Jeff Victor wrote:
And if that file system is multiple terrabytes would you be okay with
there being a read and write lock while this runs ?
I am only guessing, but when encryption is "important enough" the
answer is "yes." But the next question is then "is this situation
common enough to justify the effort."
If it is "important enough" wouldn't you want the data to start out
encrypted ?
:-)
Ok, so that obviously neglects migration of existing data for "legacy"
apps so that may not be a fair question.
On the other hand, if you are migrating your data from a plain
datastore to an encrypted datastore, how much do you trust the plain
datastore in the first place? If you are interested in migration to an
encrypted datastore you probably don't trust the plain datastore all
that much. In which case you probably should do some
cleansing/verification on the data during the migration, so your
original response is probably appropriate.
--joe
_______________________________________________
zfs-discuss mailing list
zfs-discuss@opensolaris.org
http://mail.opensolaris.org/mailman/listinfo/zfs-discuss
