Hacker News Reader

Comment by vbit | Hacker News Reader

Often gets lost in the release notes - deploying on Google cloud is super easy:

    % gcloud compute instances create INSTANCE --image freebsd-11-0-release-p1-amd64 --image-project=freebsd-org-cloud-dev
    % gcloud compute ssh INSTANCE

View on HN

That's really cool. They also provide official AMI imagex es and how to deploy on VAGRANT!

vagrant init freebsd/FreeBSD-11.0-RELEASE-p1

Wow, nice. Do you know how straightforward it is to get it with ZFS?

ZFS is native in FreeBSD, so it is exactly as straightforward as the above.

Even the last release supports full ZFS+encryption with the default installer.

But you don't use the installer with "cloud" / VPS providers. It's usually more like cloning a VM image where the system is already installed.

This is still geli+zfs, and not native zfs encryption that was recently presented in OpenZFS Developer Summit [0].

[0] https://www.youtube.com/watch?v=frnLiXclAMo

Correct, it is full disk encryption instead of dataset encryption.

But on the other hand, if you install 11.0 from installer and chose Auto(ZFS) with EncryptedZFS and MBR(GPT) then you will get a GeliBoot installation. There is no boot pool anymore, instead the early boot stages decrypt the root zpool to load the rest of the boatloader, which then decrypts the pool to load the kernel. With bootloader-selectable boot environments.

...and I meant BIOS(GPT). Hmpf.

Reply on news.ycombinator.com