Link Search Menu Expand Document

ZFS Encryption

Create

To create new dataset to store encrypted filesystems:

sudo zfs create -o canmount=off -o mountpoint=none -o encryption=on -o keylocation=prompt -o keyformat=passphrase rpool_ssd/encrypted

Create encrypted child filesystem:

sudo zfs create -o canmount=noauto -o mountpoint=/home/marek/Ext rpool_ssd/encrypted/ext

Mount

sudo zfs load-key -r rpool_ssd/encrypted
sudo zfs mount rpool_ssd/encrypted/ext

Unmount

sudo zfs umount rpool_ssd/encrypted/ext
sudo zfs unload-key -r rpool_ssd/encrypted

Set folder permissions after mount

sudo chmod -R 0700 /home/marek/Ext
sudo chown marek:marek /home/marek/Ext