Re: [CentOS] Utility to zero unused blocks on disk

2016-02-08 Thread John R Pierce
On 2/8/2016 9:54 PM, Chris Murphy wrote: Secure erase is really the only thing to use on SSDs. Writing a pile of zeros just increases wear (minor negative) but also doesn't actually set the cells to the state required to accept a new write, so you've just added a lot more work for the SSD's garba

Re: [CentOS] Utility to zero unused blocks on disk

2016-02-08 Thread Chris Murphy
On Mon, Feb 8, 2016 at 10:54 PM, Chris Murphy wrote: > Secure erase is really the only thing to use on SSDs. Oops. It's probably a fairly close approximation to just mkfs.btrfs -f (or xfs) the entire block device for the SSD. If the kernel sees it as non-rotational, it'll issue a whole device tri

Re: [CentOS] Utility to zero unused blocks on disk

2016-02-08 Thread Chris Murphy
On Mon, Feb 8, 2016 at 3:18 PM, wrote: > Chris Murphy wrote: >> DBAN is obsolete. NIST 800-88 for some time now says to use secure erase >> or enhanced security erase or crypto erase if supported. >> >> Other options do not erase data in remapped sectors. > > dban doesn't? What F/OSS does "secure

Re: [CentOS] Utility to zero unused blocks on disk

2016-02-08 Thread Digimer
On 09/02/16 12:24 AM, g wrote: > > > On 02/08/16 23:10, Digimer wrote: >> On 09/02/16 12:08 AM, g wrote: >>> >>> >>> On 02/08/16 15:34, Wes James wrote: Is there a utility to zero unused blocks on a disk? CentOS 6.7/Ext4 I saw zerofree, but I’m not sure it would work on E

Re: [CentOS] Utility to zero unused blocks on disk

2016-02-08 Thread g
On 02/08/16 23:10, Digimer wrote: > On 09/02/16 12:08 AM, g wrote: >> >> >> On 02/08/16 15:34, Wes James wrote: >>> Is there a utility to zero unused blocks on a disk? >>> >>> CentOS 6.7/Ext4 >>> >>> I saw zerofree, but I’m not sure it would work on Ext4 or even work on >>> this version of CentOS

Re: [CentOS] Utility to zero unused blocks on disk

2016-02-08 Thread Chris Adams
Once upon a time, Robert Nichols said: > On 02/08/2016 07:04 PM, Chris Adams wrote: > >For that purpose, use something that can TRIM a VM image, like > >virt-sparsify. > > That's doing the same thing. > > virt-sparsify works by mounting the filesystem, filling it to capacity > with zeros, then p

Re: [CentOS] Utility to zero unused blocks on disk

2016-02-08 Thread Digimer
On 09/02/16 12:08 AM, g wrote: > > > On 02/08/16 15:34, Wes James wrote: >> Is there a utility to zero unused blocks on a disk? >> >> CentOS 6.7/Ext4 >> >> I saw zerofree, but I’m not sure it would work on Ext4 or even work on >> this version of CentOS. >> >> thanks, >> > . > a comment on replies

Re: [CentOS] Utility to zero unused blocks on disk

2016-02-08 Thread g
On 02/08/16 15:34, Wes James wrote: > Is there a utility to zero unused blocks on a disk? > > CentOS 6.7/Ext4 > > I saw zerofree, but I’m not sure it would work on Ext4 or even work on > this version of CentOS. > > thanks, > . a comment on replies to your post. i find it interesting that "Subjec

Re: [CentOS] Utility to zero unused blocks on disk

2016-02-08 Thread Robert Nichols
On 02/08/2016 07:04 PM, Chris Adams wrote: Once upon a time, Greg Bailey said: Wes didn't say the reason he wanted to zero unused blocks, but I always do this in kickstart scripts when constructing VM images as the image size is considerably reduced by doing this... For that purpose, use some

Re: [CentOS] Utility to zero unused blocks on disk

2016-02-08 Thread Chris Adams
Once upon a time, Greg Bailey said: > Wes didn't say the reason he wanted to zero unused blocks, but I > always do this in kickstart scripts when constructing VM images as > the image size is considerably reduced by doing this... For that purpose, use something that can TRIM a VM image, like virt

Re: [CentOS] Utility to zero unused blocks on disk

2016-02-08 Thread SternData
On 02/08/2016 06:38 PM, Always Learning wrote: > > On Mon, 2016-02-08 at 14:22 -0800, John R Pierce wrote: > >> the only truly safe way to destroy data on magnetic media is to grind >> the media up into filings or melt it down in a furnace. > > I unscrew the casing, extract the disk platter(s),

Re: [CentOS] Utility to zero unused blocks on disk

2016-02-08 Thread Always Learning
On Mon, 2016-02-08 at 14:22 -0800, John R Pierce wrote: > the only truly safe way to destroy data on magnetic media is to grind > the media up into filings or melt it down in a furnace. I unscrew the casing, extract the disk platter(s), slide a very strong magnet over both sides of the platter

Re: [CentOS] Utility to zero unused blocks on disk

2016-02-08 Thread Valeri Galtsev
On Mon, February 8, 2016 5:45 pm, John R Pierce wrote: > On 2/8/2016 3:33 PM, Valeri Galtsev wrote: >> DRAM had more persistent imprint of information that was sitting in it, >> which appears much harder to destroy than information on hard drive. > > well aware of that. 30 years ago a friend and

Re: [CentOS] Utility to zero unused blocks on disk

2016-02-08 Thread John R Pierce
On 2/8/2016 3:33 PM, Valeri Galtsev wrote: DRAM had more persistent imprint of information that was sitting in it, which appears much harder to destroy than information on hard drive. well aware of that. 30 years ago a friend and I built a specialized video card for a consulting project

Re: [CentOS] Utility to zero unused blocks on disk

2016-02-08 Thread Valeri Galtsev
On Mon, February 8, 2016 4:22 pm, John R Pierce wrote: > On 2/8/2016 2:14 PM, Chris Murphy wrote: >> DBAN is obsolete. NIST 800-88 for some time now says to use secure erase >> or >> enhanced security erase or crypto erase if supported. >> >> Other options do not erase data in remapped sectors. >

Re: [CentOS] Utility to zero unused blocks on disk

2016-02-08 Thread Valeri Galtsev
On Mon, February 8, 2016 3:37 pm, Digimer wrote: > Personally, I just do 'dd if=/dev/zero of=/path/to/zero.img bs=1M; rm -f > /path/to/zero.img'. It's inelegant, for sure, but it works (note to run > it as a normal user or else be careful of how your system reacts to > running out of disk space fo

Re: [CentOS] Utility to zero unused blocks on disk

2016-02-08 Thread John R Pierce
On 2/8/2016 2:18 PM, m.r...@5-cent.us wrote: dban doesn't? What F/OSS does "secure erase"? And does it do what dban's DoD 5220.22-M does? do you even know what NISP Operating Manual 5220.22-M is? One thing it does NOT have is ANY specifications of methods of data erasure (it mentions data e

Re: [CentOS] Utility to zero unused blocks on disk

2016-02-08 Thread m . roth
John R Pierce wrote: > On 2/8/2016 2:14 PM, Chris Murphy wrote: >> DBAN is obsolete. NIST 800-88 for some time now says to use secure erase >> or >> enhanced security erase or crypto erase if supported. >> >> Other options do not erase data in remapped sectors. > > the only truly safe way to destro

Re: [CentOS] Utility to zero unused blocks on disk

2016-02-08 Thread John R Pierce
On 2/8/2016 2:14 PM, Chris Murphy wrote: DBAN is obsolete. NIST 800-88 for some time now says to use secure erase or enhanced security erase or crypto erase if supported. Other options do not erase data in remapped sectors. the only truly safe way to destroy data on magnetic media is to grind

Re: [CentOS] Utility to zero unused blocks on disk

2016-02-08 Thread m . roth
Chris Murphy wrote: > DBAN is obsolete. NIST 800-88 for some time now says to use secure erase > or enhanced security erase or crypto erase if supported. > > Other options do not erase data in remapped sectors. dban doesn't? What F/OSS does "secure erase"? And does it do what dban's DoD 5220.22-M

Re: [CentOS] Utility to zero unused blocks on disk

2016-02-08 Thread Chris Murphy
DBAN is obsolete. NIST 800-88 for some time now says to use secure erase or enhanced security erase or crypto erase if supported. Other options do not erase data in remapped sectors. Chris Murphy ___ CentOS mailing list CentOS@centos.org https://lists.c

Re: [CentOS] Utility to zero unused blocks on disk

2016-02-08 Thread Chris Murphy
hdparm supports ATA secure erase. This is SSD safe, unlike other options. It's faster than writing zeros to both HDD and SSD. Chris Murphy On Mon, Feb 8, 2016, 3:06 PM wrote: > Wes James wrote: > > Is there a utility to zero unused blocks on a disk? > > > > CentOS 6.7/Ext4 > > > > I saw zerofr

Re: [CentOS] Utility to zero unused blocks on disk

2016-02-08 Thread Greg Bailey
On 02/08/2016 03:05 PM, m.r...@5-cent.us wrote: Wes James wrote: Is there a utility to zero unused blocks on a disk? CentOS 6.7/Ext4 I saw zerofree, but I’m not sure it would work on Ext4 or even work on this version of CentOS. I don't understand the point of doing this. Wes didn't say the

Re: [CentOS] Utility to zero unused blocks on disk

2016-02-08 Thread m . roth
Wes James wrote: > Is there a utility to zero unused blocks on a disk? > > CentOS 6.7/Ext4 > > I saw zerofree, but I’m not sure it would work on Ext4 or even work on > this version of CentOS. > I don't understand the point of doing this. If you want to sanitize the disk, use dban , which surely app

Re: [CentOS] Utility to zero unused blocks on disk

2016-02-08 Thread Wes James
> On Feb 8, 2016, at 2:37 PM, Digimer wrote: > > Personally, I just do 'dd if=/dev/zero of=/path/to/zero.img bs=1M; rm -f > /path/to/zero.img'. It's inelegant, for sure, but it works (note to run > it as a normal user or else be careful of how your system reacts to > running out of disk space fo

Re: [CentOS] Utility to zero unused blocks on disk

2016-02-08 Thread Digimer
Personally, I just do 'dd if=/dev/zero of=/path/to/zero.img bs=1M; rm -f /path/to/zero.img'. It's inelegant, for sure, but it works (note to run it as a normal user or else be careful of how your system reacts to running out of disk space for a moment). fix-it-with-a-hammer-digimer On 08/02/16 04

[CentOS] Utility to zero unused blocks on disk

2016-02-08 Thread Wes James
Is there a utility to zero unused blocks on a disk? CentOS 6.7/Ext4 I saw zerofree, but I’m not sure it would work on Ext4 or even work on this version of CentOS. thanks, -wes ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman

[CentOS] Seeking Clarification CentOS 7 as Samba 4 Active Directory Domain Controller

2016-02-08 Thread Mike
I performed a Samba 4 Active Directory Domain Controller install in June of 2015 on CentOS 7. At that time I used the Samba 4.1.XX package from SerNet due to the absence of necessary heimdal packages and libraries not provided in the CentOS 7 Samba package. Since the the 4.1 series is on security f

Re: [CentOS] Squid as interception HTTPS proxy under CentOS 7

2016-02-08 Thread Eliezer Croitoru
Hey There, I think it would be better asked at squid-users list: - http://www.squid-cache.org/Support/mailing-lists.html#squid-users - squid-us...@lists.squid-cache.org Eliezer Croitoru On 04/02/2016 15:24, C. L. Martinez wrote: Hi all, I am trying to configure squid as a interception HTTPS

Re: [CentOS] Squid as interception HTTPS proxy under CentOS 7

2016-02-08 Thread C. L. Martinez
On Thu 4.Feb'16 at 20:24:58 +0200, Eero Volotinen wrote: > check out sslbump documentation: > http://wiki.squid-cache.org/Features/SslBump > > -- > Eero > I have changed my ssl-bump options to "ssl_bump server-first all" only, but nothing ... It doesn't works. Any more idea?? -- Greetings, C

Re: [CentOS] "upstream testing"??

2016-02-08 Thread John R Pierce
On 2/7/2016 1:00 PM, Bear Tooth wrote: So I put in an install disk for CentOS, and rebooted. It never came near finishing the reboot. Up popped the following: what version of centos was this? you previously mentioned 6.4, thats like 3-4 updates behind the

Re: [CentOS] "upstream testing"??

2016-02-08 Thread Chris Murphy
Which System76 model? How is the install media created? Presumably it's a USB stick, but how is it being created? The easiest and most reliable is to use dd. Livecd-tools is also reliable but has a number of options required to boot UEFi systems. LiveUSB Creator should work. Everything else is pro