Commits on Aug 11, 2017

1. Native Encryption for ZFS on Linux …

   This change incorporates three major pieces:
   
   The first change is a keystore that manages wrapping
   and encryption keys for encrypted datasets. These
   commands mostly involve manipulating the new
   DSL Crypto Key ZAP Objects that live in the MOS. Each
   encrypted dataset has its own DSL Crypto Key that is
   protected with a user's key. This level of indirection
   allows users to change their keys without re-encrypting
   their entire datasets. The change implements the new
   subcommands "zfs load-key", "zfs unload-key" and
   "zfs change-key" which allow the user to manage their
   encryption keys and settings. In addition, several new
   flags and properties have been added to allow dataset
   creation and to make mounting and unmounting more
   convenient.
   
   The second piece of this patch provides the ability to
   encrypt, decyrpt, and authenticate protected datasets.
   Each object set maintains a Merkel tree of Message
   Authentication Codes that protect the lower layers,
   similarly to how checksums are maintained. This part
   impacts the zio layer, which handles the actual
   encryption and generation of MACs, as well as the ARC
   and DMU, which need to be able to handle encrypted
   buffers and protected data.
   
   The last addition is the ability to do raw, encrypted
   sends and receives. The idea here is to send raw
   encrypted and compressed data and receive it exactly
   as is on a backup system. This means that the dataset
   on the receiving system is protected using the same
   user key that is in use on the sending side. By doing
   so, datasets can be efficiently backed up to an
   untrusted system without fear of data being
   compromised.
   
   TEST_ZTEST_TIMEOUT=3600
   
   Signed-off-by: Tom Caputi <tcaputi@datto.com>

   Tom Caputi committed Aug 11, 2017
   Configuration menu

   • View commit details
   • Copy full SHA for 5aef9be
   • Browse repository at this point

   Copy the full SHA

   5aef9be View commit details

   Browse the repository at this point in the history