Re: Cryptographically verifying a btrfs subvolume

2019-04-08 Thread Austin S. Hemmelgarn
On 2019-04-08 09:30, Leonid Bloch wrote: On 4/8/19 3:44 PM, Austin S. Hemmelgarn wrote: On 2019-04-08 07:27, Leonid Bloch wrote: Hi List, Can you suggest a way of cryptographically verifying the content of a btrfs subvolume, besides the naïve approach, of running a cryptographic hash function

Re: Cryptographically verifying a btrfs subvolume

2019-04-08 Thread Johannes Thumshirn
On Mon, Apr 08, 2019 at 01:49:49PM +, Leonid Bloch wrote: > Thanks for letting know! Btrfs inspect-internal csum-dump indeed sounds > awesome! Recursively, on a subvolume that would be perfect. Let me know > if help is needed. Well actually the intention of this part was mostly to have a pro

Re: Cryptographically verifying a btrfs subvolume

2019-04-08 Thread Leonid Bloch
On 4/8/19 4:10 PM, Johannes Thumshirn wrote: > On Mon, Apr 08, 2019 at 11:27:51AM +, Leonid Bloch wrote: >> Hi List, >> >> Can you suggest a way of cryptographically verifying the content of a >> btrfs subvolume, besides the naïve approach, of running a cryptographic >> hash function on the out

Re: Cryptographically verifying a btrfs subvolume

2019-04-08 Thread Leonid Bloch
On 4/8/19 3:44 PM, Austin S. Hemmelgarn wrote: > On 2019-04-08 07:27, Leonid Bloch wrote: >> Hi List, >> >> Can you suggest a way of cryptographically verifying the content of a >> btrfs subvolume, besides the naïve approach, of running a cryptographic >> hash function on the output of btrfs send?

Re: Cryptographically verifying a btrfs subvolume

2019-04-08 Thread Johannes Thumshirn
On Mon, Apr 08, 2019 at 11:27:51AM +, Leonid Bloch wrote: > Hi List, > > Can you suggest a way of cryptographically verifying the content of a > btrfs subvolume, besides the naïve approach, of running a cryptographic > hash function on the output of btrfs send? > > Back in 2014, an RFC patc

Re: Cryptographically verifying a btrfs subvolume

2019-04-08 Thread Austin S. Hemmelgarn
On 2019-04-08 07:27, Leonid Bloch wrote: Hi List, Can you suggest a way of cryptographically verifying the content of a btrfs subvolume, besides the naïve approach, of running a cryptographic hash function on the output of btrfs send? Running BTRFS on top of dm-integrity and dm-crypt with them s

Cryptographically verifying a btrfs subvolume

2019-04-08 Thread Leonid Bloch
Hi List, Can you suggest a way of cryptographically verifying the content of a btrfs subvolume, besides the naïve approach, of running a cryptographic hash function on the output of btrfs send? Back in 2014, an RFC patch was sent to allow using sha256 instead of crc32c for checksumming. (https