TrueNAS Encryption - /g/ (#106013645) [Archived: 111 hours ago]

Anonymous
7/24/2025, 11:58:13 PM No.106013645
c04722bf-truenas
c04722bf-truenas
md5: 9ffca08eb9a4bf8eeb5d5b4cfffbf9dc๐Ÿ”
Assuming I was in possession of ILLEGAL MATERIALS that FEDERAL AGENTS would be interested in ARRESTING ME for, how would I protect my home server?

My understanding is that TrueNAS offers ZFS encryption for data sets, so if they were to pull out my HDD's they wouldn't be able to get shit right? What about my boot drive? My understanding is that you can't encrypt your boot drive natively. Is this a security risk? Should i worry about encrypting it or just leave it alone? I heard there are logs stored in it but don't know how sensitive that information would be.
Replies: >>106013686 >>106014715
Anonymous
7/24/2025, 11:59:15 PM No.106013655
Have you tried not gooning to childen
Anonymous
7/25/2025, 12:00:51 AM No.106013676
release the files donald
Anonymous
7/25/2025, 12:01:46 AM No.106013686
>>106013645 (OP)
I dont think the boot drive would contain any of your pool data or even metadata since it has to load and be stored in ram before the datasets and pools are initialized.
Anonymous
7/25/2025, 12:09:34 AM No.106013747
zfs encryption only does metadata much like fscrypt
Replies: >>106014644
Anonymous
7/25/2025, 2:02:55 AM No.106014644
>>106013747
What?
Replies: >>106014774
Anonymous
7/25/2025, 2:03:52 AM No.106014654
1732005309478671
1732005309478671
md5: ce2262c4968697a9aee84ca72a256c7f๐Ÿ”
https://wiki.archlinux.org/title/Data-at-rest_encryption#
Anonymous
7/25/2025, 2:13:13 AM No.106014715
>>106013645 (OP)
There is no product on the market that offers secure NAS encryption.
Anonymous
7/25/2025, 2:14:59 AM No.106014730
129451 - SoyBooru
129451 - SoyBooru
md5: a4c88e7621da26344061e2068e4f01c1๐Ÿ”
What about TrueIAS
Replies: >>106015260
Anonymous
7/25/2025, 2:20:28 AM No.106014774
>>106014644
its not complete encryption mouthbreathing retard file data gets encrypted but not filenames directory names and the overall folder structure etc
for full secrecy of both data and metadata luks is recommended and slow for a reason
also zfs encryption implementation is full of bugs
Replies: >>106015190
Anonymous
7/25/2025, 2:29:58 AM No.106014845
Savior of PDFs_thumb.jpg
Savior of PDFs_thumb.jpg
md5: 24a2745a1b590d9783dac99561b74f5a๐Ÿ”
https://www.youtube.com/watch?v=SGzQIzuuvXI
Anonymous
7/25/2025, 3:15:28 AM No.106015190
>>106014774
> filenames directory names and the overall folder structure
this is not true, you donโ€™t understand dataset encryption vs file path encryption, stop spreading FUD
Replies: >>106015224
Anonymous
7/25/2025, 3:19:41 AM No.106015224
>>106015190
no fud and zvol is shit
Anonymous
7/25/2025, 3:22:57 AM No.106015260
>>106014730
that's cobson
Anonymous
7/25/2025, 5:13:54 AM No.106016164
1726381390562483
1726381390562483
md5: b7b7642ff8d64da69873b2ba04641e0b๐Ÿ”
If you have the right diffusion models and prompts for comfyui, all you need to encrypt are the prompts. Make sure comfy generates into a tmpfs mounted folder so nothing hits the drive. Diffusion is deterministic.