From owner-freebsd-geom@FreeBSD.ORG  Mon Jan 14 01:37:00 2008
Return-Path: <owner-freebsd-geom@FreeBSD.ORG>
Delivered-To: freebsd-geom@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id CFB7716A418
	for <freebsd-geom@freebsd.org>; Mon, 14 Jan 2008 01:37:00 +0000 (UTC)
	(envelope-from fbsd06+SE=0ff4ba91@mlists.homeunix.com)
Received: from turtle-out.mxes.net (turtle-out.mxes.net [216.86.168.191])
	by mx1.freebsd.org (Postfix) with ESMTP id AAEAE13C44B
	for <freebsd-geom@freebsd.org>; Mon, 14 Jan 2008 01:37:00 +0000 (UTC)
	(envelope-from fbsd06+SE=0ff4ba91@mlists.homeunix.com)
Received: from mxout-04.mxes.net (mxout-04.mxes.net [216.86.168.179])
	by turtle-in.mxes.net (Postfix) with ESMTP id 41CB7163F5B
	for <freebsd-geom@freebsd.org>; Sun, 13 Jan 2008 20:14:25 -0500 (EST)
Received: from gumby.homeunix.com. (unknown [87.81.140.128])
	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
	(No client certificate requested)
	by smtp.mxes.net (Postfix) with ESMTP id 9ED95D04FF
	for <freebsd-geom@freebsd.org>; Sun, 13 Jan 2008 20:14:20 -0500 (EST)
Date: Mon, 14 Jan 2008 01:14:12 +0000
From: RW <fbsd06@mlists.homeunix.com>
To: freebsd-geom@freebsd.org
Message-ID: <20080114011412.33a91fac@gumby.homeunix.com.>
In-Reply-To: <478A93BF.4070404@vwsoft.com>
References: <478A93BF.4070404@vwsoft.com>
X-Mailer: Claws Mail 3.0.2 (GTK+ 2.12.5; i386-portbld-freebsd7.0)
Mime-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Subject: Re: how-to: encryption + journaling (geli + gjournal)
X-BeenThere: freebsd-geom@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: GEOM-specific discussions and implementations
	<freebsd-geom.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-geom>,
	<mailto:freebsd-geom-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-geom>
List-Post: <mailto:freebsd-geom@freebsd.org>
List-Help: <mailto:freebsd-geom-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-geom>,
	<mailto:freebsd-geom-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 14 Jan 2008 01:37:00 -0000

On Sun, 13 Jan 2008 23:42:07 +0100
Volker <volker@vwsoft.com> wrote:

> For the archives (as I haven't found a nice how-to on this topic):
> 
> A short how-to to get geli + gjournal running smoothly (the lazy way,
> depending mostly on OS infrastructure, no script hacking needed).
> 
> - set up your geli provider:
> geli load
> geli init /dev/ad0s1d # check geli(8) for this
> geli attach /dev/ad0s1d
> dd if=/dev/random of=/dev/ad0s1d.eli bs=1m # (use higher values bs=...
> for faster operation)

It would probably be faster to fill /dev/ad0s1d from /dev/random before
doing the geli init - there's no point in encrypting the random numbers.
It would also ensure that the whole of ad0s1d is pre-filled, and not
just the part accessible as ad0s1d.eli.