Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 16 Sep 2020 13:32:25 -0700
From:      David Christensen <dpchrist@holgerdanske.com>
To:        freebsd-questions@freebsd.org
Subject:   Re: move zfs geli encrypt mirror to unencrypted
Message-ID:  <98b346a8-113c-a4e0-75e0-7389c002e271@holgerdanske.com>
In-Reply-To: <20200916153611.abaaa06edad1738c9c4c381e@sohara.org>
References:  <66e2f2da-af22-766a-cc7a-78c29735e39f@beepc.ch> <20200916153611.abaaa06edad1738c9c4c381e@sohara.org>

next in thread | previous in thread | raw e-mail | index | archive | help
On 2020-09-16 07:36, Steve O'Hara-Smith wrote:
> On Wed, 16 Sep 2020 11:02:51 +0200 xpetrl ... wrote:

>> We have a server with 4 disks, 2 zpool are zfs mirror:
>>
>> - base system unencrypted, partitions (da*p2)
>> - data storage, geli encrypted, partitions (da*p4)
>>
>> We now want to "move" the data storage (encrypt) to unencrypted partition.

> ... the simplest thing to do would be to detach the encrypted devices (daNp4.eli) one at a
> time and attach the unencrypted device (daNp4) in its place, wait for the
> resilver and repeat for the other devices in the zvol.

+1


On 2020-09-16 08:39, xpetrl wrote:
 > Do I have to take care about geli in some way?

I am on 12.1-RELEASE.  I would adjust "geli_devices" and 
"geli_gpt_daNp4_flags" in /etc/rc.conf as I proceeded.


David



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?98b346a8-113c-a4e0-75e0-7389c002e271>