similar to: On Disk Encryption Projects: ZFS & lofi Crypto at LOSUG 19/03

We are lucky to have Darren Moffatt, Sun Senior Staff Engineer and Project Lead for the ZFS & lofi Crypto On Disk Encryption OpenSolaris project speaking at the next LOSUG meeting on 19th March 2008. For full details, take a look at http://www.opensolaris.org/os/project/losug/ & don''t forget to register in good time to book your seat! Joy This message posted from

I believe ZFS is causing a panic whenever I attempt to mount an iso image (SXCR build 39) that happens to reside on a ZFS file system. The problem is 100% reproducible. I''m quite new to OpenSolaris, so I may be incorrect in saying it''s ZFS'' fault. Also, let me know if you need any additional information or debug output to help diagnose things. Config: [b]bash-3.00#

Hi Darren, I found a presentation (Data at Rest: ZFS & Lofi Crypto) with your information. Do yo have any information about the release date for encryption in ZFS, or encryption related in our 7000 Unified Storage Family. Thanks in advance for any help and information that you can send to me. -- <http://www.sun.com> * H. Alejandro Guevara Castro * Storage Practice Solution

Hi Sorry for the cross-posting, I''d sent this to zfs-code originally. Wrong forum. I''m looking into forensic aspects of ZFS, in particular ways to use ZFS tools to investigate ZFS file systems without writing to the pools. I''m working on a test suite of file system images within VTOC partitions. At the moment, these only have 1 file system per pool per VTOC

We are running Solaris 10 11/06 on a Sun V240 with 2 CPUS and 8 GB of memory. This V240 is attached to a 3510 FC that has 12 x 300 GB disks. The 3510 is configured as HW RAID 5 with 10 disks and 2 spares and it''s exported to the V240 as a single LUN. We create iso images of our product in the following way (high-level): # mkfile 3g /isoimages/myiso # lofiadm -a /isoimages/myiso

Hi I''m looking into forensic aspects of ZFS, in particular ways to use ZFS tools to investigate ZFS file systems without writing to the pools. I''m working on a test suite of file system images within VTOC partitions. At the moment, these only have 1 file system per pool per VTOC partition for simplicity''s sake, and I''m using Solaris 10 6/06, which may not

It was rumored that Nevada build 105 would have ZFS encrypted file systems integrated into the main source. In reviewing the Change logs (URL''s below) I did not see anything mentioned that this had come to pass. Its going to be another week before I have a chance to play with b105. Does anyone know specifically if b105 has ZFS encryption? Thanks, Jerry -------- Original Message

We just built a new server to run Icecast 1.3.11 and Ices 0.22. It's a Dual PIII running RH7.1. We put it online last night and Icecast ran fine for 20 hours. Then it started throwing some errors.. That's when Ices died. Ices reported a libshout error. Part of the Icecast log is included. What can I do about this? Hunter [26/Aug/2001:16:05:01] [32:Connection Handler] Accepted

Hey, guys I just do the test for use loop device as vdev for zpool Procedures as followings: 1) mkfile -v 100m disk1 mkfile -v 100m disk2 2) lofiadm -a disk1 /dev/lofi lofiadm -a disk2 /dev/lofi 3) zpool create pool_1and2 /dev/lofi/1 and /dev/lofi/2 4) zpool export pool_1and2 5) zpool import pool_1and2 error info here: bash-3.00# zpool import pool1_1and2 cannot import

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Hi, On Wed, 7 Oct 2020, Hamish Moffatt wrote: > On 22/9/20 4:44 pm, Hamish Moffatt wrote: >> Is it possible to a configure a tinc (1.0.35) node to only send outbound >> through specific nodes, rather than trying to establish direct connections? >> >> I have a node which can connect to all the others directly, but some

Author: Darren Moffat <Darren.Moffat at Sun.COM> Repository: /hg/zfs-crypto/gate Latest revision: 349e022c61d22a0a5a493c242c5bc9dad1547086 Total changesets: 1 Log message: 6740837 zfs-crypto, buffer modified while frozen! Files: update: usr/src/uts/common/fs/zfs/zio.c update: usr/src/uts/common/fs/zfs/zio_crypt.c

Author: Darren Moffat <Darren.Moffat at Sun.COM> Repository: /hg/zfs-crypto/gate Latest revision: 3636389b926ac9417373320caedb256016ad521a Total changesets: 1 Log message: 6740837 zfs-crypto, buffer modified while frozen! (locking/assert oops) Files: update: usr/src/uts/common/fs/zfs/zio.c

Author: Darren Moffat <darrenm at opensolaris.org> Repository: /hg/zfs-crypto/zfs-crypto-gate Latest revision: f2267f9eb807cc96d0d8ed72b186a4fae3490010 Total changesets: 1 Log message: merge with zfs-crypto-gate Files: delete: usr/src/lib/libcryptoutil/common/mechkeygen.c

Is the current plan integrate into snv_120? Thanks & Regards, Carlos Almeida, -- This message posted from opensolaris.org

First let me say I''m deeply sorry for the mail storm that seeding the new hg/zfs-crypto/gate repository caused. An explanation of what happened and why can be found on my blog: http://blogs.sun.com/darren/entry/sorry_mercurial_hg_push_oops There is also a discussion going on in the tools community on how to ensure this doesn''t happen again:

http://defect.opensolaris.org/bz/show_bug.cgi?id=631 Summary: zpool get with no pool name dumps core in zfs-crypto Classification: Development Product: zfs-crypto Version: unspecified Platform: Other OS/Version: Solaris Status: NEW Severity: minor Priority: P4 Component: other AssignedTo:

I cannot even ping the LAN router on 192.168.1.1, but if I ssh though the tunnel to 192.168.1.3, I can ping it. Investigating with tcpdump withoug guidelines is beyond my skills I'm afraid. I used tinc in router mode because it is proposed like in most howto I found... Would just switching to switch mode makes things easier or that's not related? Le sam. 12 janv. 2019 à 05:17, Hamish

Hi I have not tried systemd-coredump yet but I found something strange in my syslog file. Like this message in the en of the log file: tincd[10322]: segfault at 7fffb3180000 ip 00007ff7937f11c2 sp 00007fffb317dd68 error 4 in libc-2.23.so[7ff7936a3000+1c0000] There is more in the attached syslog file. Any clues? Best Regards, Håvard Rabbe > On 14 Feb 2019, at 02:27, Hamish Moffatt

On 7/10/20 2:45 pm, Erich Eckner wrote: > Hi, > > On Wed, 7 Oct 2020, Hamish Moffatt wrote: > > > On 22/9/20 4:44 pm, Hamish Moffatt wrote: > >> Is it possible to a configure a tinc (1.0.35) node to only send > outbound through specific nodes, rather than trying to establish > direct connections? > >> > >> I have a node which can connect to all

I''m pleased to announce that the ZFS Crypto project now has Alpha release binaries that you can download and try. Currently we only have x86/x64 binaries available, SPARC will be available shortly. Information on the Alpha release of ZFS Crypto and links for downloading the binaries is here: http://opensolaris.org/os/project/zfs-crypto/phase1/alpha/ Please pay particular note to