Verschlüsselungs Setup # Encryption Setup

[7lvlup]

Hallo,
Server:
HP ProLiant DL180 G6 Server
2x Xeon X5670 Six Core 2.93 GHz
32 GB DDR3 RAM
HP Smart Array P410 RAID Controller 6G SAS / 3G SATA - 512 MB BBWC Cache, PCI-E - 462919-001
6x HP 2000 GB / 2 TB 6G Dual Port MDL 7.2K SAS 3.5" Hot Swap


i would like to put this 6 HDDs in a ZFS.


My question is when i should do the encryption?

Option 1-
each device decrypt with LUKS - after this i make a ZFS with this 6 decrypt device

Option 2-
i make a ZFS with this 6 devices - after i make a crypted Container with LUKS on the ZFS tank

 

[fireon]

ZFS is not useable with HP Smart Array. You need an real HBA Controller. Use HW Raid an then luks/cryptsetup vor your vm's.

 

[apoc]

Aside the mentioned incompatibility of the controller.

Another option (3) (like I am doing it): do the encryption on the VM-level.
My boot-disks are unencrypted but dont contain relevant information.
Everything else is residing on a separate disk which gets encrypted with LUKS.

This was the only concern for me using ZFS (on Linux) - the lack of encryption. In an ideal world for me this would have been a "LUKS alike" implementation.

With best regards
Thomas

 

[fireon]

A little bit more information: https://forum.proxmox.com/threads/zfs-0-8-new-features-in-proxmox.38760/