HomeFreeBSD

Added encryption support for zfs recv -o / -x

Description

Added encryption support for zfs recv -o / -x

One small integration that was absent from b52563 was
support for zfs recv -o / -x with regards to encryption
parameters. The main use cases of this are as follows:

  • Receiving an unencrypted stream as encrypted without needing to create a "dummy" encrypted parent so that encryption can be inheritted.
  • Allowing users to change their keylocation on receive, so long as the receiving dataset is an encryption root.
  • Allowing users to explicitly exclude or override the encryption property from an unencrypted properties stream, allowing it to be received as encrypted.
  • Receiving a recursive heirarchy of unencrypted datasets, encrypting the top-level one and forcing all children to inherit the encryption.

Reviewed-by: Jorgen Lundman <lundman@lundman.net>
Reviewed by: Matthew Ahrens <mahrens@delphix.com>
Reviewed-by: Brian Behlendorf <behlendorf1@llnl.gov>
Reviewed-by: Richard Elling <Richard.Elling@RichardElling.com>
Signed-off-by: Tom Caputi <tcaputi@datto.com>
Closes #7650

Details

Provenance
Tom Caputi <tcaputi@datto.com>Authored on Oct 13 2017, 5:09 PM
Brian Behlendorf <behlendorf1@llnl.gov>Committed on Aug 15 2018, 4:48 PM
Parents
rGfe8a7982ca90: Fix comment on calculating blkid
Branches
Unknown
Tags
Unknown

Event Timeline

Brian Behlendorf <behlendorf1@llnl.gov> committed rGd9c460a0b659: Added encryption support for zfs recv -o / -x (authored by Tom Caputi <tcaputi@datto.com>).Aug 15 2018, 4:48 PM