Date: Mon, 14 Jan 2008 01:14:12 +0000 From: RW <fbsd06@mlists.homeunix.com> To: freebsd-geom@freebsd.org Subject: Re: how-to: encryption + journaling (geli + gjournal) Message-ID: <20080114011412.33a91fac@gumby.homeunix.com.> In-Reply-To: <478A93BF.4070404@vwsoft.com> References: <478A93BF.4070404@vwsoft.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Sun, 13 Jan 2008 23:42:07 +0100 Volker <volker@vwsoft.com> wrote: > For the archives (as I haven't found a nice how-to on this topic): > > A short how-to to get geli + gjournal running smoothly (the lazy way, > depending mostly on OS infrastructure, no script hacking needed). > > - set up your geli provider: > geli load > geli init /dev/ad0s1d # check geli(8) for this > geli attach /dev/ad0s1d > dd if=/dev/random of=/dev/ad0s1d.eli bs=1m # (use higher values bs=... > for faster operation) It would probably be faster to fill /dev/ad0s1d from /dev/random before doing the geli init - there's no point in encrypting the random numbers. It would also ensure that the whole of ad0s1d is pre-filled, and not just the part accessible as ad0s1d.eli.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20080114011412.33a91fac>