163f3d3a1f
The approach is straightforward: for dataset ops, if a key was offered, find the encryption root and the various encryption parameters, derive a wrapping key if necessary, and then unlock the encryption root. After that all the regular dataset ops will return unencrypted data, and that's kinda the whole thing. Reviewed-by: Brian Behlendorf <behlendorf1@llnl.gov> Reviewed-by: Jorgen Lundman <lundman@lundman.net> Signed-off-by: Rob Norris <robn@despairlabs.com> Closes #11551 Closes #12707 Closes #14503 |
||
|---|---|---|
| .. | ||
| common.run | ||
| freebsd.run | ||
| linux.run | ||
| longevity.run | ||
| perf-regression.run | ||
| sanity.run | ||
| sunos.run | ||