From owner-freebsd-fs@freebsd.org Fri May 18 21:38:16 2018 Return-Path: Delivered-To: freebsd-fs@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 040A7EDCEB3 for ; Fri, 18 May 2018 21:38:16 +0000 (UTC) (envelope-from rcv-cmlja0BoYXZva21vbi5jb20AQDE1MjY2NzkwNzk=@vfemail.net) Received: from smtp102-6.vfemail.net (onethreesix.vfemail.net [199.16.11.136]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 996776AFBE for ; Fri, 18 May 2018 21:38:15 +0000 (UTC) (envelope-from rcv-cmlja0BoYXZva21vbi5jb20AQDE1MjY2NzkwNzk=@vfemail.net) DKIM-Signature: v=1; a=rsa-sha256; c=simple; d=havokmon.com; h=date :message-id:from:to:subject:references:in-reply-to:content-type :mime-version:content-transfer-encoding; s=default; bh=Bk4ApJZmF AZko4gKHcZagIOTuCktlMQ16OQkpqUU2UI=; b=I+k3fZ0KMIa9iTH1WeJoMbVRV xcgSS18BtQeZ+Ok2fbxu/Lo7h5RvV5cJKYRFwRR64bGxtnuTUfYtBzSElYtjBzqZ F+tlpJizOrjHprNJDAPLmagv0Qj88K8zPSb2IsFU23qc090nhtuh43h/GN3NvyiS dBhZFuiTJIufgd9TDM= Received: (qmail 20770 invoked by uid 89); 18 May 2018 21:31:19 -0000 Received: by simscan 1.4.0 ppid: 20764, pid: 20767, t: 0.0506s scanners:none Received: from unknown (HELO bG9jYWxob3N0QDE1MjY2NzkwNzk=) (cmlja0BoYXZva21vbi5jb21AMTUyNjY3OTA3OQ==@MTcyLjE2LjEwMC45MkAxNTI2Njc5MDc5) by 172.16.100.62 with ESMTPSA (DHE-RSA-AES128-GCM-SHA256 encrypted, authenticated); 18 May 2018 21:31:19 -0000 Date: Fri, 18 May 2018 21:31:28 +0000 Message-ID: <20180518213128.Horde.1N5mXCiMFdOfph_qVwqZNS7@www.vfemail.net> From: Rick Romero To: freebsd-fs@freebsd.org Subject: Re: Can one remove a specific file from all snapshots? References: <38792b3b-04db-0c7f-c9a4-3f55b908a427@nber.org> <62BA102D-E58F-474D-A4DF-65D2020BEB80@ultra-secure.de> In-Reply-To: <62BA102D-E58F-474D-A4DF-65D2020BEB80@ultra-secure.de> User-Agent: Horde Application Framework 5 Accept-Language: en MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed; DelSp=Yes Content-Transfer-Encoding: 8bit Content-Disposition: inline Content-Description: Plaintext Message X-Content-Filtered-By: Mailman/MimeDel 2.1.26 X-BeenThere: freebsd-fs@freebsd.org X-Mailman-Version: 2.1.26 Precedence: list List-Id: Filesystems List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 18 May 2018 21:38:16 -0000 Quoting Rainer Duffner : >> Am 18.05.2018 um 22:17 schrieb Alex Aminoff : >> >> The use case here is that we have data sets of sensitive data that >> we are contractually obligated to delete with no backups at a >> certain point in time. The datasets are stored on a ZFS filesystem >> (on a truenas from IxSystems as it happens). The snapshots are kept >> for 15 days, so at the moment we have to rm the files 15 days >> before the deadline to be compliant. Is there a way to delete a >> specific file from the live filesystem as well as all the snapshots? >> >> I did find a post to this list from 2014: >> >> https://lists.freebsd.org/pipermail/freebsd-fs/2014-October/020307.html >> >> but I don't think it is relevant, and in any case it does not >> appear that the feature that post describes was implemented. >> >> Thanks, > > AFAIK, snapshots are still read-only. > > BTRFS seems to have writable snapshots - but I’ve no idea how it > actually works. > > I would suggest to change your contracts - that will be much easier > than changing ZFS. Create a dataset and mount it below the current file location, and put that file there.  Assuming SMB, it should still be shared out, just one folder below.  Then don't include that dataset in the snapshots (or do a different rotation). Rick