Re: Making gmirror metadata cooperate with gpt metadata

2021-02-09 Thread RW via freebsd-geom
On Sun, 7 Feb 2021 08:50:52 -0500 Abner Gershon wrote: > The reason this is currently impossible is due to GPT and gmirror both > trying to store metadata in the last disk sector. I don't know whether GPT with gmirror is a special case, but generally when something uses the last sector for metad

Re: geli - why do I need a keyfile

2018-09-15 Thread RW via freebsd-geom
On Fri, 14 Sep 2018 17:55:58 -0700 Lee Brown wrote: > I want to create a geli provider as authentication only, no password, > no encryption. I do: ... > Instead: > # echo " " > /tmp/key > solves that issue, but I still don't get why I even need a key file > with -e NULL? Because HMAC itself need

Re: RFC: Pass TRIM through GELI

2015-07-11 Thread RW via freebsd-geom
On Fri, 10 Jul 2015 17:28:37 -0500 Matthew D. Fuller wrote: > 2) Security. For whatever your threat model is, leaking the "how much >space is in use" datum is unacceptable. It's not about how much space is free, it's about giving away which blocks do and don't contain data. Perhaps more