* Encryption
@ 2011-01-20 15:05 Carl Cook
2011-01-20 15:14 ` Encryption Hugo Mills
2011-01-20 16:10 ` Encryption Josef Bacik
0 siblings, 2 replies; 12+ messages in thread
From: Carl Cook @ 2011-01-20 15:05 UTC (permalink / raw)
To: linux-btrfs
Does BTRFS have subvolume encryption built in? If not, why?
^ permalink raw reply [flat|nested] 12+ messages in thread
* Re: Encryption
2011-01-20 15:05 Encryption Carl Cook
@ 2011-01-20 15:14 ` Hugo Mills
2011-01-20 16:10 ` Encryption Josef Bacik
1 sibling, 0 replies; 12+ messages in thread
From: Hugo Mills @ 2011-01-20 15:14 UTC (permalink / raw)
To: Carl Cook; +Cc: linux-btrfs
[-- Attachment #1: Type: text/plain, Size: 1139 bytes --]
On Thu, Jan 20, 2011 at 07:05:52AM -0800, Carl Cook wrote:
>
> Does BTRFS have subvolume encryption built in? If not, why?
Not at the moment.
My opinion on why: Getting crypto right is *hard*. There are far
easier features that people are asking for that we can implement
first.
There may be technical issues that make it hard to implement within
btrfs, although being able to do compression is harder from a FS
structure point of view, so I suspect that the issues are more about
ensuring correctness of the crypto implementation (not just the basic
symmetric algorithm, because we've got those in the kernel, but all
the key management and block chaining and probably a bunch of things I
don't know about because I'm not a cryptographer -- all of which makes
a big difference to the security of the final system).
Hugo.
--
=== Hugo Mills: hugo@... carfax.org.uk | darksatanic.net | lug.org.uk ===
PGP key: 515C238D from wwwkeys.eu.pgp.net or http://www.carfax.org.uk
--- Once is happenstance; twice is coincidence; three times ---
is enemy action.
[-- Attachment #2: Digital signature --]
[-- Type: application/pgp-signature, Size: 190 bytes --]
^ permalink raw reply [flat|nested] 12+ messages in thread* Re: Encryption
2011-01-20 15:05 Encryption Carl Cook
2011-01-20 15:14 ` Encryption Hugo Mills
@ 2011-01-20 16:10 ` Josef Bacik
1 sibling, 0 replies; 12+ messages in thread
From: Josef Bacik @ 2011-01-20 16:10 UTC (permalink / raw)
To: Carl Cook; +Cc: linux-btrfs
On Thu, Jan 20, 2011 at 07:05:52AM -0800, Carl Cook wrote:
>
> Does BTRFS have subvolume encryption built in? If not, why?
>
No, and because nobody has done it yet. Thanks,
Josef
^ permalink raw reply [flat|nested] 12+ messages in thread
* (no subject)
@ 2012-12-07 16:16 merc1984
2012-12-12 17:12 ` Encryption merc1984
0 siblings, 1 reply; 12+ messages in thread
From: merc1984 @ 2012-12-07 16:16 UTC (permalink / raw)
To: linux-btrfs
We're using a backups server to back up all machines in a LAN. Four 2TB
disks are assembled in a BTRFS RAID array and mounted as /media/backups.
Under this are subvolumes droog, hex, etc, and snapshots
droog_snap-{date1}, hex_snap-{date1}, etc.
Goal is to encrypt backups, but the concern is with snapshots. Won't
piping rsync through encryption with GPG or somesuch, play havoc with
BTRFS snapshot accounting?
Is there any way to encrypt an array so it is inaccesible while
umounted?
I've already asked on the ecryptfs listserv and it resulted in mass
confusion.
--
http://www.fastmail.fm - A fast, anti-spam email service.
^ permalink raw reply [flat|nested] 12+ messages in thread* Re: Encryption
2012-12-07 16:16 merc1984
@ 2012-12-12 17:12 ` merc1984
2012-12-12 18:31 ` Encryption Mitch Harder
0 siblings, 1 reply; 12+ messages in thread
From: merc1984 @ 2012-12-12 17:12 UTC (permalink / raw)
To: linux-btrfs
So there is no way to have filesystem encryption, while keeping
snapshots?
On Fri, Dec 7, 2012, at 8:16, [2]merc1984@f-m.fm wrote:
> We're using a backups server to back up all machines in a LAN. Four 2TB disks are assembled in a BTRFS RAID array and mounted as /media/backups. Under this are subvolumes droog, hex, etc, and snapshots droog_snap-{date1}, hex_snap-{date1}, etc.
> Goal is to encrypt backups, but the concern is with snapshots. Won't piping rsync through encryption with GPG or somesuch, play havoc with BTRFS snapshot accounting?
> Is there any way to encrypt an array so it is inaccesible while umounted?
> I've already asked on the ecryptfs listserv and it resulted in mass confusion.
--
--
http://www.fastmail.fm - Or how I learned to stop worrying and
love email again
^ permalink raw reply [flat|nested] 12+ messages in thread* Re: Encryption
2012-12-12 17:12 ` Encryption merc1984
@ 2012-12-12 18:31 ` Mitch Harder
2012-12-12 18:38 ` Encryption merc1984
0 siblings, 1 reply; 12+ messages in thread
From: Mitch Harder @ 2012-12-12 18:31 UTC (permalink / raw)
To: merc1984; +Cc: linux-btrfs
On Wed, Dec 12, 2012 at 11:12 AM, <merc1984@f-m.fm> wrote:
>
> So there is no way to have filesystem encryption, while keeping
> snapshots?
>
>
I run btrfs on top of LUKS encryption on my laptop. You should be
able to do the same.
You could then run rsync through ssh. However, rsync will have no
knowledge of any blocks shared under subvolume snapshots.
Btrfs does not yet have internal encryption.
^ permalink raw reply [flat|nested] 12+ messages in thread
* Re: Encryption
2012-12-12 18:31 ` Encryption Mitch Harder
@ 2012-12-12 18:38 ` merc1984
2012-12-12 18:48 ` Encryption cwillu
0 siblings, 1 reply; 12+ messages in thread
From: merc1984 @ 2012-12-12 18:38 UTC (permalink / raw)
To: Mitch Harder; +Cc: linux-btrfs
On Wed, Dec 12, 2012, at 10:31, Mitch Harder wrote:
> I run btrfs on top of LUKS encryption on my laptop. You should be able to do the same.
>
> You could then run rsync through ssh. However, rsync will have no knowledge of any blocks shared under subvolume snapshots.
>
> Btrfs does not yet have internal encryption.
The FAQ says specifically to NOT run BTRFS with any kind of volume
encryption, so you're asking for trouble.
And clearly encryption is not possible if you need snapshots.
--
http://www.fastmail.fm - One of many happy users:
http://www.fastmail.fm/help/overview_quotes.html
^ permalink raw reply [flat|nested] 12+ messages in thread
* Re: Encryption
2012-12-12 18:38 ` Encryption merc1984
@ 2012-12-12 18:48 ` cwillu
2012-12-12 20:06 ` Encryption merc1984
0 siblings, 1 reply; 12+ messages in thread
From: cwillu @ 2012-12-12 18:48 UTC (permalink / raw)
To: merc1984; +Cc: Mitch Harder, linux-btrfs
On Wed, Dec 12, 2012 at 12:38 PM, <merc1984@f-m.fm> wrote:
>
> On Wed, Dec 12, 2012, at 10:31, Mitch Harder wrote:
>> I run btrfs on top of LUKS encryption on my laptop. You should be able to do the same.
>>
>> You could then run rsync through ssh. However, rsync will have no knowledge of any blocks shared under subvolume snapshots.
>>
>> Btrfs does not yet have internal encryption.
> The FAQ says specifically to NOT run BTRFS with any kind of volume
> encryption, so you're asking for trouble.
Sayeth the FAQ:
Does Btrfs work on top of dm-crypt?
This is deemed safe since 3.2 kernels. Corruption has been reported
before that, so you want a recent kernel. The reason was improper
passing of device barriers that are a requirement of the filesystem to
guarantee consistency.
> And clearly encryption is not possible if you need snapshots.
Snapshots don't come into this at all: btrfs doesn't care where the
block devices it's on come from. Things like dm-crypt show btrfs (or
whatever filesystem you put on it) a decrypted view of the device.
^ permalink raw reply [flat|nested] 12+ messages in thread
* Re: Encryption
2012-12-12 18:48 ` Encryption cwillu
@ 2012-12-12 20:06 ` merc1984
2012-12-12 20:22 ` Encryption cwillu
2012-12-13 9:17 ` Encryption Sander
0 siblings, 2 replies; 12+ messages in thread
From: merc1984 @ 2012-12-12 20:06 UTC (permalink / raw)
To: cwillu; +Cc: Mitch Harder, linux-btrfs
On Wed, Dec 12, 2012, at 10:48, cwillu wrote:
> Sayeth the FAQ:
Oh pardon me, it's BTRFS RAID that's a no-go, which is just as critical
to me as I have a 4 disk 8TB array.
The FAQ goeth on to Say:
-----------------------------------------------------------
This pretty much forbids you to use btrfs' cool RAID features if you
need encryption. Using a RAID implementation on top of several encrypted
disks is much slower than using encryption on top of a RAID device. So
the RAID implementation must be on a lower layer than the encryption,
which is not possible using btrfs' RAID support.
-----------------------------------------------------------
You saw that I need RAID above. Were you just trying to criticize my
memory of the FAQ cwillu?
--
http://www.fastmail.fm - Accessible with your email software
or over the web
^ permalink raw reply [flat|nested] 12+ messages in thread* Re: Encryption
2012-12-12 20:06 ` Encryption merc1984
@ 2012-12-12 20:22 ` cwillu
2012-12-13 9:17 ` Encryption Sander
1 sibling, 0 replies; 12+ messages in thread
From: cwillu @ 2012-12-12 20:22 UTC (permalink / raw)
To: merc1984; +Cc: Mitch Harder, linux-btrfs
On Wed, Dec 12, 2012 at 2:06 PM, <merc1984@f-m.fm> wrote:
> On Wed, Dec 12, 2012, at 10:48, cwillu wrote:
>> Sayeth the FAQ:
>
> Oh pardon me, it's BTRFS RAID that's a no-go, which is just as critical
> to me as I have a 4 disk 8TB array.
> The FAQ goeth on to Say:
> -----------------------------------------------------------
> This pretty much forbids you to use btrfs' cool RAID features if you
> need encryption. Using a RAID implementation on top of several encrypted
> disks is much slower than using encryption on top of a RAID device. So
> the RAID implementation must be on a lower layer than the encryption,
> which is not possible using btrfs' RAID support.
> -----------------------------------------------------------
>
> You saw that I need RAID above. Were you just trying to criticize my
> memory of the FAQ cwillu?
It's not asking for trouble, it's just asking for poor performance,
and I suspect even that will depend greatly on the workload.
Snapshots still have nothing to do with it: you could have btrfs
(with snapshots) on dm-crypt on mdraid. Btrfs would just lose the
ability to try alternate mirrors and similar; snapshots would still
work just fine.
^ permalink raw reply [flat|nested] 12+ messages in thread
* Re: Encryption
2012-12-12 20:06 ` Encryption merc1984
2012-12-12 20:22 ` Encryption cwillu
@ 2012-12-13 9:17 ` Sander
2012-12-13 17:23 ` Encryption merc1984
1 sibling, 1 reply; 12+ messages in thread
From: Sander @ 2012-12-13 9:17 UTC (permalink / raw)
To: merc1984; +Cc: cwillu, Mitch Harder, linux-btrfs
merc1984@f-m.fm wrote (ao):
> Oh pardon me, it's BTRFS RAID that's a no-go, which is just as critical
> to me as I have a 4 disk 8TB array.
> The FAQ goeth on to Say:
> -----------------------------------------------------------
> This pretty much forbids you to use btrfs' cool RAID features if you
> need encryption.
Forbids? That is just plain wrong.
I have one btrfs filesystem on top of two encrypted devices. Works just
fine.
Sander
^ permalink raw reply [flat|nested] 12+ messages in thread
* Re: Encryption
2012-12-13 9:17 ` Encryption Sander
@ 2012-12-13 17:23 ` merc1984
2012-12-13 22:39 ` Encryption Hugo Mills
0 siblings, 1 reply; 12+ messages in thread
From: merc1984 @ 2012-12-13 17:23 UTC (permalink / raw)
To: Sander; +Cc: cwillu, Mitch Harder, linux-btrfs
On Thu, Dec 13, 2012, at 1:17, Sander wrote:
Forbids? That is just plain wrong.
I have one btrfs filesystem on top of two encrypted devices. Works just
fine.
That's dynamite Sander.
But I am not going to contravene the instructions, then have problems,
only to come back here and have fingers wagged in my face telling me
this is all EXPERIMENTAL!
--
http://www.fastmail.fm - Send your email first class
^ permalink raw reply [flat|nested] 12+ messages in thread
* Re: Encryption
2012-12-13 17:23 ` Encryption merc1984
@ 2012-12-13 22:39 ` Hugo Mills
0 siblings, 0 replies; 12+ messages in thread
From: Hugo Mills @ 2012-12-13 22:39 UTC (permalink / raw)
To: merc1984; +Cc: Sander, cwillu, Mitch Harder, linux-btrfs
[-- Attachment #1: Type: text/plain, Size: 1105 bytes --]
On Thu, Dec 13, 2012 at 09:23:05AM -0800, merc1984@f-m.fm wrote:
>
> On Thu, Dec 13, 2012, at 1:17, Sander wrote:
> Forbids? That is just plain wrong.
> I have one btrfs filesystem on top of two encrypted devices. Works just
> fine.
>
> That's dynamite Sander.
>
> But I am not going to contravene the instructions, then have problems,
> only to come back here and have fingers wagged in my face telling me
> this is all EXPERIMENTAL!
Well, I'm afraid that applies to the information on the wiki, too
-- that's also experimental, to a degree. The notes on the wiki about
behaviour of encryption layers weren't added by any of the core
developers. Nobody's published concrete tests *either* way yet, and
those comments are one person's opinion, as far as I'm aware (and note
that they don't actually quote sources, results, or even personal
experience).
YMMV.
Hugo.
--
=== Hugo Mills: hugo@... carfax.org.uk | darksatanic.net | lug.org.uk ===
PGP key: 515C238D from wwwkeys.eu.pgp.net or http://www.carfax.org.uk
--- Great oxymorons of the world, no. 2: Common Sense ---
[-- Attachment #2: Digital signature --]
[-- Type: application/pgp-signature, Size: 828 bytes --]
^ permalink raw reply [flat|nested] 12+ messages in thread
end of thread, other threads:[~2012-12-13 22:40 UTC | newest]
Thread overview: 12+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2011-01-20 15:05 Encryption Carl Cook
2011-01-20 15:14 ` Encryption Hugo Mills
2011-01-20 16:10 ` Encryption Josef Bacik
-- strict thread matches above, loose matches on Subject: below --
2012-12-07 16:16 merc1984
2012-12-12 17:12 ` Encryption merc1984
2012-12-12 18:31 ` Encryption Mitch Harder
2012-12-12 18:38 ` Encryption merc1984
2012-12-12 18:48 ` Encryption cwillu
2012-12-12 20:06 ` Encryption merc1984
2012-12-12 20:22 ` Encryption cwillu
2012-12-13 9:17 ` Encryption Sander
2012-12-13 17:23 ` Encryption merc1984
2012-12-13 22:39 ` Encryption Hugo Mills
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).