From owner-freebsd-questions@freebsd.org Tue Oct 27 14:02:54 2020 Return-Path: Delivered-To: freebsd-questions@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id C8A8044EE81 for ; Tue, 27 Oct 2020 14:02:54 +0000 (UTC) (envelope-from 4250.82.1d4c500054089a8.6d963fcc01837eee9894c506204d22f6@email-od.com) Received: from s1-b0c6.socketlabs.email-od.com (s1-b0c6.socketlabs.email-od.com [142.0.176.198]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4CLD1T1sF5z4sML for ; Tue, 27 Oct 2020 14:02:52 +0000 (UTC) (envelope-from 4250.82.1d4c500054089a8.6d963fcc01837eee9894c506204d22f6@email-od.com) DKIM-Signature: v=1; a=rsa-sha256; d=email-od.com;i=@email-od.com;s=dkim; c=relaxed/relaxed; q=dns/txt; t=1603807368; x=1606399368; h=content-transfer-encoding:content-type:mime-version:references:in-reply-to:message-id:subject:cc:to:from:date:x-thread-info; bh=F4ryZbcJwV1V0deDX7Dfml8U5FezQnRNKhyeXptCltU=; b=gDZtvRxcLPoKpXfM/lZmodTi5D/Ly5be2oBaH9+7o8tFs2Nv/M0BFeIDAf7KVAOLKgT8Deh9VjsLuNwU5ebc94ujhvQWOuMcJZtKvVoXD+TNdDPob99721I2f0ZhhCO0bbjDq7S0L8sWKlcyc9YWKKlLZQVvmgwFZLHlR0yGODM= X-Thread-Info: NDI1MC45Mi4xZDRjNTAwMDU0MDg5YTguZnJlZWJzZC1xdWVzdGlvbnM9ZnJlZWJzZC5vcmc= Received: from r1.us-east-1.aws.in.socketlabs.com (r1.us-east-1.aws.in.socketlabs.com [142.0.191.1]) by mxsg2.email-od.com with ESMTP(version=Tls12 cipher=Aes256 bits=256); Tue, 27 Oct 2020 10:02:43 -0400 Received: from smtp.lan.sohara.org (EMTPY [185.202.17.215]) by r1.us-east-1.aws.in.socketlabs.com with ESMTP(version=Tls12 cipher=Aes256 bits=256); Tue, 27 Oct 2020 10:01:11 -0400 Received: from [192.168.63.1] (helo=steve.lan.sohara.org) by smtp.lan.sohara.org with smtp (Exim 4.94 (FreeBSD)) (envelope-from ) id 1kXPYj-000C7W-7D; Tue, 27 Oct 2020 14:02:45 +0000 Date: Tue, 27 Oct 2020 14:02:44 +0000 From: Steve O'Hara-Smith To: xpetrl Cc: freebsd-questions@freebsd.org Subject: Re: move zfs geli encrypt mirror to unencrypted Message-Id: <20201027140244.e16da5e379dc4001c5810c51@sohara.org> In-Reply-To: References: <66e2f2da-af22-766a-cc7a-78c29735e39f@beepc.ch> <20200916153611.abaaa06edad1738c9c4c381e@sohara.org> X-Mailer: Sylpheed 3.7.0 (GTK+ 2.24.32; amd64-portbld-freebsd12.0) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-Rspamd-Queue-Id: 4CLD1T1sF5z4sML X-Spamd-Bar: -- Authentication-Results: mx1.freebsd.org; dkim=pass header.d=email-od.com header.s=dkim header.b=gDZtvRxc; dmarc=none; spf=pass (mx1.freebsd.org: domain of 4250.82.1d4c500054089a8.6d963fcc01837eee9894c506204d22f6@email-od.com designates 142.0.176.198 as permitted sender) smtp.mailfrom=4250.82.1d4c500054089a8.6d963fcc01837eee9894c506204d22f6@email-od.com X-Spamd-Result: default: False [-2.49 / 15.00]; MID_RHS_MATCH_FROM(0.00)[]; ARC_NA(0.00)[]; R_DKIM_ALLOW(-0.20)[email-od.com:s=dkim]; NEURAL_HAM_MEDIUM(-1.02)[-1.020]; FROM_HAS_DN(0.00)[]; TO_DN_SOME(0.00)[]; MV_CASE(0.50)[]; R_SPF_ALLOW(-0.20)[+ip4:142.0.176.0/20]; MIME_GOOD(-0.10)[text/plain]; DMARC_NA(0.00)[sohara.org]; NEURAL_HAM_LONG(-1.00)[-0.997]; RWL_MAILSPIKE_GOOD(0.00)[142.0.176.198:from]; RCVD_COUNT_THREE(0.00)[4]; TO_MATCH_ENVRCPT_SOME(0.00)[]; DKIM_TRACE(0.00)[email-od.com:+]; RCPT_COUNT_TWO(0.00)[2]; RCVD_IN_DNSWL_NONE(0.00)[142.0.176.198:from]; NEURAL_HAM_SHORT(-0.77)[-0.772]; FORGED_SENDER(0.30)[steve@sohara.org,4250.82.1d4c500054089a8.6d963fcc01837eee9894c506204d22f6@email-od.com]; MIME_TRACE(0.00)[0:+]; RCVD_TLS_LAST(0.00)[]; ASN(0.00)[asn:7381, ipnet:142.0.176.0/22, country:US]; FROM_NEQ_ENVFROM(0.00)[steve@sohara.org,4250.82.1d4c500054089a8.6d963fcc01837eee9894c506204d22f6@email-od.com]; MAILMAN_DEST(0.00)[freebsd-questions] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.33 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 27 Oct 2020 14:02:54 -0000 On Tue, 27 Oct 2020 14:44:50 +0100 xpetrl wrote: > > xpetrl wrote: > > > >> Hello, > >> > >> We have a server with 4 disks, 2 zpool are zfs mirror: > >> > >> - base system unencrypted, partitions (da*p2) > >> - data storage, geli encrypted, partitions (da*p4) > >> > >> We now want to "move" the data storage (encrypt) to unencrypted > >> partition. > > > > Do you still want the encrypted partitions ? If not the simplest > > thing to do would be to detach the encrypted devices (daNp4.eli) one at > > a time and attach the unencrypted device (daNp4) in its place, wait for > > the resilver and repeat for the other devices in the zvol. > > > > Detached one drive daNp4.eli, then I didn't found how to attach daNp4: > > zpool attach encrypt 3680521480316264201 /dev/da3p4 I presume encrypt is the pool name, but what is 3680521480316264201 ? If you post the output of zpool status I'll be able to work out the right command line to use. -- Steve O'Hara-Smith | Directable Mirror Arrays C:\>WIN | A better way to focus the sun The computer obeys and wins. | licences available see You lose and Bill collects. | http://www.sohara.org/