From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from firstgate.proxmox.com (firstgate.proxmox.com [212.224.123.68]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits)) (No client certificate requested) by lists.proxmox.com (Postfix) with ESMTPS id 21A5982A34 for ; Tue, 30 Nov 2021 18:17:20 +0100 (CET) Received: from firstgate.proxmox.com (localhost [127.0.0.1]) by firstgate.proxmox.com (Proxmox) with ESMTP id 179EF2A597 for ; Tue, 30 Nov 2021 18:17:20 +0100 (CET) Received: from mail-yb1-xb36.google.com (mail-yb1-xb36.google.com [IPv6:2607:f8b0:4864:20::b36]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by firstgate.proxmox.com (Proxmox) with ESMTPS id 6F5C42A57F for ; Tue, 30 Nov 2021 18:17:18 +0100 (CET) Received: by mail-yb1-xb36.google.com with SMTP id e136so54616049ybc.4 for ; Tue, 30 Nov 2021 09:17:18 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=bU/P4qkH8MCOT5n+guC7vnZSs+TGPWS6awIqsnJ7DZ8=; b=TK0eZyEe8CWyrfjVmnkNfmHdRTiq/dZG2Wn5jljggs9tPQMIVytywLkp1fGUvkuQrJ YzFFXTP3M8hDRCVh6Mp28U7FF/8/M7lTshMbCbZl6N9KUUbcwZRDiqQCFUYQwqrVQNwy NZvV53FfEmSBQRqFtkryQUEFRpWWxKt3XUdX+6ZzRCqNoY3pzTegimfTBTjfb8kQsxZa 6PudKK+NphLpgNDTLviBZxpS0Pw4RRjdM3GbnkYrojRfYkRhs/t4ffYPQswxHxyZbvEo TC4mZDtqvXzKeFBcXZipQgFeyasVEFqgUSvy5BqYXD+8g8x6wDwL1dJcrrtfFD+cRk+C LGFA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=bU/P4qkH8MCOT5n+guC7vnZSs+TGPWS6awIqsnJ7DZ8=; b=oZD+NYNQMoAcvk4xoG59ecjenl6v9Ddhepn3lB1kJxOwXKFAci9ow/GNHaUkBmKAlG bSRF7+Vb8y9oA0586I65I8qGJ4k35U+AC2S0KYQHvkkXtDuMbMlK09Azc86UsXkyvWq0 CQbEfoy35FVIjWdACmpwjBkjLId0PX/1C8eAIyZaCUgX7uU6ypZ/xwoC8pTDCnq+et3M OT4nqXBHXDXpIdilGvcsHtbeofjRWHe/tp/fyCiAQaS2daA4P5EQb81BgUg162KgJax6 fZToCjwfzo/e99Xg5KRb/E7K7v/XayU1H4+iKUIWSzbnGyAjJWPWK4cxsTlxEu3ibGXE WRQw== X-Gm-Message-State: AOAM530dGK2rKVekIixslNrjPPrUMxD8JtUood9K4pX5GpZb9nhleyDQ RU0h7xugr4va02jQCxeI9L1v8uX9Q95MGraC74/Znmu9 X-Google-Smtp-Source: ABdhPJxQPpai5AtrSf2OFDHcFVlhq8F+SuHCogMCduONfEC87rN1QA539BK/7cZ3ncSSfxpmLvGUnSW2qddqEV+Vb/o= X-Received: by 2002:a25:944:: with SMTP id u4mr533781ybm.80.1638292636883; Tue, 30 Nov 2021 09:17:16 -0800 (PST) MIME-Version: 1.0 References: <5a879cf8-ed5a-783a-29a7-6d175b2605f7@proxmox.com> In-Reply-To: <5a879cf8-ed5a-783a-29a7-6d175b2605f7@proxmox.com> From: Eric Abreu Date: Tue, 30 Nov 2021 12:17:05 -0500 Message-ID: To: Thomas Lamprecht Cc: Proxmox VE user list X-SPAM-LEVEL: Spam detection results: 0 AWL 0.233 Adjusted score from AWL reputation of From: address BAYES_00 -1.9 Bayes spam probability is 0 to 1% DKIM_SIGNED 0.1 Message has a DKIM or DK signature, not necessarily valid DKIM_VALID -0.1 Message has at least one valid DKIM or DK signature DKIM_VALID_AU -0.1 Message has a valid DKIM or DK signature from author's domain DKIM_VALID_EF -0.1 Message has a valid DKIM or DK signature from envelope-from domain FREEMAIL_ENVFROM_END_DIGIT 0.25 Envelope-from freemail username ends in digit FREEMAIL_FROM 0.001 Sender email is commonly abused enduser mail provider HTML_MESSAGE 0.001 HTML included in message KAM_NUMSUBJECT 0.5 Subject ends in numbers excluding current years RCVD_IN_DNSWL_NONE -0.0001 Sender listed at https://www.dnswl.org/, no trust SPF_HELO_NONE 0.001 SPF: HELO does not publish an SPF Record SPF_PASS -0.001 SPF: sender matches SPF record Content-Type: text/plain; charset="UTF-8" X-Content-Filtered-By: Mailman/MimeDel 2.1.29 Subject: Re: [PVE-User] Where is ZFS encryption key in Proxmox 7.1 X-BeenThere: pve-user@lists.proxmox.com X-Mailman-Version: 2.1.29 Precedence: list List-Id: Proxmox VE user list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 30 Nov 2021 17:17:20 -0000 Hi Thomas, Thanks for the quick response. I'm going to repeat the steps to create the ZFS pool from the web interface and paste them here. I'm pretty sure I did everything from the dashboard and the encryption was enabled by default. I'll keep you posted. Thanks again for your help. On Tue, Nov 30, 2021 at 3:37 AM Thomas Lamprecht wrote: > Hi, > > On 30.11.21 04:36, Eric Abreu wrote: > > I have created a ZFS pool from Proxmox 7.1 web interface with 2 SSDs in > > RAID 1. I noticed that everything works fine after I created the pool, > and > > ZFS at REST encryption was also enabled. After rebooting the server it > did > > not ask for a passphrase so my guess is that Proxmox is getting the key > > from somewhere in the file system. Anyone could help me find out where? > > Well, how did you enable ZFS at rest encryption? As that is something that > won't > be done automatically, and the local-storage web-interface/api currently > does not > allow to configure that either. > > cheers, > Thomas > >