Re: Encrypted zfs?

From: Pawel Jakub Dawidek <pjd_at_FreeBSD.org>
Date: Mon, 3 Sep 2007 14:42:33 +0200
On Thu, Aug 30, 2007 at 03:56:35PM +0900, Nathan Butcher wrote:
> > AFAIK zfs is immune against device enumeration issues itself. There is a
> > nice video on YouTube showing Sun engineers setting up a ZFS pool on a
> > bunch of USB sticks. Afterwards they remove all of them, shuffle them,
> > and put them back in. No problem.
> 
> You're correct,... only as long as the zpool is EXPORTED FIRST, and
> imported after the drives have been shuffled around. ZFS has no trouble
> piecing them back together wherever they are during an import, it seems.
> 
> If you were to, say, forget to export the zpool, shutdown your system,
> shuffle the drives around, and THEN restart the system with the drives
> in the wrong places, zfs will consider the zpool unavailable. In this
> case, all the drives will be turn up as FAULTED due to "corrupted
> data"... when in reality, ZFS was set up to expect certain data to be on
> certain drives, and now it just can't find it thanks to the harddrive
> "hokey-pokey" done on it.
> 
> I guess glabeling isn't really necessary, but it does prevent the above
>  issue from ever occuring.... "An ounce of prevention" or something like
> that.

You are correct, but not entirely. If you don't export the pool before
shuffling driver around, ZFS can still recognize them after reboot, but
those drives have to support GEOM::ident attribute. A disk, when asked
about this attribute, returns its serial number. If ZFS can find disk
using its name, it tries to use its ident. Not all GEOM providers
support idents. Currently only ATA disks and slices/partitions on top of
ATA disks.

-- 
Pawel Jakub Dawidek                       http://www.wheel.pl
pjd_at_FreeBSD.org                           http://www.FreeBSD.org
FreeBSD committer                         Am I Evil? Yes, I Am!

Received on Mon Sep 03 2007 - 10:44:33 UTC

This archive was generated by hypermail 2.4.0 : Wed May 19 2021 - 11:39:17 UTC