Solved Encryption + ZFS (13.0)

stfnx

New Member


Messages: 2

Hello,
I've been using Debian Linux for some time, but I wanna give FreeBSD a try because I like some facts about it. :)
I do the first steps in a VM for easy rollback, but after that I'll install it on the 2nd drive on my laptop.
Because its a laptop, full disc encryption is mandatory for me.

The guided installer offers ZFS encryption but the tooltip says it will be done using geli.
I've read somewhere that FreeBSD 13.0 does support native ZFS encryption and I assume its the better route to go.

How do I manually install FreeBSD with native ZFS encryption?
In the handbook's installation chapter I couldn't find any useful information.

Is it even worth the trouble, or should I go with the installer's geli option?

Thank you in advance! :)
 

T-Daemon

Daemon

Reaction score: 1,094
Messages: 2,007

For the time being it's not possible to encrypt Root-on-ZFS with OpenZFS natively, only datasets non-essential for system booting can be encrypted. If you want full disk encryption Root-on-ZFS then the only option for now is with geli(8).
 
OP
S

stfnx

New Member


Messages: 2

Thank you for that clarification.
I've successfully installed it with geli.
 
Top