Enable ZFS encrytption on existing dataset [solved - RTFM]

[tenspd1370]

Hi all -

I just read about ZFS Encryption and decided to enable it in my current pool. Obviously, that just allows me to create new data sets with encryption. So far just trying to do zfs set encryption=-on <dataset> tells me encryption is read only. Is there a way to enable it on an existing dataset? Or do I need to create a new encrypted dataset and migrate it? Everything I have read would indicate that is the case, but before I go and try to figure that out, I wanted to verify that was indeed what needs to be done.

Thanks!

[szatox]

Encryption can only be applied when writing data, so it makes a lot of sense to only allow when you're creating a new data set (which is guaranteed to be empty at this point - e.g. no plain data has been written).
Now, it it was possible to enable encryption on an existing dataset and "convert" it in the background, how would you track encryption progress and how would you ensure the plain data is removed from your disks?

I'd say you should actually start with a new hard drive, shred it properly, and then create a whole new zpool there. And after you copy your data over to an encrypted set, shred the disks you're using right now.

[mrbassie]

[tenspd1370]

Thanks all. I missed this part: