best solution for encrypting a mountpoint?

Adam Vande More amvandemore at gmail.com
Sun Aug 31 16:48:58 UTC 2014


On Sun, Aug 31, 2014 at 11:11 AM, Julian H. Stacey <jhs at berklix.com> wrote:
>
> FreeBSD supports 2 encrypting file systems,


This isn't technically correct on a couple levels.  First, gbde and geli
encrypt block devices.  FS's may live on such a block device and then be
encrypted, but then again so could swap.  FreeBSD also supports
http://wiki.freebsd.org/PEFS through the ports system and this is actually
an encrypted filesystem.

Additionally I prefer geli over gbde since it supports a wider variety of
feature and is perhaps more secure.  See the corresponding handbook and man
pages for details.

-- 
Adam


More information about the freebsd-questions mailing list