Oracle Solaris ZFS File System (MOSC)

MOSC Banner

Moving to encrypted fs - Why impossible ?

edited Aug 26, 2018 5:00AM in Oracle Solaris ZFS File System (MOSC) 4 commentsAnswered

Hi,

We have lots of filesystems and snapshots to encrypt.

The Oracle documentation says it is not possible to enable encryption on an existent zfs pool or filesystem.

It also says that it is impossible to use zfs send/zfs recv to convert an unencrypted filesystem to an encrypted one.

Have to use rsync or cp, which is a pain...

However, I know that when you use zfs send/zfs recv to copy data between two encrypted filesystems, the data flow is *unencrypted*.

The question is : what technically prevents using this unencrypted data flow to inject data from unencrypted to an encrypted zfs filesystem ?

Howdy, Stranger!

Log In

To view full details, sign in to My Oracle Support Community.

Register

Don't have a My Oracle Support Community account? Click here to get started.

Category Leaderboard

Top contributors this month

New to My Oracle Support Community? Visit our Welcome Center

MOSC Help Center