ZFS starter
Pool Creation
# create pool on a disk with a given UUID
zpool create tank1 /dev/disk/by-uuid/<UUID>
# deduplication is off by default, but make sure
zfs set dedup=off tank1
zfs set compression=off tank1
# turn access time updates off
zfs set atime=off tank1
zfs set recordsize=1M tank1
Dataset Creation
# turn on encryption and prompt the user for password
# encryption=on means aes-256-gcm by default
zfs create -o encryption=on -o keylocation=prompt -o keyformat=passphrase tank1/dataset1
Operation
# Encrypted datasets are not mounted by default.
# The mount command will prompt for the passphrase of the key.
zfs mount -l tank1/dataset1