* [PVE-User] Where is ZFS encryption key in Proxmox 7.1
@ 2021-11-30 3:36 Eric Abreu
2021-11-30 8:37 ` Thomas Lamprecht
0 siblings, 1 reply; 6+ messages in thread
From: Eric Abreu @ 2021-11-30 3:36 UTC (permalink / raw)
To: pve-user
Hello everyone,
I have created a ZFS pool from Proxmox 7.1 web interface with 2 SSDs in
RAID 1. I noticed that everything works fine after I created the pool, and
ZFS at REST encryption was also enabled. After rebooting the server it did
not ask for a passphrase so my guess is that Proxmox is getting the key
from somewhere in the file system. Anyone could help me find out where?
Thanks in advance.
^ permalink raw reply [flat|nested] 6+ messages in thread
* Re: [PVE-User] Where is ZFS encryption key in Proxmox 7.1
2021-11-30 3:36 [PVE-User] Where is ZFS encryption key in Proxmox 7.1 Eric Abreu
@ 2021-11-30 8:37 ` Thomas Lamprecht
2021-11-30 17:17 ` Eric Abreu
0 siblings, 1 reply; 6+ messages in thread
From: Thomas Lamprecht @ 2021-11-30 8:37 UTC (permalink / raw)
To: Proxmox VE user list, Eric Abreu
Hi,
On 30.11.21 04:36, Eric Abreu wrote:
> I have created a ZFS pool from Proxmox 7.1 web interface with 2 SSDs in
> RAID 1. I noticed that everything works fine after I created the pool, and
> ZFS at REST encryption was also enabled. After rebooting the server it did
> not ask for a passphrase so my guess is that Proxmox is getting the key
> from somewhere in the file system. Anyone could help me find out where?
Well, how did you enable ZFS at rest encryption? As that is something that won't
be done automatically, and the local-storage web-interface/api currently does not
allow to configure that either.
cheers,
Thomas
^ permalink raw reply [flat|nested] 6+ messages in thread
* Re: [PVE-User] Where is ZFS encryption key in Proxmox 7.1
2021-11-30 8:37 ` Thomas Lamprecht
@ 2021-11-30 17:17 ` Eric Abreu
2021-12-01 0:31 ` Eric Abreu
0 siblings, 1 reply; 6+ messages in thread
From: Eric Abreu @ 2021-11-30 17:17 UTC (permalink / raw)
To: Thomas Lamprecht; +Cc: Proxmox VE user list
Hi Thomas,
Thanks for the quick response. I'm going to repeat the steps to create the
ZFS pool from the web interface and paste them here. I'm pretty sure I did
everything from the dashboard and the encryption was enabled by default.
I'll keep you posted. Thanks again for your help.
On Tue, Nov 30, 2021 at 3:37 AM Thomas Lamprecht <t.lamprecht@proxmox.com>
wrote:
> Hi,
>
> On 30.11.21 04:36, Eric Abreu wrote:
> > I have created a ZFS pool from Proxmox 7.1 web interface with 2 SSDs in
> > RAID 1. I noticed that everything works fine after I created the pool,
> and
> > ZFS at REST encryption was also enabled. After rebooting the server it
> did
> > not ask for a passphrase so my guess is that Proxmox is getting the key
> > from somewhere in the file system. Anyone could help me find out where?
>
> Well, how did you enable ZFS at rest encryption? As that is something that
> won't
> be done automatically, and the local-storage web-interface/api currently
> does not
> allow to configure that either.
>
> cheers,
> Thomas
>
>
^ permalink raw reply [flat|nested] 6+ messages in thread
* Re: [PVE-User] Where is ZFS encryption key in Proxmox 7.1
2021-11-30 17:17 ` Eric Abreu
@ 2021-12-01 0:31 ` Eric Abreu
2021-12-01 2:58 ` Adam Thompson
0 siblings, 1 reply; 6+ messages in thread
From: Eric Abreu @ 2021-12-01 0:31 UTC (permalink / raw)
To: Thomas Lamprecht; +Cc: Proxmox VE user list
Hello Thomas,
I have repeated the following steps:
1 - Went to PVE Node/ ZFS/ Create ZFS/
2 - On the dialogue box name = my_pool, Add Storage (check), Select Devices
(2 x 1TB disks), RAID Level = Mirror, Compression = off, ashift = 12
3 - Hit Create
4 - Open the command line on my pve node and typed:
zpool get feature@encryption my_pool
And I got this as a response:
NAME PROPERTY VALUE SOURCE
my_pool feature@encryption enabled local
Does that mean encryption is enabled?
Thanks again.
On Tue, Nov 30, 2021 at 12:17 PM Eric Abreu <abreuer1521@gmail.com> wrote:
> Hi Thomas,
>
> Thanks for the quick response. I'm going to repeat the steps to create the
> ZFS pool from the web interface and paste them here. I'm pretty sure I did
> everything from the dashboard and the encryption was enabled by default.
> I'll keep you posted. Thanks again for your help.
>
> On Tue, Nov 30, 2021 at 3:37 AM Thomas Lamprecht <t.lamprecht@proxmox.com>
> wrote:
>
>> Hi,
>>
>> On 30.11.21 04:36, Eric Abreu wrote:
>> > I have created a ZFS pool from Proxmox 7.1 web interface with 2 SSDs in
>> > RAID 1. I noticed that everything works fine after I created the pool,
>> and
>> > ZFS at REST encryption was also enabled. After rebooting the server it
>> did
>> > not ask for a passphrase so my guess is that Proxmox is getting the key
>> > from somewhere in the file system. Anyone could help me find out where?
>>
>> Well, how did you enable ZFS at rest encryption? As that is something
>> that won't
>> be done automatically, and the local-storage web-interface/api currently
>> does not
>> allow to configure that either.
>>
>> cheers,
>> Thomas
>>
>>
^ permalink raw reply [flat|nested] 6+ messages in thread
* Re: [PVE-User] Where is ZFS encryption key in Proxmox 7.1
2021-12-01 0:31 ` Eric Abreu
@ 2021-12-01 2:58 ` Adam Thompson
2021-12-01 3:39 ` Eric Abreu
0 siblings, 1 reply; 6+ messages in thread
From: Adam Thompson @ 2021-12-01 2:58 UTC (permalink / raw)
To: Proxmox VE user list, Thomas Lamprecht; +Cc: Proxmox VE user list
No. That means that the encryption *feature* is enabled, i.e. you may now proceed to encrypt your dataset... if you really want to find out exactly how that breaks things, I guess.
If it came back as disabled, you would not be able to use encryption at all on that dataset.
-Adam
Get Outlook for Android<https://aka.ms/AAb9ysg>
________________________________
From: pve-user <pve-user-bounces@lists.proxmox.com> on behalf of Eric Abreu <abreuer1521@gmail.com>
Sent: Tuesday, November 30, 2021 6:31:31 PM
To: Thomas Lamprecht <t.lamprecht@proxmox.com>
Cc: Proxmox VE user list <pve-user@lists.proxmox.com>
Subject: Re: [PVE-User] Where is ZFS encryption key in Proxmox 7.1
Hello Thomas,
I have repeated the following steps:
1 - Went to PVE Node/ ZFS/ Create ZFS/
2 - On the dialogue box name = my_pool, Add Storage (check), Select Devices
(2 x 1TB disks), RAID Level = Mirror, Compression = off, ashift = 12
3 - Hit Create
4 - Open the command line on my pve node and typed:
zpool get feature@encryption my_pool
And I got this as a response:
NAME PROPERTY VALUE SOURCE
my_pool feature@encryption enabled local
Does that mean encryption is enabled?
Thanks again.
On Tue, Nov 30, 2021 at 12:17 PM Eric Abreu <abreuer1521@gmail.com> wrote:
> Hi Thomas,
>
> Thanks for the quick response. I'm going to repeat the steps to create the
> ZFS pool from the web interface and paste them here. I'm pretty sure I did
> everything from the dashboard and the encryption was enabled by default.
> I'll keep you posted. Thanks again for your help.
>
> On Tue, Nov 30, 2021 at 3:37 AM Thomas Lamprecht <t.lamprecht@proxmox.com>
> wrote:
>
>> Hi,
>>
>> On 30.11.21 04:36, Eric Abreu wrote:
>> > I have created a ZFS pool from Proxmox 7.1 web interface with 2 SSDs in
>> > RAID 1. I noticed that everything works fine after I created the pool,
>> and
>> > ZFS at REST encryption was also enabled. After rebooting the server it
>> did
>> > not ask for a passphrase so my guess is that Proxmox is getting the key
>> > from somewhere in the file system. Anyone could help me find out where?
>>
>> Well, how did you enable ZFS at rest encryption? As that is something
>> that won't
>> be done automatically, and the local-storage web-interface/api currently
>> does not
>> allow to configure that either.
>>
>> cheers,
>> Thomas
>>
>>
_______________________________________________
pve-user mailing list
pve-user@lists.proxmox.com
https://lists.proxmox.com/cgi-bin/mailman/listinfo/pve-user
^ permalink raw reply [flat|nested] 6+ messages in thread
* Re: [PVE-User] Where is ZFS encryption key in Proxmox 7.1
2021-12-01 2:58 ` Adam Thompson
@ 2021-12-01 3:39 ` Eric Abreu
0 siblings, 0 replies; 6+ messages in thread
From: Eric Abreu @ 2021-12-01 3:39 UTC (permalink / raw)
To: athompso; +Cc: Proxmox VE user list, Thomas Lamprecht
Ok. Thank you Adam.
On Tue, Nov 30, 2021, 9:58 PM Adam Thompson <athompso@athompso.net> wrote:
> No. That means that the encryption *feature* is enabled, i.e. you may now
> proceed to encrypt your dataset... if you really want to find out exactly
> how that breaks things, I guess.
> If it came back as disabled, you would not be able to use encryption at
> all on that dataset.
> -Adam
>
> Get Outlook for Android<https://aka.ms/AAb9ysg>
> ________________________________
> From: pve-user <pve-user-bounces@lists.proxmox.com> on behalf of Eric
> Abreu <abreuer1521@gmail.com>
> Sent: Tuesday, November 30, 2021 6:31:31 PM
> To: Thomas Lamprecht <t.lamprecht@proxmox.com>
> Cc: Proxmox VE user list <pve-user@lists.proxmox.com>
> Subject: Re: [PVE-User] Where is ZFS encryption key in Proxmox 7.1
>
> Hello Thomas,
>
> I have repeated the following steps:
>
> 1 - Went to PVE Node/ ZFS/ Create ZFS/
> 2 - On the dialogue box name = my_pool, Add Storage (check), Select Devices
> (2 x 1TB disks), RAID Level = Mirror, Compression = off, ashift = 12
> 3 - Hit Create
> 4 - Open the command line on my pve node and typed:
> zpool get feature@encryption my_pool
>
> And I got this as a response:
>
> NAME PROPERTY VALUE SOURCE
> my_pool feature@encryption enabled local
>
> Does that mean encryption is enabled?
>
> Thanks again.
>
> On Tue, Nov 30, 2021 at 12:17 PM Eric Abreu <abreuer1521@gmail.com> wrote:
>
> > Hi Thomas,
> >
> > Thanks for the quick response. I'm going to repeat the steps to create
> the
> > ZFS pool from the web interface and paste them here. I'm pretty sure I
> did
> > everything from the dashboard and the encryption was enabled by default.
> > I'll keep you posted. Thanks again for your help.
> >
> > On Tue, Nov 30, 2021 at 3:37 AM Thomas Lamprecht <
> t.lamprecht@proxmox.com>
> > wrote:
> >
> >> Hi,
> >>
> >> On 30.11.21 04:36, Eric Abreu wrote:
> >> > I have created a ZFS pool from Proxmox 7.1 web interface with 2 SSDs
> in
> >> > RAID 1. I noticed that everything works fine after I created the pool,
> >> and
> >> > ZFS at REST encryption was also enabled. After rebooting the server it
> >> did
> >> > not ask for a passphrase so my guess is that Proxmox is getting the
> key
> >> > from somewhere in the file system. Anyone could help me find out
> where?
> >>
> >> Well, how did you enable ZFS at rest encryption? As that is something
> >> that won't
> >> be done automatically, and the local-storage web-interface/api currently
> >> does not
> >> allow to configure that either.
> >>
> >> cheers,
> >> Thomas
> >>
> >>
> _______________________________________________
> pve-user mailing list
> pve-user@lists.proxmox.com
> https://lists.proxmox.com/cgi-bin/mailman/listinfo/pve-user
>
> _______________________________________________
> pve-user mailing list
> pve-user@lists.proxmox.com
> https://lists.proxmox.com/cgi-bin/mailman/listinfo/pve-user
>
>
^ permalink raw reply [flat|nested] 6+ messages in thread
end of thread, other threads:[~2021-12-01 3:40 UTC | newest]
Thread overview: 6+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2021-11-30 3:36 [PVE-User] Where is ZFS encryption key in Proxmox 7.1 Eric Abreu
2021-11-30 8:37 ` Thomas Lamprecht
2021-11-30 17:17 ` Eric Abreu
2021-12-01 0:31 ` Eric Abreu
2021-12-01 2:58 ` Adam Thompson
2021-12-01 3:39 ` Eric Abreu
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox