According to Oracle’s documentation this parameter is used for databases and I have read that it can also be used for certain types of VMs. O recordsize=1M Other tutorials suggest creating this entry. If set too low this can have a huge and negative impact on performance. You should check the specifications if the drive is SSD.Īlternative ways to retrieve physical sector sizes are: $ cat /sys/block/sd*/queue/physical_block_sizeĪ value of 12 will work just fine, even on 512 sector drives and likely being the reason for Canonical setting up as the default. You can output the physical sector size with lsblk -t, although values of 512 might be simulated. o ashift=12 This is the default setting that means that your disk’s block size is 4,096 bytes (2^ 12=4,096). Some comments on the options for reference: The system will be installed with the encryption options set on the script and on boot it will prompt you with the password you setup. You will be prompted to type this at boot time. Replace PASSWORD with the encryption password you want to use.We can modify the default options for rpool. This script is responsible for setting up ZFS. Boot with the Ubuntu 20.04 Desktop ISO.To encrypt the rpool we will need to edit the installation script. The default partitioning during the install creates four partitions and two ZFS pools, using all the storage in the installation disk: /boot/efi Adding that extra layer of security might make a system recovery that much more difficult or impossible. In a very security minded world both pools should be encrypted, but I prefer not encrypt the boot partition. The installation of Ubuntu 20.04 on ZFS will create two pools: bpool and rpool.īpool contains the boot partition and rpool all the other mountpoints in several datasets. The ZFS on Linux version included with the 20.04 installer is 0.8.3. The more you deviate from a standard installation the more complicated it will be to do any troubleshooting if anything breaks in the future. The tutorials I saw were using LUKS1 instead of LUKS2 and it also felt that the approach was cumbersome now that ZFS on Linux supports native encryption. Some people have used LUKS and ZFS in the past, but that solution didn’t quite work for me. You have the option to use LUKS and ext4 but there isn’t an encryption option in the installer for ZFS. ![]() One major drawback for me is the lack of an option to encrypt the filesystem during the installation. My favourite is being able to revert the system and home partitions (simultaneously or individually) to a previous state through the boot menu. I will be able to confirm it myself later but if it works then you can start using it without waiting until then.Ubuntu 20.04 offers installing ZFS as the default filesystem. & zfs_log_failure_msg "$"Įcho "Failed to load zfs encryption wrapping key (s)."Įcho "Please verify dataset property 'keysource' for datasets"īasically all I did was remove the Sun-isms (we don't have separate crypto modules to load, our zfs key command is slightly different from theirs, etc). # If the key isn't availible, then this will fail! Zfs_log_begin_msg "Loading crypto wrapper key for $fs"
0 Comments
Leave a Reply. |