Hi guys! Do you already know how ZFS crypto will be configured? Will it be possible to encrypt an existing pool on the fly? Or do I need to have the same amount of storage for another pool and copy the data? The project plan on your site says that it will be available in OpenSolaris in Q4. Will there be an update for 2009.06 or will 2010.02 be the first release to integrate ZFS crypto? thanks for your answers tobi11 -- This message posted from opensolaris.org
Tobias wrote:> Hi guys! > Do you already know how ZFS crypto will be configured?Yes we do. > Will it be possible to encrypt an existing pool on the fly? It will be possible to add new ZFS filesystems (and ZVOLs) that are encrypted, but it is not possible to turn an existing dataset into an encrypted one. >Or do I need to have the same amount of storage for another pool and copy the data?> The project plan on your site says that it will be available in OpenSolaris in Q4. Will there be an update for 2009.06 or will 2010.02 be the first release to integrate ZFS crypto? > thanks for your answersThat plan is out of date, in part due to the OpenSolaris 2010.03 release (which we won''t be in) and partly due to another ZFS project that crypto depends on that isn''t finished yet either. -- Darren J Moffat
thanks for the infos. Which project is it that your are waiting for? -- This message posted from opensolaris.org
Tobias wrote:> thanks for the infos. > Which project is it that your are waiting for?ZFS Fast System Attributes - which is pretty much all under the covers and not something admins can directly use but it is a hard dependency for ensuring the sensitive dnode content (file/dir names, ACLs, etc) are encrypted. -- Darren J Moffat