From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id 96811139083 for ; Thu, 7 Dec 2017 21:49:40 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 15E2EE0FCB; Thu, 7 Dec 2017 21:49:35 +0000 (UTC) Received: from auth-4.ukservers.net (auth-4.ukservers.net [217.10.138.158]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id A55B6E0F97 for ; Thu, 7 Dec 2017 21:49:34 +0000 (UTC) Received: from [192.168.1.64] (host86-176-79-41.range86-176.btcentralplus.com [86.176.79.41]) by auth-4.ukservers.net (Postfix smtp) with ESMTPA id BCE0A1520C76 for ; Thu, 7 Dec 2017 21:49:30 +0000 (GMT) Subject: Re: [gentoo-user] OT: btrfs raid 5/6 To: gentoo-user@lists.gentoo.org References: <5A218A49.3050004@youngman.org.uk> <20171206232829.GA5249@tp> <20171207001328.GC5249@tp> <20171207213755.GB18433@tp> From: Wols Lists Message-ID: <5A29B769.7030400@youngman.org.uk> Date: Thu, 7 Dec 2017 21:49:29 +0000 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.7.0 Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@lists.gentoo.org Reply-to: gentoo-user@lists.gentoo.org MIME-Version: 1.0 In-Reply-To: <20171207213755.GB18433@tp> Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-Archives-Salt: c0d5b89a-8f9b-4985-b77c-7008b849bf93 X-Archives-Hash: 57657d8d0a81880a6fdf07428ce1a00d On 07/12/17 21:37, Frank Steinmetzger wrote: > Ooooh, I just came up with another good reason for raidz over mirror: > I don't encrypt my drives because it doesn't hold sensitive stuff. (AFAIK > native ZFS encryption is available in Oracle ZFS, so it might eventually > come to the Linux world). > > So in case I ever need to send in a drive for repair/replacement, noone can > read from it (or only in tiny bits'n'pieces from a hexdump), because each > disk contains a mix of data and parity blocks. > > I think I'm finally sold. :) > And with that, good night. So you've never heard of LUKS? GPT LUKS MD-RAID Filesystem Simple stack so if you ever have to pull a disk, just delete the LUKS key from it and everything from that disk is now random garbage. (Oh - and md raid-5/6 also mix data and parity, so the same holds true there.) Cheers, Wol