Can't decrypt datasets after updating to 2.1.6

All your general support questions for OpenZFS on OS X.

Can't decrypt datasets after updating to 2.1.6

Postby Haravikk » Mon Oct 24, 2022 3:42 pm

After updating from 2.1.0 to 2.1.6 on Catalina I can't load any of my keys, forcing me to downgrade again to the previous version. Even though I'm absolutely certain I'm entering the correct key it just refuses to load; this is affecting all encrypted datasets across two zpools. I'm using manually entered keys on the command line, and basic encryption settings (aes-256-gcm).

I did not run zpool upgrade on either pool (for fear of being unable to downgrade again). I tried creating a new test pool under 2.1.6 and transferring across one of the smaller datasets, but I couldn't load the key then either, so I wasn't hopeful that upgrading would help.

I was really hoping to upgrade for the faster encryption performance along with various other improvements; please don't tell me my existing 2.1.0 encrypted datasets are unusable with the new version? Is there any way to keep them usable? I'm kind of hosed otherwise because my backups were made using zfs send -w (sending the raw encrypted blocks) so if I can't decrypt then I can't recreate the datasets.
Haravikk
 
Posts: 76
Joined: Tue Mar 17, 2015 4:52 am

Re: Can't decrypt datasets after updating to 2.1.6

Postby lundman » Mon Oct 24, 2022 4:09 pm

Don't do anything destructive, there is new "compatibility" work from upstream and it looks like we will need to make it better
User avatar
lundman
 
Posts: 1337
Joined: Thu Mar 06, 2014 2:05 pm
Location: Tokyo, Japan

Re: Can't decrypt datasets after updating to 2.1.6

Postby Haravikk » Tue Oct 25, 2022 4:01 am

What does that mean for upgrading though? Has the key format for encryption changed? Is there anything I can do?
Haravikk
 
Posts: 76
Joined: Tue Mar 17, 2015 4:52 am

Re: Can't decrypt datasets after updating to 2.1.6

Postby Jimbo » Tue Oct 25, 2022 5:46 am

It doesn't mean much for upgrading (in terms of your data on disk); just that there are issues with RC1.

There is a new RC2 that was just posted. You can give that a go - RC2 works for me with older 2.1.0/2.1.99 encrypted pools.
Jimbo
 
Posts: 149
Joined: Sun Sep 17, 2017 5:12 am


Return to General Help

Who is online

Users browsing this forum: No registered users and 29 guests