2 ms·

It's worth mentioning that last time I checked encrypted ZFS was not considered production due to obscure file corruption bugs that were unpatched. This was a

• Joel_Mckay 27d ago
  Part of the problem is replicating fs bugs that take months/years to occur is nearly impossible... people still sell USB to SAS/SATA adapters that cause large file corruption in hardware too. ZFS does have bit-rot checksum detection/repair, but the encrypted file feature was a bit of a YOLO feature for awhile. Not sure where it is at these days, as ddr5 ram prices skew away most of ZFS best key features. =3
• amarshall 27d ago
  Bigger issue was that native encryption doesn’t (didn’t?) have a maintainer, so even though most bugs got fixed, it’s not a great thing to build on. Some of the key storage is also a bit outdated. IMO use LUKS unless you really need the features of ZFS native enc.