http://d-kriptik.com/blog/2005/12/30/gbde-and-memory-disks/ Bridging the technology gap between techies and everyone else. Mon, 29 Mar 2010 23:39:43 +0000 http://wordpress.org/?v=2.9.2 hourly 1 http://d-kriptik.com/blog/2005/12/30/gbde-and-memory-disks/comment-page-1/#comment-346 D-kriptik Blog » Blog Archive » NYC BUG Meeting February 2006 Mon, 06 Feb 2006 06:05:19 +0000 http://d-kriptik.com/blog/?p=68#comment-346 [...] What really caught my attention though was the usage of file-backed guest domains using encrypted (CGD) virtual disks (VND) (pardon my attempt at NetBSD terminology). Domain 0 would setup the encrypted virtual disks and then configure the guest domains to use them. The setup reminded me of my post about using encrypted memory disks in FreeBSD, as this would be a really cool way to use encrypted memory disks. Take those encrypted memory disks and use them for your virtual machines, which could mean that everything that machine tries to write to disk is encrypted first, but without the fanagling necessary to try to setup FreeBSD with boot/root encrypted. Combine that with encrypted swap for domain 0, and perhaps all the bases are covered. Cool stuff. [...] [...] What really caught my attention though was the usage of file-backed guest domains using encrypted (CGD) virtual disks (VND) (pardon my attempt at NetBSD terminology). Domain 0 would setup the encrypted virtual disks and then configure the guest domains to use them. The setup reminded me of my post about using encrypted memory disks in FreeBSD, as this would be a really cool way to use encrypted memory disks. Take those encrypted memory disks and use them for your virtual machines, which could mean that everything that machine tries to write to disk is encrypted first, but without the fanagling necessary to try to setup FreeBSD with boot/root encrypted. Combine that with encrypted swap for domain 0, and perhaps all the bases are covered. Cool stuff. [...]

]]>