move zfs geli encrypt mirror to unencrypted

Steve O'Hara-Smith steve at sohara.org
Wed Sep 16 20:06:14 UTC 2020


On Wed, 16 Sep 2020 17:39:31 +0200
xpetrl <xpetrl at beepc.ch> wrote:

> >> We have a server with 4 disks, 2 zpool are zfs mirror:
> >>
> >> - base system unencrypted, partitions (da*p2)
> >> - data storage, geli encrypted, partitions (da*p4)
> >>
> >> We now want to "move" the data storage (encrypt) to unencrypted
> >> partition.
> > 
> > 	Do you still want the encrypted partitions ? If not the simplest
> > thing to do would be to detach the encrypted devices (daNp4.eli) one at
> > a time and attach the unencrypted device (daNp4) in its place, wait for
> > the resilver and repeat for the other devices in the zvol.
> > 
> 
> We don't need the encrypted partition anymore.
> 
> Your procedure is really convenient, thank you.
> 
> Do I have to take care about geli in some way?

	Disable whatever was running geli attach, it'll fail anyway when
the decrypt fails but disabling it is neater.

-- 
Steve O'Hara-Smith <steve at sohara.org>


More information about the freebsd-questions mailing list