* [PVE-User] Where is ZFS encryption key in Proxmox 7.1 @ 2021-11-30 3:36 Eric Abreu 2021-11-30 8:37 ` Thomas Lamprecht 0 siblings, 1 reply; 6+ messages in thread From: Eric Abreu @ 2021-11-30 3:36 UTC (permalink / raw) To: pve-user Hello everyone, I have created a ZFS pool from Proxmox 7.1 web interface with 2 SSDs in RAID 1. I noticed that everything works fine after I created the pool, and ZFS at REST encryption was also enabled. After rebooting the server it did not ask for a passphrase so my guess is that Proxmox is getting the key from somewhere in the file system. Anyone could help me find out where? Thanks in advance. ^ permalink raw reply [flat|nested] 6+ messages in thread
* Re: [PVE-User] Where is ZFS encryption key in Proxmox 7.1 2021-11-30 3:36 [PVE-User] Where is ZFS encryption key in Proxmox 7.1 Eric Abreu @ 2021-11-30 8:37 ` Thomas Lamprecht 2021-11-30 17:17 ` Eric Abreu 0 siblings, 1 reply; 6+ messages in thread From: Thomas Lamprecht @ 2021-11-30 8:37 UTC (permalink / raw) To: Proxmox VE user list, Eric Abreu Hi, On 30.11.21 04:36, Eric Abreu wrote: > I have created a ZFS pool from Proxmox 7.1 web interface with 2 SSDs in > RAID 1. I noticed that everything works fine after I created the pool, and > ZFS at REST encryption was also enabled. After rebooting the server it did > not ask for a passphrase so my guess is that Proxmox is getting the key > from somewhere in the file system. Anyone could help me find out where? Well, how did you enable ZFS at rest encryption? As that is something that won't be done automatically, and the local-storage web-interface/api currently does not allow to configure that either. cheers, Thomas ^ permalink raw reply [flat|nested] 6+ messages in thread
* Re: [PVE-User] Where is ZFS encryption key in Proxmox 7.1 2021-11-30 8:37 ` Thomas Lamprecht @ 2021-11-30 17:17 ` Eric Abreu 2021-12-01 0:31 ` Eric Abreu 0 siblings, 1 reply; 6+ messages in thread From: Eric Abreu @ 2021-11-30 17:17 UTC (permalink / raw) To: Thomas Lamprecht; +Cc: Proxmox VE user list Hi Thomas, Thanks for the quick response. I'm going to repeat the steps to create the ZFS pool from the web interface and paste them here. I'm pretty sure I did everything from the dashboard and the encryption was enabled by default. I'll keep you posted. Thanks again for your help. On Tue, Nov 30, 2021 at 3:37 AM Thomas Lamprecht <t.lamprecht@proxmox.com> wrote: > Hi, > > On 30.11.21 04:36, Eric Abreu wrote: > > I have created a ZFS pool from Proxmox 7.1 web interface with 2 SSDs in > > RAID 1. I noticed that everything works fine after I created the pool, > and > > ZFS at REST encryption was also enabled. After rebooting the server it > did > > not ask for a passphrase so my guess is that Proxmox is getting the key > > from somewhere in the file system. Anyone could help me find out where? > > Well, how did you enable ZFS at rest encryption? As that is something that > won't > be done automatically, and the local-storage web-interface/api currently > does not > allow to configure that either. > > cheers, > Thomas > > ^ permalink raw reply [flat|nested] 6+ messages in thread
* Re: [PVE-User] Where is ZFS encryption key in Proxmox 7.1 2021-11-30 17:17 ` Eric Abreu @ 2021-12-01 0:31 ` Eric Abreu 2021-12-01 2:58 ` Adam Thompson 0 siblings, 1 reply; 6+ messages in thread From: Eric Abreu @ 2021-12-01 0:31 UTC (permalink / raw) To: Thomas Lamprecht; +Cc: Proxmox VE user list Hello Thomas, I have repeated the following steps: 1 - Went to PVE Node/ ZFS/ Create ZFS/ 2 - On the dialogue box name = my_pool, Add Storage (check), Select Devices (2 x 1TB disks), RAID Level = Mirror, Compression = off, ashift = 12 3 - Hit Create 4 - Open the command line on my pve node and typed: zpool get feature@encryption my_pool And I got this as a response: NAME PROPERTY VALUE SOURCE my_pool feature@encryption enabled local Does that mean encryption is enabled? Thanks again. On Tue, Nov 30, 2021 at 12:17 PM Eric Abreu <abreuer1521@gmail.com> wrote: > Hi Thomas, > > Thanks for the quick response. I'm going to repeat the steps to create the > ZFS pool from the web interface and paste them here. I'm pretty sure I did > everything from the dashboard and the encryption was enabled by default. > I'll keep you posted. Thanks again for your help. > > On Tue, Nov 30, 2021 at 3:37 AM Thomas Lamprecht <t.lamprecht@proxmox.com> > wrote: > >> Hi, >> >> On 30.11.21 04:36, Eric Abreu wrote: >> > I have created a ZFS pool from Proxmox 7.1 web interface with 2 SSDs in >> > RAID 1. I noticed that everything works fine after I created the pool, >> and >> > ZFS at REST encryption was also enabled. After rebooting the server it >> did >> > not ask for a passphrase so my guess is that Proxmox is getting the key >> > from somewhere in the file system. Anyone could help me find out where? >> >> Well, how did you enable ZFS at rest encryption? As that is something >> that won't >> be done automatically, and the local-storage web-interface/api currently >> does not >> allow to configure that either. >> >> cheers, >> Thomas >> >> ^ permalink raw reply [flat|nested] 6+ messages in thread
* Re: [PVE-User] Where is ZFS encryption key in Proxmox 7.1 2021-12-01 0:31 ` Eric Abreu @ 2021-12-01 2:58 ` Adam Thompson 2021-12-01 3:39 ` Eric Abreu 0 siblings, 1 reply; 6+ messages in thread From: Adam Thompson @ 2021-12-01 2:58 UTC (permalink / raw) To: Proxmox VE user list, Thomas Lamprecht; +Cc: Proxmox VE user list No. That means that the encryption *feature* is enabled, i.e. you may now proceed to encrypt your dataset... if you really want to find out exactly how that breaks things, I guess. If it came back as disabled, you would not be able to use encryption at all on that dataset. -Adam Get Outlook for Android<https://aka.ms/AAb9ysg> ________________________________ From: pve-user <pve-user-bounces@lists.proxmox.com> on behalf of Eric Abreu <abreuer1521@gmail.com> Sent: Tuesday, November 30, 2021 6:31:31 PM To: Thomas Lamprecht <t.lamprecht@proxmox.com> Cc: Proxmox VE user list <pve-user@lists.proxmox.com> Subject: Re: [PVE-User] Where is ZFS encryption key in Proxmox 7.1 Hello Thomas, I have repeated the following steps: 1 - Went to PVE Node/ ZFS/ Create ZFS/ 2 - On the dialogue box name = my_pool, Add Storage (check), Select Devices (2 x 1TB disks), RAID Level = Mirror, Compression = off, ashift = 12 3 - Hit Create 4 - Open the command line on my pve node and typed: zpool get feature@encryption my_pool And I got this as a response: NAME PROPERTY VALUE SOURCE my_pool feature@encryption enabled local Does that mean encryption is enabled? Thanks again. On Tue, Nov 30, 2021 at 12:17 PM Eric Abreu <abreuer1521@gmail.com> wrote: > Hi Thomas, > > Thanks for the quick response. I'm going to repeat the steps to create the > ZFS pool from the web interface and paste them here. I'm pretty sure I did > everything from the dashboard and the encryption was enabled by default. > I'll keep you posted. Thanks again for your help. > > On Tue, Nov 30, 2021 at 3:37 AM Thomas Lamprecht <t.lamprecht@proxmox.com> > wrote: > >> Hi, >> >> On 30.11.21 04:36, Eric Abreu wrote: >> > I have created a ZFS pool from Proxmox 7.1 web interface with 2 SSDs in >> > RAID 1. I noticed that everything works fine after I created the pool, >> and >> > ZFS at REST encryption was also enabled. After rebooting the server it >> did >> > not ask for a passphrase so my guess is that Proxmox is getting the key >> > from somewhere in the file system. Anyone could help me find out where? >> >> Well, how did you enable ZFS at rest encryption? As that is something >> that won't >> be done automatically, and the local-storage web-interface/api currently >> does not >> allow to configure that either. >> >> cheers, >> Thomas >> >> _______________________________________________ pve-user mailing list pve-user@lists.proxmox.com https://lists.proxmox.com/cgi-bin/mailman/listinfo/pve-user ^ permalink raw reply [flat|nested] 6+ messages in thread
* Re: [PVE-User] Where is ZFS encryption key in Proxmox 7.1 2021-12-01 2:58 ` Adam Thompson @ 2021-12-01 3:39 ` Eric Abreu 0 siblings, 0 replies; 6+ messages in thread From: Eric Abreu @ 2021-12-01 3:39 UTC (permalink / raw) To: athompso; +Cc: Proxmox VE user list, Thomas Lamprecht Ok. Thank you Adam. On Tue, Nov 30, 2021, 9:58 PM Adam Thompson <athompso@athompso.net> wrote: > No. That means that the encryption *feature* is enabled, i.e. you may now > proceed to encrypt your dataset... if you really want to find out exactly > how that breaks things, I guess. > If it came back as disabled, you would not be able to use encryption at > all on that dataset. > -Adam > > Get Outlook for Android<https://aka.ms/AAb9ysg> > ________________________________ > From: pve-user <pve-user-bounces@lists.proxmox.com> on behalf of Eric > Abreu <abreuer1521@gmail.com> > Sent: Tuesday, November 30, 2021 6:31:31 PM > To: Thomas Lamprecht <t.lamprecht@proxmox.com> > Cc: Proxmox VE user list <pve-user@lists.proxmox.com> > Subject: Re: [PVE-User] Where is ZFS encryption key in Proxmox 7.1 > > Hello Thomas, > > I have repeated the following steps: > > 1 - Went to PVE Node/ ZFS/ Create ZFS/ > 2 - On the dialogue box name = my_pool, Add Storage (check), Select Devices > (2 x 1TB disks), RAID Level = Mirror, Compression = off, ashift = 12 > 3 - Hit Create > 4 - Open the command line on my pve node and typed: > zpool get feature@encryption my_pool > > And I got this as a response: > > NAME PROPERTY VALUE SOURCE > my_pool feature@encryption enabled local > > Does that mean encryption is enabled? > > Thanks again. > > On Tue, Nov 30, 2021 at 12:17 PM Eric Abreu <abreuer1521@gmail.com> wrote: > > > Hi Thomas, > > > > Thanks for the quick response. I'm going to repeat the steps to create > the > > ZFS pool from the web interface and paste them here. I'm pretty sure I > did > > everything from the dashboard and the encryption was enabled by default. > > I'll keep you posted. Thanks again for your help. > > > > On Tue, Nov 30, 2021 at 3:37 AM Thomas Lamprecht < > t.lamprecht@proxmox.com> > > wrote: > > > >> Hi, > >> > >> On 30.11.21 04:36, Eric Abreu wrote: > >> > I have created a ZFS pool from Proxmox 7.1 web interface with 2 SSDs > in > >> > RAID 1. I noticed that everything works fine after I created the pool, > >> and > >> > ZFS at REST encryption was also enabled. After rebooting the server it > >> did > >> > not ask for a passphrase so my guess is that Proxmox is getting the > key > >> > from somewhere in the file system. Anyone could help me find out > where? > >> > >> Well, how did you enable ZFS at rest encryption? As that is something > >> that won't > >> be done automatically, and the local-storage web-interface/api currently > >> does not > >> allow to configure that either. > >> > >> cheers, > >> Thomas > >> > >> > _______________________________________________ > pve-user mailing list > pve-user@lists.proxmox.com > https://lists.proxmox.com/cgi-bin/mailman/listinfo/pve-user > > _______________________________________________ > pve-user mailing list > pve-user@lists.proxmox.com > https://lists.proxmox.com/cgi-bin/mailman/listinfo/pve-user > > ^ permalink raw reply [flat|nested] 6+ messages in thread
end of thread, other threads:[~2021-12-01 3:40 UTC | newest] Thread overview: 6+ messages (download: mbox.gz / follow: Atom feed) -- links below jump to the message on this page -- 2021-11-30 3:36 [PVE-User] Where is ZFS encryption key in Proxmox 7.1 Eric Abreu 2021-11-30 8:37 ` Thomas Lamprecht 2021-11-30 17:17 ` Eric Abreu 2021-12-01 0:31 ` Eric Abreu 2021-12-01 2:58 ` Adam Thompson 2021-12-01 3:39 ` Eric Abreu
This is a public inbox, see mirroring instructions for how to clone and mirror all data and code used for this inbox