Linked by Thom Holwerda on Mon 15th Nov 2010 23:37 UTC, submitted by comay
Oracle and SUN Today Oracle released its latest version of Solaris technology, the Oracle Solaris 11 Express 2010.11 release. It includes a large number of new features not found in either Oracle Solaris 10 or previous OpenSolaris releases including ZFS encryption and deduplication, network-based packaging and provisioning systems, network virtualization, optimized I/O for NUMA platforms and optimized platform support including support for Intel's latest Nehalem and SPARC T3. In addition, Oracle Solaris 10 support is available from within a container/zone so migration of existing systems is greatly simplified. The release is available under a variety of licenses including a supported commercial license on a wide variety of x86 and SPARC platforms.
Thread beginning with comment 450374
To view parent comment, click here.
To read all comments associated with this story, please click here.
RE[2]: ZFS Crypto
by phoenix on Wed 17th Nov 2010 22:12 UTC in reply to "RE: ZFS Crypto"
phoenix
Member since:
2005-07-11

Agreed. And for me, I really want be able to encrypt a disk partition. ZFS crypto is a /big/ feature.


ZFS crypto will not help with encrypting a single disk partition, as it works at the filesystem layer, not the disk layer. Unless you are going to make a pool using just that one partition, but then you lose all the benefits of running ZFS as you have 0 redundancy.

There are other options to encryption, even with ZFS; at least in the FreeBSD world, thanks to GEOM. Use geli(4) to create encrypted GEOM providers, then build your ZFS pool out of those providers. Voila! Encrypted ZFS pool. Sure, it's pool-level and not ZFS filesystem level, but it's still encrypted. ;)

Reply Parent Score: 2

RE[3]: ZFS Crypto
by Kebabbert on Thu 18th Nov 2010 10:43 in reply to "RE[2]: ZFS Crypto"
Kebabbert Member since:
2007-07-27

In ZFS it is extremely easy and quick to a new filesystem. Filesystems are extremely light weight, like an ordinary directory.
# zfs create myZPOOL/thisIsAFilesystem
which takes less than one second.

In other words, it is no problem that "only" filesystems are encrypted. You should only store data in filesystems anyway.

Reply Parent Score: 2