i see xfs encrypted as an option to format Unassigned Drive

iptvcld commented 4 years ago

when i select it, it says error

dlandon commented 4 years ago

Do you have at least one array disk encrypted?

dlandon commented 4 years ago

That's not what I asked you. Please read the section on encrypted disks here.

iptvcld commented 4 years ago

My array is not encrypted.

dlandon commented 4 years ago

It has to be or Unraid will not know the password/passphrase.

iptvcld commented 4 years ago

Thanks; i was just watching spaceinvaders video on how to do this as a workaround by adding the drive into cache and then formatting and move it back. But not sure if this is practical as on system reboots i will always have to repeat. I am just looking for a way to encrypt one of my Unassigned drives.

dlandon commented 4 years ago

Once it's formatted, UD can mount it without you having an encrypted array, The encrypted array requirement is only for formatting the disk, not mounting it with UD. Just set the disk password in UD settings for that disk.

iptvcld commented 4 years ago

Oh thats not bad at all!! Thank you; i will try this out now.

dlandon commented 4 years ago

You can now format a UD disk withoout having an encrypted array.

iptvcld commented 4 years ago

Really? That's amazing! I performed the "trick" yestursday to add the UD drive as a cache and then format it as xfs encrypted and did I ever mess that up! Ended up clearing my cache pool and had to restore the cache array from backup! Thanks for the excellent work!

dlandon commented 4 years ago

That's why I did it. I saw too much hacking to make it work and the risk involved. Sorry you lost your pool. You'll see it is much easier and cleaner now with the update to UD.

iptvcld commented 4 years ago

You rock! Excellent work as always..

dlandon commented 4 years ago

Did you try it?

iptvcld commented 4 years ago

I am going to wipe the encrypted disk I made yesterday and try this now that I know the option is there. Will let you know shortly.

iptvcld commented 4 years ago

Just tried it now and works great..

I deleted the partition of my encrypted drive
Selected format as XFS Encrypted
Keyed in a password of my choice
Keyed in Yes and it formated!
Went into UD Settings and stored the password and selected Save.

Question: When the server reboots, since the password is stored will i be prompted to re-enter the password again? If this auto-mounts with no password ask, this can be an issue if the server gets stolen; i would not want this drive to mount without asking for a password.

dlandon commented 4 years ago

The password is stored encrypted on the flash in UD settings. It will mount without asking for a passowrd in Unraid. If the disk is stolen, the password will be needed to mount the disk. If the server is stolen, I think you have bigger problems.

If it's that much of a concern, you will need to set up the array as encrypted and use the same password as the array. Unraid will then handle it as you desire.

iptvcld commented 4 years ago

So what i am thinking is if we mod that file on each array startup and that way when the server boots (the drive will need that pass line again) and i would need to go to UI settings to key in that password again.

I just tried going to the unassigned.devices.cfg and changing the pass line to "hahha" and saving the file but this still allows me to mount the drive.

dlandon commented 4 years ago

You can't edit the UD cfg file. That is only a copy of the cfg in /tmp/ that is the active configuration. So your edit would not work to change the password.

As a compromise:

Set your disk to not auto mount.
Enter the UD settings password.
Mount the disk.
Clear the password in UD settings.

The disk will stay mounted, but the next reboot would require the password be entered again.

iptvcld commented 4 years ago

Ah, that works!!

dlandon / unassigned.devices

i see xfs encrypted as an option to format Unassigned Drive #53