Hacker News new | ask | show | jobs
by centimeter 2089 days ago
luks or zfs.
2 comments

I want not note, that ZFS is not full disk encryption. ZFS native encryption was designed to allow secure backups via "zfs send | zfs receive" mechanism, so it encrypt only data blocks, and not metadata.

LUKS and GEIL are full-disk encryption systems, and if you need FDE, you must use them under ZFS, not ZFS native encryption.

>LUKS and GEIL

GELI ;)

ZFS native encryption on Root is ~IS full disk encryption minus the boot-loader, i would say that's "full" interesting data encryption.

Technically true but what is the situation that become problem?
Or Veracrypt.