<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
<meta name="Generator" content="Microsoft Exchange Server">
<!-- converted from text --><style><!-- .EmailQuote { margin-left: 1pt; padding-left: 4pt; border-left: #800000 2px solid; } --></style>
</head>
<body>
<meta name="x_Generator" content="Microsoft Word 15 (filtered medium)">
<style>
<!--
p.x_MsoNormal, li.x_MsoNormal, div.x_MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif}
a:x_link, span.x_MsoHyperlink
{color:blue;
text-decoration:underline}
a:x_visited, span.x_MsoHyperlinkFollowed
{color:#954F72;
text-decoration:underline}
.x_MsoChpDefault
{}
div.x_WordSection1
{}
-->
</style>
<div lang="EN-US" link="blue" vlink="#954F72">
<div class="x_WordSection1">
<p class="x_MsoNormal">I didn’t spend too much time researching using lofi as a block device, there isn't much info either. Now add zones to mix since the destination side is zones and no information is available.</p>
<p class="x_MsoNormal"> </p>
<p class="x_MsoNormal">Encryption remains this stumbling block that seems to be getting bigger and bigger every year based on requirements.</p>
<p class="x_MsoNormal"> </p>
<p class="x_MsoNormal">I ill have to spend ample time with lofi on my test gear and try to figure something out.
</p>
<p class="x_MsoNormal"> </p>
<p class="x_MsoNormal">Sent from my Windows 10 phone</p>
<p class="x_MsoNormal"> </p>
<div style="border:none; border-top:solid #E1E1E1 1.0pt; padding:3.0pt 0in 0in 0in">
<p class="x_MsoNormal" style="border:none; padding:0in"><b>From: </b><a href="mailto:jimklimov@cos.ru">Jim Klimov</a><br>
<b>Sent: </b>Thursday, August 3, 2017 13:12<br>
<b>To: </b><a href="mailto:omnios-discuss@lists.omniti.com">omnios-discuss@lists.omniti.com</a>;
<a href="mailto:gearboxes@outlook.com">Machine Man</a>; <a href="mailto:omnios-discuss@lists.omniti.com">
omnios-discuss@lists.omniti.com</a><br>
<b>Subject: </b>Re: [OmniOS-discuss] Encryption options</p>
</div>
<p class="x_MsoNormal"> </p>
<p class="x_MsoNormal"> </p>
</div>
</div>
<font size="2"><span style="font-size:10pt;">
<div class="PlainText">On August 3, 2017 5:50:32 PM GMT+02:00, Machine Man <gearboxes@outlook.com> wrote:<br>
>Currently I have a few of deployments of OmniOS at remote sites hosing<br>
>2 - 7 VMs per site and replicate snapshots of the VMs to a central<br>
>server at a hosting location.<br>
>My customers are starting to get pressure that the local and backup<br>
>data is not encrypted at rest and its becoming critical for them to<br>
>take on new clients.<br>
><br>
>I know lofi is an option, but I don't know how replicating incremental<br>
>snapshots is going to work and also it looks like I will have to switch<br>
>to files for the VMs instead of using block volumes.<br>
><br>
>Does KVM on IllumOS support TPM? I also cant really find any info on<br>
>this. I dont use ZFS dedup and have no plans really either.<br>
><br>
>Any feedback is appreciated.<br>
><br>
>Sent from Windows Mail<br>
<br>
Just wondering: is it an option to have an encrypted lofi in a zfs volume, as the block device for VM storage? Then it's replication of snapshots of this volume, keys not included.<br>
<br>
For files, you can always dedicate a filesystem dataset per VM (configs, disks, etc) and snapshot/replicate that, individually.
<br>
--<br>
Typos courtesy of K-9 Mail on my Android<br>
</div>
</span></font>
</body>
</html>