Encrypting previously unencrypted data, such as a legacy ZFS pool, requires a reliable migration strategy. The most robust way to achieve this is by using the powerful ZFS data stream mechanism: zfs send
and zfs recv
.
The core procedure is simple: create a snapshot, transfer this snapshot, and receive it at a new, encrypted destination.
Continue reading ZFS Data Migration: Encrypting Existing Volumes with zfs send and zfs recv