[zfs-discuss] Ubuntu Root-on-ZFS

Sam Van den Eynde svde.tech at gmail.com
Tue Apr 26 09:08:43 EDT 2016


I would be interested in those notes :-)

On Tue, Apr 26, 2016 at 9:42 AM, Kuba via zfs-discuss <
zfs-discuss at list.zfsonlinux.org> wrote:

> I have a working configuration with root-on-ZFS over LUKS (whole disk
> encryption), but for Debian. By all means I'm no expert on the matter, so
> I'm not entirely sure it's *the* way to do it, but if it might help, I'll
> be more than happy to share my notes. It works on UEFI system (with
> /boot/efi unencrypted on the EFI system partition), but I think I also got
> it working on a legacy BIOS system as well (with unencrypted GPT BIOS boot
> partition).
>
>
> W dniu 2016-04-26 o 01:49, Schlacta, Christ via zfs-discuss pisze:
>
> I *almost* had a working configuration with bios-grub (though efi
>> should be just as workable) with /boot and /boot/grub both *inside* an
>> encrypted luks container.  I couldn't get grub to initialize the zfs
>> modules after I manually unlocked luks, however, as I wasn't familiar
>> enough with luks to make it work.  If you could finish figuring that
>> out, that would be beautiful.  encrypted /boot / /boot/grub works fine
>> on any other FS, and /boot / /boot/grub works fine on zfs.  It's just
>> knowing the grub commands.
>>
>>
>> On Mon, Apr 25, 2016 at 4:11 PM, Kash Pande via zfs-discuss
>> <zfs-discuss at list.zfsonlinux.org> wrote:
>>
>>> On 25/04/16 06:53 PM, Richard Laager via zfs-discuss wrote:
>>>
>>>>
>>>> 3) What sort of encryption scenarios are necessary to support?
>>>>
>>>> A) No encryption
>>>> B) ecryptfs Private (over ZFS)
>>>> C) ecryptfs Home (over ZFS)
>>>> D) LUKS (under ZFS)
>>>> E) B + D
>>>> F) C + D
>>>>
>>>
>>> G) LUKS (over ZVOL)
>>>
>>> :-)
>>> _______________________________________________
>>> zfs-discuss mailing list
>>> zfs-discuss at list.zfsonlinux.org
>>> http://list.zfsonlinux.org/cgi-bin/mailman/listinfo/zfs-discuss
>>>
>> _______________________________________________
>> zfs-discuss mailing list
>> zfs-discuss at list.zfsonlinux.org
>> http://list.zfsonlinux.org/cgi-bin/mailman/listinfo/zfs-discuss
>>
>>
> _______________________________________________
> zfs-discuss mailing list
> zfs-discuss at list.zfsonlinux.org
> http://list.zfsonlinux.org/cgi-bin/mailman/listinfo/zfs-discuss
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://list.zfsonlinux.org/pipermail/zfs-discuss/attachments/20160426/1a0ce5f4/attachment.html>


More information about the zfs-discuss mailing list