!kyXJonZuBXCGzVwuSn:nixos.org

Systems Programming

175 Members
Kernel, stdenv, low-level hacking, patchelf, … 62 Servers

Load older messages


SenderMessageTime
4 Jun 2024
@raitobezarius:matrix.orgraitobezariusi recommend to give up on this or ask yourself why you really want this16:22:01
@raitobezarius:matrix.orgraitobezariusyou can just push encrypted data via a non-filesystem API16:22:15
@netpleb:matrix.orgnetpleb
In reply to @raitobezarius:matrix.org
you can just push encrypted data via a non-filesystem API
yes, this is likely what I will end up doing.
16:23:20
@netpleb:matrix.orgnetpleb
In reply to @raitobezarius:matrix.org
i recommend to give up on this or ask yourself why you really want this
I want it because I have been trying to come up with a backup system which is completely transparent. I had my first experience with btrfs send | .... | btrfs receive and it has been glorious. But the problem was that I had to do the luks decryption on the remote side, so it is less useful to me.
16:26:26
@netpleb:matrix.orgnetpleb
In reply to @raitobezarius:matrix.org
i recommend to give up on this or ask yourself why you really want this
* I want it because I have been trying to come up with a backup system which is sort of as native as possible. I had my first experience with btrfs send | .... | btrfs receive and it has been glorious. But the problem was that I had to do the luks decryption on the remote side, so it is less useful to me.
16:28:23
@netpleb:matrix.orgnetpleb * I want it because I have been trying to come up with a backup system which is sort of as native as possible. I had my first experience with btrfs send | .... | btrfs receive and it has been glorious. But the problem was that I had to do the luks decryption on the remote side, so it is less useful to me because it requires more trust in whoever operates the remote end. So that led me to wonder whether I could do it via luks + network block device (or similar). 16:29:29
7 Jun 2024
@netpleb:matrix.orgnetpleb
In reply to @raitobezarius:matrix.org
you can just push encrypted data via a non-filesystem API
I have another (probably very dumb question), but say you used sshfs to mount a remote directory (over the internet, so latency will be a thing), and in that directory there is a 5GB file which you then locally cryptsetup luksFormat ...; cryptsetup open ... ; mount ...; then you write some data to it (say by using dd if=/dev/urandom ... , why does that operation seem to max out at 1MB/s?
20:48:27
@netpleb:matrix.orgnetpleb
In reply to @raitobezarius:matrix.org
you can just push encrypted data via a non-filesystem API
* I have another (probably very dumb question), but say you used sshfs to mount a remote directory (over the internet, so latency will be a thing), and in that directory there is a 5GB file which you then locally cryptsetup luksFormat ...; cryptsetup open ... ; mount ...; then you write some data to it (say by using dd if=/dev/urandom ... ), why does that operation seem to max out at 1MB/s?
20:48:46
@netpleb:matrix.orgnetpleb * I have another (probably very dumb question), but say you used sshfs to mount a remote directory (over the internet, so latency will be a thing), and in that directory there is a 5GB file which you then locally run cryptsetup luksFormat ...; cryptsetup open ... ; mount ...; then you write some data to it (say by using dd if=/dev/urandom ... ), why does that operation seem to max out at 1MB/s? 20:49:22
@netpleb:matrix.orgnetpleb * I have another (probably very dumb question), but say you used sshfs to mount a remote directory (over the internet, so latency will be a thing), and in that directory there is a 5GB file which you then locally run cryptsetup luksFormat ...; cryptsetup open ... ; mount ...; then you write some data to it (say by using dd if=/dev/urandom ... ), why would that operation seem to max out at 1MB/s? 20:53:57
@raitobezarius:matrix.orgraitobezariusBuffers?21:07:58
@raitobezarius:matrix.orgraitobezariusOr TCP Nagle idk21:08:36
@netpleb:matrix.orgnetpleb Ok, thanks for your input. I do not have much experience with sshfs either. Maybe sshfs over the internet is just super slow like that. I read somewhere that people get 30-50MB/s when using sshfs on their lan, but maybe it does not work very well on wan 22:04:57
8 Jun 2024
@linus:schreibt.jetzt@linus:schreibt.jetzt
In reply to @joerg:thalheim.io
But using the nixos configuration instead of fstab
the disko configuration, not the nixos configuration, right?
11:52:39
@linus:schreibt.jetzt@linus:schreibt.jetztlast I checked disko configuration doesn't provide the full range of functionality you can get via writing fileSystems yourself, especially stuff relevant for impermance-style setups11:53:20
@joerg:thalheim.ioMic92
In reply to @linus:schreibt.jetzt
the disko configuration, not the nixos configuration, right?
The nixos configuration that has the disko configuration included
11:53:21
@linus:schreibt.jetzt@linus:schreibt.jetzt like if I want to have / be a subdirectory of the filesystem, there's no way to represent that in disko 11:53:55
@joerg:thalheim.ioMic92 Linux Hackerman: I think there is an open issue, I haven't responded to, but there is https://github.com/nix-community/disko/blob/master/lib/types/nodev.nix 11:54:19
@joerg:thalheim.ioMic92
In reply to @linus:schreibt.jetzt
like if I want to have / be a subdirectory of the filesystem, there's no way to represent that in disko
Not sure what this would look like for other filesystems or how you mount this in NixOS. For zfs we have an impermanence example: https://github.com/nix-community/disko-templates/blob/main/zfs-impermanence/disk-config.nix
11:57:01
@linus:schreibt.jetzt@linus:schreibt.jetzt
In reply to @joerg:thalheim.io
Not sure what this would look like for other filesystems or how you mount this in NixOS. For zfs we have an impermanence example: https://github.com/nix-community/disko-templates/blob/main/zfs-impermanence/disk-config.nix
using the X-mount.subdir= mount option
11:57:25
@linus:schreibt.jetzt@linus:schreibt.jetztI guess that could work with nodev11:57:30
@joerg:thalheim.ioMic92I think we also have mountoptions for other filesystems12:01:02
9 Jun 2024
@qubasa:gchq.icuQubasa1000006011.png
Download 1000006011.png
01:55:22
@qubasa:gchq.icuQubasa Mic92: osdev.org seems to have a similar journey to the nixos.wiki 01:56:04
@joerg:thalheim.ioMic92Forking wikis is hard.04:54:41
@joerg:thalheim.ioMic92If we could have better mechanisms to then sync changes back.04:55:11
@qubasa:gchq.icuQubasathat sounds like a chatgpt task :) 10:23:45
@k900:0upti.meK900Please no10:24:35
10 Jun 2024
@mjolnir:nixos.orgNixOS Moderation Bot unbanned @jonringer:matrix.org@jonringer:matrix.org.00:17:07
11 Jun 2024
@networkexception:chat.upi.li@networkexception:chat.upi.li changed their display name from networkException to networkException (moving to @networkexception:nwex.de).18:32:31

Show newer messages


Back to Room ListRoom Version: 6