mirror of
https://git.proxmox.com/git/mirror_zfs.git
synced 2025-01-12 19:20:28 +03:00
Clarify that deduped data is encrypted
Reviewed-by: Brian Behlendorf <behlendorf1@llnl.gov> Reviewed-by: George Melikov <mail@gmelikov.ru> Reviewed-by: Tom Caputi <tcaputi@datto.com> Signed-off-by: Richard Laager <rlaager@wiktel.com> Closes #8691
This commit is contained in:
parent
294fcb543e
commit
77449a1ab0
@ -2388,7 +2388,8 @@ directory listings, FUID mappings, and
|
||||
.Sy groupused
|
||||
data. ZFS will not encrypt metadata related to the pool structure, including
|
||||
dataset and snapshot names, dataset hierarchy, properties, file size, file
|
||||
holes, and deduplication tables.
|
||||
holes, and deduplication tables (though the deduplicated data itself is
|
||||
encrypted).
|
||||
.Pp
|
||||
Key rotation is managed by ZFS. Changing the user's key (e.g. a passphrase)
|
||||
does not require re-encrypting the entire dataset. Datasets can be scrubbed,
|
||||
|
Loading…
Reference in New Issue
Block a user