Turns out, #LVM#RAID-1 with #dmintegrity over two separate physical disks and then putting a #dmcrypt device on top of the RAID is really slow. As in, it's estimating to take a week to do the initial sync on the two 12TB WD Red drives on SATA. (For comparison, zeroing out one of these disks should take 8 hours or something.)
Apparently it's a somewhat-known problem with dm-integrity, related to its journal.
How would you build something bitrot-safe & encrypted with that hardware? #Debian 12.
If you want to avoid that, you could put ecryptfs on top of btrfs, and loose some btrfs features and potentially leak metadata.
You can do a cryptsetup benchmark to see how fast your kernel would encrypt the data stream, and then compare that to the 100ish mb/s your HDDs deliver ... if your not on an rpi then you should have support for aesni or a fast enough CPU to handle all the HDDs you want, performance wise ...
Add comment