zfs native encryption best practices on RELENG13

[mike tancsa]

On 4/23/2021 11:47 PM, Peter Libassi wrote:
> Yes, I’ve come to the same conclusion. This should be used on a
> data-zpool and not on the system-pool (zroot). Encryption is per
> dataset. Also if found that if the encrypted dataset is not mounted of
> some reason you will be writing to the parent unencrypted dataset.. At
> least it works for encrypted thumb_drive, i just posted this quick
> guide https://forums.freebsd.org/threads/freebsd-13-openzfs-encrypted-thumb-drive.80008/
> <https://forums.freebsd.org/threads/freebsd-13-openzfs-encrypted-thumb-drive.80008/>
>
>
>

Thanks, good points to consider!  I wonder too if there are any
performance differences

    ---Mike