> I have some archive data stored on GELI drives; this is a welcome development.
Sure, I have a few luks encrypted drives (having run Linux, not freebsd).
But I'm inclined to move them over to zfs.
> GELI is a much more straightforward way to deliver an encrypted block device compared to an encrypted Zvol.
Maybe if you need an encrypted block device - but with zfs in Linux and freebsd as standard, experimental support on windows, Mac - I'm not sure I agree geli/cryptsetup is an easier way to deliver an encrypted (at rest) filesystem.
More to the point - between experimental geli support on Linux, and stable zfs on Linux and freebsd - I would strongly prefer zfs. (or freebsd and geli for accessing archives that are tricky to move over to zfs for some reason).
Sure, I have a few luks encrypted drives (having run Linux, not freebsd).
But I'm inclined to move them over to zfs.
> GELI is a much more straightforward way to deliver an encrypted block device compared to an encrypted Zvol.
Maybe if you need an encrypted block device - but with zfs in Linux and freebsd as standard, experimental support on windows, Mac - I'm not sure I agree geli/cryptsetup is an easier way to deliver an encrypted (at rest) filesystem.
More to the point - between experimental geli support on Linux, and stable zfs on Linux and freebsd - I would strongly prefer zfs. (or freebsd and geli for accessing archives that are tricky to move over to zfs for some reason).
reply