Encrypt ZFS pool

[Astraea]

Thanks! What about migration, should also be not possible right? when moving a vm from a encrypted pool to a different node with another encrypted pool?

If you are trying to move from a ZFS encrypted pool to another ZFS encrypted pool, be it the boot pool or otherwise, I believe it is not possible, but I have never used ZFS migration or replication in any of my setups, as I only use ZFS for the boot-pool "rpool" and do not store any other data other than the Proxmox VE installation on it, so you might have to build some trial systems and see what works and does not for replication.

 

[jsterr]

If you are trying to move from a ZFS encrypted pool to another ZFS encrypted pool, be it the boot pool or otherwise, I believe it is not possible, but I have never used ZFS migration or replication in any of my setups, as I only use ZFS for the boot-pool "rpool" and do not store any other data other than the Proxmox VE installation on it, so you might have to build some trial systems and see what works and does not for replication.

Thanks! Will the pool be auto-encrypted on boot or is it possible to encrypt it manually?

 

[fireon]

Thanks! What about migration, should also be not possible right? when moving a vm from a encrypted pool to a different node with another encrypted pool?

I did that for a while. To make it work, I changed the following file:

nano /usr/share/perl5/PVE/Storage/ZFSPoolPlugin.pm
 
- my $cmd = ['zfs', 'send', '-Rpv'];
+ my $cmd = ['zfs', 'send', '-Rpvw'];

But after a while, there were damaged volumes. So I disabled it again. An alternative would be to use LUKS under ZFS. Many people do this, and it is technically legitimate. However, I have not been able to get used to it yet, so I have never looked into it in detail.