Comments (5)
You can decrypt individual datasets by copying their contents to a new, unencrypted, dataset and then renaming/remounting the new dataset to replace the old dataset. You just need enough free space to match your largest dataset, and if you are willing to delete snapshots before moving the files the required space will only be the size of your largest file. Doing it for a root dataset would be a PITA, but you can use a liveusb or creative use of boot options to accomplish that.
from zfs.
Keeping things encrypted, but with a publicly-known key... That feels like the worst of both worlds to me, far more so than send/recv to a new dataset.
from zfs.
Well when you have a large dataset you might not have enough free space, and it also requires quite a bit of risky steps : create a new dataset, boot to liveUsb, copy the content, update all your OS's fstab to use the new dataset etc… Compared to just changing a password. It also has the advantage of preserving the snapshots history. The only drawback I can think of is that the system will still encrypt data, so it might cost a bit of cpu time… but from my experience it is quite negligible.
from zfs.
Real question: why do you want to remove the encryption?
There's not really a way to remove it outright without rewriting blocks. A dummy key as described would work, and could be built into OpenZFS itself, but I can't think of any reason why you'd actually want to (like, maybe you don't need the encryption anymore, but it doesn't hurt to leave it there, unless you're very constrained on CPU or something).
Unless it's something that is generally useful, I reckon it's probably easier to just do something in your mount scripts instead.
from zfs.
Basically yeah, I used encryption for a computer I use on my laptop (that I want to encrypt because it might get stollen), and copied the dataset to a computer used with my familly, and they don't want to bother typing a password when booting the computer… yet, it does not hurt having blocks encrypted. But I can't really change the mount script as it is performed automatically by my OS at startup, and I don't want to mess with it as it may change when I upgrade…
from zfs.
Related Issues (20)
- panic: command not inqueue, state = 0 at zpool import HOT 12
- We could handle failing to load some non-essential data better HOT 3
- Error: discard_granularity is 0 HOT 4
- ZFS Pool on top of ZVOL on Proxmox VE - EXTREME Overhead and Used Space reported by Proxmox VE Host HOT 16
- MMP suspend after HDD read error during scrub HOT 4
- IPv6 support for downloads.zfsonlinux.org
- Linux 6.9: `delegate/zfs_allow_010_pos` hangs in `zfs create -V`
- "zfs mount" TAB autocompletion causes high CPU activity and does nothing in certain shells
- ZVOL caused machine freeze HOT 4
- ZVOL ignores special_small_blocks HOT 2
- Fedora 40 repo HOT 6
- zlua doesn't build on platforms where userland and kernel compiler are too different
- kernel NULL pointer dereference `spl_kmem_cache_alloc+0x2c` HOT 3
- Docker arm64 image milvusdb/milvus:v2.4.0: symbol lookup error HOT 1
- NULL Pointer Dereference dbu_evict
- abd_alloc_zero_scatter lockup when sg_alloc_table HOT 2
- replacing a disk in raidz2 vdev makes the whole vdev become unavailable
- GCC 14: Werror=dangling-pointer in uu_list.c
- OpenZFS 2.2.3 doesn't compile on Ubuntu 24.04 - python3-distutils deprecation HOT 14
- Can't change an open zvol's volsize after a rename
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from zfs.