Hello, On Thu, Aug 20, 2020 at 05:30:20PM -0400, Dan Ritter wrote: > David Christensen wrote: > > Some people have mentioned md RAID. tomas has mentioned LUKS. I believe > > both of them add checksums to the contained contents. So, bit-rot within a > > container should be caught by the container driver. > > This is incorrect. The systems that checksum every write and > recalculate and match on every read are BTRFS and ZFS. > > LVM, LUKS, and mdadm do not.
Indeed, although dm-integrity can now be used with LUKS (with or without encryption) to add checksums that force a read error when they don't match. When there is redundancy (e.g. LVM or MD) a read can then come from a good copy and the bad copy will be repaired. Here is a practical example: https://gist.github.com/MawKKe/caa2bbf7edcc072129d73b61ae7815fb I haven't yet used it in production but if anyone has I would be really interested to see a with and without comparison of performance. Cheers, Andy -- https://bitfolk.com/ -- No-nonsense VPS hosting