Re: [gentoo-user] Fileserver with Raid + Crypto + BtrFS

[Neil Bothwick <neil@digimed.co.uk>]

[-- Attachment #1: Type: text/plain, Size: 970 bytes --]

On Wed, 11 Nov 2015 22:18:15 +0100, Ralf wrote:

> >> What would be the best way to have a Raid 10 together with a
> >> encrypted Btrfs?  
> > What about crypto on top of btrfs using a stacked filesystem like
> > ecryptfs?  
> Nope, I also thought about that, but this is not elegant. Besides that,
> it would also slow down the system as ecryptfs runs in the VFS layer and
> is yet another layer which operates on top of an existing filesystem.
> (and not like luks, which would run a layer below btrfs). So that's a
> lot of overhead.

But you're only doing it once.
 
> Ecryptfs is really nice for encrypting dedicated files or directories
> but I don't think that it is a good solution for encrypting a _whole_
> general purpose filesystem.

Do you need to encrypt everything? Being able to only encrypt the
directories that need it may be an advantage.


-- 
Neil Bothwick

Everything should be made as simple as possible, but no simpler.

[-- Attachment #2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 181 bytes --]