap outside of the partition used for the softraid encryption, since openbsd already encrypts the swap partition anyway. I assume that by putting

Re: swap on encrypted softraid, performance penalty?

2015-05-17 Thread dan mclaughlin
On Sun, 17 May 2015 04:32:38 +0200 Fredrik Alm f...@fredrikalm.com wrote: On 17 May 2015, at 02:19, dan mclaughlin thev...@openmailbox.org wrote: On Sun, 17 May 2015 00:20:52 +0200 Fredrik Alm f...@fredrikalm.com wrote: I’ve seen a few “whole disk encryption” tutorials which puts

Re: swap on encrypted softraid, performance penalty?

2015-05-17 Thread Stefan Sperling
On Sun, May 17, 2015 at 12:20:52AM +0200, Fredrik Alm wrote: I’ve seen a few “whole disk encryption” tutorials which puts the swap outside of the partition used for the softraid encryption, since openbsd already encrypts the swap partition anyway. I assume that by putting the swap inside

Re: swap on encrypted softraid, performance penalty?

2015-05-17 Thread Fredrik Alm
Yep, since my last mail I set it up on one big encrypted softraid, including the swap and turned off swap encryption and created a key disk on usb instead of a password. Works a lot better now and ZZZ works as it should (any ZZZ issues left are most likely related to not yet supported

Re: swap on encrypted softraid, performance penalty?

2015-05-16 Thread Fredrik Alm
On 17 May 2015, at 02:19, dan mclaughlin thev...@openmailbox.org wrote: On Sun, 17 May 2015 00:20:52 +0200 Fredrik Alm f...@fredrikalm.com wrote: I’ve seen a few “whole disk encryption” tutorials which puts the swap outside of the partition used for the softraid encryption, since openbsd