https://github.com/mxk/zfscrypt
Multi-disk encryption management tool for ZFS on FreeBSD
https://github.com/mxk/zfscrypt
encryption freebsd zfs
Last synced: 11 months ago
JSON representation
Multi-disk encryption management tool for ZFS on FreeBSD
- Host: GitHub
- URL: https://github.com/mxk/zfscrypt
- Owner: mxk
- Created: 2017-09-08T22:42:07.000Z (almost 9 years ago)
- Default Branch: master
- Last Pushed: 2017-09-11T22:25:49.000Z (almost 9 years ago)
- Last Synced: 2025-04-13T03:49:40.751Z (over 1 year ago)
- Topics: encryption, freebsd, zfs
- Language: Shell
- Size: 4.88 KB
- Stars: 2
- Watchers: 2
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
zfscrypt
========
Multi-disk encryption management tool for ZFS.
Until native ZFS encryption is implemented in FreeBSD, disks must be encrypted
using [geli(8)](https://www.freebsd.org/cgi/man.cgi?query=geli). This script
provides commands for managing multiple encrypted disks as one unit (i.e.
without requiring multiple passphrases).
Disks are encrypted using keyfiles, which are kept in an encrypted keystore. The
keystore is a small file-backed memory disk containing a UFS2 file system. To
attach ZFS disks, the user enters their passphrase for the keystore, which then
provides access to the keyfiles. A backup copy of the keystore is maintained in
a dedicated partition on each member disk.
For more information run `zfscrypt help`.
Example
-------
```
zfscrypt newks
zfscrypt init ada0 ada1 ada2
zfscrypt attach
zpool create tank raidz /dev/gpt/*.eli
```