Hacker News Reader

It's worth mentioning that last time I checked encrypted ZFS was not considered production due to obscure file corruption bugs that were unpatched.

This was a while ago so it may have changed but then changes can introduce new bugs...

View on HN

Part of the problem is replicating fs bugs that take months/years to occur is nearly impossible... people still sell USB to SAS/SATA adapters that cause large file corruption in hardware too.

ZFS does have bit-rot checksum detection/repair, but the encrypted file feature was a bit of a YOLO feature for awhile. Not sure where it is at these days, as ddr5 ram prices skew away most of ZFS best key features. =3

Bigger issue was that native encryption doesn’t (didn’t?) have a maintainer, so even though most bugs got fixed, it’s not a great thing to build on. Some of the key storage is also a bit outdated.

IMO use LUKS unless you really need the features of ZFS native enc.

Reply on news.ycombinator.com