Storages ¶
- I use GPT
slices over the disks, because it gives ability to make portable labels,
which can be accessed through /dev/gpt/LABEL paths.
- I use ZFS filesystem
everywhere.
- I trust only cryptographic hashes for integrity checksums. Currently I
use Skein in ZFS,
because it is much faster than SHA2-512/2 (and SHA2-256 of course).
- Transparent compression is enabled on all datasets. I see no bottleneck
or any noticeable CPU burning with
Zstandard algorithm,
comparing to previously used
LZ4.
- Several disks are still encrypted with native FreeBSD’s
GELI AES-XTS FDE.
But I tend to use native ZFS encryption now, just because of convenience
and flexibility. However I would like to see ChaCha20-Poly1305 algorithm
there, instead of AES-GCM.