Are there any concerns around encrypting the guest file system (through the guest OS) and using snapshot VM backups on the host?

[mikexx]

I've been looking around for any problems with using guest OS encryption and using snapshot backups. Is there any concern with a snapshot somehow corrupting the encrypted disk image? I know there are some precautions you should take if you care about encrypting (turning off SWAP on the host machine, for instance) but I am mostly curious about any possible disk corruption concerns when taking a snapshot, more than what exists on a regular snapshot backup.

My understanding is that Proxmox, through its guest agent, should tell the guest VM to get the file system into a consistent state before the snapshot. So I'm hoping that means finishing up any encryption that needs to be done and flushing it to disk. After a bunch of searching online, nothing seems to jump out at me as "this is a problem" but I figured I should ask just in case.

Thanks!

 

[LnxBil]

My understanding is that Proxmox, through its guest agent, should tell the guest VM to get the file system into a consistent state before the snapshot. So I'm hoping that means finishing up any encryption that needs to be done and flushing it to disk.

Yes, QEMU Agent should take care of this. I have not been running this exact setup, but I ran LUKS and ZFS encryption on the PVE host which also works fine.

 

[mikexx]

Thank you!