Hacker News new | ask | show | jobs
by beefhash 2784 days ago
> Full Disk Encryption with SoftRAID

It's worth noting that SoftRAID for encryption is mutually exclusive with SoftRAID for redundancy: "Note that "stacking" softraid modes (mirrored drives and encryption, for example) is not supported at this time."[1]

[1] https://www.openbsd.org/faq/faq14.html#softraid

1 comments

One can certainly stack softraid volumes but I think the FAQ indicates you won't receive support if something goes wrong.

    # bioctl -c 1 -l /dev/sd1a,/dev/sd2a
    softraid0: RAID 1 volume attached as sd3
    # ...
    # bioctl -c C -l /dev/sd3a softraid0
    New passphrase:
    Re-type passphrase:
    softraid0: CRYPTO volume attached as sd4
    # 
I've personally used a setup like this since around OpenBSD 6.0.
Interesting, I didn't know it worked. A comment on another site by stsp@[1] suggested it doesn't.

https://lobste.rs/s/ljdhug/install_openbsd_on_dedibox_with_f...

It does work if you do it manually. The nested softraid will not be assembled at boot. Thus oficially unsupported.