Zfs send & receive with encryption - how to retrieve data? Post: 303015023

Sponsored Content

Operating Systems Solaris Zfs send & receive with encryption - how to retrieve data? Post 303015023 by rnd on Monday 26th of March 2018 12:01:59 PM

03-26-2018

Registered User

Zfs send & receive with encryption - how to retrieve data?

Good morning everyone,

I'm looking for some help to retrieve data in a scenario where I might have made a big mistake. I'm hoping to understand what I did wrong.

My system is made of two Solaris 11 Express servers (old free version for evaluation). The first if for data and the second is for backups.

On the first, I created zfs filesystems with encryption turned on (tank/Documents). To make things easy, I used "keysource=passphrase,file:///zfs_key", then I copied the file to the second (backup) server in the same path.

In order to do my backups, I used zfs send & mbuffer to send the whole zpool (all the zfs' filesystems). Normally, this would work fine for both encrypted and unencrypted volumes. Except the last time I did this, I did not mount the encrypted filesystem and I ran send & receive without getting any errors... That is, until I rebooted the backup server and tried to access the data (mount the filesystem).

For some reason I do not understand, I always get an "invalid key" error. The weird thing is the "keysource" in the backup system is still the same as the source and the "zfs_key" is the same. I thought that when you send&receive encrypted filesystem the "key" was automatically generated on the receiving system using the "keysource" mentioned here, but there seems to be something fundamentally different when the filesystem is not mounted. (For example scrub of encrypted zfs filesystem give errors when it is not mounted)

I would like to know where is the valid key in such a scenario? and/or what happened?

Thank you for giving me your opinion on the subject.

Best Regards,

rnd

View Public Profile for rnd

Find all posts by rnd

10 More Discussions You Might Find Interesting

1. UNIX for Dummies Questions & Answers

I can send but cannot receive mail with unix?

Hi all, First post! I have just discovered that I can use unix to send mail to a mail address. I normally use entourage for my mail. This unix mail is very intriguing to me, but something is not working... I tried the search, but could not find the answer... This works: (in terminal)...

2. UNIX for Dummies Questions & Answers

Can send but not receive email

Hi, One of the users in our company can send but not receive email. We are using SENDMAIL in conjunction with procmail. The funny thing is that all his sent email is in his /var/spool/mail but the email client does not pick anything up! He is using IMAP. Anyone see have any ideas?

3. Programming

Send/Receive buffer size??

Dear friends, How do I find the TCP send and receive buffer size?

4. Shell Programming and Scripting

Writing a program to receive the GPS data and send to other server

Hi, I would like to write a program to receive the GPS data and then send the data via network to other program. All of the program is not write yet(include host and sender) All of the server OS is unix or linux Could you mind to give me some idea to do this? Thanks so much! Ken ...

5. Programming

how can I send and receive data in client server socket programing

char name; printf ("Welcome to the server \n"); printf ("Enter user name: \n"); scanf ("%c", &name); how can client send name to server:what should be the code? int send ( int sid , const char ∗buffer Ptr , int len , int f l a g ) how can client receive ack from...

6. Shell Programming and Scripting

How to monitor send/receive bytes

Hello, I need to create a script to monitor sent/received packets for a period of time (the period of time will be a users input) and write the result to some txt file. Is there any command (don`t want to use any 3rd party sw) what I can use? I`m using Solaris 10. Thank you

7. Shell Programming and Scripting

Send Receive Mails

Hi All, I am writing one script to automate one long process. In this process we need to upload some input files and download some output files. So , I want to automate this upload and download by using mail functionality. I want to trigger this script when I am sending mail to server. I know...

8. Solaris

zfs send receive performance issues

I 'm trying to clone a zfs file system pool/u01 to a new file system called newpool/u01 using following commands zfs list zfs snapshot pool/u01@new zfs send pool/u01@new | zfs -F receive newpool/u01 Its a 100G file system snapshot and copied to same server on different pool and...

9. Solaris

ZFS receive error

trying to clone a zfs file system on the same system using zfs send -r root/branch@snapshot |zfs receive root/newbranch and get the following error :parent does not exist. How do I fix this?

10. Shell Programming and Scripting

Send/receive file through serial using minicom

i have connected with my board through serial interface using minicom and i am running a bash script, which should test ethernet (ping test), USB read/write, RS232 .. I have managed to test ethernet and USB read/write. I test ethernet with ping. I test USB read/write, using dd and verifying...

LEARN ABOUT FREEBSD

zfsloader

ZFSLOADER(8)						    BSD System Manager's Manual 					      ZFSLOADER(8)

NAME

     zfsloader -- kernel bootstrapping final stage

DESCRIPTION

     zfsloader is an extended variant of loader(8) with added support for booting from ZFS.  This document describes only differences from
     loader(8).

ZFS FEATURES

     zfsloader supports the following format for specifying ZFS filesystems which can be used wherever loader(8) refers to a device specification:

     zfs:pool/filesystem:

     where pool/filesystem is a ZFS filesystem name as described in zfs(8).

     If /etc/fstab does not have an entry for the root filesystem and vfs.root.mountfrom is not set, but currdev refers to a ZFS filesystem, then
     zfsloader will instruct kernel to use that filesystem as the root filesystem.

ZFS COMMAND EXTENSIONS

     lsdev [-v]
	     Lists ZFS pools in addition to disks and partitions.  Adding -v shows more ZFS pool details in a format that resembles zpool status
	     output.

     lszfs filesystem
	     A ZFS extended command that can be used to explore the ZFS filesystem hierarchy in a pool.  Lists the immediate children of the
	     filesystem.  The filesystem hierarchy is rooted at a filesystem with the same name as the pool.

FILES

     /boot/zfsloader  zfsloader itself.

EXAMPLES

     Set the default device used for loading a kernel from a ZFS filesystem:

	   set currdev=zfs:tank/ROOT/knowngood:

SEE ALSO

     gptzfsboot(8), loader(8), zfs(8), zfsboot(8), zfsloader(8), zpool(8)

HISTORY

     The zfsloader first appeared in FreeBSD 7.3.

AUTHORS

     This manual page was written by Andriy Gapon <avg@FreeBSD.org>.

BSD
								September 15, 2014							       BSD

10 More Discussions You Might Find Interesting

1. UNIX for Dummies Questions & Answers

I can send but cannot receive mail with unix?

Discussion started by: bjorn

2. UNIX for Dummies Questions & Answers

Can send but not receive email

Discussion started by: mojoman

3. Programming

Send/Receive buffer size??

Discussion started by: nagalenoj

4. Shell Programming and Scripting

Writing a program to receive the GPS data and send to other server

Discussion started by: kenlok