Re: 回复: 回复: 回复: 回复: Softraid crypto metadata backup

2023-01-07 Thread chohag
Nathan Carruth writes: > permanently and irrevocably destroy all data on your entire disk”. This is a feature. More so, it's the very point in an encrypted filesystem. If you haven't planned for this failure scenario then what are you doing using a device which *by design* can irrevocably trash it

回复: 回复: 回复: 回复: Softraid crypto metadata backup

2023-01-06 Thread Nathan Carruth
None of those issues are of the form “a hundred bad bytes will permanently and irrevocably destroy all data on your entire disk”. Unless I am mistaken, crypto header corruption is. On Jan 05 22:22:44, n.carr...@alum.utoronto.ca wrote: > Given that one of the goals of the OpenBSD project is to pr

Re: 回复: 回复: 回复: Softraid crypto metadata backup

2023-01-06 Thread Jan Stary
On Jan 05 22:22:44, n.carr...@alum.utoronto.ca wrote: > Given that one of the goals of the OpenBSD project is to produce > reliable documentation, I would have expected that this kind of potential > corruption would have been at least mentioned > somewhere. Surely we don’t expect every user to read

回复: 回复: 回复: Softraid crypto metadata backup

2023-01-05 Thread Nathan Carruth
  > On 2023-01-05, Nathan Carruth wrote: >> Thank you for your response. >> >> To clarify: I am not asking about backups proper >> (though I appreciate the suggestions). My only >> question is how to make a copy of the crypto metadata. > >dd the start of the partition, it's stored 16 blocks (8k) i

Re: 回复: 回复: Softraid crypto metadata backup

2023-01-05 Thread Stuart Henderson
On 2023-01-05, Nathan Carruth wrote: > Thank you for your response. > > To clarify: I am not asking about backups proper > (though I appreciate the suggestions). My only > question is how to make a copy of the crypto metadata. dd the start of the partition, it's stored 16 blocks (8k) into the par

回复: Softraid crypto metadata backup

2023-01-05 Thread Nathan Carruth
Thank you for your response (apologies that I just saw this). I will have a look at the file you mentioned. I am curious what you mean by this: “ Backing up, restoring or otherwise messing with the softraid metadata without using the standard tools is an advanced subject” as far as I know there

回复: 回复: Softraid crypto metadata backup

2023-01-05 Thread Nathan Carruth
Thank you for your response. To clarify: I am not asking about backups proper (though I appreciate the suggestions). My only question is how to make a copy of the crypto metadata. On 2023-01-03, Nathan Carruth wrote: > I am with you 100% on backups. My real question was, How > does one backup c

Re: 回复: Softraid crypto metadata backup

2023-01-05 Thread Stuart Henderson
On 2023-01-03, Nathan Carruth wrote: > I am with you 100% on backups. My real question was, How > does one backup crypto volume metadata? Given that > it can be backed up, clearly it should be, but there is no > information in any of the cited documentation as to where > the metadata is or how to

回复: 回复: Softraid crypto metadata backup

2023-01-04 Thread Nathan Carruth
Thank you for your response. Perhaps I should have clarified my use case. I have data which is potentially legally privileged and which I also cannot afford to lose. Thus an unencrypted backup is out of the question, and my first thought was to use full-disk encryption for the backup. Perhaps hea

Re: 回复: Softraid crypto metadata backup

2023-01-04 Thread Nick Holland
On 1/2/23 23:54, Nathan Carruth wrote: Thank you for the response. I am with you 100% on backups. My real question was, How does one backup crypto volume metadata? Given that it can be backed up, clearly it should be, but there is no information in any of the cited documentation as to where the

回复: Softraid crypto metadata backup

2023-01-02 Thread Nathan Carruth
Thank you for the response. I am with you 100% on backups. My real question was, How does one backup crypto volume metadata? Given that it can be backed up, clearly it should be, but there is no information in any of the cited documentation as to where the metadata is or how to back it up. Thanks