move zfs geli encrypt mirror to unencrypted

[David Christensen]

On 2020-09-16 07:36, Steve O'Hara-Smith wrote:
> On Wed, 16 Sep 2020 11:02:51 +0200 xpetrl ... wrote:

>> We have a server with 4 disks, 2 zpool are zfs mirror:
>>
>> - base system unencrypted, partitions (da*p2)
>> - data storage, geli encrypted, partitions (da*p4)
>>
>> We now want to "move" the data storage (encrypt) to unencrypted partition.

> ... the simplest thing to do would be to detach the encrypted devices (daNp4.eli) one at a
> time and attach the unencrypted device (daNp4) in its place, wait for the
> resilver and repeat for the other devices in the zvol.

+1


On 2020-09-16 08:39, xpetrl wrote:
 > Do I have to take care about geli in some way?

I am on 12.1-RELEASE.  I would adjust "geli_devices" and 
"geli_gpt_daNp4_flags" in /etc/rc.conf as I proceeded.


David