On 02/04/2013 2:56 pm, mhca12 wrote:
Is there some overhead associated with the geli setup as
described earlier?
$ df -h
Filesystem Size Used Avail Capacity Mounted on
/dev/ada0p3.eli 127G 6.9G 119G 5% /
devfs 1.0k 1.0k 0B 100% /dev
/dev/gpt/boot 991M 339M 642M 35% /bootdir
$ gpart show
=> 34 312581741 ada0 GPT (149G)
34 128 1 freebsd-boot (64k)
162 2097152 2 freebsd-ufs (1.0G)
2097314 310484461 3 freebsd-ufs (148G)
Where did 21G from the 148G go?
As suggested in dan.me.uk geli install guide I used geli init -a
HMAC/SHA256
and also ran dd if=/dev/zero of=/dev/gpt/enc.eli across the eli
volume.
_______________________________________________
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to
"freebsd-questions-unsubscr...@freebsd.org"
Did you use the -a option when doing the geli init?
-a aalgo Enable data integrity verification (authenti-
cation) using the given algorithm.
This will
reduce size of available storage and
also
reduce speed. For example, when using
4096
bytes sector and HMAC/SHA256 algorithm,
89% of
the original provider storage will be
avail-
able for use. Currently supported
algorithms
are: HMAC/MD5, HMAC/SHA1,
HMAC/RIPEMD160,
HMAC/SHA256, HMAC/SHA384 and
HMAC/SHA512. If
the option is not given, there will be
no
authentication, only encryption. The
recom-
mended algorithm is HMAC/SHA256.
--
Thanks,
Dean E. Weimer
http://www.dweimer.net/
_______________________________________________
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
