Talk:ZFS: Difference between revisions
imported>Vater →best practice: new section |
|||
| (4 intermediate revisions by 2 users not shown) | |||
| Line 1: | Line 1: | ||
== Open Issues with ZFS enryption == | |||
Should this guide not have a big fat red warning that tells users, that openzfs currently has encryption related bugs, which can lead to data loss when using recv/send? | |||
see: | |||
https://github.com/openzfs/openzfs-docs/issues/494 | |||
== Add <code>boot.initrd.supportedFilesystems = ["zfs"];</code> ? == | == Add <code>boot.initrd.supportedFilesystems = ["zfs"];</code> ? == | ||
| Line 57: | Line 64: | ||
; Datasets: | ; Datasets: | ||
* https://grahamc.com/blog/nixos-on-zfs/ | * https://grahamc.com/blog/nixos-on-zfs/ | ||
== Remote unlock Section out of date == | |||
In [[ZFS#Unlock encrypted ZFS via SSH on boot]] it mentions to use ''postCommands'', but this option is now no longer supported in the newest version of NixOS. [[User:Quio|Quio]] ([[User talk:Quio|talk]]) 15:54, 6 June 2026 (UTC) | |||
:Maybe something like this: | |||
:<syntaxhighlight lang="nix"> | |||
: initrd = { | |||
: ... | |||
: systemd = { | |||
: enable = true; | |||
: # Write the ZFS unlock command to root's profile so it runs automatically | |||
: # when an admin SSHs in during boot; killall zfs unblocks systemd's wait | |||
: services.zfs-setup-unlock = { | |||
: wantedBy = ["initrd.target"]; | |||
: before = ["initrd.target"]; | |||
: unitConfig.DefaultDependencies = false; | |||
: script = '' | |||
: echo "zpool import -a && zfs load-key -a && killall zfs" >> /root/.profile | |||
: ''; | |||
: serviceConfig = { | |||
: Type = "oneshot"; | |||
: RemainAfterExit = true; | |||
: }; | |||
: }; | |||
: }; | |||
:</syntaxhighlight> [[User:Quio|Quio]] ([[User talk:Quio|talk]]) 15:59, 6 June 2026 (UTC) | |||
::We have a bit of a discussion on this over at the discourse forum: https://discourse.nixos.org/t/decrypting-zfs-pools-over-ssh-on-26-05/77828 [[User:Kacper|Kacper]] ([[User talk:Kacper|talk]]) 21:48, 6 June 2026 (UTC) | |||