Both sides previous revisionPrevious revisionNext revision | Previous revisionNext revisionBoth sides next revision |
advanced:target [2018/10/03 20:03] – [Create a replication user] Fix zfs permissions dan | advanced:target [2018/10/05 00:11] – [Rebuild the kernel] dan |
---|
| |
===== Rebuild the kernel ===== | ===== Rebuild the kernel ===== |
To ensure you have the headers for the running kernel installed, run the following commands (taken from the [[https://wiki.odroid.com/odroid-xu4/software/building_kernel#y|Hardkernel wiki]]): | In order to build ZFS, you must have the headers for the running kernel installed on the system. Since there does not appear to be a linux-headers package available matching the kernel version installed on the Odroid, this means you'll need to rebuild the kernel. To do this, run the following commands (taken from the [[https://wiki.odroid.com/odroid-xu4/software/building_kernel#y|Hardkernel wiki]]): |
<code> | <code> |
sudo apt update && sudo apt upgrade | sudo apt update && sudo apt upgrade |
| |
===== Enable encryption, and create an encrypted dataset ===== | ===== Enable encryption, and create an encrypted dataset ===== |
| **FreeNAS doesn't support OpenZFS encryption at this time, and it's not possible to replicate from a non-encrypted dataset to an encrypted one. This documentation is left for the sake of completeness.** |
| |
The idea of this system is to be a standalone storage "brick", which could be left at a remote location where you might not fully trust the network operator. ZFS on Linux supports dataset encryption for this purpose, and material for this section is drawn from this [[https://datacenteroverlords.com/2017/12/17/zfs-on-linux-with-encryption-part-2/|blog post]]. You'll first need to enable that feature on your pool: | The idea of this system is to be a standalone storage "brick", which could be left at a remote location where you might not fully trust the network operator. ZFS on Linux supports dataset encryption for this purpose, and material for this section is drawn from this [[https://datacenteroverlords.com/2017/12/17/zfs-on-linux-with-encryption-part-2/|blog post]]. You'll first need to enable that feature on your pool: |
<code> | <code> |
Now allow that user to make changes on the encrypted dataset: | Now allow that user to make changes on the encrypted dataset: |
<code> | <code> |
zfs allow -u zfsuser create,destroy,snapshot,mount,compression,receive dozer/encrypted | zfs allow -ldu zfsuser create,destroy,diff,mount,readonly,receive,release,send,userprop dozer/backup |
</code> | </code> |
| |