ZFS Command to set pool to read only

[zetabax]

Hi there,

I'm using TrueNas as a backup target for my windows clients and am worried about an infected devices on the network hitting my TrueNas backup share.

My backups are schedule to kickoff at a specific time and I have a pretty good idea of when they wrap.

I would like to know if / how to issue a command that tells ZFS to lock and unlock the pool i'm writing to.

My intent is to script and schedule the unlock and lock command to coincide with the backup schedule thus limiting the TrueNas backup servers exposure to crypto locker type attacks.

 

[Heracles]

am worried about an infected devices on the network hitting my TrueNas backup share

The best way to protect yourself against this is with snapshots.

Take regular snapshots of your dataset and the day a ransomware hits your TrueNAS server, you just rollback to the last snapshot taken before the incident and voilà : recovery is done almost instantly.

 

[zetabax]

Thanks @Heracles!

 

[no_connection]

Do remember to reserve space that you can free up by removing the reserve. With for example a dataset set to a few GB reservation. Since the encryption of the files will fill the NAS to 100% if it ever happens, meaning no way to roll back, or at least more difficult.