From owner-freebsd-questions@FreeBSD.ORG  Sun Mar  9 19:50:57 2014
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115])
 (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by hub.freebsd.org (Postfix) with ESMTPS id B5525506;
 Sun,  9 Mar 2014 19:50:57 +0000 (UTC)
Received: from h3lix.wtfayla.net (helix.wtfayla.net [24.105.170.68])
 (using TLSv1 with cipher ADH-CAMELLIA256-SHA (256/256 bits))
 (No client certificate requested)
 by mx1.freebsd.org (Postfix) with ESMTPS id E2437E34;
 Sun,  9 Mar 2014 19:50:54 +0000 (UTC)
Received: from localhost (localhost [127.0.0.1])
 by h3lix.wtfayla.net (Postfix) with ESMTP id B0C9D84BAF;
 Sun,  9 Mar 2014 15:41:03 -0400 (EDT)
Received: from h3lix.wtfayla.net ([127.0.0.1])
 by localhost (h3lix.wtfayla.net [127.0.0.1]) (maiad, port 10024) with ESMTP
 id 74185-05; Sun,  9 Mar 2014 15:41:03 -0400 (EDT)
Received: from helix.wtfayla.net (helix.wtfayla.net [24.105.170.68])
 (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by h3lix.wtfayla.net (Postfix) with ESMTPS id 544B284BAE;
 Sun,  9 Mar 2014 15:41:03 -0400 (EDT)
Date: Sun, 9 Mar 2014 15:41:03 -0400 (EDT)
From: freebsd@fongaboo.com
X-X-Sender: fongaboo@helix.wtfayla.net
To: Eitan Adler <eadler@freebsd.org>, questions@freebsd.org
Subject: Stupid question: Full-disk encryption on ZFS
Message-ID: <alpine.BSF.2.00.1403091532150.62528@helix.wtfayla.net>
User-Agent: Alpine 2.00 (BSF 1167 2008-08-23)
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; format=flowed; charset=US-ASCII
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-questions>, 
 <mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions/>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
 <mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sun, 09 Mar 2014 19:50:57 -0000


Just want to clarify... Does ZFS provide a mechanism itself for full-disk 
encryption. Or is it still a matter of running another layer of software 
to manifest this, such as GELI?

How does the ZFS portion of the FreeBSD 10 installer do things when you 
check off the encryption option?


Thanks,

Jonathan


  -------------------------------------------------------------------------
  shot through the heart              ooh baby do you know what that's worth
  and you're to blame                         ooh heaven is a place on earth
  darling you give love                  they say in heaven love comes first
  a bad name                              we'll make heaven a place on earth
  ORBITAL                                                     "Halcyon Live"