encryption

  1. F

    ZFS VM data encryption

    Hello, I have a ZFS data raid that I use as a data disk for my VMs. My question is: does ZFS encrypt data by default? Do I have to enable Bitlocker style encryption on my Windows VMs or does ZFS natively encrypt the data? thanks
  2. K

    ZFS-Encryption ohne manuelle Passworteingabe

    Hi, als Proxmox und ZFS-Einsteiger stehe ich noch vor einem Thema, bei dem ich mich nicht entscheiden kann: Soll ich meine ZFS-Pools verschlüsseln oder mache ich es mir damit unnötig kompliziert? :confused: Ich möchte den Server definitiv ohne Benutzerinteraktion und ohne Abhängigkeit zu einem...
  3. W

    Testing Nested Proxmox on Encrypted Debian Install (Proxmox 6.4 + Debian 10.9)

    I created a VM and installed Debian with LVM LUKS partition and booted into it with no problems. I then installed Proxmox over this as per wiki and booted into it with no problems BUT I cannot connect to the web interface. Proxmox is working and I can access the console. What am I doing wrong?
  4. C

    ZFS replication of encrypted LXC subvol

    I'm using ZFS encryption on some LXC subvol storage, but found that proxmox replication does not natively support them. A single option needs to be added here ...
  5. R

    How to encrypt an existing dataset (vm disk)

    If I understand correct it is not possible to encrypt an existing dataset? What other options are there to change a vm on an unencrypted dataset to encrypted? Is it possible to create an encrypted dataset and copy the vm disk - without down time? Maybe by using snapshots?
  6. T

    iSCSI storage encryption for a cluster

    Hello, I am setting up a Proxmox cluster with 3 servers, and 1 shared iSCSI storage. It seems that I can only access this storage in iscsi mode (I asked a question about this at https://forum.proxmox.com/threads/zfs-via-iscsi.74843/post-378849) With this setup, what are my options for VM...
  7. N

    [SOLVED] Backup Encryption CLI or GUI?

    Hi, I have configured a Proxmox Backup Server and added the storage inside the PVE GUI (Datacenter > Storage > Add > Proxmox Backup Server). I also enabled encryption from within the PVE GUI and used the GUI to create a new key. What kind of encryption will this create? The key was only 44...
  8. DerDanilo

    PMG Backup to PBS

    It is very nice that it's possible to backup the PMG config to a PBS. Even the DKIM private key is included in the backup. Two things are missing at the moment: - Encryption (which is implemented for PVE already) - Backup of custom templates (at least I couldn't find them in the backup TAR...
  9. L

    Single disk proxmox setup, how to encrypt and share a larger chunk of the disk with multiple VMs and other devices on the network?

    I acquired a Tiny/Mini/Micro PC to be my starter homelab, nothing fancy just a 4-core i5 from 2012 and 16gb non-ecc ddr3 with a 1TB SATA SSD (The SSD cost almost as much as the PC itself). Goal is for this to be various things including PiHole, backup of other devices, log collection and...
  10. D

    PBS and Let's Encrypt

    Hello, i noticed that the command "proxmox-backup-manager cert info | grep Fingerprint" and "openssl x509 -noout -in /etc/proxmox-backup/proxy.pem -fingerprint -sha256" gives me the same fingerprint. If i now update this certificate and key with one from Let's Encrypt i get certificate...
  11. A

    Encryption in Nested Virtualization in VMs the run Proxmox

    is it possible to install Proxmox and enable Nested Virtualization, and on the Nested Virtualization and have 2 Proxmox(Installation Debian Buster) VMs That both are encrypted, ---+Proxmox (on the server - (I prefer the Debian Buster installation)) [installed on Hardware] - -| - -+Proxmox...
  12. D

    [SOLVED] Installing on encrypted ZFS

    Hi, With ZFSonLinux 0.8.4 the encryption performance is finally decent. I'd like to install a new Proxmox host - but the latest release has 'only' 0.8.3 - will this be an issue ?
  13. O

    Custom hook script specific for just a container

    Hi. I'm using Proxmox 6.1 with Debian buster as host (and as guest while this is possible). I use several containers and in one I need to have a crypted mount point (it could even be the whole container). So, I use a lvmthin for just the system and a non-lvmthin for the data, and this is what...
  14. Y

    Bug bei replizieren

    Hi, ich habe testweise 2 Proxmox zu einem Cluster zusammengeschlossen. Beide sind mittels nativer ZFS-Encryption verschlüsselt. Wenn ich jetzt von Node A eine VM auf Node B Replizieren (in GUI Konfiguriert) möchte kommt im Log die Meldung: cannot send...
  15. B

    [SOLVED] OSD Encryption

    Hi guys I notice that OSD encryption is available under create OSD. Is there any mechanism to show which OSDs are encrypted in the UI or command line? I made some encrypted and some non-encrypted to gauge performance but unable to differentiate which are which.
  16. P

    PVE6 - How to setup encrypted ZFS

    Hi @ll, i'm installing my new Proxmox Server. My Plan is to have a fully encrypted System (i had similar Setups before with Debian 6-10 & Xen & Encrypted LVM). Proxmox 6 is already running with encrypted lvm on a 3ware Raid 1 with SSD's (similar partition scheme as the default Installer does...
  17. Y

    [SOLVED] Native encryption of zfs root possible?

    Hi, for various reasons I prefer my data to be encrypted on disks. Until now I used a zfs on luks setup. Which worked pretty good, but had its quirks and some other drawbacks. So I was really happy to see zfs native encryption and its support with Proxmox 6 (Thanks for that!). To have my VMs...
  18. T

    Managing the size of a FDE VM

    So I made a full VM and installed Debian 9.3 using full-disk encryption. Now, Proxmox uses LVM-Thin to store VM drives, which is smart, because LVM-Thin only allocates data when it is actually written. However, when using FDE, Proxmox can't tell what is written and what is not (at installation...
  19. H

    ZFS 0.8 new features in proxmox

    ZFS 0.8 has two interesting features that can be beneficial to proxmox. 1.) Quotas to limit number of inodes ("zfs dnode accounting") per dataset (i think it's already in ZFS 0.7 tree, but not sure) operations on large quantity of small files can cause one container to affect another container...
  20. onlime

    Install Proxmox VE / ZFS on a LUKS encrypted volume

    AFAIK there is no easy solution to install Proxmox VE on ZFS on top of a LUKS encrypted volume. For us, both ZFS and encryption are strong requirements and we would prefer to use the Proxmox VE installer to get this up and running as fast as possible. Installing Proxmox VE on top of a plain...