SOLVED zfs set encryption=off not possible?

flashdrive

Patron
Joined
Apr 2, 2021
Messages
264
I do have a dataset which inherited the encryption. I did not disable encryption during the setup of this dataset.

Is there a way to disable the encryption for this dataset without destroying it?

zfs set encryption=off doesn't seem to be possible; the man page states "edit = No"
 

Samuel Tai

Never underestimate your own stupidity
Moderator
Joined
Apr 24, 2020
Messages
5,399
Sorry, this attribute can only be set at dataset creation.
 

flashdrive

Patron
Joined
Apr 2, 2021
Messages
264
@Samuel Tai
This is what I meant - thank you for the confirmation.
 
Joined
Oct 22, 2019
Messages
3,641
Encrypting records (data), Master Key, Cipher, and Key Width are all "one and done." Once initialized on a dataset, they are permanent and cannot be changed. (The same is true for non-encrypted newly created datasets.)

What you can change is the Passphrase / Keystring (used for the User Key) and the Iterations. You can also toggle "Inherit Encryption" which simply changes the dataset's encryptionroot property, and thus unlocking the encryptionroot also unlocks this dataset. (It's akin to using the same Passphrase / Keystring as the parent, as well as creating a logical relationship among datasets that fall within this encryptionroot "group".)
 
Last edited:
Top