ZFS encryption

[showiproute]

Hello everyone,

I have a general question regarding ZFS encryption:
Is it recommended/supported on a hypervisor level?

My intention is that I have a Nextcloud webserver with around 700 GB of cloud storage.
Currently it is not encrypted within the VM due to some not working applications of Nextcloud itself.

Instead of encrypting everything within my VM I would rather prefere to encrypt/create a new encrypted VM disk.

 

[oguz]

hi,

yes it's supported [0]. you can enable it on a pool basis

[0]: https://pve.proxmox.com/wiki/ZFS_on_Linux#zfs_encryption

 

[showiproute]

Hi @oguz

is there any example of an automatic unlock script which I could use/modify for my needs?

 

[oguz]

is there any example of an automatic unlock script which I could use/modify for my needs?

you can try something like [0]

[0]: https://wiki.archlinux.org/title/ZFS#Unlock_at_boot_time:_systemd