i’ve found refurbished host-managed SMR drives from Seagate sale; model ST25000NM000E-3L9103 coming from Exos Xz series. below – notes on what did i discover.<\/p>\n\n\n\n
those are not ordinary drives: e.g. they’ll not work under Windows, under linux only some file systems are supported directly or additional layer of dm-zoned<\/a> is needed. i’ve also found out that, at least with my SATA to USB3 docks, such drives will not work with an external docking station. when connected in this way linux did not show anything in the dmesg <\/em>or lsblk<\/em>. drive showed up just fine after connecting directly to SATA controller on motherboard:<\/p>\n\n\n\n <\/p>\n\n\n\n drives of this type do not work with ordinary file systems like ext4, at least not directly and require additional zone-aware layer.<\/p>\n\n\n\n in Debian 13 \/ Trixie i can create BTRFS partition directly on such a drive by using mkfs.btrfs \/dev\/sdb<\/em> ; it was immediately usable. but i would like to use full disk encryption and that’s not immediately possible:<\/p>\n\n\n\n first i need to set up virtual device that will handle zoned data storage, then – on top of it – i can create encrypted partition and finally – btrfs file system on top of it. surely less efficient, but more secure for my data.<\/p>\n\n\n\n an alternative approach – without extra dm-zoned layer:<\/p>\n\n\n\n <\/p>\n\n\n\n in the same way ext4 or other file system partition can be created on the zoned hdd, also without using the LUKS encryption layer.<\/p>\n\n\n\n related information: <\/p>\n\n\n\n i’ve found refurbished host-managed SMR drives from Seagate sale; model ST25000NM000E-3L9103 coming from Exos Xz series. below – notes on what did i discover. those are not ordinary drives: e.g. they’ll not work under Windows, under linux only some file systems are supported directly or additional layer of dm-zoned is needed. i’ve also found out […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[6],"class_list":["post-3924","post","type-post","status-publish","format-standard","hentry","category-uncategorized","tag-linux"],"_links":{"self":[{"href":"https:\/\/kudzia.eu\/b\/wp-json\/wp\/v2\/posts\/3924","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/kudzia.eu\/b\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/kudzia.eu\/b\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/kudzia.eu\/b\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/kudzia.eu\/b\/wp-json\/wp\/v2\/comments?post=3924"}],"version-history":[{"count":6,"href":"https:\/\/kudzia.eu\/b\/wp-json\/wp\/v2\/posts\/3924\/revisions"}],"predecessor-version":[{"id":3934,"href":"https:\/\/kudzia.eu\/b\/wp-json\/wp\/v2\/posts\/3924\/revisions\/3934"}],"wp:attachment":[{"href":"https:\/\/kudzia.eu\/b\/wp-json\/wp\/v2\/media?parent=3924"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/kudzia.eu\/b\/wp-json\/wp\/v2\/categories?post=3924"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/kudzia.eu\/b\/wp-json\/wp\/v2\/tags?post=3924"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}[ 1.722691] sd 2:0:0:0: [sdb] Host-managed zoned block device\n[ 1.724585] sd 2:0:0:0: [sdb] 48830087168 512-byte logical blocks: (25.0 TB\/22.7 TiB)\n[ 1.724594] sd 2:0:0:0: [sdb] 4096-byte physical blocks\n[ 1.724630] sd 2:0:0:0: [sdb] Write Protect is off\n[ 1.724635] sd 2:0:0:0: [sdb] Mode Sense: 00 3a 00 00\n[ 1.724658] sd 2:0:0:0: [sdb] Write cache: enabled, read cache: enabled, doesn't support DPO or FUA\n[ 1.724697] sd 2:0:0:0: [sdb] Preferred minimum I\/O size 4096 bytes\n[ 2.078504] sd 2:0:0:0: [sdb] 93136 zones of 524288 logical blocks\n[ 2.132937] sd 2:0:0:0: [sdb] Attached SCSI disk\n<\/code><\/pre>\n\n\n\nroot@debian:~# cryptsetup --verbose --verify-passphrase luksFormat \/dev\/sdb\n\nWARNING!\n========\nThis will overwrite data on \/dev\/sdb irrevocably.\n\nAre you sure? (Type 'yes' in capital letters): YES\nEnter passphrase for \/dev\/sdb:\nVerify passphrase:\nZoned device \/dev\/sdb cannot be used for LUKS header.\nCommand failed with code -1 (wrong or missing parameters).\n\n<\/code><\/pre>\n\n\n\nroot@debian:~# apt-get install dm-zoned-tools<\/strong>\n[..]\nroot@debian:~# dmzadm --format \/dev\/sdb<\/strong>\n\/dev\/sdb: 48830087168 512-byte sectors (23284 GiB)\n Host-managed device\n 93136 zones, offset 0\n 93136 zones of 524288 512-byte sectors (256 MiB)\n 65536 4KB data blocks per zone\nResetting sequential zones\nWriting primary metadata set\n Writing mapping table\n Writing bitmap blocks\n Writing super block to sdb block 0\nWriting secondary metadata set\n Writing mapping table\n Writing bitmap blocks\n Writing super block to sdb block 196608\nSyncing disk\nDone.\nroot@debian:~# dmzadm --start \/dev\/sdb<\/strong>\n\/dev\/sdb: 48830087168 512-byte sectors (23284 GiB)\n Host-managed device\n 93136 zones, offset 0\n 93136 zones of 524288 512-byte sectors (256 MiB)\n 65536 4KB data blocks per zone\nsdb: starting dmz-ZX2123V8, metadata ver. 2, uuid bc9156b0-5ea1-4431-bcde-5f6f9dd42591\nroot@debian:~# cryptsetup --verbose --verify-passphrase luksFormat \/dev\/mapper\/dmz-ZX2123V8<\/strong>\n\nWARNING!\n========\nThis will overwrite data on \/dev\/mapper\/dmz-ZX2123V8 irrevocably.\n\nAre you sure? (Type 'yes' in capital letters): YES\nEnter passphrase for \/dev\/mapper\/dmz-ZX2123V8:\nVerify passphrase:\nKey slot 0 created.\nCommand successful.\nroot@debian:~# cryptsetup luksOpen \/dev\/mapper\/dmz-ZX2123V8 encryptedDisk\nEnter passphrase for \/dev\/mapper\/dmz-ZX2123V8:\nroot@debian:~# mkfs.btrfs \/dev\/mapper\/encryptedDisk<\/strong>\nbtrfs-progs v6.14\nSee https:\/\/btrfs.readthedocs.io for more information.\n\nNOTE: several default settings have changed in version 5.15, please make sure\n this does not affect your deployments:\n - DUP for metadata (-m dup)\n - enabled no-holes (-O no-holes)\n - enabled free-space-tree (-R free-space-tree)\n\nLabel: (null)\nUUID: 6423b836-8311-4a25-8404-31f21f8aa570\nNode size: 16384\nSector size: 4096 (CPU page size: 4096)\nFilesystem size: 22.73TiB\nBlock group profiles:\n Data: single 8.00MiB\n Metadata: DUP 1.00GiB\n System: DUP 8.00MiB\nSSD detected: no\nZoned device: no\nFeatures: extref, skinny-metadata, no-holes, free-space-tree\nChecksum: crc32c\nNumber of devices: 1\nDevices:\n ID SIZE PATH\n 1 22.73TiB \/dev\/mapper\/encryptedDisk\nroot@debian:~# mount \/dev\/mapper\/encryptedDisk \/mnt<\/strong>\/<\/code><\/pre>\n\n\n\nroot@debian:~# cryptsetup open --type plain --key-size 512 --cipher aes-xts-plain64 --hash plain \/dev\/sdb encryptedDisk\n<\/strong>Enter passphrase for \/dev\/sdb:\nroot@debian:~# mkfs.btrfs \/dev\/mapper\/encryptedDisk<\/strong>\nbtrfs-progs v6.14\nSee https:\/\/btrfs.readthedocs.io for more information.\n\nzoned: \/dev\/mapper\/encryptedDisk: host-managed device detected, setting zoned feature\nResetting device zones \/dev\/mapper\/encryptedDisk (93136 zones) ...\nNOTE: several default settings have changed in version 5.15, please make sure\n this does not affect your deployments:\n - DUP for metadata (-m dup)\n - enabled no-holes (-O no-holes)\n - enabled free-space-tree (-R free-space-tree)\n\nLabel: (null)\nUUID: c61db7f6-ea02-432d-b551-32d8ef27673a\nNode size: 16384\nSector size: 4096 (CPU page size: 4096)\nFilesystem size: 22.74TiB\nBlock group profiles:\n Data: single 256.00MiB\n Metadata: DUP 256.00MiB\n System: DUP 256.00MiB\nSSD detected: no\nZoned device: yes\n Zone size: 256.00MiB\nFeatures: extref, skinny-metadata, no-holes, free-space-tree, zoned\nChecksum: crc32c\nNumber of devices: 1\nDevices:\n ID SIZE ZONES PATH\n 1 22.74TiB 93136 \/dev\/mapper\/encryptedDisk\n\nroot@debian:~# mount \/dev\/mapper\/encryptedDisk \/mnt\/<\/strong><\/code><\/pre>\n\n\n\n\n