8a04 ZFS, Raidz, Labels, and Encryption - The FreeBSD Forums
The FreeBSD Forums  

Go Back   The FreeBSD Forums > Base System > General

General General questions about the FreeBSD operating system. Ask here if your question does not fit elsewhere.

Reply
 
Thread Tools Display Modes
  #1  
Old October 5th, 2010, 02:21
THEJEWRaVeN THEJEWRaVeN is offline
Junior Member
 
Join Date: Oct 2010
Posts: 1
Thanks: 2
Thanked 0 Times in 0 Posts
Default ZFS, Raidz, Labels, and Encryption

Hello all. I'm giving the forum a try before dropping a question to the following:

http://lists.freebsd.org/mailman/listinfo/freebsd-geom



Problem:

When attempting to create a ZFS RAIDZ pool, I get the following message:

Code:
cannot create 'tank': one or more devices is currently unavailable

Command used to make this occur:


Code:
zpool create tank raidz label/P1SG136D.eli label/P2SGY10S.eli label/P3SG3ERV.eli label/P4SGC4QY.eli \
label/P5SGYJSC.eli label/P6SG49JV.eli label/P7SG9H9H.eli label/P8SGDF8G.eli

System:


Asus M3N WS
Athlon II X2 240
8gb Kingston DDR2 ECC
8 X 1.5tb Seagate SATA drives
60gb IDE drive
HighPoint RocketRAID 2220 PCI-X
PCI RivaTNT


Background Reading as to how I arrived here:

1. Setting up an encrypted ZFS with FreeBSD

2. GELI file systems unusable after "glabel label" operations

3. geli Manpage

4. [Solved] zpool create <pool> drives fails

5. ZFS Unavailable


Overview of What I've Done:

Reading #1 was used as a rough guideline to make a ZFS pool with geli encryption. I used Reading #4 & #5 to label my drives. I believe one should be able to create an encrypted ZFS pool using labels due to Reading #2. The commands from Reading #1 were slightly modified with help from Reading #3.


Code:

Code:
glabel label -v P1SG136D /dev/da0
glabel label -v P2SGY10S /dev/da1
...

This labels each drive attached to my HighPoint controller with the Port # it is attached to, the company brand, and part of the serial number so that I can easily identify which drive has a problem in the future.



Code:
dd if=/dev/random of=/usr/home/THEJEW/P1SG136D.key bs=64 count=1
dd if=/dev/random of=/usr/home/THEJEW/P2SGY10S.key bs=64 count=1
...
Encryption keys are created and placed within my home folder. Home directory is also encrypted, but passphrase is entered at boot (ie. keys are available).


Code:
geli init -a HMAC/SHA256 -e AES -l 256 -s 4096 -K /usr/home/THEJEW/P1SG136D.key /dev/label/P1SG136D
geli init -a HMAC/SHA256 -e AES -l 256 -s 4096 -K /usr/home/THEJEW/P2SGY10S.key /dev/label/P2SGY10S
...
Preparing to attach key to label to create *.eli in "label" folder. *.eli files do appear in Dolphin.


Code:
geli attach -k /usr/home/THEJEW/P1SG136D.key /dev/label/P1SG136D
geli attach -k /usr/home/THEJEW/P2SGY10S.key /dev/label/P2SGY10S
...
Attaching.


Attempting to create zpool fails (see code in Problem section). Everything attempted as root.



I imagine I have missed something fairly obvious. Any help is appreciated.

Last edited by lme@; October 5th, 2010 at 09:02. Reason: Please break longer lines.
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
ZFS striped mirror vs raidz miks General 3 July 11th, 2010 23:49
Question about zfs raidz and geli CrazyEmperor General 14 May 19th, 2010 11:45
zfs speed: raidz vs mirror dbi General 4 April 23rd, 2010 04:24
more questions about ZFS and degraded raidz wonslung General 2 July 14th, 2009 01:28


All times are GMT +1. The time now is 10:41.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2013, vBulletin Solutions, Inc.
The mark FreeBSD is a registered trademark of The FreeBSD Foundation and is used by The FreeBSD Project with the permission of The FreeBSD Foundation.
Web protection and acceleration provided by CloudFlare
0