"Vancouver tech companies couldn't find enough workers to fill their positions"
At the rates they were offering. At least some (maybe most) of this is just a pretext to outsource work to countries with extremely low cost of living.
...or with the dumb decisions they are revealing. "We need someone who knows a mixture of VB and Haskell to design configuration management tools to deploy our Perl-based 'facebook killer' app into the Azure cloud". No thanks. Not at any price.
Years ago they courted a company I managed IT systems for. They tried to convince us to switch off slow 1 Mbit DSL (only thing available in the area) to their 6 Mbit 'wireless DSL' or whatever the hell they were calling it. They said there were no caps. The first month bill was horrific. We ditched them immediately and went back to the DSL provider. We'd regularly suck data down the pipe at nearly line speed. We'd regularly hit 1.5 TB/mo and the ISP *never* complained about the amount of data transfer. Hell--at home I regularly do between 10 and 15 TB/mo. No one complains. It's just cell companies. Fsck them.
Tinfoil hat time, but the same data could provide the means of a well-crafted home invasion. In the event of a full breach home invasion, one of the advantages that the home owner has is knowing the layout of their home. If those that mean to do harm, have the home layout they can pre-plan out everything in advance.
That's why I rearrange all my rooms daily. Imagine their surprise when they burst into the master bedroom only to find it full of dishes from earlier in the day.
I'd get a truckload of old boxes and make a giant cardboard box maze along with some spiral and regular ramps. Maybe even a Jubilex, Asmodeus map or a Wizard of Yendor tower.
Bonus points for the geek that gets their mapping program to output MC Escher's staircase painting.
Double bonus points for the geek that introduces a fractal image that crashes their servers similar to the image Picard wanted to introduce into the Borg Collective via Hugh...
1. Only hire admins I feel comfortable absolutely trusting.
I know people I absolutely trust. I also know they're going to screw up now and then. I'm also aware that I can be mistaken in my absolute trust, but I'm willing to take the chance.
Yeah--part of that should be dealt with by policy and procedure. While admins should have access to destructive DB operations, they shouldn't be accessing the database with those special privileges if they are writing code for example.
If you really own the company, what you do with it is your business. If you are working for someone else, moving data to your own home is potentially unethical and an option of last resort after you've presented better options for data archiving.
Agreed.
The instance for the source article is a former admin was the one who wiped all the data. So the better question is, at your company, are you alone completely capable of wiping all of your data, backups, and archiving? What is the company's procedure for data security if you leave or are terminated?
At my company (that I started and own), no one is capable of wiping all the backups.
If I leave or get 'terminated' (not sure how that works in a private business...death maybe?), it's probably in a situation where I've sold the company. It's up to the new company to implement their own backup and security policies and procedures.
This wasn't a regular employee, it was an admin with access privileges which weren't revoked in time, or had set up a killswitch prior to leaving. It's not the first time it's happened, and won't be the last.
Yup. A company I worked for 20 years ago had the admins start locking you out the moment you were pulled in to the HR meeting. They made sure the meeting lasted at least an hour. Gave us plenty of time to revoke access.
So for me, while I'd like to hire someone I could trust to house the data at his own home, but even better, I'd prefer to hire someone who would tell me the reasons why it isn't a good idea.
Meh. I'd rather have someone I can trust. Being told why it isn't a good idea sorta goes hand-in-hand with that.
Wait. So, now two people have full backups at their houses? I really, really hope that you don't deal with any data or servers that touch PCI-DSS, HIPPA, FERPA or other controlled data sets. I also hope you and your employee are never in a situation where you get laid off or fired. Having ALL that data in a personal residence will cause nothing but problems and could be extremely damaging to the company.
Nope. I'm not a doctor, I don't run any sort of medical clinic, and I don't touch PCI-DSS data. Remembver the original topic? Wiping and spinning up new VMs in the cloud? Why would someone be storing PCI-DSS data 'in the cloud' on virtual machines?
They're talking about the restore job. I'm not sure I'd want to automatically launch that...
Restoring from tarsnap is a bit slow at times, but that's an "everything else has failed" contingency plan. I have monitoring and alerting, so if the DB mysteriously went away, I'd wake up, coordinate with the other ops guys, and start a restore.
The databases are snapshotted every hour and backed up using tarsnap as well as an rsync down to a NAS at my house..
So, you only have one backup at one place? You're flirting with desaster.
Nope. Backups happen in two ways. ZFS snapshot combined with a snapshot pull to my off-site NAS, and an 'autopostgresqlbackup' "snapshot" that gets backed up via 'tarnsnap' as well as rsynced to yet another off-site NAS.
So there's a copy on the actual DB server, a snapshot on the DB server, a snapshot on my local NAS, a copy on another NAS in a different location, plus a tarsnap backup. I'm confident in my ability to restore. I've tested it.;)
Can you really guarantee that you'll be able to do that if another admin with equal rights to yours maliciously wipes data?
Because sure you have snapshots but a couple lines of Powershell/BASH and all of them are gone in 5 minutes. And you might have tape or cloud backups but another few commands and the tapes get zeroed overnight while cloud storage can be deprovisioned in seconds.
Yes, because I have three personal policies related to this:
1. Only hire admins I feel comfortable absolutely trusting.
2. Follow the principle of 'least privilege' (I have backups on my storage NAS at home, and I am the only one with access to the data. A friend of mine has a similar storage setup at his house and he also has backups of the database that only *he* has access to.
3. Keep backups of your salt config somewhere where other malicious actors don't have access to it. (Salt config is stored on github where admins have access and could royally fsck it up, but I also 'git clone' it down to my NAS every 24 hours and back it up off-site using 'tarsnap').
You can wipe every single VM I have and I can restore everything within an hour because they are all configured using salt.
Any competently run IT department should be able to largely recover from the malicious actions of an external actor. But that's not really the question now, is it?
The question is: if you chose to destroy all of that data - including, I assume, your salt configurations - could someone else recover and rebuild those VMs - including their (reasonably recent) data?
Yeah--exactly. In my case, our salt configs are checked in to a git repo, so it's as 'simple' as spinning up a new salt master, cloning the config, configuring the master master from the salt config, then spinning up the other hosts and kicking off the config. Then restore the databases from backups. In my case they should be ~2 hours old at most.
As long as you have access to the git repo, you can do it. Finding a competent admin that knows salt (or puppet or chef) with the skills required to spin up the architecture is another matter though...;)
Could you explain "salt?" It's new to me but from your context I should know it. (A link would be fine).
Yup--as others posted below, 'salt stack'. It's pretty much like 'Puppet', 'Chef', or 'Ansible'. Set up a 'salt mater' and point all your 'salt minions' to the master. Then you can define the way you want your systems to be configured from the master. i.e. things like disabling SSH password auth, deploying authorized SSH keys, configuring firewalls, cron jobs, packages installed, etc...
Nobody with a brain stores important data on someone elses server.
...without a backup.
You can wipe every single VM I have and I can restore everything within an hour because they are all configured using salt. The databases are snapshotted every hour and backed up using tarsnap as well as an rsync down to a NAS at my house.
I know I can do it in an hour because when Digital Ocean was having trouble at one of their data centers a few years back, I spun up new VMs and migrated everything to another data center.
Terrorism: The use of unlawful violence and intimidation, especially against civilians, in the pursuit of political aims.
Go find an old copy of Black's Law Dictionary from the 1700s. The original definition of terrorism *was* a government creating fear or harm for political reasons.
I finally am cellphone-only after a decade of my internet provider refusing to provide internet service unless I had a phone line.
I know what you're thinking, DSL requires a phone line, right? Nope. They provide fiber to the home, but they won't provision it unless you also get their VoIP service because (they claim) of some FCC requirement.....at a cost of $30 for the phone line.
It made their base package:
$60/mo for 5 down/1 up plus $30 for a phone line that isn't connected to anything.
The total cost with taxes and stuff was around $105/mo.
Their high-end package was $250/mo for 1gbit/1gbit, but after running lots of performance tests they were usually only able to provide about 250mbit/500mbit.
Their answer was "well, sometimes during peak usage you might not be able to get the full 1gbit.
Yeah...using a bit of linux scripting, I ran a speed test every 5 minutes for a week. 95th percentile was about 250mbit and their highest was 330mbit.
They finally dropped the VoIP requirement about a month ago.
...now if I could just figure out how to lease a strand of all that fiber that runs past my house to Seattle, I'd throw up a wireless network and start serving my neighbors...
You've got something hardware-related wrong with that MacBook.
Apple's own diagnostics tools say the hard drive and memory are fine.
Apple's own techs (the company shipped it off to Apple) say it's fine.
I have had exactly ONE Kernel Panic (what you are incorrectly calling a "Seg-fault")
Nope. I'm not incorrect. The kernel has never panic'd on my Macbook. But lots of applications (like 'vim') will suddenly dump me back to the command line with a segfault message.
And before you say that is because all I use are "approved", "safe" applications, then perhaps you should look to the quality of the APPLICATIONS, and stop blaming the PLATFORM. If you search for "vim crash os x", you will find a long and storied history of that simple Editor being an unstable POS. Don't think it's the Mac's fault. It's a fucking EDITOR, FFS!
Weird. Vim workes perfectly for me on Linux, FreeBSD, and Windows. No crashes. Must just be a Mac thing.
Anyways, the Mac may be perfect for you. It's definitely not for me. Ignoring the constant crashing for a moment, nothing is more intuitive to me than having to remember CTRL+T opens a new tab on Linux, FreeBSD, and Windows...but for the elitist Mac platform I have to shift my finger over and hit APPLE+T.
Or how about Linux, FreeBSD, and Windows using the home/end keys go to the beginning and end of a line. But the elitist Mac platform scrolls to the beginning and end of a browser window, document, etc...
Or how about the weird Mac Mail issues where it absolutely refuses to show the status of a SMIME signed or encrypted message?
Or how about turning on an Android phone without a SIM card and being able to instantly begin to use it for developing apps? But the elitist Mac platform absolutely requires you to activate the iPhone with a SIM card, followed by the requirement to set up a valid credit card before installing a *free* application from their store.
How about deploying tablets to fire, EMS, or police vehicles? With Google you simply sign up for Google Apps by entering some basic information, then provisioning the tablets. Done. In about 45 minutes. But the elitist Apple platform requires you to set up an account for volume purchasing. Oh, you already had an iTunes account? Sorry, that won't work. Create a new e-mail address and a new account. Then wait for all sorts of business verification (like your DUNS number) before you get access to an account that appears to have the sole purpose of issuing a signing certificate and allowing you to authorize other accounts (don't use existing ones!) to sign in to the tablets. Then buy a Mac Mini, buy the $20 OSX server software, start to configure it---oops, there's an update to the OS. Upgrade and find all your server shit broken. Oh, and by the way, you have to re-buy the *new* server software for the newly upgraded OS. Then try to fix it. After 9 months of having various Apple 'professionals' stumble around and not be able to deploy it, I spend two weeks during business hours using Apple Support to get it working. After throwing away and re-creating 20 iCloud accounts because Apple couldn't delete them or change them to the right type so it can participate in their VPP program. Screw that mess.
So once again, yeah, I have a *lot* of Apple hate. It's a toy OS for people who don't have to do anything more complicated than check e-mail and browse the web in a *very* playskool "my first computer"-type interface.
...but I will say one nice thing about Apple...they do appear to take user privacy *very* seriously when compared to Microsoft and Google. If they could just fix their retarded interface and brain-damaged ideas about doing thing 'differently' for the sole purpose of appearing different than Microsoft...I would consider buying it.
Well, I was simply asking when the ZFS folks got booting working, because it used to be a problem IIRC.
It's been working fine on FreeBSD and Linux.
But since you can't hold a rational discourse with spewing Apple Hate, I guess we're done here.
Yeah, I hate apple. I have good reason to. I just listed one--they went with their own shit-tastic filesystem and last time I checked, they aren't open enough to boot from ZFS.
It may surprise you, but my work computer is a piece-of-shit Macbook Pro. I am forced to use it by policy. It's *terrible*. If I don't fit the 'Apple mold' and just use brain-dead point-and-click applications all day, I end up with segfaults, performance problems, and out-of-memory issues. Hell--vim segfaults 2-3 times per hour on my Macbook. I've never seen that on Linux or FreeBSD. I measure my Macbook uptime in hours, my Linux uptime in months, and my FreeBSD uptime in years.
So yeah--I have a *lot* of hate for Apple products. All it took was using a Macbook Pro for ~3 months in my life, and a newly issued iPhone S (for evaluating an iOS app) for the last week. You might not like the hate, but it's absolutely justified hate. And since this is about filesystems and Apple just released a product that screams "we wanted ZFS, but not-invented-here" that doesn't checksum user data...well...one more reason to hate Apple products.
That was one of the main reasons that Apple didn't adopt it back in the Leopard days, when they had that experimental ZFS driver running.
Not sure if you missed my original post or what...but I don't use Apple crap *because* of the brain-damaged 'features'. Like APFS. I use ZFS on FreeBSD and occasionally Linux. Booting works fine from both, although FreeBSD has a nice polished installer to do it for you. In Linux it's a very manual process to set it up. As for ZFS on Apple? I have no clue. In two decades I only ever had one client that absolutely couldn't be switched from Apple to FreeBSD or Linux to achieve better results.
Slashdot Mirror
"Vancouver tech companies couldn't find enough workers to fill their positions"
At the rates they were offering. At least some (maybe most) of this is just a pretext to outsource work to countries with extremely low cost of living.
Years ago they courted a company I managed IT systems for. They tried to convince us to switch off slow 1 Mbit DSL (only thing available in the area) to their 6 Mbit 'wireless DSL' or whatever the hell they were calling it. They said there were no caps. The first month bill was horrific. We ditched them immediately and went back to the DSL provider. We'd regularly suck data down the pipe at nearly line speed. We'd regularly hit 1.5 TB/mo and the ISP *never* complained about the amount of data transfer. Hell--at home I regularly do between 10 and 15 TB/mo. No one complains. It's just cell companies. Fsck them.
Tinfoil hat time, but the same data could provide the means of a well-crafted home invasion. In the event of a full breach home invasion, one of the advantages that the home owner has is knowing the layout of their home. If those that mean to do harm, have the home layout they can pre-plan out everything in advance.
That's why I rearrange all my rooms daily. Imagine their surprise when they burst into the master bedroom only to find it full of dishes from earlier in the day.
I'd get a truckload of old boxes and make a giant cardboard box maze along with some spiral and regular ramps. Maybe even a Jubilex, Asmodeus map or a Wizard of Yendor tower.
Bonus points for the geek that gets their mapping program to output MC Escher's staircase painting.
Double bonus points for the geek that introduces a fractal image that crashes their servers similar to the image Picard wanted to introduce into the Borg Collective via Hugh...
I know people I absolutely trust. I also know they're going to screw up now and then. I'm also aware that I can be mistaken in my absolute trust, but I'm willing to take the chance.
Yeah--part of that should be dealt with by policy and procedure. While admins should have access to destructive DB operations, they shouldn't be accessing the database with those special privileges if they are writing code for example.
If you really own the company, what you do with it is your business. If you are working for someone else, moving data to your own home is potentially unethical and an option of last resort after you've presented better options for data archiving.
Agreed.
The instance for the source article is a former admin was the one who wiped all the data. So the better question is, at your company, are you alone completely capable of wiping all of your data, backups, and archiving? What is the company's procedure for data security if you leave or are terminated?
At my company (that I started and own), no one is capable of wiping all the backups.
If I leave or get 'terminated' (not sure how that works in a private business...death maybe?), it's probably in a situation where I've sold the company. It's up to the new company to implement their own backup and security policies and procedures.
This wasn't a regular employee, it was an admin with access privileges which weren't revoked in time, or had set up a killswitch prior to leaving. It's not the first time it's happened, and won't be the last.
Yup. A company I worked for 20 years ago had the admins start locking you out the moment you were pulled in to the HR meeting. They made sure the meeting lasted at least an hour. Gave us plenty of time to revoke access.
So for me, while I'd like to hire someone I could trust to house the data at his own home, but even better, I'd prefer to hire someone who would tell me the reasons why it isn't a good idea.
Meh. I'd rather have someone I can trust. Being told why it isn't a good idea sorta goes hand-in-hand with that.
Wait. So, now two people have full backups at their houses? I really, really hope that you don't deal with any data or servers that touch PCI-DSS, HIPPA, FERPA or other controlled data sets. I also hope you and your employee are never in a situation where you get laid off or fired. Having ALL that data in a personal residence will cause nothing but problems and could be extremely damaging to the company.
Nope. I'm not a doctor, I don't run any sort of medical clinic, and I don't touch PCI-DSS data. Remembver the original topic? Wiping and spinning up new VMs in the cloud? Why would someone be storing PCI-DSS data 'in the cloud' on virtual machines?
So it is enough to blow up your house.
Only if you didn't read and understand the entire comment.
They're talking about the restore job. I'm not sure I'd want to automatically launch that...
Restoring from tarsnap is a bit slow at times, but that's an "everything else has failed" contingency plan. I have monitoring and alerting, so if the DB mysteriously went away, I'd wake up, coordinate with the other ops guys, and start a restore.
The databases are snapshotted every hour and backed up using tarsnap as well as an rsync down to a NAS at my house..
So, you only have one backup at one place? You're flirting with desaster.
Nope. Backups happen in two ways. ZFS snapshot combined with a snapshot pull to my off-site NAS, and an 'autopostgresqlbackup' "snapshot" that gets backed up via 'tarnsnap' as well as rsynced to yet another off-site NAS.
;)
So there's a copy on the actual DB server, a snapshot on the DB server, a snapshot on my local NAS, a copy on another NAS in a different location, plus a tarsnap backup. I'm confident in my ability to restore. I've tested it.
Can you really guarantee that you'll be able to do that if another admin with equal rights to yours maliciously wipes data?
Because sure you have snapshots but a couple lines of Powershell/BASH and all of them are gone in 5 minutes. And you might have tape or cloud backups but another few commands and the tapes get zeroed overnight while cloud storage can be deprovisioned in seconds.
Yes, because I have three personal policies related to this:
1. Only hire admins I feel comfortable absolutely trusting.
2. Follow the principle of 'least privilege' (I have backups on my storage NAS at home, and I am the only one with access to the data. A friend of mine has a similar storage setup at his house and he also has backups of the database that only *he* has access to.
3. Keep backups of your salt config somewhere where other malicious actors don't have access to it. (Salt config is stored on github where admins have access and could royally fsck it up, but I also 'git clone' it down to my NAS every 24 hours and back it up off-site using 'tarsnap').
You can wipe every single VM I have and I can restore everything within an hour because they are all configured using salt.
Any competently run IT department should be able to largely recover from the malicious actions of an external actor. But that's not really the question now, is it?
The question is: if you chose to destroy all of that data - including, I assume, your salt configurations - could someone else recover and rebuild those VMs - including their (reasonably recent) data?
Yeah--exactly. In my case, our salt configs are checked in to a git repo, so it's as 'simple' as spinning up a new salt master, cloning the config, configuring the master master from the salt config, then spinning up the other hosts and kicking off the config. Then restore the databases from backups. In my case they should be ~2 hours old at most. As long as you have access to the git repo, you can do it. Finding a competent admin that knows salt (or puppet or chef) with the skills required to spin up the architecture is another matter though... ;)
Could you explain "salt?" It's new to me but from your context I should know it. (A link would be fine).
Yup--as others posted below, 'salt stack'. It's pretty much like 'Puppet', 'Chef', or 'Ansible'. Set up a 'salt mater' and point all your 'salt minions' to the master. Then you can define the way you want your systems to be configured from the master. i.e. things like disabling SSH password auth, deploying authorized SSH keys, configuring firewalls, cron jobs, packages installed, etc...
An hour, if you happen to be awake and available.
Perhaps you've never heard of 'automation'? It allows you to perform actions 'automatically'. You can do wonderful things like launch backup jobs...
I wouldn't hire a guy who copies all my data to his house.
Funny, it's data from *my* company. I'm the guy who *owns* the data. So why shouldn't back a copy up to my 12 TB storage array at my house?
If I worked for *your* company, I would back it up wherever *you* wanted it.
Nobody with a brain stores important data on someone elses server.
...without a backup.
You can wipe every single VM I have and I can restore everything within an hour because they are all configured using salt. The databases are snapshotted every hour and backed up using tarsnap as well as an rsync down to a NAS at my house.
I know I can do it in an hour because when Digital Ocean was having trouble at one of their data centers a few years back, I spun up new VMs and migrated everything to another data center.
Terrorism: The use of unlawful violence and intimidation, especially against civilians, in the pursuit of political aims.
Go find an old copy of Black's Law Dictionary from the 1700s. The original definition of terrorism *was* a government creating fear or harm for political reasons.
I finally am cellphone-only after a decade of my internet provider refusing to provide internet service unless I had a phone line.
....at a cost of $30 for the phone line.
...now if I could just figure out how to lease a strand of all that fiber that runs past my house to Seattle, I'd throw up a wireless network and start serving my neighbors...
I know what you're thinking, DSL requires a phone line, right? Nope. They provide fiber to the home, but they won't provision it unless you also get their VoIP service because (they claim) of some FCC requirement.
It made their base package:
$60/mo for 5 down/1 up plus $30 for a phone line that isn't connected to anything.
The total cost with taxes and stuff was around $105/mo.
Their high-end package was $250/mo for 1gbit/1gbit, but after running lots of performance tests they were usually only able to provide about 250mbit/500mbit.
Their answer was "well, sometimes during peak usage you might not be able to get the full 1gbit.
Yeah...using a bit of linux scripting, I ran a speed test every 5 minutes for a week. 95th percentile was about 250mbit and their highest was 330mbit.
They finally dropped the VoIP requirement about a month ago.
It's smaller, but more expensive and seems to have approximately the same vocabulary.
You've got something hardware-related wrong with that MacBook.
Apple's own diagnostics tools say the hard drive and memory are fine.
Apple's own techs (the company shipped it off to Apple) say it's fine.
I have had exactly ONE Kernel Panic (what you are incorrectly calling a "Seg-fault")
Nope. I'm not incorrect. The kernel has never panic'd on my Macbook. But lots of applications (like 'vim') will suddenly dump me back to the command line with a segfault message.
And before you say that is because all I use are "approved", "safe" applications, then perhaps you should look to the quality of the APPLICATIONS, and stop blaming the PLATFORM. If you search for "vim crash os x", you will find a long and storied history of that simple Editor being an unstable POS. Don't think it's the Mac's fault. It's a fucking EDITOR, FFS!
Weird. Vim workes perfectly for me on Linux, FreeBSD, and Windows. No crashes. Must just be a Mac thing.
...but I will say one nice thing about Apple...they do appear to take user privacy *very* seriously when compared to Microsoft and Google. If they could just fix their retarded interface and brain-damaged ideas about doing thing 'differently' for the sole purpose of appearing different than Microsoft...I would consider buying it.
Anyways, the Mac may be perfect for you. It's definitely not for me. Ignoring the constant crashing for a moment, nothing is more intuitive to me than having to remember CTRL+T opens a new tab on Linux, FreeBSD, and Windows...but for the elitist Mac platform I have to shift my finger over and hit APPLE+T.
Or how about Linux, FreeBSD, and Windows using the home/end keys go to the beginning and end of a line. But the elitist Mac platform scrolls to the beginning and end of a browser window, document, etc...
Or how about the weird Mac Mail issues where it absolutely refuses to show the status of a SMIME signed or encrypted message?
Or how about turning on an Android phone without a SIM card and being able to instantly begin to use it for developing apps? But the elitist Mac platform absolutely requires you to activate the iPhone with a SIM card, followed by the requirement to set up a valid credit card before installing a *free* application from their store.
How about deploying tablets to fire, EMS, or police vehicles? With Google you simply sign up for Google Apps by entering some basic information, then provisioning the tablets. Done. In about 45 minutes. But the elitist Apple platform requires you to set up an account for volume purchasing. Oh, you already had an iTunes account? Sorry, that won't work. Create a new e-mail address and a new account. Then wait for all sorts of business verification (like your DUNS number) before you get access to an account that appears to have the sole purpose of issuing a signing certificate and allowing you to authorize other accounts (don't use existing ones!) to sign in to the tablets. Then buy a Mac Mini, buy the $20 OSX server software, start to configure it---oops, there's an update to the OS. Upgrade and find all your server shit broken. Oh, and by the way, you have to re-buy the *new* server software for the newly upgraded OS. Then try to fix it. After 9 months of having various Apple 'professionals' stumble around and not be able to deploy it, I spend two weeks during business hours using Apple Support to get it working. After throwing away and re-creating 20 iCloud accounts because Apple couldn't delete them or change them to the right type so it can participate in their VPP program. Screw that mess.
So once again, yeah, I have a *lot* of Apple hate. It's a toy OS for people who don't have to do anything more complicated than check e-mail and browse the web in a *very* playskool "my first computer"-type interface.
Well, I was simply asking when the ZFS folks got booting working, because it used to be a problem IIRC.
It's been working fine on FreeBSD and Linux.
But since you can't hold a rational discourse with spewing Apple Hate, I guess we're done here.
Yeah, I hate apple. I have good reason to. I just listed one--they went with their own shit-tastic filesystem and last time I checked, they aren't open enough to boot from ZFS.
It may surprise you, but my work computer is a piece-of-shit Macbook Pro. I am forced to use it by policy. It's *terrible*. If I don't fit the 'Apple mold' and just use brain-dead point-and-click applications all day, I end up with segfaults, performance problems, and out-of-memory issues. Hell--vim segfaults 2-3 times per hour on my Macbook. I've never seen that on Linux or FreeBSD. I measure my Macbook uptime in hours, my Linux uptime in months, and my FreeBSD uptime in years.
So yeah--I have a *lot* of hate for Apple products. All it took was using a Macbook Pro for ~3 months in my life, and a newly issued iPhone S (for evaluating an iOS app) for the last week. You might not like the hate, but it's absolutely justified hate. And since this is about filesystems and Apple just released a product that screams "we wanted ZFS, but not-invented-here" that doesn't checksum user data...well...one more reason to hate Apple products.
News to me. When did they get that working?
That was one of the main reasons that Apple didn't adopt it back in the Leopard days, when they had that experimental ZFS driver running.
Not sure if you missed my original post or what...but I don't use Apple crap *because* of the brain-damaged 'features'. Like APFS. I use ZFS on FreeBSD and occasionally Linux. Booting works fine from both, although FreeBSD has a nice polished installer to do it for you. In Linux it's a very manual process to set it up. As for ZFS on Apple? I have no clue. In two decades I only ever had one client that absolutely couldn't be switched from Apple to FreeBSD or Linux to achieve better results.
Can you boot from your ZFS drives?
Yes. Is there some reason I shouldn't be able to?
And I have run HFS and HFS+ since 1984 or '85, on several dozen machines. Never failed once.
Now what?
From wikipedia:
Apple File System uses checksums to ensure data integrity for metadata, but not user data.
I'm glad ZFS cares about the integrity of *my* data, not just its metadata.
And I have run HFS and HFS+ since 1984 or '85, on several dozen machines. Never failed once.
Now what?
Have you recovered 100% of your data from a 6 our of 10 drives failing within a 48 hours window?
Can you yank the drives out of one machine, put them into a pile, and then randomly plug them into another machine and access your data?
Can you do that while the OS is running?
How about in the middle of writing data?
Without running chkdsk or fsck?