81–90 of 151 posts
Earlier quoted context omitted.
I've been running encrypted ZFS on 20.04 on my main workstation since it came out and it's worked great. Wrote up details here, it's a slight hack for encryption, no hack if you don't want crypto. https://linsomniac.gitlab.io/post/2020-04-09-ubuntu-2004-enc... A friend did a video based on my blog: https://www.youtube.com/watch?v=PILrUcXYwmc
Why ZFS encryption vs unencrypted ZFS atop LUKS?
Earlier quoted context omitted.
zfs on linux available as root partition since 20.04. Working quite well I might add!
It's still a big pain if you like to keep your kernel relatively up to date. I switched to btrfs; it just working is worth the few extra warts over ZFS.
https://gist.github.com/xenophonf/76fd44ae24772e457cb63d00c0...
`apt-get update && apt-get dist-upgrade -y` works as expected. I plan to switch to a similar config on my Lenovo laptop when I upgrade it to the next Ubuntu LTS release.
Earlier quoted context omitted.
I've been running encrypted ZFS on 20.04 on my main workstation since it came out and it's worked great. Wrote up details here, it's a slight hack for encryption, no hack if you don't want crypto. https://linsomniac.gitlab.io/post/2020-04-09-ubuntu-2004-enc... A friend did a video based on my blog: https://www.youtube.com/watch?v=PILrUcXYwmc
Why ZFS encryption vs unencrypted ZFS atop LUKS?
That said, I generally agree with you in that do one thing and do it well is a laudable design goal. However, I also am very excited about encrypted ZFS for one main reason: backups.
Okay two. Snapshots and backups!
ZFS is absolutely amazing to use as a home NAS that does daily (or more) snapshots and then nightly differential syncs to a second location. In the past I had to run all my own infrastructure to do this, as the data was in the clear.
Now my ZFS nerd friend and I can simply swap backup space and have "zero knowledge" of the others' files, while retaining the amazing features of ZFS snapshots+zfs send/receive.
This also tickles the "create an encrypted ZFS backups as a service" service itch for me, but then I realize I'd be creating it for all 13 potential users of the service. That said, I'm sure rsync.net will offer this functionality shortly - which would make them a viable backup target for me.
Sadly dRAID (parity Declustered RAIDz) just missed the cut-off for 2.0, but it looks like it will be in 2.1: * https://openzfs.github.io/openzfs-docs/Basic%20Concepts/dRAI... * https://www.youtube.com/watch?v=jdXOtEF6Fh0
dRAID looks really fascinating, but presentation is pretty abstract. Would it allow to add/remove drives from a pool, and allow ZFS to rebalance itself? Would be great for home use, where I have a lot of drives that I collected over the years that are not the same size. EDIT: The more I read into this, it still seems assume that all drives must be of the same size.
For me, that gives a unicorn 100% of the time (tried across several minutes), instead of showing the developer profile.
Anyone else seeing that?
Earlier quoted context omitted.
I've been running encrypted ZFS on 20.04 on my main workstation since it came out and it's worked great. Wrote up details here, it's a slight hack for encryption, no hack if you don't want crypto. https://linsomniac.gitlab.io/post/2020-04-09-ubuntu-2004-enc... A friend did a video based on my blog: https://www.youtube.com/watch?v=PILrUcXYwmc
Why ZFS encryption vs unencrypted ZFS atop LUKS?
Slightly off topic, but it seems like GitHub can't/won't display the user profile page for one of the OpenZFS developers: https://github.com/behlendorf For me, that gives a unicorn 100% of the time (tried across several minutes), instead of showing the developer profile. Anyone else seeing that?
Slightly off topic, but it seems like GitHub can't/won't display the user profile page for one of the OpenZFS developers: https://github.com/behlendorf For me, that gives a unicorn 100% of the time (tried across several minutes), instead of showing the developer profile. Anyone else seeing that?
Earlier quoted context omitted.
Why add another separate layer?
Because traditionally, programs do one thing well. And in my experience LUKS works great.