There have been multiple accounts created with the sole purpose of posting advertisement posts or replies containing unsolicited advertising.

Accounts which solely post advertisements, or persistently post them may be terminated.

tell me your experience using zfs/btrfs

cross-posted from: programming.dev/post/9319044

Hey,

I am planning to implement authenticated boot inspired from Pid Eins’ blog. I’ll be using pam mount for /home/user. I need to check integrity of all partitions.

I have been using luks+ext4 till now. I am hesistant hesitant to switch to zfs/btrfs, afraid I might fuck up. A while back I accidently purged ‘/’ trying out timeshift which was my fault.

Should I use zfs/btrfs for /home/user? As for root, I’m considering luks+(zfs/btrfs) to be restorable to blank state.

SeeJayEmm ,
@SeeJayEmm@lemmy.procrastinati.org avatar

My only complaint with btrfs when I used to run it, is that kvm disk performance was abysmal on it. Otherwise I had no issues with the fs.

Bitrot ,
@Bitrot@lemmy.sdf.org avatar

Most of the tools now should be setting nocow for virtual drives, performance these days isn’t bad.

Atemu ,
@Atemu@lemmy.ml avatar

nodatacow is a hack and will disable any and all consistency mechanisms for that file’s contents. Tools should not be setting nodatacow for virtual drives, certainly not by default.

Bitrot , (edited )
@Bitrot@lemmy.sdf.org avatar

Default libvirt behavior since 2020. Pretty sure some database tools turn it on too.

Atemu ,
@Atemu@lemmy.ml avatar

Yikes.

drwho ,
@drwho@beehaw.org avatar

They do. Otherwise they run like Oracle when auditd is configured and running.

possiblylinux127 ,

Really? Were the virtual disks running ext4?

SeeJayEmm ,
@SeeJayEmm@lemmy.procrastinati.org avatar

Yes.

Penguincoder ,

As a home user I’d recommend btrfs. It has main line kernel support and is way easier to get operational than zfs. I’d you don’t need the more advance raid types of zfs or deduplication, btrfs can do everything you want. Also btrfs is a lot more resource friendly. Zfs, especially with deduplication, takes a ton of RAM.

pastermil ,

Can’t vouch for ZFS, but btrfs is great!

You can mount root, log, and home on different subvolumes, they’d practically be on different partitions while still sharing the size limit.

I would also take system snapshots while the system is still running with one command. No need to exclude the home or log directories, nor the pseudo fs (e.g. proc, sys, tmp, dev).

skullgiver , (edited )
@skullgiver@popplesburger.hilciferous.nl avatar

deleted_by_author

    •
    superbirra ,

    […] there were rumours some French guy got arrested and had his LUKS encryption fail on him, so you never know.

    xkcd.com/538

    skullgiver , (edited )
    @skullgiver@popplesburger.hilciferous.nl avatar

    deleted_by_author

    •
    possiblylinux127 ,

    Or its possible that he reused passwords

    pastermil ,

    Fucking French, man…

    rhys ,
    @rhys@rhys.wtf avatar

    @unhinge I run a simple 48TiB zpool, and I found it easier to set up than many suggest and trivial to work with. I don't do anything funky with it though, outside of some playing with snapshots and send/receive when I first built it.

    I think I recall reading about some nuance around using LUKS vs ZFS's own encryption back then. Might be worth having a read around comparing them for your use case.

    unhinge OP ,

    afaik openzfs provides authenticated encryption while luks integrity is marked experimental (as of now in man page).

    openzfs also doesn’t reencrypt dedup blocks if dedup is enabled Tom Caputi’s talk, but dedup can just be disabled

    unhinge OP ,

    if you happen to find the comparison, could you link it here

    rtxn ,

    My experience with btrfs is “oh shit I forgot to set up subvolumes”. Other than that, it just works. No issues whatsoever.

    unhinge OP ,

    oh shit I forgot to set up subvolumes

    lol

    I’m also planning on using its subvolume and snapshot feature. since zfs also supports native encryption, it’ll be easier to manage subvolums for backups

    Duckytoast ,

    Luks+btrfs with Arch as daily driver for 3 years now, mostly coding and browsing. Not a single problem so far :D

    unhinge OP ,

    that sounds good.

    Have you used luks integrity feature? though it’s marked experimental in man page

    uiiiq ,

    I have the same use-case as @Duckytoast. I didn’t test the integrity feature because it is my work machine and I am not fond of doing experimental stuff on it.

    possiblylinux127 ,

    If you want to be sure you don’t loss data make sure you backup your keys.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • •
  • [email protected]
  • random
  • lifeLocal
  • goranko
  • All magazines
    •