search

ghfields / rpooler

A guided installation script for zfs rpools
29 stars 6 forks source link

LUKS support #26

Open tiagoefreitas opened 6 years ago

tiagoefreitas commented 6 years ago

Does the script support LUKS? Its not mentioned anywhere.

Basically this guide: https://github.com/zfsonlinux/zfs/wiki/Ubuntu-18.04-Root-on-ZFS https://gist.github.com/vrivellino/7dcf150da4cc1d07008315643bfdbfb5

Or this ansible script has it: https://github.com/dyindude/ubuntu-zfs

ghfields commented 6 years ago

It isn't included yet. I was hoping to focus on ZFS Native Ecryption (issue #16). It is currently in master and (probably) waiting for 0.8.0 release.

That being said, LUKS it the currently usable method and I have not heard of instability. Good suggestion.

tiagoefreitas commented 6 years ago

If you can make a script for native that uses latest code from binaries in launchpad or compiles it, that would be great.

But I’m not sure if send/receive works 100% (for example from unencrypted to encrypted and vice-versa) and I think I’ve read somewhere that they may change the metadata format once again so its not completely stable yet, may take a long time.

LUKS works right now...and some things like unlocking from ssh may need some work with ZFS native, is there a guide somewhere root?

Another thing that bothers me is how easy it will be to move from LUKS to native for root, maybe it requires a reinstall and not to keen on that but also can’t wait long. On Tue, 28 Aug 2018 at 21:07, Garrett Fields notifications@github.com wrote:

It isn't included yet. I was hoping to focus on ZFS Native Ecryption (issue #16 https://github.com/ghfields/rpooler/issues/16). It is currently in master and (probably) waiting for 0.8.0 release.

That being said, LUKS it the currently usable method and I have not heard of instability. Good suggestion.

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub https://github.com/ghfields/rpooler/issues/26#issuecomment-416722863, or mute the thread https://github.com/notifications/unsubscribe-auth/AK6WxrfxVIbqT_doTHMFJQatcRpqwh3lks5uVaMMgaJpZM4WPxR8 .