Vinum gvinum ja geom
Geli
Ketaste krüpteerimine FreeBSD süsteemis
Kõigepealt on vaja geli tuge tuuma. Seda saab kas kompileerides tuuma uuesti või lihtsam lisada '/etc/rc.conf faili rida
geom_eli_load="YES"
ja teha reboot
peale rebooti peaks dmesgis olema näha rida
cryptosoft0: <software crypto> on motherboard
Ketas mida soovime krüpteerida on /dev/da0
Teeme kettale vajaliku võtme
dd if=/dev/random of=/root/da0.key bs=64 count=1 1+0 records in 1+0 records out 64 bytes transferred in 0.000397 secs (161126 bytes/sec)
Seejärel seome võtme kettaseadmega ja paneme paika parooli millega saame edaspidi kasutada
geli init -s 4096 -K /root/da0.key /dev/da0 Enter new passphrase: Reenter new passphrase:
Ning haagime ketta külge
geli attach -k /root/da0.key /dev/da0 Enter passphrase:
dmesgi peaks ilmuma seejäre teade
GEOM_ELI: Device da0.eli created. GEOM_ELI: Encryption: AES-CBC 128 GEOM_ELI: Crypto: software
kausta /dev peaks nüüd olema tekkinud uus seade da0.eli
ls /dev/da0* /dev/da0 /dev/da0.eli
Alustame uue failisüsteemi loomist. Selleks on soovitatav kirjutada kogu ketas algusest lõpuni suvalise infoga üle. See võib võtta suurema ketta puhul aega 3-4 tundi.
dd if=/dev/random of=/dev/da0.eli bs=1m 40859860992 bytes transferred in 10024.286856 secs (4076087 bytes/sec)
Loome uue failisüsteemi
newfs /dev/da0.eli
/dev/da0.eli: 69464.8MB (142263992 sectors) block size 16384, fragment size 4096
using 207 cylinder groups of 336.98MB, 21567 blks, 21568 inodes.
super-block backups (for fsck -b #) at:
Ja moundime enda ketta
mount /dev/da0.eli /mnt
df Filesystem 1K-blocks Used Avail Capacity Mounted on ... /dev/da0.eli 70009144 8 64408408 0% /mnt
Lahtihaakimiseks käsud
umount /mnt geli detach da0.eli
Ja dmesgi tekib lahtiühenduse kohta teade
GEOM_ELI: Device da0.eli destroyed.
Uuesti haakida saab siis käskudega. Kasutada tuleb varem nimetatud paroole
geli attach -k /root/da0.key /dev/da0 mount /dev/da0.eli /mnt
rc.conf'i automaatseks stardiks. Ei pääse muidugi iga taaskäivituse järle paroolide trükkimisest
geli_devices="da0" geli_da2_flags="-p -k /root/da0.key"
vinum
Starting up Vinum Early Enough for the Root Filesystem /boot/loader.conf
vinum_load="YES"
/boot/loader.conf grub start
geom_vinum_load="YES" vinum.autostart="YES"
fdisk -i teha
disklabel -w
disklabel -e devname
stripe
drive c device /dev/da5h
drive d device /dev/da6h
volume stripe
plex org striped 512k
sd length 128m drive c
sd length 128m drive d
mirroring
drive d1 device /dev/ad2s1a drive d2 device /dev/ad3s1a volume mirror setupstate
plex org concat sd length 76000M drive d1 plex org concat sd length 76000M drive d2
gvinum create -f /etc/vinum.conf
hiljem newfs -v
gstripe
kldload geom_mirror
/boot/loader.conf geom_stripe_load="YES"
gstripe label -v -s 4096 data /dev/ad2 /dev/ad4
newfs /dev/stripe/data
mount /dev/stripe/data /mnt/tank2
df -h
/dev/stripe/data 289G 4.0K 266G 0% /mnt/tank2
cat /var/run/dmesg.boot | grep "ad" gstripe list umount /dev/stripe/data tunefs -m 2 -o space /dev/stripe/data tunefs: minimum percentage of free space changes from 8% to 2% tunefs: should optimize for space with minfree < 8% tunefs: optimization preference changes from time to space
mount /dev/stripe/data /mnt/tank2 /dev/stripe/data 289G 4.0K 283G 0% /mnt/tank2
-m 2 ütleb, et minfree peaks 2% olema ja -o space optimiseerib space'le, mitte access time'le aga kiiremat kaablit vaja, udma33 sucks ASS
fsck_ffs /dev/stripe/data
gmirror
katse# gmirror label -vnb round-robin gm0 /dev/da1 Metadata value stored on /dev/da1. Done. katse# gmirror load katse# gmirror insert gm0 /dev/da2
newfs /dev/mirror/gm0 mount /dev/mirror/gm0s1d /mnt
raid 10
kettaid neil ad1 ad2 ad3 ad4
gmirror label -vnb round-robin gm0 /dev/da1 gmirror load gmirror insert gm0 /dev/da2 gmirror label -vnb round-robin gm1 /dev/da3 gmirror insert gm1 /dev/da4 gstripe label -v -s 4096 data /dev/mirror/gm0 /dev/mirror/gm1 newfs /dev/stripe/data mount /dev/stripe/data /mnt
