From owner-freebsd-questions@freebsd.org Wed Sep 16 15:39:37 2020 Return-Path: Delivered-To: freebsd-questions@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 247D03E9DFA for ; Wed, 16 Sep 2020 15:39:37 +0000 (UTC) (envelope-from xpetrl@beepc.ch) Received: from srv.fastssdserver.com (srv.fastssdserver.com [162.223.31.2]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4Bs45y6Wlyz3fTm for ; Wed, 16 Sep 2020 15:39:34 +0000 (UTC) (envelope-from xpetrl@beepc.ch) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=beepc.ch; s=default; h=Content-Transfer-Encoding:Content-Type:In-Reply-To:MIME-Version :Date:Message-ID:From:References:To:Subject:Sender:Reply-To:Cc:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:List-Id:List-Help:List-Unsubscribe:List-Subscribe: List-Post:List-Owner:List-Archive; bh=7vIqtg+SxjlBKoGNFBoUYfl2Q4E6Sf8itIkqlmmW6Ng=; b=jVhx3hu4rYHgiCAMva8ODPzacX AQuCrmagMueh6fJmflH7uDPL+tpS1G8DbD6LHi2r0B/ac4HVsu1ZfZpEOz64kZuASX7JbM9PZQG2N gz7aMe3/8UyK07+KUB5y0A28ZJ4MqQ7sUPFaYIeG+con0NcnVq5dAukhIuVLJFRRpbmsKcPe0f3Su Q9VvJf9nbn7psEB5dEngFGIQITKj5iLKnpHAfZjoHu66yRxYSx5FCIFz5dQoPnSaALY5P751NbkwP Lc2LA6UNLnrDeLGnESZwRQTwcUenAC+NyicG6aNXA9P1bXk//Yp+OaTJiFqD4ISobRsPEoWvWc4Qt x2SGdBWw==; Received: from [185.43.245.37] (port=51954 helo=[192.168.1.75]) by srv.fastssdserver.com with esmtpsa (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (Exim 4.93) (envelope-from ) id 1kIZWu-000152-R8 for freebsd-questions@freebsd.org; Wed, 16 Sep 2020 20:39:33 +0500 Subject: Re: move zfs geli encrypt mirror to unencrypted To: freebsd-questions@freebsd.org References: <66e2f2da-af22-766a-cc7a-78c29735e39f@beepc.ch> <20200916153611.abaaa06edad1738c9c4c381e@sohara.org> From: xpetrl Message-ID: <2cf11fa5-3e5c-1934-7af3-8b1aeb28eb79@beepc.ch> Date: Wed, 16 Sep 2020 17:39:31 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Thunderbird/68.11.0 MIME-Version: 1.0 In-Reply-To: <20200916153611.abaaa06edad1738c9c4c381e@sohara.org> Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: 7bit X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - srv.fastssdserver.com X-AntiAbuse: Original Domain - freebsd.org X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - beepc.ch X-Get-Message-Sender-Via: srv.fastssdserver.com: authenticated_id: xpetrl@beepc.ch X-Authenticated-Sender: srv.fastssdserver.com: xpetrl@beepc.ch X-Source: X-Source-Args: X-Source-Dir: X-Rspamd-Queue-Id: 4Bs45y6Wlyz3fTm X-Spamd-Bar: -- Authentication-Results: mx1.freebsd.org; dkim=pass header.d=beepc.ch header.s=default header.b=jVhx3hu4; dmarc=none; spf=pass (mx1.freebsd.org: domain of xpetrl@beepc.ch designates 162.223.31.2 as permitted sender) smtp.mailfrom=xpetrl@beepc.ch X-Spamd-Result: default: False [-2.10 / 15.00]; RCVD_TLS_ALL(0.00)[]; RCVD_VIA_SMTP_AUTH(0.00)[]; R_DKIM_ALLOW(-0.20)[beepc.ch:s=default]; MID_RHS_MATCH_FROM(0.00)[]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; HAS_X_SOURCE(0.00)[]; MIME_GOOD(-0.10)[text/plain]; TO_DN_NONE(0.00)[]; ARC_NA(0.00)[]; RCPT_COUNT_ONE(0.00)[1]; NEURAL_HAM_LONG(-0.74)[-0.736]; DMARC_NA(0.00)[beepc.ch]; R_SPF_ALLOW(-0.20)[+a]; DKIM_TRACE(0.00)[beepc.ch:+]; HAS_X_GMSV(0.00)[xpetrl@beepc.ch]; NEURAL_HAM_MEDIUM(-0.97)[-0.975]; HAS_X_ANTIABUSE(0.00)[]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+]; NEURAL_SPAM_SHORT(0.11)[0.115]; ASN(0.00)[asn:46261, ipnet:162.223.28.0/22, country:US]; RCVD_COUNT_TWO(0.00)[2]; MAILMAN_DEST(0.00)[freebsd-questions]; HAS_X_AS(0.00)[xpetrl@beepc.ch] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.33 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 16 Sep 2020 15:39:37 -0000 >> We have a server with 4 disks, 2 zpool are zfs mirror: >> >> - base system unencrypted, partitions (da*p2) >> - data storage, geli encrypted, partitions (da*p4) >> >> We now want to "move" the data storage (encrypt) to unencrypted partition. > > Do you still want the encrypted partitions ? If not the simplest > thing to do would be to detach the encrypted devices (daNp4.eli) one at a > time and attach the unencrypted device (daNp4) in its place, wait for the > resilver and repeat for the other devices in the zvol. > We don't need the encrypted partition anymore. Your procedure is really convenient, thank you. Do I have to take care about geli in some way?