Suggestion? Backing up unencrypted dataset to encrypted

[ryun]

I set up a few replication tasks a while back from an unencrypted data set to an an encrypted dataset. This was prior to the introduction of the "The following datasets are not encrypted but are within an encrypted dataset" warning message. I have no real desire or need to encrypt my data at the source, but would very much like to keep my data encrypted on the target volume. In my case, the target is an external drive on the same TrueNAS Scale server.

Looking for suggestions on how I can keep my data encrypted on the target without "lead[ing] to various issues" like the warning message foreshadows. I don't have to use ZFS's encryption for this I just don't know how to do it any other way on TrueNAS scale (TrueNAS-SCALE-22.12.3.3).

 

[winnielinnie]

You can ignore this warning, since it's on a backup pool anyways, not tethered to the System Dataset or ix-applications dataset.

"The following datasets are not encrypted but are within an encrypted dataset" warning message.

To better understand, are your encrypted backed-up datasets nested underneath an non-encrypted root dataset (on the USB pool)?

 

[ryun]

You can ignore this warning, since it's on a backup pool anyways, not tethered to the System Dataset or ix-applications dataset.


To better understand, are your encrypted backed-up datasets nested underneath an non-encrypted root dataset (on the USB pool)?

Sounds good to me, thanks! And to answer you question it's the other way around; the unencrypted, backed up datasets are underneath the encrypted root dataset (external drive).

 

[winnielinnie]

And to answer you question it's the other way around; the unencrypted, backed up datasets are underneath the encrypted root dataset (external drive).

Your thread title makes it sounds like it's the other way around. (As in "I'm backing up an encrypted dataset as an unencrypted dataset.")

But you're "good". It's a warning, and you'll just have to ignore it. Since it's your backup target, the main concerns from TrueNAS/iXsystems don't really apply to it.

 

[infinitytec]

Curiously, I am trying to replicate from an unencrypted dataset to an encrypted one. I made a new dataset and the replicated copy is not inheriting encryption from its parent. Any thoughts?

 

[winnielinnie]

You'd have to elaborate. What options did you use? What does the dataset topology ("layout") look like? Core or SCALE? And so on.

 

[infinitytec]

You'd have to elaborate. What options did you use? What does the dataset topology ("layout") look like? Core or SCALE? And so on.

I went ahead and made my own thread. https://www.truenas.com/community/threads/encryption-and-replication.113189/