Open PGP

[ice5192]

figured it out ill be contacting IX systems in the morning.

Sincerely, Paying customer

freenas-virtualbox-4.3.12.tgz 10252288 349849600

 

[pirateghost]

what?

what does the name of the virtualbox plugin have to do with this? what does "paying customer" have to do with anything?

FreeNAS support is handled by volunteers on this forum. We are volunteers. We don't work for iXSystems.

 

[pirateghost]

Here is your walkthrough:

Configure your jails configuration.

Click on 'Jails'

Add Jail

name it

after it is created, ssh into your FreeNAS box (not telnet).

run `jls`

jexec <idofjail> tcsh

you are now in a freebsd jail and can do whatever you like inside it.

Now that you have the hard part of adding a jail, let's break this down.

You can use gnupgp to encrypt a/some file(s). You cannot encrypt an entire hard drive. Your hard drive will have to be in a pool/volume of its own if you want to connect/disconnect it. If you are talking about using multiple USB hard drives one after another, then FreeNAS is not for you. This is not the intent of the system.

My recommendation: Use a client machine, encrypt whatever drive you like, on the client machine, and copy your data to it. You are not going to be able to do this on the NAS directly.

PS. iXSystems is likely to tell you the same thing if they even bother.

 

[SweetAndLow]

Lets add this into the mix

the Virtual Drive is said Freenas Volume IE NAS1 this is ready for backing up of the data which will be pushed to via over the Windows share folder we then want to take that and as you state is not possible to use the jail with Freebsd and openpgp it then tar it once completed then move on to the next hdd as openpgp is a standard we were hoping to eliminated steps when having to do the transfer of the raw data from the NAS 1 (which was sent via from a share folder in windows sharing to the nas unencrypted to the output of a USB drive which we are wanting to be encrypted?

Was this really one big sentence. Zero punctuation.

Sent from my Nexus 5X using Tapatalk

 

[danb35]

As a general proposition, we don't respond well to "I don't have time to do my homework, so please spoon-feed me the answer." We respond much better to "I'm trying to do X, and I reviewed this section of the manual, but I'm having trouble understanding Y. Can someone help me understand that?"

 

[toadman]

I have seen some weird threads before, but this could be a record. 25 posts in and I still can't figure out the original objective. :(

All I can speculate is there is some data sitting in a pool on a freenas server. The OP wants to transfer this data to mobile hard drives (USB). The mobile hard drives must only contain encrypted data.

This guy did full disk encryption with GELI. But, based on the thread to date I would give this less than 0.01% chance of being successful by the OP trying it in a jail. https://vesterman.com/FreeBSD/FullDiskEncryption

It would be helpful to also know what type of system is going to read these drives on the other end after transport.

 

[ice5192]

I have seen some weird threads before, but this could be a record. 25 posts in and I still can't figure out the original objective. :(

All I can speculate is there is some data sitting in a pool on a freenas server. The OP wants to transfer this data to mobile hard drives (USB). The mobile hard drives must only contain encrypted data.

This guy did full disk encryption with GELI. But, based on the thread to date I would give this less than 0.01% chance of being successful by the OP trying it in a jail. https://vesterman.com/FreeBSD/FullDiskEncryption

It would be helpful to also know what type of system is going to read these drives on the other end after transport.

Custom program which was made for scanning the sectors and pulling the keys for the Openpgp
encryption method

 

[danb35]

What "OpenPGP" software are you thinking of that does full-disk encryption?

 

[Stux]

So, your real question is

"Can I do full disk encryption in FreeBSD using gnupg?"

Dunno.

Maybe you can encrypt the tar instead. BEFORE you copy it to the disk. (Or as)

 

[pirateghost]

How'd that call with ixsystems go today?