Mind the Encryptionroot: How to Save Your Data When Zfs Loses Its Mind
Posted3 months agoActive3 months ago
sambowman.techTechstory
calmneutral
Debate
20/100
ZfsData RecoveryEncryption
Key topics
Zfs
Data Recovery
Encryption
The article discusses a potential issue with ZFS encryption and how to recover data in case of a failure, with the discussion focusing on the nuances of ZFS and encryption.
Snapshot generated from the HN discussion
Discussion Activity
Light discussionFirst comment
N/A
Peak period
1
0-3h
Avg / period
1
Key moments
- 01Story posted
Sep 29, 2025 at 2:40 AM EDT
3 months ago
Step 01 - 02First comment
Sep 29, 2025 at 2:40 AM EDT
0s after posting
Step 02 - 03Peak activity
1 comments in 0-3h
Hottest window of the conversation
Step 03 - 04Latest activity
Sep 30, 2025 at 7:22 PM EDT
3 months ago
Step 04
Generating AI Summary...
Analyzing up to 500 comments to identify key contributors and discussion patterns
ID: 45410930Type: storyLast synced: 11/17/2025, 12:05:12 PM
Want the full context?
Jump to the original sources
Read the primary article or dive into the live Hacker News thread when you're ready.
I've read several scary stories about ZFS encryption and have reached the same conclusion. Meanwhile, based on the accounts I've read, running ZFS on top of LUKS seems to be a more stable approach.
In any case, nice and detailed write-up. The nice thing about open source is that you can do "hacks" like you did.
I emphatically agree, unencrypted ZFS on top of GELI or LUKS encrypted block devices is the way to go for now. Plus it also has the benefit of not leaking metadata like a sieve.
My mistake was placing too much trust in ZFS's reputation for data integrity; clearly not all features hold that value in the same regard.
The openness of OpenZFS was a real saving grace. If this had occurred on a propriety SAN, that data would be gone forever.