Tuesday Tech Tip - How to Implement ZFS Encryption for Data Safety

Each Tuesday, we will be releasing a tech tip video that will give users information on various topics relating to our Storinator storage servers.

In this week's video, Spencer is talking about encryption in ZFS.

ZFS has a command line tool for encrypting your data sets. In this video, Spencer talks about how to implement ZFS encryption, showing what that looks like in practice, and explore ways to better protect your data using this tool.

Be sure to watch next Tuesday, when we give you another 45 Drives tech tip

[NetBandit]

Is it possible to encrypt the entire pool?

[intheprettypink]

Couple of questions, does the passphrase still exist in memory as you are using the dataset? And if you unmount the dataset, do you have to reenter the passphrase or will it remember it if it is still in memory?

[FlaxTheSeedOne]

I have worked with encryption on zfs through Truenas and it mounts the Pools on boot automatically and loads the key.
Is there a way to prevent this behaviour and need the User to interact with the Machine after boot.
My concern is when the Machine gets stolen in its entirety someone can and will have access which I dont want.
And for someone to steal a server it has to be powered off so I don't want the automatik mounting on boot.