Differences
This shows you the differences between two versions of the page.
Both sides previous revisionPrevious revisionNext revision | Previous revisionNext revisionBoth sides next revision | ||
advanced:target [2018/10/04 23:48] – [Enable encryption, and create an encrypted dataset] dan | advanced:target [2018/10/05 12:41] – dan | ||
---|---|---|---|
Line 8: | Line 8: | ||
===== Rebuild the kernel ===== | ===== Rebuild the kernel ===== | ||
- | To ensure | + | In order to build ZFS, you must have the headers for the running kernel installed |
< | < | ||
sudo apt update && sudo apt upgrade | sudo apt update && sudo apt upgrade | ||
Line 32: | Line 32: | ||
These instructions are taken from the [[https:// | These instructions are taken from the [[https:// | ||
< | < | ||
- | sudo apt install | + | sudo apt install autoconf libtool gawk alien fakeroot zlib1g-dev uuid-dev libattr1-dev libblkid-dev libselinux-dev libudev-dev parted lsscsi ksh libssl-dev libelf-dev |
</ | </ | ||
Then download, build, and install the ZFS code: | Then download, build, and install the ZFS code: | ||
Line 69: | Line 69: | ||
===== Create a replication user ===== | ===== Create a replication user ===== | ||
- | For the sake of security, it would be best if replication to this device ran as a user other than root. | + | For the sake of security, it would be best if replication to this device ran as a user other than root. |
+ | |||
+ | Then, on the Odroid, as root, run | ||
< | < | ||
- | adduser zfsuser | + | adduser zfsuser |
</ | </ | ||
- | Disable login for that user: | + | where " |
+ | |||
+ | Now allow that user to make changes on the encrypted dataset: | ||
< | < | ||
- | chsh -s /bin/false zfsuser | + | zfs allow -ldu zfsuser create, |
</ | </ | ||
- | Generate a SSH keypair for that user: | + | ===== Install Zerotier ===== |
+ | Zerotier will create an encrypted virtual network connection between your Odroid and your FreeNAS box. It's installed by default on FreeNAS, but you'll need to install it on the Odroid. | ||
< | < | ||
- | sudo -u zfsuser ssh-keygen | + | sudo apt install curl |
+ | curl https:// | ||
</ | </ | ||
- | Now allow that user to make changes on the encrypted dataset: | ||
- | < | ||
- | zfs allow -ldu zfsuser create, | ||
- | </ | ||
- |