ZFS: Difference between revisions
imported>Sjau hostECDSAKey needs to be a file |
imported>Sjau |
||
| Line 205: | Line 205: | ||
$ zfs create -o encryption=aes-256-gcm -o keyformat=passphrase -o mountpoint=none zroot/root | $ zfs create -o encryption=aes-256-gcm -o keyformat=passphrase -o mountpoint=none zroot/root | ||
</syntaxHighlight> | </syntaxHighlight> | ||
Instead of encrypting just a dataset (and all its child datasets) you can also directly encrypt the whole pool upon creation: | |||
<syntaxHighlight lang=console> | |||
$ zpool create -o ashift=12 -o altroot="/mnt" -O encryption=aes-256-gcm -O keyformat=passphrase {pool name} /dev/sdxy | |||
</syntaxHighlight> | |||
All child datasets will inherit the encryption. | All child datasets will inherit the encryption. | ||