From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <t.lamprecht@proxmox.com>
Received: from firstgate.proxmox.com (firstgate.proxmox.com [212.224.123.68])
 (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
 key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256)
 (No client certificate requested)
 by lists.proxmox.com (Postfix) with ESMTPS id 4F1F48278F
 for <pve-user@lists.proxmox.com>; Tue, 30 Nov 2021 09:45:16 +0100 (CET)
Received: from firstgate.proxmox.com (localhost [127.0.0.1])
 by firstgate.proxmox.com (Proxmox) with ESMTP id 4120613683
 for <pve-user@lists.proxmox.com>; Tue, 30 Nov 2021 09:45:16 +0100 (CET)
Received: from proxmox-new.maurer-it.com (proxmox-new.maurer-it.com
 [94.136.29.106])
 (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
 key-exchange X25519 server-signature RSA-PSS (2048 bits))
 (No client certificate requested)
 by firstgate.proxmox.com (Proxmox) with ESMTPS id 2FF8F13673
 for <pve-user@lists.proxmox.com>; Tue, 30 Nov 2021 09:45:15 +0100 (CET)
Received: from proxmox-new.maurer-it.com (localhost.localdomain [127.0.0.1])
 by proxmox-new.maurer-it.com (Proxmox) with ESMTP id 7724443930;
 Tue, 30 Nov 2021 09:37:36 +0100 (CET)
Message-ID: <5a879cf8-ed5a-783a-29a7-6d175b2605f7@proxmox.com>
Date: Tue, 30 Nov 2021 09:37:35 +0100
MIME-Version: 1.0
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:95.0) Gecko/20100101
 Thunderbird/95.0
Content-Language: en-US
To: Proxmox VE user list <pve-user@lists.proxmox.com>,
 Eric Abreu <abreuer1521@gmail.com>
References: <CACEJK8PbmYcKTL8E4+JQ+L80L3cxcVcE4K7KKwBU9R77sh7nHQ@mail.gmail.com>
From: Thomas Lamprecht <t.lamprecht@proxmox.com>
In-Reply-To: <CACEJK8PbmYcKTL8E4+JQ+L80L3cxcVcE4K7KKwBU9R77sh7nHQ@mail.gmail.com>
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
X-SPAM-LEVEL: Spam detection results:  0
 AWL 0.498 Adjusted score from AWL reputation of From: address
 BAYES_00                 -1.9 Bayes spam probability is 0 to 1%
 KAM_DMARC_STATUS 0.01 Test Rule for DKIM or SPF Failure with Strict Alignment
 KAM_NUMSUBJECT 0.5 Subject ends in numbers excluding current years
 NICE_REPLY_A           -1.317 Looks like a legit reply (A)
 SPF_HELO_NONE           0.001 SPF: HELO does not publish an SPF Record
 SPF_PASS               -0.001 SPF: sender matches SPF record
Subject: Re: [PVE-User] Where is ZFS encryption key in Proxmox 7.1
X-BeenThere: pve-user@lists.proxmox.com
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Proxmox VE user list <pve-user.lists.proxmox.com>
List-Unsubscribe: <https://lists.proxmox.com/cgi-bin/mailman/options/pve-user>, 
 <mailto:pve-user-request@lists.proxmox.com?subject=unsubscribe>
List-Archive: <http://lists.proxmox.com/pipermail/pve-user/>
List-Post: <mailto:pve-user@lists.proxmox.com>
List-Help: <mailto:pve-user-request@lists.proxmox.com?subject=help>
List-Subscribe: <https://lists.proxmox.com/cgi-bin/mailman/listinfo/pve-user>, 
 <mailto:pve-user-request@lists.proxmox.com?subject=subscribe>
X-List-Received-Date: Tue, 30 Nov 2021 08:45:16 -0000

Hi,

On 30.11.21 04:36, Eric Abreu wrote:
> I have created a ZFS pool from Proxmox 7.1 web interface with 2 SSDs in
> RAID 1. I noticed that everything works fine after I created the pool, and
> ZFS at REST encryption was also enabled. After rebooting the server it did
> not ask for a passphrase so my guess is that Proxmox is getting the key
> from somewhere in the file system. Anyone could help me find out where?

Well, how did you enable ZFS at rest encryption? As that is something that won't
be done automatically, and the local-storage web-interface/api currently does not
allow to configure that either.

cheers,
Thomas