Solved Creating an encrypted ZFS volume with a keyfile?

[Unixnut]

Hi all,

I am trying to create an encrypted zfs volume that will be auto-mounted using a keyfile. According to online information this should be possible with the following command:
zfs create -o mountpoint=/home/ -o encryption=on -o keysource=raw,file:///usr/local/homekey disk/home

However when I try I get cannot create 'disk/home': invalid property 'keysource'
I tried with keysource=passphrase,prompt with the same result. Encryption is set on the "disk" pool, and searching online has not yielded any more info. As such I wanted to see if the commands I am running are correct for FreeBSD (version 14.0-RELEASE) .

 

[T-Daemon]

fs create -o mountpoint=/home/ -o encryption=on -o keysource=raw,file:///usr/local/homekey disk/home

You need to set the encryption=..., keyformat=raw|hex|passphrase and keylocation=prompt|file:///absolute/file/path properties ( zfsprops(7)).

 

[T-Daemon]

zfs create -o mountpoint=/home/ -o encryption=on -o keysource=raw,file:///usr/local/homekey disk/home

Apropos, coming FreeBSD 14.1-RELEASE (14.1-RC1 at the time of this writing) has encrypted <pool>/home/<user> data sets as an option in adduser(8).

 

[Unixnut]

Yep! That has done it! Thanks a lot! Good to know adduser has it integrated as well.

For reference this command has worked for me: zfs create -o mountpoint=/home/ -o encryption=on -o keyformat=raw -o keylocation=file:///usr/local/homekey disk/home

Marking as solved now.