search

Rudd-O / zfs-fedora-installer

Fedora on ZFS root installer
35 stars 6 forks source link

native zfs encryption #32

Open fneddy opened 4 years ago

fneddy commented 4 years ago

since v0.8 zfsonlinux supports native zfs encryption.

is it easily possible to add support for this?

Rudd-O commented 4 years ago

I think it should be relatively easy to add support for this, yes.  Check out the code.

  1. You'll need to wire a new parameter for the ZFS encryption password all the way through the part where we create or import the pool.

  2. You'll need to enhance the existing code to parse the password prompt presented to you by systemd during boot.

Note that pools created with a password should not be used in more than one system, because the private key would then be the same across all your systems where you reuse the image.

ghost commented 2 years ago

Fedora on ZFS guide on OpenZFS-Docs website supports native encryption.