using gmirror and zfs mirror on the same box -- thoughts?

Shamim Shahriar shamim.shahriar at gmail.com
Thu Aug 17 22:48:50 UTC 2017


Good evening all, hope everyone is well.

I have a strange requirement for a particular system that will sit at a 
remote location. I intend to use mirror, but at the same time encrypt 
the system. Boot time encryption is not an option -- I need the system 
to boot up normally (with network and ssh running, so I can do the rest 
remotely) and do not wish to risk the normal bootup due to some issues 
with either geli or other matters (fsck after a power out comes to 
mind). I would like to have the OS part mirrored as well the data part. 
As for the data part -- I definitely wish to use zfs with encryption. 
Encrypting OS is not necessary (but if can be done safely, ideas are 
welcome)

Now, I can use multiple zpool, but then all of them will try to be 
active/functional when the machine boots. If I intend to encrypt the 
data pool (geli), then it needs to wait until the encryption part is 
taken care of.

So, I am thinking (probably in a very wrong way, corrections welcome), 
if I get the OS part gmirror-ed, then that comes up with the OS, I have 
network and ssh to get into the system, and then manually run the 
encryption and zfs part.

The system has 8GB RAM, which I am assuming should be good enough for 
geli, gmirror and zfs parts.

If anyone has any better suggestion/scenerio to share, that is greatly 
welcome. If you think this might actually be disfunctional, please share 
your thoughts on that (preferably with explanation as to why this is a 
bad idea). if you have any suggestion that you think is a much better 
option, please do feel free to share.

Best regards



More information about the freebsd-questions mailing list