When you choose the experimental ZFS on Linux option in the Ubuntu installation of 19.10 (and also 20.04), you end up with something like this:
NAME USED AVAIL REFER MOUNTPOINT
bpool 91,8M 1,66G 96K /boot
bpool/BOOT 91,1M 1,66G 96K none
bpool/BOOT/ubuntu_uxtu99 91,0M 1,66G 91,0M /boot
rpool 4,93G 886G 96K /
rpool/ROOT 4,22G 886G 96K none
rpool/ROOT/ubuntu_uxtu99 4,22G 886G 3,60G /
rpool/ROOT/ubuntu_uxtu99/srv 96K 886G 96K /srv
rpool/ROOT/ubuntu_uxtu99/usr 224K 886G 96K /usr
rpool/ROOT/ubuntu_uxtu99/usr/local 128K 886G 128K /usr/local
rpool/ROOT/ubuntu_uxtu99/var 487M 886G 96K /var
rpool/ROOT/ubuntu_uxtu99/var/games 96K 886G 96K /var/games
rpool/ROOT/ubuntu_uxtu99/var/lib 479M 886G 373M /var/lib
rpool/ROOT/ubuntu_uxtu99/var/lib/AccountServices 96K 886G 96K /var/lib/AccountServices
rpool/ROOT/ubuntu_uxtu99/var/lib/NetworkManager 160K 886G 160K /var/lib/NetworkManager
rpool/ROOT/ubuntu_uxtu99/var/lib/apt 62,6M 886G 62,6M /var/lib/apt
rpool/ROOT/ubuntu_uxtu99/var/lib/dpkg 43,5M 886G 43,5M /var/lib/dpkg
rpool/ROOT/ubuntu_uxtu99/var/log 7,06M 886G 7,06M /var/log
rpool/ROOT/ubuntu_uxtu99/var/mail 96K 886G 96K /var/mail
rpool/ROOT/ubuntu_uxtu99/var/snap 96K 886G 96K /var/snap
rpool/ROOT/ubuntu_uxtu99/var/spool 124K 886G 124K /var/spool
rpool/ROOT/ubuntu_uxtu99/var/www 96K 886G 96K /var/www
rpool/USERDATA 715M 886G 96K /
rpool/USERDATA/blah_mk6ljb 714M 886G 711M /home/blah
rpool/USERDATA/root_mk6ljb 640K 886G 640K /root`I was able to enable dedup and compression but not encryption.zfs get compression shows lz4 and on for dedup (except on boot pool).
The command sudo zpool set feature@encryption=enabled rpool doesn't cause any errors but zfs get encryption afterwards still shows encryption off.
How do I enabled encryption and choose a cipher etc..?
Why all of these pools? www, snap, mail, games... Can I get rid of them?
This is on a 1TB SSD, in case that is relevant.
1 Answer
Question: How do I enabled encryption and choose a cipher etc..?
ZFS encryption can only be enabled at the time of pool or filesystem creation. The cipher is set as an option. Easiest way is performing the following steps when installing Ubuntu.
- Boot from install ISO.
- Click the Try Ubuntu option.
- Open the terminal application.
- Sudo to root. No password required.
- Edit /usr/share/ubiquity/zsys-setup.
- Search for zpool create command applicable to the rpool.
- Preprend
echo MYPASSWORD |to the zpool command. - Add the following lines before the last zpool create option line.
-O encryption=aes-256-gcm \
-O keylocation=prompt \
-O keyformat=passphrase \Please ensure to use double quotes around the password escaping bash characters "\$ if used in the password.
The result should look like the following
echo <password> | zpool create -f \ ... -O encryption=aes-256-gcm \ -O keylocation=prompt \ -O keyformat=passphrase \ -O mountpoint=/ -R "${target}" rpool "${partrpool}"- Run ubiquity to start the installer
Question2: Why all of these pools? www, snap, mail, games... Can I get rid of them?
Those www, snap, mail entries are ZFS file systems mounted at the mentioned mount points, not ZFS pools. These filesystems are where files are stored and there is no issue in having lots of ZFS file systems. In fact that is one of the advantages of ZFS in offering great flexibility with file system layouts, snapshots, naming and performance tuning.
You can delete them, but that means it will delete all files located within that file system.
