3 ms·
In addition to your points, if you intend to back up your ZFS datasets, it's easier with ZFS encryption to use ZFS commandline tools (zfs send) to ship the whol
by SkyMarshal 4y ago
In addition to your points, if you intend to back up your ZFS datasets, it's easier with ZFS encryption to use ZFS commandline tools (zfs send) to ship the whole encrypted dataset over the wire. With LUKS you're shipping the unencrypted dataset instead.
Arch has a good wiki page comparing LUKS vs ZFS native vs a few others: https://wiki.archlinux.org/title/Data-at-rest_encryption https://wiki.archlinux.org/title/Data-at-rest_encryption
And more discussion of differences over at /r/zfs: https://www.reddit.com/r/zfs/search?q=zfs+luks&restrict_sr=on https://www.reddit.com/r/zfs/search?q=zfs+luks&restrict_sr=o...
- uniqueuid 4y agoIt's great to send encrypted raw FS, but beware of the bugs that I mentioned above. Depending on your distro's packages, you may run an affected version for some time.
- tux2bsd 4y agoIf the change isn't too large/frequent you could send it over an encrypted transport (ssh/vpn/whatever).