If you run workloads in Azure, and you let their default agent run on your images, I'd highly consider you take 30 minutes to skim around this repo: `Azure/walinuxagent`. Go read through some issues, look at some closed…
Friend, LUKS is reliable. LUKS doesn't just eat data in those edgecases you talk about, there would be tons of reports if that were the case. LUKS is used all over the place for non-server uses too. I can count at least…
Just a heads up, you should be aware that ZFS encryption leaks considerably more metadata than full LUKS block encryption.
There are basically zero scenarios where using raw dm-crypt is recommendable over using LUKS(2) with a detached header. Some (good) distros even have built-in support for detached headers, even. I actually use detached…
If you run workloads in Azure, and you let their default agent run on your images, I'd highly consider you take 30 minutes to skim around this repo: `Azure/walinuxagent`. Go read through some issues, look at some closed…
Friend, LUKS is reliable. LUKS doesn't just eat data in those edgecases you talk about, there would be tons of reports if that were the case. LUKS is used all over the place for non-server uses too. I can count at least…
Just a heads up, you should be aware that ZFS encryption leaks considerably more metadata than full LUKS block encryption.
There are basically zero scenarios where using raw dm-crypt is recommendable over using LUKS(2) with a detached header. Some (good) distros even have built-in support for detached headers, even. I actually use detached…