TrueNAS 12 Configuration and ZFS Encryption Keys Backup / Restore Processes

Рет қаралды 32,493

Күн бұрын

Connecting With Us
---------------------------------------------------
+ Hire Us For A Project: lawrencesystems.com/hire-us/
+ Tom Twitter 🐦 / tomlawrencetech
+ Our Web Site www.lawrencesystems.com/
+ Our Forums forums.lawrencesystems.com/
+ Instagram / lawrencesystems
+ Facebook / lawrencesystems
+ GitHub github.com/lawrencesystems/
+ Discord / discord
Lawrence Systems Shirts and Swag
---------------------------------------------------
►👕 lawrence.video/swag
AFFILIATES & REFERRAL LINKS
---------------------------------------------------
Amazon Affiliate Store
🛒 www.amazon.com/shop/lawrences...
UniFi Affiliate Link
🛒 store.ui.com?a_aid=LTS
All Of Our Affiliates that help us out and can get you discounts!
🛒 lawrencesystems.com/partners-...
Gear we use on Kit
🛒 kit.co/lawrencesystems
Use OfferCode LTSERVICES to get 5% off your order at
🛒 lawrence.video/techsupplydirect
Digital Ocean Offer Code
🛒 m.do.co/c/85de8d181725
HostiFi UniFi Cloud Hosting Service
🛒 hostifi.net/?via=lawrencesystems
Protect you privacy with a VPN from Private Internet Access
🛒 www.privateinternetaccess.com...
Patreon
💰 / lawrencesystems
⏱️ Timestamps ⏱️
0:00 Intro TrueNAS 12 Backups
1:30 Restoring on different hardwares
3:36 Restoring on different network interface
4:03 Key vs passphrase encryption
10:08 How to backup all TrueNAS settings
11:12 Where TrueNAS Stores Config Data
12:02 Restoring TrueNAS
13:18 import existing storage pool
16:35 Restore from Fresh instsall
17:51 Adding second Boot Drive
#TrueNAS #NAS

Пікірлер: 58

@LAWRENCESYSTEMS 3 жыл бұрын

⏱️ Timestamps ⏱️ 0:00 Intro TrueNAS 12 Backups 1:30 Restoring on different hardwares 3:36 Restoring on different network interface 4:03 Key vs passphrase encryption 10:08 How to backup all TrueNAS settings 11:12 Where TrueNAS Stores Config Data 12:02 Restoring TrueNAS 13:18 import existing storage pool 16:35 Restore from Fresh instsall 17:51 Adding second Boot Drive

@Dreamtwister2k 3 жыл бұрын

Thank you! I love seeing more TrueNAS coverage! I love you never take for granted the knowledge of your audience so every tutorial is easily digestible for newbies like me. I am mirroring the boot and saving my keys today!

@eetux98 5 ай бұрын

OMG THANKS FOR THIS TUTORIAL. My budy were trying to configure my NIC and wiped my NAS. Luckly i found month old backup on my old pc and were able to restore it. Keep this stuf coming :D

@TrueNAS 3 жыл бұрын

As always, GREAT VIDEO Tom! We and the #TrueNAS Community thank you!

@sam2943 Жыл бұрын

Thanks for all the TrueNAS and ZFS videos. I used to have FreeNAS, then went with Synology, and now finally migrating back to TrueNAS. It is been a learning curve and your videos help make the transition easier.

@wojciechklaus 11 ай бұрын

I have just successfully recovered my TrueNas 12.5 to 13 from failure of two pen drives. I have installed two NVME drives, installed TrueNAS 13 on them, logged in, uploaded config file with was saved with all relevant SEED data (one file) and after reboot that it complained that pool drives were disconnected (which I did, just in case, so I dont install TrueNAS on them). After shutdown and drives connected, the system came back up totally happy with all of the data, shares and settings, NOICE! Thanks mate!

@x-calibre9208 3 жыл бұрын

Hi Tom. I'd been considering FreeNAS when it was still called that, but watching your videos convinced me to just do it. I've now been running it for about 6 months on my HP Microserver Gen8 and I love it. Got 2TB HDD's in the 4 drive bays, and using an SSD connected to the SATA port for the optical bay as a boot drive.

@kelljemison2790 Жыл бұрын

Recently learned the hard way about the key backup...Didn't do it....hard drive failed and poof! ... Now struggling to get my data back. Lesson learned! Now, redoing all my current setups with mirrored boot drives and backups of more than just the configurations.. now making sure I have the GELI keys as well. Also, the staff at Lawrence Systems (Tom included!) are great!..Give them a call!!!

@LAWRENCESYSTEMS Жыл бұрын

Thanks and the new system has a new key format, GELI is the older key system.

@pancakeray7571 2 жыл бұрын

I did the unthinkable and used a USB as my main drive for TrueNAS. Good news it, it was an error and the device was suspended. I rebooted and it came back online. I watched this video so I could learn how to backup the configs because I am getting an SSD now for this system. Might even get two SSDs

@mauldus 3 жыл бұрын

Tom, your content keeps getting better and better. Keep it up!

@JuanLopez-db4cc 3 жыл бұрын

Thanks a LOT Tom! Very Much needed Video.

@wildmanjeff42 3 жыл бұрын

Thanks for the video, Love Truenas

@peterpain6625 3 жыл бұрын

Thanks for the reminder

@user-ct7wu1zv9e 9 ай бұрын

Hello dear Tom. We are waiting for dRAID from you! From my point of view this feature should be massively respected from user and time side. I’m IT professional with over 10 years and think this is huge bump in raid technology and it show how just logical redistribution of Filesystem layer can do big impact in performance/time/and other king of benefits.

@PaulTheadra 2 жыл бұрын

I'm here because I didn't understand that I needed to backup ALL datasets separately, somehow, I assigned different encryption keys to each dataset. When I tried to reset default settings for the boot drive, I thought I could just import my pool, but I was missing a root key :( Great down to earth tutorial

@VideoManFL Жыл бұрын

great videp thanks!

@Andrew-io5ph 3 жыл бұрын

Very useful for those starting, will be using this in the future to reference for TrueNAS administration. I would really appreciate it if your staff was able to provide information on the 3D printed hard drive holder?

@LAWRENCESYSTEMS 3 жыл бұрын

They find most of this things on www.thingiverse.com/

@bikerchrisukk 3 жыл бұрын

Nice one Tom, sometimes you have to stand back and be impressed by this S/W eh?

@edgardofernandez6419 2 жыл бұрын

Thank you! Tom, I wanted to ask you if it has any video, where it explains the differences of Snapshot and VMware-Snapshot?

@LAWRENCESYSTEMS 2 жыл бұрын

www.truenas.com/docs/core/storage/vmware-snapshots/

@laurencelagden 3 жыл бұрын

Loving the videos. I’m new to Freenas/TrueNAS and this is a massive learning curve. Sometimes keeping up with your tech ‘lingo’ is tough. I have recently upgraded from Freenas 11.3 to TrueNAS core 12. It’s thrown a message at me about new features available that aren’t reversible. Any idea what’s that about please?

@LAWRENCESYSTEMS 3 жыл бұрын

That is a vague question but I would guess its asking you to upgrade the pool to a new version.

@laurencelagden 3 жыл бұрын

@@LAWRENCESYSTEMS yeah sorry was a bit vague. I had just shut down my server and couldn’t remember the message exactly. I have found the info now. Thank you for the reply though. Enjoying your videos

@YeOldeTraveller 3 жыл бұрын

I tried a USB flash drive mirror. I think the first of the boot drives failed in a matter of days, and this was with good quality flash drives. I replaced them with USB SSD drives. They are still going strong months later.

@laurencelagden 3 жыл бұрын

I don’t have the option for encryption options when I click the end of my data set?

@ironfist7789 11 ай бұрын

Ahh ok, I thought the passphrase based still had a key to backup like the rsa key + passphrase. I was searching for where to backup the key, but since I have a passphrase there is no key if I understand correctly. Using commandline openzfs, hopefully it works like this :)

@dfgdfg_ 2 жыл бұрын

If it's passphrase, does it still load the web UI to type the phrase into or do you need a screen and keyboard attached?

@LAWRENCESYSTEMS 2 жыл бұрын

you put it in the WebUI

@berndeckenfels 3 жыл бұрын

Can you have TPM support and/or boot disk FDE

@PatrikKron Жыл бұрын

If the main dataset is encrypted with a keyfile and a subdataset is encrypted with a password. Can the subdataset be recovered without the keyfile or are both needed?

@JacobSylvia 3 жыл бұрын

Hey @Tom - Any chance you'd consider doing a video converting from legacy GELI to ZFS Native? I was going to follow your video, and I don't actually have the encryption options on any of my pools. I think this is because my existing pools are GELI.

@LAWRENCESYSTEMS 3 жыл бұрын

You can not convert

@JacobSylvia 3 жыл бұрын

@@LAWRENCESYSTEMS That's what my research just told me. LOL. Welp, looks like I have an excuse to purchase a 12TB external drive for data transfer LOL LOL.

@rancidbeef582 3 жыл бұрын

It was a total pain in the butt. I did my normal backup to my offsite backup drive which has GELI encryption. Then I created a new pool over my old pool with the new encryption. But copying back was a lot of trouble. I normally use Allan Jude's zxfer shell script to do zfs send / receive to copy datasets and all snapshots across pools (I always had trouble with the FreeNAS GUI options for doing that, so I abandoned it long ago). But it had trouble copying to the new pool. I wound up having to do the zfs receive by hand with the right options to turn on encryption in the target and specify a temporary file with my passphrase. There were other ZFS options I had to override because the old default options in the sending pool were incompatible with the new one.

@side325 2 жыл бұрын

Hello, can you please advise me how to export/backup Virtual Machine from TrueNas to somewhere (for example to my laptop) and than copy/import this VMbackup to different TrueNAS12 ? Thank you very much in advance!

@LAWRENCESYSTEMS 2 жыл бұрын

I don't use the VM system in TrueNAS, try their forums.

@alexrambolton 3 жыл бұрын

Make sure to check if the boot drives are re-silvering if you are replacing a usb drive with SSD's. Don't remove the usb untill it says it's done.

@norseironworks 2 жыл бұрын

after a pool is created then will it be possible to set encryption on it?

@LAWRENCESYSTEMS 2 жыл бұрын

No, it has to be done at the time of creation.

@steinarlbergmyrvang1936 3 жыл бұрын

I couldn't get the replication from one TrueNAS to another TrueNAS to work when I encrypted the root. I had to have the root unencrypted and a dataset under the root encrypted, then have an encrypted pool on the destination. Is it just me , or is that impossible?

@LAWRENCESYSTEMS 3 жыл бұрын

Video coming soon on how the encrypted replication works.

@tco2023 3 жыл бұрын

Can you encrypt an existing pool or is that only on creation?

@LAWRENCESYSTEMS 3 жыл бұрын

has to be done upon creation.

@tco2023 3 жыл бұрын

@@LAWRENCESYSTEMS great videos btw. It's made adopting TrueNAS so easy! Thank you!

@artlessknave 3 жыл бұрын

they hard disabled more than 2 boot drives a few versions ago. not really sure why.

@rudypieplenbosch6752 2 жыл бұрын

I just tried uploading a complete config with encrypted pools and the old discs attached to the new HW, the webpage is not reachable any more after waiting 1.5 hours. Now I need to reinstall the Truenas base OS again, to get a usable starting point. I would advise people not to take the similar route and get into this mess, just not serving the main Truenas webpage or the page (from the old server's adress or the new IP adress) from which I uploaded the configuration, is a big failure from our Truenas supplier, that should have the highest prio to keep that page available at all cost. Truenas got itself in a loop where it could not get an IP, really wtf ? when I reinstall it could get the IP..next time if truenas is in this loop, just execute the code that is in your installer... 2nd try I could upload a configuration, however none of my attached encrypted pools was recognized despite choosing the option of saving all keys..

@mahmoudtalaatmohamed1550 2 жыл бұрын

PLZ i need to join to the system From anywhere in the world . How can i do it?

@rancidbeef582 3 жыл бұрын

I don't like that the new encryption scheme shows the dataset names. That potentially leaks information about the contents unless you use generic dataset names. With GELI only the pool name is visible while locked.

@uncleskeetxxl 3 жыл бұрын

LIKE # 5

@21Lettere 3 жыл бұрын

If you encrypt the main pool, replication doesn't work (for now); you've to encrypt only the datasets inside the pool to have replication to work.

@LAWRENCESYSTEMS 3 жыл бұрын

It does work, but it work different than versions before TrueNAS 12. Video coming soon.

@desertshadow72 Жыл бұрын

TrueNAS desperately needs to warn the user to backup their config when the user tries to reset the network settings via the terminal

@Tr1pke Ай бұрын

Why would someone only steal the data drives, it’s sooooo much easier and faster to steal the whole server. Leaving keys or automatic unlock at a boot is so dumb in my opinion