Proxmox 6 ZFS install uses encryption by default?

mfgamma

Renowned Member
Jan 8, 2011
32
4
73
Hi,

I installed a new Proxmox 6 ZFS with 3 disks in mirror from ISO. I took all default values.

Then a few days later, at root on the host , I tried to modify the IP of the host in the /etc/network/interfaces. But to save modifications I was asked for the encryption key

Big surprise as I never ask for encryption nor knows where this encyption key is.

I investigated a little bit and when with zpool get feature@encryption poolname I got confirmation that encrption is enabled on the pool

So several questions:
where are these encyption keys stored by default as I never had the option to specify it
how to remove this encryption without having to reinstall the host ( I have several TB on disks

thanks a lot
 
  • Like
Reactions: FinnTux
that the encryption feature is enabled does not mean that anything is encrypted (it just allows you to USE encryption at all). the PVE installer does not setup any encryption, ZFS or otherwise. maybe you could share the exact steps you do, and the exact error message?
 
Hi Fabian

it was not really an error message but within vim to save changes I got at the bottow a request to enter an encyption key. As I was aware of none i could not save the changes in /etc/network/interfaces

with some googling , I tried zfs load-key rpool with blank returns
then I was able to save the changes in /etc/network/interfaces

What is strange is that you are right about the fact that my pools are not encrypted
from zfs list -o name,mountpoint,mounted,encryption

I got all the dataset off for encryption column

hoping this request on file change was transient only!

thanks and best regards
Marc