ZFS 0.8 has two interesting features that can be beneficial to proxmox.
1.) Quotas to limit number of inodes ("zfs dnode accounting") per dataset (i think it's already in ZFS 0.7 tree, but not sure)
operations on large quantity of small files can cause one container to affect another container on same pool. i guess it would be sensible to provide some generous dnode quota by default. if user has some special case that needs extreme number of small files (which should not be common practice) it should be possible to increase this quota for individual CT.
2.) Encryption per dataset
I think it would be cool if we could have encrypted linux containers that would refuse to start until somebody logs in and enters encryption passphrase that will popup when starting CT through web UI or SSH. That way each CT user could enter passphrase for his own CTs without assistance of proxmox host admin.
This would be much more user friendly than typical setup with passphrase entry dialog in initramfs.
This is not in ZFS 0.7, so we have to wait until 0.8 will be stable enough for PVE production, but i think it's opportunity right here. It should be quite easy to implement. Just provide simple UI to enter passphrase and check if dataset was "decrypted" before starting the CT. I guess this can be easily released at the same day the ZFS 0.8 makes it to PVE.
1.) Quotas to limit number of inodes ("zfs dnode accounting") per dataset (i think it's already in ZFS 0.7 tree, but not sure)
operations on large quantity of small files can cause one container to affect another container on same pool. i guess it would be sensible to provide some generous dnode quota by default. if user has some special case that needs extreme number of small files (which should not be common practice) it should be possible to increase this quota for individual CT.
2.) Encryption per dataset
I think it would be cool if we could have encrypted linux containers that would refuse to start until somebody logs in and enters encryption passphrase that will popup when starting CT through web UI or SSH. That way each CT user could enter passphrase for his own CTs without assistance of proxmox host admin.
This would be much more user friendly than typical setup with passphrase entry dialog in initramfs.
This is not in ZFS 0.7, so we have to wait until 0.8 will be stable enough for PVE production, but i think it's opportunity right here. It should be quite easy to implement. Just provide simple UI to enter passphrase and check if dataset was "decrypted" before starting the CT. I guess this can be easily released at the same day the ZFS 0.8 makes it to PVE.
Last edited:
