ZFS ZFS Version and Encryption

[dave]

I was trying to create an encrypted zfs filesystem today and I got an error, so i tried to check the version and that gives me an error as well. Am I missing something?

% sudo zfs create -o compression=lz4 -o encryption=on -o mountpoint=/mnt/zusb-backup -o keyformat=raw -o keylocation=file:///usr/local/etc/zbackup00-backup-encryption.key zbackup00/backup
cannot create 'zbackup00/backup': invalid property 'encryption'

% freebsd-version
12.2-RELEASE-p10

% zfs version
unrecognized command 'version'
usage: zfs command args ...

 

[chungy]

You'll either need to install sysutils/openzfs-kmod or upgrade to FreeBSD 13.

The version of ZFS that FreeBSD 12 comes with doesn't support encryption.

 

[bsdcode]

The encryption property in the ZFS version used in the base system is first available with the OpenZFS implementation in Version 13.0.
You could use sysutils/openzfs from ports in Version 12.2.
EDIT: chungy was faster.

 

[dave]

Any thoughts on why zfs version doesn't work?

 

[chungy]

Because you're still running the base FreeBSD 12 utility. You need to install OpenZFS separately if you want that command, and encryption, to work.

 

[grahamperrin]

… 12 … install OpenZFS separately …

dave NB <https://www.freshports.org/sysutils/openzfs/#message> (with added emphasis):

Ensure that any zfs-related commands, such as zpool, zfs, as used in scripts and in your terminal sessions, use the correct path of /usr/local/sbin/ and not the /sbin/ commands provided by the FreeBSD base system.

Consider setting this in your shell profile defaults!

(I always forgot that.)

 

[dave]

If I were to install sysutils/openzfs, what steps would I need to take to boot root on zfs - other than the ones in the pkg message about /boot/loader.conf changes?

 

[grahamperrin]

If I recall correctly, no additional step.

<https://www.freshports.org/sysutils/openzfs-kmod/#message>

Please take the precaution of creating, activating then booting a new boot environment before making the changes.

<https://pkg-status.freebsd.org/builds?type=package&jailname=122amd64>

---

Looking ahead to 12.3-RELEASE <https://www.freebsd.org/releases/12.3R/schedule/>: take the same precaution, and maybe wait for the kernel module to be built and packaged in a 12.3 jail – then made available <https://www.freshports.org/sysutils/openzfs-kmod/#packages> and <⋯/#history> – before performing the minor upgrade to the base operating system.

<https://pkg-status.freebsd.org/builds?type=package&jailname=123amd64> does not (yet) exist.