3

What is the way in Solaris to encrypt a zpool? All the documentation supporting ZFS encryption talk about using "zfs create" and specifying a dataset WITHIN a pool. I just became SA for several Solaris servers and they all have encrypted zpools, but no documentation as to how they get that way. I know its possible since these servers have their pools configured with encryption, with no datasets on them. Any ideas?

3
  • 1
    How do you know the zpools are encrypted?
    – ewwhite
    Dec 26, 2014 at 22:16
  • I ran "zfs get encryption" and it shows the property as "on" for the zpool which contains no datasets.
    – Jon Smith
    Dec 26, 2014 at 22:22
  • yes, this command shows the pool as unencrypted and data set encrypted. "zfs set encryption=on poolname" -> cannot set property for 'poolname': 'encryption' is readonly
    – 16851556
    Oct 22, 2020 at 10:05

1 Answer 1

5

You just need to create the pool with encryption enabled for its top dataset:

zpool create -O encryption=on ...
1
  • 2
    Sigh... If only we had this for non-Solaris ZFS implementations...
    – ewwhite
    Dec 26, 2014 at 23:19

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .