Part of the problem is replicating fs bugs that take months/years to occur is nearly impossible... people still sell USB to SAS/SATA adapters that cause large file corruption in hardware too.
ZFS does have bit-rot checksum detection/repair, but the encrypted file feature was a bit of a YOLO feature for awhile. Not sure where it is at these days, as ddr5 ram prices skew away most of ZFS best key features. =3
Bigger issue was that native encryption doesn’t (didn’t?) have a maintainer, so even though most bugs got fixed, it’s not a great thing to build on. Some of the key storage is also a bit outdated.
IMO use LUKS unless you really need the features of ZFS native enc.
Comments
It's worth mentioning that last time I checked encrypted ZFS was not considered production due to obscure file corruption bugs that were unpatched.
This was a while ago so it may have changed but then changes can introduce new bugs...
Part of the problem is replicating fs bugs that take months/years to occur is nearly impossible... people still sell USB to SAS/SATA adapters that cause large file corruption in hardware too.
ZFS does have bit-rot checksum detection/repair, but the encrypted file feature was a bit of a YOLO feature for awhile. Not sure where it is at these days, as ddr5 ram prices skew away most of ZFS best key features. =3
Bigger issue was that native encryption doesn’t (didn’t?) have a maintainer, so even though most bugs got fixed, it’s not a great thing to build on. Some of the key storage is also a bit outdated.
IMO use LUKS unless you really need the features of ZFS native enc.