Date: Sun, 09 Mar 2014 20:19:06 +0000 From: Matthew Seaman <matthew@FreeBSD.org> To: freebsd-questions@freebsd.org Subject: Re: Stupid question: Full-disk encryption on ZFS Message-ID: <531CCCBA.3070000@FreeBSD.org> In-Reply-To: <alpine.BSF.2.00.1403091532150.62528@helix.wtfayla.net> References: <alpine.BSF.2.00.1403091532150.62528@helix.wtfayla.net>
next in thread | previous in thread | raw e-mail | index | archive | help
This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --8XbElXrD6dtAwtJkRon3LVBBDUvklqAOu Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable On 09/03/2014 19:41, freebsd@fongaboo.com wrote: > Just want to clarify... Does ZFS provide a mechanism itself for > full-disk encryption. Or is it still a matter of running another layer > of software to manifest this, such as GELI? >=20 > How does the ZFS portion of the FreeBSD 10 installer do things when you= > check off the encryption option? AFAIK ZFS native encryption was being developed within Sun before they were taken over by Oracle, but never did get released into OpenSolaris. Consequently native ZFS encryption is not available in the OpenZFS code in FreeBSD, Illumos or any of the other supported platforms. Disk encryption under FreeBSD relies on geli. That's what the installer implements. (Presumably you could use gbde instead, but everyone seems to be preferring geli nowadays) Cheers, Matthew --=20 Dr Matthew J Seaman MA, D.Phil. PGP: http://www.infracaninophile.co.uk/pgpkey --8XbElXrD6dtAwtJkRon3LVBBDUvklqAOu Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.20 (Darwin) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQJ8BAEBCgBmBQJTHMy6XxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXQ2NTNBNjhCOTEzQTRFNkNGM0UxRTEzMjZC QjIzQUY1MThFMUE0MDEzAAoJELsjr1GOGkATwFwP/0EYWhOcpVNVxPzJ3vKws47K jZBHhIMqDPqv7PX5q48YrEW+hJIjTeuCDIt/y8b8wmlTO/jNX4K4XzNZ86ITcHx1 SSkwJT7eLPwgHpgeIsuus3cBp2DHMTbmLjqUatdDKGZRiQUTuHhel8HzyS/clM/U lrWsTqGgJMWpMmM9hZZnncWNN0/3wGRWGuUzoOvFwsVFgOb6nnIbQFrjrp77iGVn nFa8++F0vtM1ZqNGMkt+VdGIp4BAax+L4qhrrBOuHB8jfJUD6XhJdM22RDWdeaJI GNniB1gws52cE1bUCqxlsCAfWA7On4Ote5WVISz1Lbq3nRUi7yVVXUmJIP/NTBrV sL1bxuuZ35g3mpUp0z7PeUPlcWMcLL0dpKsBfco2ZGljt6NANmPwsCVDyO57YNNg W+gnVQ29hwUz6bJNk4zvd9iGjtb+pLbU4JQ/x/S1YkFSwAjL83RjWvNXlK36yEj6 ezqeNo9S1E0ycNMRcBdgQO+Hr/FZ74pwAD1YnAnPfii8rqVu9GA40w9g1ZusWfW4 xP7u5cNSSiTRykA1Z/uZA5wlmbkqaUOHV0bv1LJeIxC80Nhx/ZeMOfsRltI0nhqE g6iLudOrsM6VfQTo4zJhR1Z15Bc7e5VfeULJdQUrsjdn/GT+tcpr8o2hhM9Fzvae hCcUDXOYQuGEErYHPoqt =JF4G -----END PGP SIGNATURE----- --8XbElXrD6dtAwtJkRon3LVBBDUvklqAOu--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?531CCCBA.3070000>