Hacker News Reader

What is a non-proprietary solution for full-disk encryption?

luks

luks or zfs.

Or Veracrypt.

I want not note, that ZFS is not full disk encryption. ZFS native encryption was designed to allow secure backups via "zfs send | zfs receive" mechanism, so it encrypt only data blocks, and not metadata.

LUKS and GEIL are full-disk encryption systems, and if you need FDE, you must use them under ZFS, not ZFS native encryption.

>LUKS and GEIL

GELI ;)

ZFS native encryption on Root is ~IS full disk encryption minus the boot-loader, i would say that's "full" interesting data encryption.

Technically true but what is the situation that become problem?

Reply on news.ycombinator.com