more zfs

neko/hardware-configuration.nix

@@ -19,26 +19,20 @@
       fsType = "vfat";
       neededForBoot = true;
     };
-/*
+
   # vms
-  boot.initrd.luks.devices."crypt-vms".device = "/dev/disk/by-id/nvme-CT2000P5PSSD8_213330E4ED05";
   fileSystems."/home/cullmann/vms" =
-    { device = "/dev/mapper/crypt-vms";
-      fsType = "btrfs";
-      neededForBoot = true;
-      options = [ "noatime" "nodiratime" ];
+    { device = "vpool/vms";
+      fsType = "zfs";
       depends = [ "/home" ];
     };
 
   # projects
-  boot.initrd.luks.devices."crypt-projects".device = "/dev/disk/by-id/nvme-Samsung_SSD_980_PRO_2TB_S69ENF0R846614L";
   fileSystems."/home/cullmann/projects" =
-    { device = "/dev/mapper/crypt-projects";
-      fsType = "btrfs";
-      neededForBoot = true;
-      options = [ "noatime" "nodiratime" ];
+    { device = "ppool/projects";
+      fsType = "zfs";
       depends = [ "/home" ];
-    };*/
+    };
 
   nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
   hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;

neko/install.txt

@@ -149,6 +149,28 @@ wipefs -a $DD
 
 sleep 5
 
+# ZFS zpool creation with encryption
+zpool create \
+    -o ashift=12 \
+    -o autotrim=on \
+    -O acltype=posixacl \
+    -O atime=off \
+    -O canmount=off \
+    -O compression=on \
+    -O dnodesize=auto \
+    -O normalization=formD \
+    -O xattr=sa \
+    -O mountpoint=none \
+    -O encryption=on \
+    -O keylocation=file:///data/nixos/key-vms.secret \
+    -O keyformat=passphrase \
+    vpool $DD
+
+sleep 5
+
+# create all the volumes
+zfs create -o mountpoint=legacy vpool/vms
+
 # create projects disk
 
 DD=/dev/disk/by-id/nvme-Samsung_SSD_980_PRO_2TB_S69ENF0R846614L
@@ -157,3 +179,25 @@ blkdiscard -v $DD
 wipefs -a $DD
 
 sleep 5
+
+# ZFS zpool creation with encryption
+zpool create \
+    -o ashift=12 \
+    -o autotrim=on \
+    -O acltype=posixacl \
+    -O atime=off \
+    -O canmount=off \
+    -O compression=on \
+    -O dnodesize=auto \
+    -O normalization=formD \
+    -O xattr=sa \
+    -O mountpoint=none \
+    -O encryption=on \
+    -O keylocation=file:///data/nixos/key-projects.secret \
+    -O keyformat=passphrase \
+    ppool $DD
+
+sleep 5
+
+# create all the volumes
+zfs create -o mountpoint=legacy ppool/projects