Date: Sun, 29 Jun 2025 08:26:59 -0600 From: Alan Somers <asomers@freebsd.org> To: freebsd-fs@freebsd.org, freebsd-current@freebsd.org Subject: Re: removing GELI from a zfs-on-root system Message-ID: <CAOtMX2jq202eckjK-pKK-dR_sVLMX8%2BO0oZUpibsUhP8Z-qMXA@mail.gmail.com> In-Reply-To: <aGFJ7oRB-NFm9eQH@int21h>
index | next in thread | previous in thread | raw e-mail
[-- Attachment #1 --] On Sun, Jun 29, 2025 at 8:13 AM void <void@f-m.fm> wrote: > Hi, > > I'd like to remove the GELI prompt/functionality from > a root-on-zfs system. How can I do this without re-initialising > the whole system? It's not a redundant array - it's just one disk. > > There are some methods turning up in a search, but from years ago, > and zfs is a fast-moving target. They're all using redundant > arrays in their examples. > > What I'm after is the latest approved/proper method to remove GELI > from the booted, unlocked, single-disk zfs system. Is this possible > in-situ? Nope. One way or another you will need to copy the entire disk. You can't just remove the encryption sector-by-sector. [-- Attachment #2 --] <div dir="ltr"><div class="gmail_quote gmail_quote_container"><div dir="ltr" class="gmail_attr">On Sun, Jun 29, 2025 at 8:13 AM void <<a href="mailto:void@f-m.fm">void@f-m.fm</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">Hi,<br> <br> I'd like to remove the GELI prompt/functionality from<br> a root-on-zfs system. How can I do this without re-initialising<br> the whole system? It's not a redundant array - it's just one disk.<br> <br> There are some methods turning up in a search, but from years ago,<br> and zfs is a fast-moving target. They're all using redundant<br> arrays in their examples.<br> <br> What I'm after is the latest approved/proper method to remove GELI<br> from the booted, unlocked, single-disk zfs system. Is this possible in-situ?</blockquote><div><br></div><div>Nope. One way or another you will need to copy the entire disk. You can't just remove the encryption sector-by-sector. <br></div></div></div>home | help
Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAOtMX2jq202eckjK-pKK-dR_sVLMX8%2BO0oZUpibsUhP8Z-qMXA>