]> git.proxmox.com Git - mirror_zfs.git/blob - man/man8/zfs.8
Introduce read/write kstats per dataset
[mirror_zfs.git] / man / man8 / zfs.8
1 .\"
2 .\" CDDL HEADER START
3 .\"
4 .\" The contents of this file are subject to the terms of the
5 .\" Common Development and Distribution License (the "License").
6 .\" You may not use this file except in compliance with the License.
7 .\"
8 .\" You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
9 .\" or http://www.opensolaris.org/os/licensing.
10 .\" See the License for the specific language governing permissions
11 .\" and limitations under the License.
12 .\"
13 .\" When distributing Covered Code, include this CDDL HEADER in each
14 .\" file and include the License file at usr/src/OPENSOLARIS.LICENSE.
15 .\" If applicable, add the following below this CDDL HEADER, with the
16 .\" fields enclosed by brackets "[]" replaced with your own identifying
17 .\" information: Portions Copyright [yyyy] [name of copyright owner]
18 .\"
19 .\" CDDL HEADER END
20 .\"
21 .\"
22 .\" Copyright (c) 2009 Sun Microsystems, Inc. All Rights Reserved.
23 .\" Copyright 2011 Joshua M. Clulow <josh@sysmgr.org>
24 .\" Copyright (c) 2011, 2017 by Delphix. All rights reserved.
25 .\" Copyright (c) 2013 by Saso Kiselkov. All rights reserved.
26 .\" Copyright (c) 2014, Joyent, Inc. All rights reserved.
27 .\" Copyright (c) 2014 by Adam Stevko. All rights reserved.
28 .\" Copyright (c) 2014 Integros [integros.com]
29 .\" Copyright 2016 Richard Laager. All rights reserved.
30 .\" Copyright 2017 Nexenta Systems, Inc.
31 .\" Copyright 2018 Joyent, Inc.
32 .\"
33 .Dd July 13, 2018
34 .Dt ZFS 8 SMM
35 .Os Linux
36 .Sh NAME
37 .Nm zfs
38 .Nd configures ZFS file systems
39 .Sh SYNOPSIS
40 .Nm
41 .Fl ?
42 .Nm
43 .Cm create
44 .Op Fl p
45 .Oo Fl o Ar property Ns = Ns Ar value Oc Ns ...
46 .Ar filesystem
47 .Nm
48 .Cm create
49 .Op Fl ps
50 .Op Fl b Ar blocksize
51 .Oo Fl o Ar property Ns = Ns Ar value Oc Ns ...
52 .Fl V Ar size Ar volume
53 .Nm
54 .Cm destroy
55 .Op Fl Rfnprv
56 .Ar filesystem Ns | Ns Ar volume
57 .Nm
58 .Cm destroy
59 .Op Fl Rdnprv
60 .Ar filesystem Ns | Ns Ar volume Ns @ Ns Ar snap Ns
61 .Oo % Ns Ar snap Ns Oo , Ns Ar snap Ns Oo % Ns Ar snap Oc Oc Oc Ns ...
62 .Nm
63 .Cm destroy
64 .Ar filesystem Ns | Ns Ar volume Ns # Ns Ar bookmark
65 .Nm
66 .Cm snapshot
67 .Op Fl r
68 .Oo Fl o Ar property Ns = Ns Ar value Oc Ns ...
69 .Ar filesystem Ns @ Ns Ar snapname Ns | Ns Ar volume Ns @ Ns Ar snapname Ns ...
70 .Nm
71 .Cm rollback
72 .Op Fl Rfr
73 .Ar snapshot
74 .Nm
75 .Cm clone
76 .Op Fl p
77 .Oo Fl o Ar property Ns = Ns Ar value Oc Ns ...
78 .Ar snapshot Ar filesystem Ns | Ns Ar volume
79 .Nm
80 .Cm promote
81 .Ar clone-filesystem
82 .Nm
83 .Cm rename
84 .Op Fl f
85 .Ar filesystem Ns | Ns Ar volume Ns | Ns Ar snapshot
86 .Ar filesystem Ns | Ns Ar volume Ns | Ns Ar snapshot
87 .Nm
88 .Cm rename
89 .Op Fl fp
90 .Ar filesystem Ns | Ns Ar volume
91 .Ar filesystem Ns | Ns Ar volume
92 .Nm
93 .Cm rename
94 .Fl r
95 .Ar snapshot Ar snapshot
96 .Nm
97 .Cm list
98 .Op Fl r Ns | Ns Fl d Ar depth
99 .Op Fl Hp
100 .Oo Fl o Ar property Ns Oo , Ns Ar property Oc Ns ... Oc
101 .Oo Fl s Ar property Oc Ns ...
102 .Oo Fl S Ar property Oc Ns ...
103 .Oo Fl t Ar type Ns Oo , Ns Ar type Oc Ns ... Oc
104 .Oo Ar filesystem Ns | Ns Ar volume Ns | Ns Ar snapshot Oc Ns ...
105 .Nm
106 .Cm remap
107 .Ar filesystem Ns | Ns Ar volume
108 .Nm
109 .Cm set
110 .Ar property Ns = Ns Ar value Oo Ar property Ns = Ns Ar value Oc Ns ...
111 .Ar filesystem Ns | Ns Ar volume Ns | Ns Ar snapshot Ns ...
112 .Nm
113 .Cm get
114 .Op Fl r Ns | Ns Fl d Ar depth
115 .Op Fl Hp
116 .Oo Fl o Ar field Ns Oo , Ns Ar field Oc Ns ... Oc
117 .Oo Fl s Ar source Ns Oo , Ns Ar source Oc Ns ... Oc
118 .Oo Fl t Ar type Ns Oo , Ns Ar type Oc Ns ... Oc
119 .Cm all | Ar property Ns Oo , Ns Ar property Oc Ns ...
120 .Ar filesystem Ns | Ns Ar volume Ns | Ns Ar snapshot Ns | Ns Ar bookmark Ns ...
121 .Nm
122 .Cm inherit
123 .Op Fl rS
124 .Ar property Ar filesystem Ns | Ns Ar volume Ns | Ns Ar snapshot Ns ...
125 .Nm
126 .Cm upgrade
127 .Nm
128 .Cm upgrade
129 .Fl v
130 .Nm
131 .Cm upgrade
132 .Op Fl r
133 .Op Fl V Ar version
134 .Fl a | Ar filesystem
135 .Nm
136 .Cm userspace
137 .Op Fl Hinp
138 .Oo Fl o Ar field Ns Oo , Ns Ar field Oc Ns ... Oc
139 .Oo Fl s Ar field Oc Ns ...
140 .Oo Fl S Ar field Oc Ns ...
141 .Oo Fl t Ar type Ns Oo , Ns Ar type Oc Ns ... Oc
142 .Ar filesystem Ns | Ns Ar snapshot
143 .Nm
144 .Cm groupspace
145 .Op Fl Hinp
146 .Oo Fl o Ar field Ns Oo , Ns Ar field Oc Ns ... Oc
147 .Oo Fl s Ar field Oc Ns ...
148 .Oo Fl S Ar field Oc Ns ...
149 .Oo Fl t Ar type Ns Oo , Ns Ar type Oc Ns ... Oc
150 .Ar filesystem Ns | Ns Ar snapshot
151 .Nm
152 .Cm projectspace
153 .Op Fl Hp
154 .Oo Fl o Ar field Ns Oo , Ns Ar field Oc Ns ... Oc
155 .Oo Fl s Ar field Oc Ns ...
156 .Oo Fl S Ar field Oc Ns ...
157 .Ar filesystem Ns | Ns Ar snapshot
158 .Nm
159 .Cm project
160 .Oo Fl d Ns | Ns Fl r Ns Oc
161 .Ar file Ns | Ns Ar directory Ns ...
162 .Nm
163 .Cm project
164 .Fl C
165 .Oo Fl kr Ns Oc
166 .Ar file Ns | Ns Ar directory Ns ...
167 .Nm
168 .Cm project
169 .Fl c
170 .Oo Fl 0 Ns Oc
171 .Oo Fl d Ns | Ns Fl r Ns Oc
172 .Op Fl p Ar id
173 .Ar file Ns | Ns Ar directory Ns ...
174 .Nm
175 .Cm project
176 .Op Fl p Ar id
177 .Oo Fl rs Ns Oc
178 .Ar file Ns | Ns Ar directory Ns ...
179 .Nm
180 .Cm mount
181 .Nm
182 .Cm mount
183 .Op Fl Olv
184 .Op Fl o Ar options
185 .Fl a | Ar filesystem
186 .Nm
187 .Cm unmount
188 .Op Fl f
189 .Fl a | Ar filesystem Ns | Ns Ar mountpoint
190 .Nm
191 .Cm share
192 .Fl a | Ar filesystem
193 .Nm
194 .Cm unshare
195 .Fl a | Ar filesystem Ns | Ns Ar mountpoint
196 .Nm
197 .Cm bookmark
198 .Ar snapshot bookmark
199 .Nm
200 .Cm send
201 .Op Fl DLPRbcenpvw
202 .Op Oo Fl I Ns | Ns Fl i Oc Ar snapshot
203 .Ar snapshot
204 .Nm
205 .Cm send
206 .Op Fl LPcenvw
207 .Op Fl i Ar snapshot Ns | Ns Ar bookmark
208 .Ar filesystem Ns | Ns Ar volume Ns | Ns Ar snapshot
209 .Nm
210 .Cm send
211 .Op Fl Penv
212 .Fl t Ar receive_resume_token
213 .Nm
214 .Cm receive
215 .Op Fl Fnsuv
216 .Op Fl o Sy origin Ns = Ns Ar snapshot
217 .Op Fl o Ar property Ns = Ns Ar value
218 .Op Fl x Ar property
219 .Ar filesystem Ns | Ns Ar volume Ns | Ns Ar snapshot
220 .Nm
221 .Cm receive
222 .Op Fl Fnsuv
223 .Op Fl d Ns | Ns Fl e
224 .Op Fl o Sy origin Ns = Ns Ar snapshot
225 .Op Fl o Ar property Ns = Ns Ar value
226 .Op Fl x Ar property
227 .Ar filesystem
228 .Nm
229 .Cm receive
230 .Fl A
231 .Ar filesystem Ns | Ns Ar volume
232 .Nm
233 .Cm allow
234 .Ar filesystem Ns | Ns Ar volume
235 .Nm
236 .Cm allow
237 .Op Fl dglu
238 .Ar user Ns | Ns Ar group Ns Oo , Ns Ar user Ns | Ns Ar group Oc Ns ...
239 .Ar perm Ns | Ns @ Ns Ar setname Ns Oo , Ns Ar perm Ns | Ns @ Ns
240 .Ar setname Oc Ns ...
241 .Ar filesystem Ns | Ns Ar volume
242 .Nm
243 .Cm allow
244 .Op Fl dl
245 .Fl e Ns | Ns Sy everyone
246 .Ar perm Ns | Ns @ Ns Ar setname Ns Oo , Ns Ar perm Ns | Ns @ Ns
247 .Ar setname Oc Ns ...
248 .Ar filesystem Ns | Ns Ar volume
249 .Nm
250 .Cm allow
251 .Fl c
252 .Ar perm Ns | Ns @ Ns Ar setname Ns Oo , Ns Ar perm Ns | Ns @ Ns
253 .Ar setname Oc Ns ...
254 .Ar filesystem Ns | Ns Ar volume
255 .Nm
256 .Cm allow
257 .Fl s No @ Ns Ar setname
258 .Ar perm Ns | Ns @ Ns Ar setname Ns Oo , Ns Ar perm Ns | Ns @ Ns
259 .Ar setname Oc Ns ...
260 .Ar filesystem Ns | Ns Ar volume
261 .Nm
262 .Cm unallow
263 .Op Fl dglru
264 .Ar user Ns | Ns Ar group Ns Oo , Ns Ar user Ns | Ns Ar group Oc Ns ...
265 .Oo Ar perm Ns | Ns @ Ns Ar setname Ns Oo , Ns Ar perm Ns | Ns @ Ns
266 .Ar setname Oc Ns ... Oc
267 .Ar filesystem Ns | Ns Ar volume
268 .Nm
269 .Cm unallow
270 .Op Fl dlr
271 .Fl e Ns | Ns Sy everyone
272 .Oo Ar perm Ns | Ns @ Ns Ar setname Ns Oo , Ns Ar perm Ns | Ns @ Ns
273 .Ar setname Oc Ns ... Oc
274 .Ar filesystem Ns | Ns Ar volume
275 .Nm
276 .Cm unallow
277 .Op Fl r
278 .Fl c
279 .Oo Ar perm Ns | Ns @ Ns Ar setname Ns Oo , Ns Ar perm Ns | Ns @ Ns
280 .Ar setname Oc Ns ... Oc
281 .Ar filesystem Ns | Ns Ar volume
282 .Nm
283 .Cm unallow
284 .Op Fl r
285 .Fl s @ Ns Ar setname
286 .Oo Ar perm Ns | Ns @ Ns Ar setname Ns Oo , Ns Ar perm Ns | Ns @ Ns
287 .Ar setname Oc Ns ... Oc
288 .Ar filesystem Ns | Ns Ar volume
289 .Nm
290 .Cm hold
291 .Op Fl r
292 .Ar tag Ar snapshot Ns ...
293 .Nm
294 .Cm holds
295 .Op Fl rH
296 .Ar snapshot Ns ...
297 .Nm
298 .Cm release
299 .Op Fl r
300 .Ar tag Ar snapshot Ns ...
301 .Nm
302 .Cm diff
303 .Op Fl FHt
304 .Ar snapshot Ar snapshot Ns | Ns Ar filesystem
305 .Nm
306 .Cm program
307 .Op Fl jn
308 .Op Fl t Ar timeout
309 .Op Fl m Ar memory_limit
310 .Ar pool script
311 .Op Ar arg1 No ...
312 .Nm
313 .Cm load-key
314 .Op Fl nr
315 .Op Fl L Ar keylocation
316 .Fl a | Ar filesystem
317 .Nm
318 .Cm unload-key
319 .Op Fl r
320 .Fl a | Ar filesystem
321 .Nm
322 .Cm change-key
323 .Op Fl l
324 .Op Fl o Ar keylocation Ns = Ns Ar value
325 .Op Fl o Ar keyformat Ns = Ns Ar value
326 .Op Fl o Ar pbkdf2iters Ns = Ns Ar value
327 .Ar filesystem
328 .Nm
329 .Cm change-key
330 .Fl i
331 .Op Fl l
332 .Ar filesystem
333 .Sh DESCRIPTION
334 The
335 .Nm
336 command configures ZFS datasets within a ZFS storage pool, as described in
337 .Xr zpool 8 .
338 A dataset is identified by a unique path within the ZFS namespace.
339 For example:
340 .Bd -literal
341 pool/{filesystem,volume,snapshot}
342 .Ed
343 .Pp
344 where the maximum length of a dataset name is
345 .Dv MAXNAMELEN
346 .Pq 256 bytes
347 and the maximum amount of nesting allowed in a path is 50 levels deep.
348 .Pp
349 A dataset can be one of the following:
350 .Bl -tag -width "file system"
351 .It Sy file system
352 A ZFS dataset of type
353 .Sy filesystem
354 can be mounted within the standard system namespace and behaves like other file
355 systems.
356 While ZFS file systems are designed to be POSIX compliant, known issues exist
357 that prevent compliance in some cases.
358 Applications that depend on standards conformance might fail due to non-standard
359 behavior when checking file system free space.
360 .It Sy volume
361 A logical volume exported as a raw or block device.
362 This type of dataset should only be used under special circumstances.
363 File systems are typically used in most environments.
364 .It Sy snapshot
365 A read-only version of a file system or volume at a given point in time.
366 It is specified as
367 .Ar filesystem Ns @ Ns Ar name
368 or
369 .Ar volume Ns @ Ns Ar name .
370 .It Sy bookmark
371 Much like a
372 .Sy snapshot ,
373 but without the hold on on-disk data. It can be used as the source of a send
374 (but not for a receive). It is specified as
375 .Ar filesystem Ns # Ns Ar name
376 or
377 .Ar volume Ns # Ns Ar name .
378 .El
379 .Ss ZFS File System Hierarchy
380 A ZFS storage pool is a logical collection of devices that provide space for
381 datasets.
382 A storage pool is also the root of the ZFS file system hierarchy.
383 .Pp
384 The root of the pool can be accessed as a file system, such as mounting and
385 unmounting, taking snapshots, and setting properties.
386 The physical storage characteristics, however, are managed by the
387 .Xr zpool 8
388 command.
389 .Pp
390 See
391 .Xr zpool 8
392 for more information on creating and administering pools.
393 .Ss Snapshots
394 A snapshot is a read-only copy of a file system or volume.
395 Snapshots can be created extremely quickly, and initially consume no additional
396 space within the pool.
397 As data within the active dataset changes, the snapshot consumes more data than
398 would otherwise be shared with the active dataset.
399 .Pp
400 Snapshots can have arbitrary names.
401 Snapshots of volumes can be cloned or rolled back, visibility is determined
402 by the
403 .Sy snapdev
404 property of the parent volume.
405 .Pp
406 File system snapshots can be accessed under the
407 .Pa .zfs/snapshot
408 directory in the root of the file system.
409 Snapshots are automatically mounted on demand and may be unmounted at regular
410 intervals.
411 The visibility of the
412 .Pa .zfs
413 directory can be controlled by the
414 .Sy snapdir
415 property.
416 .Ss Bookmarks
417 A bookmark is like a snapshot, a read-only copy of a file system or volume.
418 Bookmarks can be created extremely quickly, compared to snapshots, and they
419 consume no additional space within the pool. Bookmarks can also have arbitrary
420 names, much like snapshots.
421 .Pp
422 Unlike snapshots, bookmarks can not be accessed through the filesystem in any
423 way. From a storage standpoint a bookmark just provides a way to reference
424 when a snapshot was created as a distinct object. Bookmarks are initially
425 tied to a snapshot, not the filesystem or volume, and they will survive if the
426 snapshot itself is destroyed. Since they are very light weight there's little
427 incentive to destroy them.
428 .Ss Clones
429 A clone is a writable volume or file system whose initial contents are the same
430 as another dataset.
431 As with snapshots, creating a clone is nearly instantaneous, and initially
432 consumes no additional space.
433 .Pp
434 Clones can only be created from a snapshot.
435 When a snapshot is cloned, it creates an implicit dependency between the parent
436 and child.
437 Even though the clone is created somewhere else in the dataset hierarchy, the
438 original snapshot cannot be destroyed as long as a clone exists.
439 The
440 .Sy origin
441 property exposes this dependency, and the
442 .Cm destroy
443 command lists any such dependencies, if they exist.
444 .Pp
445 The clone parent-child dependency relationship can be reversed by using the
446 .Cm promote
447 subcommand.
448 This causes the
449 .Qq origin
450 file system to become a clone of the specified file system, which makes it
451 possible to destroy the file system that the clone was created from.
452 .Ss "Mount Points"
453 Creating a ZFS file system is a simple operation, so the number of file systems
454 per system is likely to be numerous.
455 To cope with this, ZFS automatically manages mounting and unmounting file
456 systems without the need to edit the
457 .Pa /etc/fstab
458 file.
459 All automatically managed file systems are mounted by ZFS at boot time.
460 .Pp
461 By default, file systems are mounted under
462 .Pa /path ,
463 where
464 .Ar path
465 is the name of the file system in the ZFS namespace.
466 Directories are created and destroyed as needed.
467 .Pp
468 A file system can also have a mount point set in the
469 .Sy mountpoint
470 property.
471 This directory is created as needed, and ZFS automatically mounts the file
472 system when the
473 .Nm zfs Cm mount Fl a
474 command is invoked
475 .Po without editing
476 .Pa /etc/fstab
477 .Pc .
478 The
479 .Sy mountpoint
480 property can be inherited, so if
481 .Em pool/home
482 has a mount point of
483 .Pa /export/stuff ,
484 then
485 .Em pool/home/user
486 automatically inherits a mount point of
487 .Pa /export/stuff/user .
488 .Pp
489 A file system
490 .Sy mountpoint
491 property of
492 .Sy none
493 prevents the file system from being mounted.
494 .Pp
495 If needed, ZFS file systems can also be managed with traditional tools
496 .Po
497 .Nm mount ,
498 .Nm umount ,
499 .Pa /etc/fstab
500 .Pc .
501 If a file system's mount point is set to
502 .Sy legacy ,
503 ZFS makes no attempt to manage the file system, and the administrator is
504 responsible for mounting and unmounting the file system. Because pools must
505 be imported before a legacy mount can succeed, administrators should ensure
506 that legacy mounts are only attempted after the zpool import process
507 finishes at boot time. For example, on machines using systemd, the mount
508 option
509 .Pp
510 .Nm x-systemd.requires=zfs-import.target
511 .Pp
512 will ensure that the zfs-import completes before systemd attempts mounting
513 the filesystem. See systemd.mount(5) for details.
514 .Ss Deduplication
515 Deduplication is the process for removing redundant data at the block level,
516 reducing the total amount of data stored. If a file system has the
517 .Sy dedup
518 property enabled, duplicate data blocks are removed synchronously. The result
519 is that only unique data is stored and common components are shared among files.
520 .Pp
521 Deduplicating data is a very resource-intensive operation. It is generally
522 recommended that you have at least 1.25 GiB of RAM per 1 TiB of storage when
523 you enable deduplication. Calculating the exact requirement depends heavily
524 on the type of data stored in the pool.
525 .Pp
526 Enabling deduplication on an improperly-designed system can result in
527 performance issues (slow IO and administrative operations). It can potentially
528 lead to problems importing a pool due to memory exhaustion. Deduplication
529 can consume significant processing power (CPU) and memory as well as generate
530 additional disk IO.
531 .Pp
532 Before creating a pool with deduplication enabled, ensure that you have planned
533 your hardware requirements appropriately and implemented appropriate recovery
534 practices, such as regular backups. As an alternative to deduplication
535 consider using
536 .Sy compression=on ,
537 as a less resource-intensive alternative.
538 .Ss Native Properties
539 Properties are divided into two types, native properties and user-defined
540 .Po or
541 .Qq user
542 .Pc
543 properties.
544 Native properties either export internal statistics or control ZFS behavior.
545 In addition, native properties are either editable or read-only.
546 User properties have no effect on ZFS behavior, but you can use them to annotate
547 datasets in a way that is meaningful in your environment.
548 For more information about user properties, see the
549 .Sx User Properties
550 section, below.
551 .Pp
552 Every dataset has a set of properties that export statistics about the dataset
553 as well as control various behaviors.
554 Properties are inherited from the parent unless overridden by the child.
555 Some properties apply only to certain types of datasets
556 .Pq file systems, volumes, or snapshots .
557 .Pp
558 The values of numeric properties can be specified using human-readable suffixes
559 .Po for example,
560 .Sy k ,
561 .Sy KB ,
562 .Sy M ,
563 .Sy Gb ,
564 and so forth, up to
565 .Sy Z
566 for zettabyte
567 .Pc .
568 The following are all valid
569 .Pq and equal
570 specifications:
571 .Li 1536M, 1.5g, 1.50GB .
572 .Pp
573 The values of non-numeric properties are case sensitive and must be lowercase,
574 except for
575 .Sy mountpoint ,
576 .Sy sharenfs ,
577 and
578 .Sy sharesmb .
579 .Pp
580 The following native properties consist of read-only statistics about the
581 dataset.
582 These properties can be neither set, nor inherited.
583 Native properties apply to all dataset types unless otherwise noted.
584 .Bl -tag -width "usedbyrefreservation"
585 .It Sy available
586 The amount of space available to the dataset and all its children, assuming that
587 there is no other activity in the pool.
588 Because space is shared within a pool, availability can be limited by any number
589 of factors, including physical pool size, quotas, reservations, or other
590 datasets within the pool.
591 .Pp
592 This property can also be referred to by its shortened column name,
593 .Sy avail .
594 .It Sy compressratio
595 For non-snapshots, the compression ratio achieved for the
596 .Sy used
597 space of this dataset, expressed as a multiplier.
598 The
599 .Sy used
600 property includes descendant datasets, and, for clones, does not include the
601 space shared with the origin snapshot.
602 For snapshots, the
603 .Sy compressratio
604 is the same as the
605 .Sy refcompressratio
606 property.
607 Compression can be turned on by running:
608 .Nm zfs Cm set Sy compression Ns = Ns Sy on Ar dataset .
609 The default value is
610 .Sy off .
611 .It Sy createtxg
612 The transaction group (txg) in which the dataset was created. Bookmarks have
613 the same
614 .Sy createtxg
615 as the snapshot they are initially tied to. This property is suitable for
616 ordering a list of snapshots, e.g. for incremental send and receive.
617 .It Sy creation
618 The time this dataset was created.
619 .It Sy clones
620 For snapshots, this property is a comma-separated list of filesystems or volumes
621 which are clones of this snapshot.
622 The clones'
623 .Sy origin
624 property is this snapshot.
625 If the
626 .Sy clones
627 property is not empty, then this snapshot can not be destroyed
628 .Po even with the
629 .Fl r
630 or
631 .Fl f
632 options
633 .Pc .
634 The roles of origin and clone can be swapped by promoting the clone with the
635 .Nm zfs Cm promote
636 command.
637 .It Sy defer_destroy
638 This property is
639 .Sy on
640 if the snapshot has been marked for deferred destroy by using the
641 .Nm zfs Cm destroy Fl d
642 command.
643 Otherwise, the property is
644 .Sy off .
645 .It Sy encryptionroot
646 For encrypted datasets, indicates where the dataset is currently inheriting its
647 encryption key from. Loading or unloading a key for the
648 .Sy encryptionroot
649 will implicitly load / unload the key for any inheriting datasets (see
650 .Nm zfs Cm load-key
651 and
652 .Nm zfs Cm unload-key
653 for details).
654 Clones will always share an
655 encryption key with their origin. See the
656 .Sx Encryption
657 section for details.
658 .It Sy filesystem_count
659 The total number of filesystems and volumes that exist under this location in
660 the dataset tree.
661 This value is only available when a
662 .Sy filesystem_limit
663 has been set somewhere in the tree under which the dataset resides.
664 .It Sy keystatus
665 Indicates if an encryption key is currently loaded into ZFS. The possible
666 values are
667 .Sy none ,
668 .Sy available ,
669 and
670 .Sy unavailable .
671 See
672 .Nm zfs Cm load-key
673 and
674 .Nm zfs Cm unload-key .
675 .It Sy guid
676 The 64 bit GUID of this dataset or bookmark which does not change over its
677 entire lifetime. When a snapshot is sent to another pool, the received
678 snapshot has the same GUID. Thus, the
679 .Sy guid
680 is suitable to identify a snapshot across pools.
681 .It Sy logicalreferenced
682 The amount of space that is
683 .Qq logically
684 accessible by this dataset.
685 See the
686 .Sy referenced
687 property.
688 The logical space ignores the effect of the
689 .Sy compression
690 and
691 .Sy copies
692 properties, giving a quantity closer to the amount of data that applications
693 see.
694 However, it does include space consumed by metadata.
695 .Pp
696 This property can also be referred to by its shortened column name,
697 .Sy lrefer .
698 .It Sy logicalused
699 The amount of space that is
700 .Qq logically
701 consumed by this dataset and all its descendents.
702 See the
703 .Sy used
704 property.
705 The logical space ignores the effect of the
706 .Sy compression
707 and
708 .Sy copies
709 properties, giving a quantity closer to the amount of data that applications
710 see.
711 However, it does include space consumed by metadata.
712 .Pp
713 This property can also be referred to by its shortened column name,
714 .Sy lused .
715 .It Sy mounted
716 For file systems, indicates whether the file system is currently mounted.
717 This property can be either
718 .Sy yes
719 or
720 .Sy no .
721 .It Sy objsetid
722 A unique identifier for this dataset within the pool. Unlike the dataset's
723 .Sy guid
724 , the
725 .Sy objsetid
726 of a dataset is not transferred to other pools when the snapshot is copied
727 with a send/receive operation.
728 The
729 .Sy objsetid
730 can be reused (for a new datatset) after the dataset is deleted.
731 .It Sy origin
732 For cloned file systems or volumes, the snapshot from which the clone was
733 created.
734 See also the
735 .Sy clones
736 property.
737 .It Sy receive_resume_token
738 For filesystems or volumes which have saved partially-completed state from
739 .Sy zfs receive -s ,
740 this opaque token can be provided to
741 .Sy zfs send -t
742 to resume and complete the
743 .Sy zfs receive .
744 .It Sy referenced
745 The amount of data that is accessible by this dataset, which may or may not be
746 shared with other datasets in the pool.
747 When a snapshot or clone is created, it initially references the same amount of
748 space as the file system or snapshot it was created from, since its contents are
749 identical.
750 .Pp
751 This property can also be referred to by its shortened column name,
752 .Sy refer .
753 .It Sy refcompressratio
754 The compression ratio achieved for the
755 .Sy referenced
756 space of this dataset, expressed as a multiplier.
757 See also the
758 .Sy compressratio
759 property.
760 .It Sy snapshot_count
761 The total number of snapshots that exist under this location in the dataset
762 tree.
763 This value is only available when a
764 .Sy snapshot_limit
765 has been set somewhere in the tree under which the dataset resides.
766 .It Sy type
767 The type of dataset:
768 .Sy filesystem ,
769 .Sy volume ,
770 or
771 .Sy snapshot .
772 .It Sy used
773 The amount of space consumed by this dataset and all its descendents.
774 This is the value that is checked against this dataset's quota and reservation.
775 The space used does not include this dataset's reservation, but does take into
776 account the reservations of any descendent datasets.
777 The amount of space that a dataset consumes from its parent, as well as the
778 amount of space that is freed if this dataset is recursively destroyed, is the
779 greater of its space used and its reservation.
780 .Pp
781 The used space of a snapshot
782 .Po see the
783 .Sx Snapshots
784 section
785 .Pc
786 is space that is referenced exclusively by this snapshot.
787 If this snapshot is destroyed, the amount of
788 .Sy used
789 space will be freed.
790 Space that is shared by multiple snapshots isn't accounted for in this metric.
791 When a snapshot is destroyed, space that was previously shared with this
792 snapshot can become unique to snapshots adjacent to it, thus changing the used
793 space of those snapshots.
794 The used space of the latest snapshot can also be affected by changes in the
795 file system.
796 Note that the
797 .Sy used
798 space of a snapshot is a subset of the
799 .Sy written
800 space of the snapshot.
801 .Pp
802 The amount of space used, available, or referenced does not take into account
803 pending changes.
804 Pending changes are generally accounted for within a few seconds.
805 Committing a change to a disk using
806 .Xr fsync 2
807 or
808 .Dv O_SYNC
809 does not necessarily guarantee that the space usage information is updated
810 immediately.
811 .It Sy usedby*
812 The
813 .Sy usedby*
814 properties decompose the
815 .Sy used
816 properties into the various reasons that space is used.
817 Specifically,
818 .Sy used No =
819 .Sy usedbychildren No +
820 .Sy usedbydataset No +
821 .Sy usedbyrefreservation No +
822 .Sy usedbysnapshots .
823 These properties are only available for datasets created on
824 .Nm zpool
825 .Qo version 13 Qc
826 pools.
827 .It Sy usedbychildren
828 The amount of space used by children of this dataset, which would be freed if
829 all the dataset's children were destroyed.
830 .It Sy usedbydataset
831 The amount of space used by this dataset itself, which would be freed if the
832 dataset were destroyed
833 .Po after first removing any
834 .Sy refreservation
835 and destroying any necessary snapshots or descendents
836 .Pc .
837 .It Sy usedbyrefreservation
838 The amount of space used by a
839 .Sy refreservation
840 set on this dataset, which would be freed if the
841 .Sy refreservation
842 was removed.
843 .It Sy usedbysnapshots
844 The amount of space consumed by snapshots of this dataset.
845 In particular, it is the amount of space that would be freed if all of this
846 dataset's snapshots were destroyed.
847 Note that this is not simply the sum of the snapshots'
848 .Sy used
849 properties because space can be shared by multiple snapshots.
850 .It Sy userused Ns @ Ns Em user
851 The amount of space consumed by the specified user in this dataset.
852 Space is charged to the owner of each file, as displayed by
853 .Nm ls Fl l .
854 The amount of space charged is displayed by
855 .Nm du
856 and
857 .Nm ls Fl s .
858 See the
859 .Nm zfs Cm userspace
860 subcommand for more information.
861 .Pp
862 Unprivileged users can access only their own space usage.
863 The root user, or a user who has been granted the
864 .Sy userused
865 privilege with
866 .Nm zfs Cm allow ,
867 can access everyone's usage.
868 .Pp
869 The
870 .Sy userused Ns @ Ns Em ...
871 properties are not displayed by
872 .Nm zfs Cm get Sy all .
873 The user's name must be appended after the @ symbol, using one of the following
874 forms:
875 .Bl -bullet -width ""
876 .It
877 .Em POSIX name
878 .Po for example,
879 .Sy joe
880 .Pc
881 .It
882 .Em POSIX numeric ID
883 .Po for example,
884 .Sy 789
885 .Pc
886 .It
887 .Em SID name
888 .Po for example,
889 .Sy joe.smith@mydomain
890 .Pc
891 .It
892 .Em SID numeric ID
893 .Po for example,
894 .Sy S-1-123-456-789
895 .Pc
896 .El
897 .Pp
898 Files created on Linux always have POSIX owners.
899 .It Sy userobjused Ns @ Ns Em user
900 The
901 .Sy userobjused
902 property is similar to
903 .Sy userused
904 but instead it counts the number of objects consumed by a user. This property
905 counts all objects allocated on behalf of the user, it may differ from the
906 results of system tools such as
907 .Nm df Fl i .
908 .Pp
909 When the property
910 .Sy xattr=on
911 is set on a file system additional objects will be created per-file to store
912 extended attributes. These additional objects are reflected in the
913 .Sy userobjused
914 value and are counted against the user's
915 .Sy userobjquota .
916 When a file system is configured to use
917 .Sy xattr=sa
918 no additional internal objects are normally required.
919 .It Sy userrefs
920 This property is set to the number of user holds on this snapshot.
921 User holds are set by using the
922 .Nm zfs Cm hold
923 command.
924 .It Sy groupused Ns @ Ns Em group
925 The amount of space consumed by the specified group in this dataset.
926 Space is charged to the group of each file, as displayed by
927 .Nm ls Fl l .
928 See the
929 .Sy userused Ns @ Ns Em user
930 property for more information.
931 .Pp
932 Unprivileged users can only access their own groups' space usage.
933 The root user, or a user who has been granted the
934 .Sy groupused
935 privilege with
936 .Nm zfs Cm allow ,
937 can access all groups' usage.
938 .It Sy groupobjused Ns @ Ns Em group
939 The number of objects consumed by the specified group in this dataset.
940 Multiple objects may be charged to the group for each file when extended
941 attributes are in use. See the
942 .Sy userobjused Ns @ Ns Em user
943 property for more information.
944 .Pp
945 Unprivileged users can only access their own groups' space usage.
946 The root user, or a user who has been granted the
947 .Sy groupobjused
948 privilege with
949 .Nm zfs Cm allow ,
950 can access all groups' usage.
951 .It Sy projectused Ns @ Ns Em project
952 The amount of space consumed by the specified project in this dataset. Project
953 is identified via the project identifier (ID) that is object-based numeral
954 attribute. An object can inherit the project ID from its parent object (if the
955 parent has the flag of inherit project ID that can be set and changed via
956 .Nm chattr Fl /+P
957 or
958 .Nm zfs project Fl s )
959 when being created. The privileged user can set and change object's project
960 ID via
961 .Nm chattr Fl p
962 or
963 .Nm zfs project Fl s
964 anytime. Space is charged to the project of each file, as displayed by
965 .Nm lsattr Fl p
966 or
967 .Nm zfs project .
968 See the
969 .Sy userused Ns @ Ns Em user
970 property for more information.
971 .Pp
972 The root user, or a user who has been granted the
973 .Sy projectused
974 privilege with
975 .Nm zfs allow ,
976 can access all projects' usage.
977 .It Sy projectobjused Ns @ Ns Em project
978 The
979 .Sy projectobjused
980 is similar to
981 .Sy projectused
982 but instead it counts the number of objects consumed by project. When the
983 property
984 .Sy xattr=on
985 is set on a fileset, ZFS will create additional objects per-file to store
986 extended attributes. These additional objects are reflected in the
987 .Sy projectobjused
988 value and are counted against the project's
989 .Sy projectobjquota .
990 When a filesystem is configured to use
991 .Sy xattr=sa
992 no additional internal objects are required. See the
993 .Sy userobjused Ns @ Ns Em user
994 property for more information.
995 .Pp
996 The root user, or a user who has been granted the
997 .Sy projectobjused
998 privilege with
999 .Nm zfs allow ,
1000 can access all projects' objects usage.
1001 .It Sy volblocksize
1002 For volumes, specifies the block size of the volume.
1003 The
1004 .Sy blocksize
1005 cannot be changed once the volume has been written, so it should be set at
1006 volume creation time.
1007 The default
1008 .Sy blocksize
1009 for volumes is 8 Kbytes.
1010 Any power of 2 from 512 bytes to 128 Kbytes is valid.
1011 .Pp
1012 This property can also be referred to by its shortened column name,
1013 .Sy volblock .
1014 .It Sy written
1015 The amount of space
1016 .Sy referenced
1017 by this dataset, that was written since the previous snapshot
1018 .Pq i.e. that is not referenced by the previous snapshot .
1019 .It Sy written Ns @ Ns Em snapshot
1020 The amount of
1021 .Sy referenced
1022 space written to this dataset since the specified snapshot.
1023 This is the space that is referenced by this dataset but was not referenced by
1024 the specified snapshot.
1025 .Pp
1026 The
1027 .Em snapshot
1028 may be specified as a short snapshot name
1029 .Po just the part after the
1030 .Sy @
1031 .Pc ,
1032 in which case it will be interpreted as a snapshot in the same filesystem as
1033 this dataset.
1034 The
1035 .Em snapshot
1036 may be a full snapshot name
1037 .Po Em filesystem Ns @ Ns Em snapshot Pc ,
1038 which for clones may be a snapshot in the origin's filesystem
1039 .Pq or the origin of the origin's filesystem, etc.
1040 .El
1041 .Pp
1042 The following native properties can be used to change the behavior of a ZFS
1043 dataset.
1044 .Bl -tag -width ""
1045 .It Xo
1046 .Sy aclinherit Ns = Ns Sy discard Ns | Ns Sy noallow Ns | Ns
1047 .Sy restricted Ns | Ns Sy passthrough Ns | Ns Sy passthrough-x
1048 .Xc
1049 Controls how ACEs are inherited when files and directories are created.
1050 .Bl -tag -width "passthrough-x"
1051 .It Sy discard
1052 does not inherit any ACEs.
1053 .It Sy noallow
1054 only inherits inheritable ACEs that specify
1055 .Qq deny
1056 permissions.
1057 .It Sy restricted
1058 default, removes the
1059 .Sy write_acl
1060 and
1061 .Sy write_owner
1062 permissions when the ACE is inherited.
1063 .It Sy passthrough
1064 inherits all inheritable ACEs without any modifications.
1065 .It Sy passthrough-x
1066 same meaning as
1067 .Sy passthrough ,
1068 except that the
1069 .Sy owner@ ,
1070 .Sy group@ ,
1071 and
1072 .Sy everyone@
1073 ACEs inherit the execute permission only if the file creation mode also requests
1074 the execute bit.
1075 .El
1076 .Pp
1077 When the property value is set to
1078 .Sy passthrough ,
1079 files are created with a mode determined by the inheritable ACEs.
1080 If no inheritable ACEs exist that affect the mode, then the mode is set in
1081 accordance to the requested mode from the application.
1082 .Pp
1083 The
1084 .Sy aclinherit
1085 property does not apply to posix ACLs.
1086 .It Sy acltype Ns = Ns Sy off Ns | Ns Sy noacl Ns | Ns Sy posixacl
1087 Controls whether ACLs are enabled and if so what type of ACL to use.
1088 .Bl -tag -width "posixacl"
1089 .It Sy off
1090 default, when a file system has the
1091 .Sy acltype
1092 property set to off then ACLs are disabled.
1093 .It Sy noacl
1094 an alias for
1095 .Sy off
1096 .It Sy posixacl
1097 indicates posix ACLs should be used. Posix ACLs are specific to Linux and are
1098 not functional on other platforms. Posix ACLs are stored as an extended
1099 attribute and therefore will not overwrite any existing NFSv4 ACLs which
1100 may be set.
1101 .El
1102 .Pp
1103 To obtain the best performance when setting
1104 .Sy posixacl
1105 users are strongly encouraged to set the
1106 .Sy xattr=sa
1107 property. This will result in the posix ACL being stored more efficiently on
1108 disk. But as a consequence of this all new extended attributes will only be
1109 accessible from OpenZFS implementations which support the
1110 .Sy xattr=sa
1111 property. See the
1112 .Sy xattr
1113 property for more details.
1114 .It Sy atime Ns = Ns Sy on Ns | Ns Sy off
1115 Controls whether the access time for files is updated when they are read.
1116 Turning this property off avoids producing write traffic when reading files and
1117 can result in significant performance gains, though it might confuse mailers
1118 and other similar utilities. The values
1119 .Sy on
1120 and
1121 .Sy off
1122 are equivalent to the
1123 .Sy atime
1124 and
1125 .Sy noatime
1126 mount options. The default value is
1127 .Sy on .
1128 See also
1129 .Sy relatime
1130 below.
1131 .It Sy canmount Ns = Ns Sy on Ns | Ns Sy off Ns | Ns Sy noauto
1132 If this property is set to
1133 .Sy off ,
1134 the file system cannot be mounted, and is ignored by
1135 .Nm zfs Cm mount Fl a .
1136 Setting this property to
1137 .Sy off
1138 is similar to setting the
1139 .Sy mountpoint
1140 property to
1141 .Sy none ,
1142 except that the dataset still has a normal
1143 .Sy mountpoint
1144 property, which can be inherited.
1145 Setting this property to
1146 .Sy off
1147 allows datasets to be used solely as a mechanism to inherit properties.
1148 One example of setting
1149 .Sy canmount Ns = Ns Sy off
1150 is to have two datasets with the same
1151 .Sy mountpoint ,
1152 so that the children of both datasets appear in the same directory, but might
1153 have different inherited characteristics.
1154 .Pp
1155 When set to
1156 .Sy noauto ,
1157 a dataset can only be mounted and unmounted explicitly.
1158 The dataset is not mounted automatically when the dataset is created or
1159 imported, nor is it mounted by the
1160 .Nm zfs Cm mount Fl a
1161 command or unmounted by the
1162 .Nm zfs Cm unmount Fl a
1163 command.
1164 .Pp
1165 This property is not inherited.
1166 .It Xo
1167 .Sy checksum Ns = Ns Sy on Ns | Ns Sy off Ns | Ns Sy fletcher2 Ns | Ns
1168 .Sy fletcher4 Ns | Ns Sy sha256 Ns | Ns Sy noparity Ns | Ns
1169 .Sy sha512 Ns | Ns Sy skein Ns | Ns Sy edonr
1170 .Xc
1171 Controls the checksum used to verify data integrity.
1172 The default value is
1173 .Sy on ,
1174 which automatically selects an appropriate algorithm
1175 .Po currently,
1176 .Sy fletcher4 ,
1177 but this may change in future releases
1178 .Pc .
1179 The value
1180 .Sy off
1181 disables integrity checking on user data.
1182 The value
1183 .Sy noparity
1184 not only disables integrity but also disables maintaining parity for user data.
1185 This setting is used internally by a dump device residing on a RAID-Z pool and
1186 should not be used by any other dataset.
1187 Disabling checksums is
1188 .Sy NOT
1189 a recommended practice.
1190 .Pp
1191 The
1192 .Sy sha512 ,
1193 .Sy skein ,
1194 and
1195 .Sy edonr
1196 checksum algorithms require enabling the appropriate features on the pool.
1197 These algorithms are not supported by GRUB and should not be set on the
1198 .Sy bootfs
1199 filesystem when using GRUB to boot the system.
1200 Please see
1201 .Xr zpool-features 5
1202 for more information on these algorithms.
1203 .Pp
1204 Changing this property affects only newly-written data.
1205 .It Xo
1206 .Sy compression Ns = Ns Sy on Ns | Ns Sy off Ns | Ns Sy gzip Ns | Ns
1207 .Sy gzip- Ns Em N Ns | Ns Sy lz4 Ns | Ns Sy lzjb Ns | Ns Sy zle
1208 .Xc
1209 Controls the compression algorithm used for this dataset.
1210 .Pp
1211 Setting compression to
1212 .Sy on
1213 indicates that the current default compression algorithm should be used.
1214 The default balances compression and decompression speed, with compression ratio
1215 and is expected to work well on a wide variety of workloads.
1216 Unlike all other settings for this property,
1217 .Sy on
1218 does not select a fixed compression type.
1219 As new compression algorithms are added to ZFS and enabled on a pool, the
1220 default compression algorithm may change.
1221 The current default compression algorithm is either
1222 .Sy lzjb
1223 or, if the
1224 .Sy lz4_compress
1225 feature is enabled,
1226 .Sy lz4 .
1227 .Pp
1228 The
1229 .Sy lz4
1230 compression algorithm is a high-performance replacement for the
1231 .Sy lzjb
1232 algorithm.
1233 It features significantly faster compression and decompression, as well as a
1234 moderately higher compression ratio than
1235 .Sy lzjb ,
1236 but can only be used on pools with the
1237 .Sy lz4_compress
1238 feature set to
1239 .Sy enabled .
1240 See
1241 .Xr zpool-features 5
1242 for details on ZFS feature flags and the
1243 .Sy lz4_compress
1244 feature.
1245 .Pp
1246 The
1247 .Sy lzjb
1248 compression algorithm is optimized for performance while providing decent data
1249 compression.
1250 .Pp
1251 The
1252 .Sy gzip
1253 compression algorithm uses the same compression as the
1254 .Xr gzip 1
1255 command.
1256 You can specify the
1257 .Sy gzip
1258 level by using the value
1259 .Sy gzip- Ns Em N ,
1260 where
1261 .Em N
1262 is an integer from 1
1263 .Pq fastest
1264 to 9
1265 .Pq best compression ratio .
1266 Currently,
1267 .Sy gzip
1268 is equivalent to
1269 .Sy gzip-6
1270 .Po which is also the default for
1271 .Xr gzip 1
1272 .Pc .
1273 .Pp
1274 The
1275 .Sy zle
1276 compression algorithm compresses runs of zeros.
1277 .Pp
1278 This property can also be referred to by its shortened column name
1279 .Sy compress .
1280 Changing this property affects only newly-written data.
1281 .It Xo
1282 .Sy context Ns = Ns Sy none Ns | Ns
1283 .Em SELinux_User:SElinux_Role:Selinux_Type:Sensitivity_Level
1284 .Xc
1285 This flag sets the SELinux context for all files in the file system under
1286 a mount point for that file system. See
1287 .Xr selinux 8
1288 for more information.
1289 .It Xo
1290 .Sy fscontext Ns = Ns Sy none Ns | Ns
1291 .Em SELinux_User:SElinux_Role:Selinux_Type:Sensitivity_Level
1292 .Xc
1293 This flag sets the SELinux context for the file system file system being
1294 mounted. See
1295 .Xr selinux 8
1296 for more information.
1297 .It Xo
1298 .Sy defcontext Ns = Ns Sy none Ns | Ns
1299 .Em SELinux_User:SElinux_Role:Selinux_Type:Sensitivity_Level
1300 .Xc
1301 This flag sets the SELinux default context for unlabeled files. See
1302 .Xr selinux 8
1303 for more information.
1304 .It Xo
1305 .Sy rootcontext Ns = Ns Sy none Ns | Ns
1306 .Em SELinux_User:SElinux_Role:Selinux_Type:Sensitivity_Level
1307 .Xc
1308 This flag sets the SELinux context for the root inode of the file system. See
1309 .Xr selinux 8
1310 for more information.
1311 .It Sy copies Ns = Ns Sy 1 Ns | Ns Sy 2 Ns | Ns Sy 3
1312 Controls the number of copies of data stored for this dataset.
1313 These copies are in addition to any redundancy provided by the pool, for
1314 example, mirroring or RAID-Z.
1315 The copies are stored on different disks, if possible.
1316 The space used by multiple copies is charged to the associated file and dataset,
1317 changing the
1318 .Sy used
1319 property and counting against quotas and reservations.
1320 .Pp
1321 Changing this property only affects newly-written data.
1322 Therefore, set this property at file system creation time by using the
1323 .Fl o Sy copies Ns = Ns Ar N
1324 option.
1325 .Pp
1326 Remember that ZFS will not import a pool with a missing top-level vdev. Do
1327 .Sy NOT
1328 create, for example a two-disk striped pool and set
1329 .Sy copies=2
1330 on some datasets thinking you have setup redundancy for them. When a disk
1331 fails you will not be able to import the pool and will have lost all of your
1332 data.
1333 .It Sy devices Ns = Ns Sy on Ns | Ns Sy off
1334 Controls whether device nodes can be opened on this file system.
1335 The default value is
1336 .Sy on .
1337 The values
1338 .Sy on
1339 and
1340 .Sy off
1341 are equivalent to the
1342 .Sy dev
1343 and
1344 .Sy nodev
1345 mount options.
1346 .It Xo
1347 .Sy dedup Ns = Ns Sy off Ns | Ns Sy on Ns | Ns Sy verify Ns | Ns
1348 .Sy sha256[,verify] Ns | Ns Sy sha512[,verify] Ns | Ns Sy skein[,verify] Ns | Ns
1349 .Sy edonr,verify
1350 .Xc
1351 Configures deduplication for a dataset. The default value is
1352 .Sy off .
1353 The default deduplication checksum is
1354 .Sy sha256
1355 (this may change in the future). When
1356 .Sy dedup
1357 is enabled, the checksum defined here overrides the
1358 .Sy checksum
1359 property. Setting the value to
1360 .Sy verify
1361 has the same effect as the setting
1362 .Sy sha256,verify.
1363 .Pp
1364 If set to
1365 .Sy verify ,
1366 ZFS will do a byte-to-byte comparsion in case of two blocks having the same
1367 signature to make sure the block contents are identical. Specifying
1368 .Sy verify
1369 is mandatory for the
1370 .Sy edonr
1371 algorithm.
1372 .Pp
1373 Unless necessary, deduplication should NOT be enabled on a system. See
1374 .Sx Deduplication
1375 above.
1376 .It Xo
1377 .Sy dnodesize Ns = Ns Sy legacy Ns | Ns Sy auto Ns | Ns Sy 1k Ns | Ns
1378 .Sy 2k Ns | Ns Sy 4k Ns | Ns Sy 8k Ns | Ns Sy 16k
1379 .Xc
1380 Specifies a compatibility mode or literal value for the size of dnodes in the
1381 file system. The default value is
1382 .Sy legacy .
1383 Setting this property to a value other than
1384 .Sy legacy
1385 requires the large_dnode pool feature to be enabled.
1386 .Pp
1387 Consider setting
1388 .Sy dnodesize
1389 to
1390 .Sy auto
1391 if the dataset uses the
1392 .Sy xattr=sa
1393 property setting and the workload makes heavy use of extended attributes. This
1394 may be applicable to SELinux-enabled systems, Lustre servers, and Samba
1395 servers, for example. Literal values are supported for cases where the optimal
1396 size is known in advance and for performance testing.
1397 .Pp
1398 Leave
1399 .Sy dnodesize
1400 set to
1401 .Sy legacy
1402 if you need to receive a send stream of this dataset on a pool that doesn't
1403 enable the large_dnode feature, or if you need to import this pool on a system
1404 that doesn't support the large_dnode feature.
1405 .Pp
1406 This property can also be referred to by its shortened column name,
1407 .Sy dnsize .
1408 .It Xo
1409 .Sy encryption Ns = Ns Sy off Ns | Ns Sy on Ns | Ns Sy aes-128-ccm Ns | Ns
1410 .Sy aes-192-ccm Ns | Ns Sy aes-256-ccm Ns | Ns Sy aes-128-gcm Ns | Ns
1411 .Sy aes-192-gcm Ns | Ns Sy aes-256-gcm
1412 .Xc
1413 Controls the encryption cipher suite (block cipher, key length, and mode) used
1414 for this dataset. Requires the
1415 .Sy encryption
1416 feature to be enabled on the pool.
1417 Requires a
1418 .Sy keyformat
1419 to be set at dataset creation time.
1420 .Pp
1421 Selecting
1422 .Sy encryption Ns = Ns Sy on
1423 when creating a dataset indicates that the default encryption suite will be
1424 selected, which is currently
1425 .Sy aes-256-ccm .
1426 In order to provide consistent data protection, encryption must be specified at
1427 dataset creation time and it cannot be changed afterwards.
1428 .Pp
1429 For more details and caveats about encryption see the
1430 .Sy Encryption
1431 section.
1432 .It Sy keyformat Ns = Ns Sy raw Ns | Ns Sy hex Ns | Ns Sy passphrase
1433 Controls what format the user's encryption key will be provided as. This
1434 property is only set when the dataset is encrypted.
1435 .Pp
1436 Raw keys and hex keys must be 32 bytes long (regardless of the chosen
1437 encryption suite) and must be randomly generated. A raw key can be generated
1438 with the following command:
1439 .Bd -literal
1440 # dd if=/dev/urandom of=/path/to/output/key bs=32 count=1
1441 .Ed
1442 .Pp
1443 Passphrases must be between 8 and 512 bytes long and will be processed through
1444 PBKDF2 before being used (see the
1445 .Sy pbkdf2iters
1446 property). Even though the
1447 encryption suite cannot be changed after dataset creation, the keyformat can be
1448 with
1449 .Nm zfs Cm change-key .
1450 .It Xo
1451 .Sy keylocation Ns = Ns Sy prompt Ns | Ns Sy file:// Ns Em </absolute/file/path>
1452 .Xc
1453 Controls where the user's encryption key will be loaded from by default for
1454 commands such as
1455 .Nm zfs Cm load-key
1456 and
1457 .Nm zfs Cm mount Cm -l .
1458 This property is only set for encrypted datasets which are encryption roots. If
1459 unspecified, the default is
1460 .Sy prompt.
1461 .Pp
1462 Even though the encryption suite cannot be changed after dataset creation, the
1463 keylocation can be with either
1464 .Nm zfs Cm set
1465 or
1466 .Nm zfs Cm change-key .
1467 If
1468 .Sy prompt
1469 is selected ZFS will ask for the key at the command prompt when it is required
1470 to access the encrypted data (see
1471 .Nm zfs Cm load-key
1472 for details). This setting will also allow the key to be passed in via STDIN,
1473 but users should be careful not to place keys which should be kept secret on
1474 the command line. If a file URI is selected, the key will be loaded from the
1475 specified absolute file path.
1476 .It Sy pbkdf2iters Ns = Ns Ar iterations
1477 Controls the number of PBKDF2 iterations that a
1478 .Sy passphrase
1479 encryption key should be run through when processing it into an encryption key.
1480 This property is only defined when encryption is enabled and a keyformat of
1481 .Sy passphrase
1482 is selected. The goal of PBKDF2 is to significantly increase the
1483 computational difficulty needed to brute force a user's passphrase. This is
1484 accomplished by forcing the attacker to run each passphrase through a
1485 computationally expensive hashing function many times before they arrive at the
1486 resulting key. A user who actually knows the passphrase will only have to pay
1487 this cost once. As CPUs become better at processing, this number should be
1488 raised to ensure that a brute force attack is still not possible. The current
1489 default is
1490 .Sy 350000
1491 and the minimum is
1492 .Sy 100000 .
1493 This property may be changed with
1494 .Nm zfs Cm change-key .
1495 .It Sy exec Ns = Ns Sy on Ns | Ns Sy off
1496 Controls whether processes can be executed from within this file system.
1497 The default value is
1498 .Sy on .
1499 The values
1500 .Sy on
1501 and
1502 .Sy off
1503 are equivalent to the
1504 .Sy exec
1505 and
1506 .Sy noexec
1507 mount options.
1508 .It Sy filesystem_limit Ns = Ns Em count Ns | Ns Sy none
1509 Limits the number of filesystems and volumes that can exist under this point in
1510 the dataset tree.
1511 The limit is not enforced if the user is allowed to change the limit.
1512 Setting a
1513 .Sy filesystem_limit
1514 to
1515 .Sy on
1516 a descendent of a filesystem that already has a
1517 .Sy filesystem_limit
1518 does not override the ancestor's
1519 .Sy filesystem_limit ,
1520 but rather imposes an additional limit.
1521 This feature must be enabled to be used
1522 .Po see
1523 .Xr zpool-features 5
1524 .Pc .
1525 .It Sy mountpoint Ns = Ns Pa path Ns | Ns Sy none Ns | Ns Sy legacy
1526 Controls the mount point used for this file system.
1527 See the
1528 .Sx Mount Points
1529 section for more information on how this property is used.
1530 .Pp
1531 When the
1532 .Sy mountpoint
1533 property is changed for a file system, the file system and any children that
1534 inherit the mount point are unmounted.
1535 If the new value is
1536 .Sy legacy ,
1537 then they remain unmounted.
1538 Otherwise, they are automatically remounted in the new location if the property
1539 was previously
1540 .Sy legacy
1541 or
1542 .Sy none ,
1543 or if they were mounted before the property was changed.
1544 In addition, any shared file systems are unshared and shared in the new
1545 location.
1546 .It Sy nbmand Ns = Ns Sy on Ns | Ns Sy off
1547 Controls whether the file system should be mounted with
1548 .Sy nbmand
1549 .Pq Non Blocking mandatory locks .
1550 This is used for SMB clients.
1551 Changes to this property only take effect when the file system is umounted and
1552 remounted.
1553 See
1554 .Xr mount 8
1555 for more information on
1556 .Sy nbmand
1557 mounts. This property is not used on Linux.
1558 .It Sy overlay Ns = Ns Sy off Ns | Ns Sy on
1559 Allow mounting on a busy directory or a directory which already contains
1560 files or directories. This is the default mount behavior for Linux file systems.
1561 For consistency with OpenZFS on other platforms overlay mounts are
1562 .Sy off
1563 by default. Set to
1564 .Sy on
1565 to enable overlay mounts.
1566 .It Sy primarycache Ns = Ns Sy all Ns | Ns Sy none Ns | Ns Sy metadata
1567 Controls what is cached in the primary cache
1568 .Pq ARC .
1569 If this property is set to
1570 .Sy all ,
1571 then both user data and metadata is cached.
1572 If this property is set to
1573 .Sy none ,
1574 then neither user data nor metadata is cached.
1575 If this property is set to
1576 .Sy metadata ,
1577 then only metadata is cached.
1578 The default value is
1579 .Sy all .
1580 .It Sy quota Ns = Ns Em size Ns | Ns Sy none
1581 Limits the amount of space a dataset and its descendents can consume.
1582 This property enforces a hard limit on the amount of space used.
1583 This includes all space consumed by descendents, including file systems and
1584 snapshots.
1585 Setting a quota on a descendent of a dataset that already has a quota does not
1586 override the ancestor's quota, but rather imposes an additional limit.
1587 .Pp
1588 Quotas cannot be set on volumes, as the
1589 .Sy volsize
1590 property acts as an implicit quota.
1591 .It Sy snapshot_limit Ns = Ns Em count Ns | Ns Sy none
1592 Limits the number of snapshots that can be created on a dataset and its
1593 descendents.
1594 Setting a
1595 .Sy snapshot_limit
1596 on a descendent of a dataset that already has a
1597 .Sy snapshot_limit
1598 does not override the ancestor's
1599 .Sy snapshot_limit ,
1600 but rather imposes an additional limit.
1601 The limit is not enforced if the user is allowed to change the limit.
1602 For example, this means that recursive snapshots taken from the global zone are
1603 counted against each delegated dataset within a zone.
1604 This feature must be enabled to be used
1605 .Po see
1606 .Xr zpool-features 5
1607 .Pc .
1608 .It Sy userquota@ Ns Em user Ns = Ns Em size Ns | Ns Sy none
1609 Limits the amount of space consumed by the specified user.
1610 User space consumption is identified by the
1611 .Sy userspace@ Ns Em user
1612 property.
1613 .Pp
1614 Enforcement of user quotas may be delayed by several seconds.
1615 This delay means that a user might exceed their quota before the system notices
1616 that they are over quota and begins to refuse additional writes with the
1617 .Er EDQUOT
1618 error message.
1619 See the
1620 .Nm zfs Cm userspace
1621 subcommand for more information.
1622 .Pp
1623 Unprivileged users can only access their own groups' space usage.
1624 The root user, or a user who has been granted the
1625 .Sy userquota
1626 privilege with
1627 .Nm zfs Cm allow ,
1628 can get and set everyone's quota.
1629 .Pp
1630 This property is not available on volumes, on file systems before version 4, or
1631 on pools before version 15.
1632 The
1633 .Sy userquota@ Ns Em ...
1634 properties are not displayed by
1635 .Nm zfs Cm get Sy all .
1636 The user's name must be appended after the
1637 .Sy @
1638 symbol, using one of the following forms:
1639 .Bl -bullet
1640 .It
1641 .Em POSIX name
1642 .Po for example,
1643 .Sy joe
1644 .Pc
1645 .It
1646 .Em POSIX numeric ID
1647 .Po for example,
1648 .Sy 789
1649 .Pc
1650 .It
1651 .Em SID name
1652 .Po for example,
1653 .Sy joe.smith@mydomain
1654 .Pc
1655 .It
1656 .Em SID numeric ID
1657 .Po for example,
1658 .Sy S-1-123-456-789
1659 .Pc
1660 .El
1661 .Pp
1662 Files created on Linux always have POSIX owners.
1663 .It Sy userobjquota@ Ns Em user Ns = Ns Em size Ns | Ns Sy none
1664 The
1665 .Sy userobjquota
1666 is similar to
1667 .Sy userquota
1668 but it limits the number of objects a user can create. Please refer to
1669 .Sy userobjused
1670 for more information about how objects are counted.
1671 .It Sy groupquota@ Ns Em group Ns = Ns Em size Ns | Ns Sy none
1672 Limits the amount of space consumed by the specified group.
1673 Group space consumption is identified by the
1674 .Sy groupused@ Ns Em group
1675 property.
1676 .Pp
1677 Unprivileged users can access only their own groups' space usage.
1678 The root user, or a user who has been granted the
1679 .Sy groupquota
1680 privilege with
1681 .Nm zfs Cm allow ,
1682 can get and set all groups' quotas.
1683 .It Sy groupobjquota@ Ns Em group Ns = Ns Em size Ns | Ns Sy none
1684 The
1685 .Sy groupobjquota
1686 is similar to
1687 .Sy groupquota
1688 but it limits number of objects a group can consume. Please refer to
1689 .Sy userobjused
1690 for more information about how objects are counted.
1691 .It Sy projectquota@ Ns Em project Ns = Ns Em size Ns | Ns Sy none
1692 Limits the amount of space consumed by the specified project. Project
1693 space consumption is identified by the
1694 .Sy projectused@ Ns Em project
1695 property. Please refer to
1696 .Sy projectused
1697 for more information about how project is identified and set/changed.
1698 .Pp
1699 The root user, or a user who has been granted the
1700 .Sy projectquota
1701 privilege with
1702 .Nm zfs allow ,
1703 can access all projects' quota.
1704 .It Sy projectobjquota@ Ns Em project Ns = Ns Em size Ns | Ns Sy none
1705 The
1706 .Sy projectobjquota
1707 is similar to
1708 .Sy projectquota
1709 but it limits number of objects a project can consume. Please refer to
1710 .Sy userobjused
1711 for more information about how objects are counted.
1712 .It Sy readonly Ns = Ns Sy on Ns | Ns Sy off
1713 Controls whether this dataset can be modified.
1714 The default value is
1715 .Sy off .
1716 The values
1717 .Sy on
1718 and
1719 .Sy off
1720 are equivalent to the
1721 .Sy ro
1722 and
1723 .Sy rw
1724 mount options.
1725 .Pp
1726 This property can also be referred to by its shortened column name,
1727 .Sy rdonly .
1728 .It Sy recordsize Ns = Ns Em size
1729 Specifies a suggested block size for files in the file system.
1730 This property is designed solely for use with database workloads that access
1731 files in fixed-size records.
1732 ZFS automatically tunes block sizes according to internal algorithms optimized
1733 for typical access patterns.
1734 .Pp
1735 For databases that create very large files but access them in small random
1736 chunks, these algorithms may be suboptimal.
1737 Specifying a
1738 .Sy recordsize
1739 greater than or equal to the record size of the database can result in
1740 significant performance gains.
1741 Use of this property for general purpose file systems is strongly discouraged,
1742 and may adversely affect performance.
1743 .Pp
1744 The size specified must be a power of two greater than or equal to 512 and less
1745 than or equal to 128 Kbytes.
1746 If the
1747 .Sy large_blocks
1748 feature is enabled on the pool, the size may be up to 1 Mbyte.
1749 See
1750 .Xr zpool-features 5
1751 for details on ZFS feature flags.
1752 .Pp
1753 Changing the file system's
1754 .Sy recordsize
1755 affects only files created afterward; existing files are unaffected.
1756 .Pp
1757 This property can also be referred to by its shortened column name,
1758 .Sy recsize .
1759 .It Sy redundant_metadata Ns = Ns Sy all Ns | Ns Sy most
1760 Controls what types of metadata are stored redundantly.
1761 ZFS stores an extra copy of metadata, so that if a single block is corrupted,
1762 the amount of user data lost is limited.
1763 This extra copy is in addition to any redundancy provided at the pool level
1764 .Pq e.g. by mirroring or RAID-Z ,
1765 and is in addition to an extra copy specified by the
1766 .Sy copies
1767 property
1768 .Pq up to a total of 3 copies .
1769 For example if the pool is mirrored,
1770 .Sy copies Ns = Ns 2 ,
1771 and
1772 .Sy redundant_metadata Ns = Ns Sy most ,
1773 then ZFS stores 6 copies of most metadata, and 4 copies of data and some
1774 metadata.
1775 .Pp
1776 When set to
1777 .Sy all ,
1778 ZFS stores an extra copy of all metadata.
1779 If a single on-disk block is corrupt, at worst a single block of user data
1780 .Po which is
1781 .Sy recordsize
1782 bytes long
1783 .Pc
1784 can be lost.
1785 .Pp
1786 When set to
1787 .Sy most ,
1788 ZFS stores an extra copy of most types of metadata.
1789 This can improve performance of random writes, because less metadata must be
1790 written.
1791 In practice, at worst about 100 blocks
1792 .Po of
1793 .Sy recordsize
1794 bytes each
1795 .Pc
1796 of user data can be lost if a single on-disk block is corrupt.
1797 The exact behavior of which metadata blocks are stored redundantly may change in
1798 future releases.
1799 .Pp
1800 The default value is
1801 .Sy all .
1802 .It Sy refquota Ns = Ns Em size Ns | Ns Sy none
1803 Limits the amount of space a dataset can consume.
1804 This property enforces a hard limit on the amount of space used.
1805 This hard limit does not include space used by descendents, including file
1806 systems and snapshots.
1807 .It Sy refreservation Ns = Ns Em size Ns | Ns Sy none Ns | Ns Sy auto
1808 The minimum amount of space guaranteed to a dataset, not including its
1809 descendents.
1810 When the amount of space used is below this value, the dataset is treated as if
1811 it were taking up the amount of space specified by
1812 .Sy refreservation .
1813 The
1814 .Sy refreservation
1815 reservation is accounted for in the parent datasets' space used, and counts
1816 against the parent datasets' quotas and reservations.
1817 .Pp
1818 If
1819 .Sy refreservation
1820 is set, a snapshot is only allowed if there is enough free pool space outside of
1821 this reservation to accommodate the current number of
1822 .Qq referenced
1823 bytes in the dataset.
1824 .Pp
1825 If
1826 .Sy refreservation
1827 is set to
1828 .Sy auto ,
1829 a volume is thick provisioned
1830 .Po or
1831 .Qq not sparse
1832 .Pc .
1833 .Sy refreservation Ns = Ns Sy auto
1834 is only supported on volumes.
1835 See
1836 .Sy volsize
1837 in the
1838 .Sx Native Properties
1839 section for more information about sparse volumes.
1840 .Pp
1841 This property can also be referred to by its shortened column name,
1842 .Sy refreserv .
1843 .It Sy relatime Ns = Ns Sy on Ns | Ns Sy off
1844 Controls the manner in which the access time is updated when
1845 .Sy atime=on
1846 is set. Turning this property on causes the access time to be updated relative
1847 to the modify or change time. Access time is only updated if the previous
1848 access time was earlier than the current modify or change time or if the
1849 existing access time hasn't been updated within the past 24 hours. The default
1850 value is
1851 .Sy off .
1852 The values
1853 .Sy on
1854 and
1855 .Sy off
1856 are equivalent to the
1857 .Sy relatime
1858 and
1859 .Sy norelatime
1860 mount options.
1861 .It Sy reservation Ns = Ns Em size Ns | Ns Sy none
1862 The minimum amount of space guaranteed to a dataset and its descendants.
1863 When the amount of space used is below this value, the dataset is treated as if
1864 it were taking up the amount of space specified by its reservation.
1865 Reservations are accounted for in the parent datasets' space used, and count
1866 against the parent datasets' quotas and reservations.
1867 .Pp
1868 This property can also be referred to by its shortened column name,
1869 .Sy reserv .
1870 .It Sy secondarycache Ns = Ns Sy all Ns | Ns Sy none Ns | Ns Sy metadata
1871 Controls what is cached in the secondary cache
1872 .Pq L2ARC .
1873 If this property is set to
1874 .Sy all ,
1875 then both user data and metadata is cached.
1876 If this property is set to
1877 .Sy none ,
1878 then neither user data nor metadata is cached.
1879 If this property is set to
1880 .Sy metadata ,
1881 then only metadata is cached.
1882 The default value is
1883 .Sy all .
1884 .It Sy setuid Ns = Ns Sy on Ns | Ns Sy off
1885 Controls whether the setuid bit is respected for the file system.
1886 The default value is
1887 .Sy on .
1888 The values
1889 .Sy on
1890 and
1891 .Sy off
1892 are equivalent to the
1893 .Sy suid
1894 and
1895 .Sy nosuid
1896 mount options.
1897 .It Sy sharesmb Ns = Ns Sy on Ns | Ns Sy off Ns | Ns Em opts
1898 Controls whether the file system is shared by using
1899 .Sy Samba USERSHARES
1900 and what options are to be used. Otherwise, the file system is automatically
1901 shared and unshared with the
1902 .Nm zfs Cm share
1903 and
1904 .Nm zfs Cm unshare
1905 commands. If the property is set to on, the
1906 .Xr net 8
1907 command is invoked to create a
1908 .Sy USERSHARE .
1909 .Pp
1910 Because SMB shares requires a resource name, a unique resource name is
1911 constructed from the dataset name. The constructed name is a copy of the
1912 dataset name except that the characters in the dataset name, which would be
1913 invalid in the resource name, are replaced with underscore (_) characters.
1914 Linux does not currently support additional options which might be available
1915 on Solaris.
1916 .Pp
1917 If the
1918 .Sy sharesmb
1919 property is set to
1920 .Sy off ,
1921 the file systems are unshared.
1922 .Pp
1923 The share is created with the ACL (Access Control List) "Everyone:F" ("F"
1924 stands for "full permissions", ie. read and write permissions) and no guest
1925 access (which means Samba must be able to authenticate a real user, system
1926 passwd/shadow, LDAP or smbpasswd based) by default. This means that any
1927 additional access control (disallow specific user specific access etc) must
1928 be done on the underlying file system.
1929 .It Sy sharenfs Ns = Ns Sy on Ns | Ns Sy off Ns | Ns Em opts
1930 Controls whether the file system is shared via NFS, and what options are to be
1931 used.
1932 A file system with a
1933 .Sy sharenfs
1934 property of
1935 .Sy off
1936 is managed with the
1937 .Xr exportfs 8
1938 command and entries in the
1939 .Em /etc/exports
1940 file.
1941 Otherwise, the file system is automatically shared and unshared with the
1942 .Nm zfs Cm share
1943 and
1944 .Nm zfs Cm unshare
1945 commands.
1946 If the property is set to
1947 .Sy on ,
1948 the dataset is shared using the default options:
1949 .Pp
1950 .Em sec=sys,rw,crossmnt,no_subtree_check,no_root_squash
1951 .Pp
1952 See
1953 .Xr exports 5
1954 for the meaning of the default options. Otherwise, the
1955 .Xr exportfs 8
1956 command is invoked with options equivalent to the contents of this property.
1957 .Pp
1958 When the
1959 .Sy sharenfs
1960 property is changed for a dataset, the dataset and any children inheriting the
1961 property are re-shared with the new options, only if the property was previously
1962 .Sy off ,
1963 or if they were shared before the property was changed.
1964 If the new property is
1965 .Sy off ,
1966 the file systems are unshared.
1967 .It Sy logbias Ns = Ns Sy latency Ns | Ns Sy throughput
1968 Provide a hint to ZFS about handling of synchronous requests in this dataset.
1969 If
1970 .Sy logbias
1971 is set to
1972 .Sy latency
1973 .Pq the default ,
1974 ZFS will use pool log devices
1975 .Pq if configured
1976 to handle the requests at low latency.
1977 If
1978 .Sy logbias
1979 is set to
1980 .Sy throughput ,
1981 ZFS will not use configured pool log devices.
1982 ZFS will instead optimize synchronous operations for global pool throughput and
1983 efficient use of resources.
1984 .It Sy snapdev Ns = Ns Sy hidden Ns | Ns Sy visible
1985 Controls whether the volume snapshot devices under
1986 .Em /dev/zvol/<pool>
1987 are hidden or visible. The default value is
1988 .Sy hidden .
1989 .It Sy snapdir Ns = Ns Sy hidden Ns | Ns Sy visible
1990 Controls whether the
1991 .Pa .zfs
1992 directory is hidden or visible in the root of the file system as discussed in
1993 the
1994 .Sx Snapshots
1995 section.
1996 The default value is
1997 .Sy hidden .
1998 .It Sy sync Ns = Ns Sy standard Ns | Ns Sy always Ns | Ns Sy disabled
1999 Controls the behavior of synchronous requests
2000 .Pq e.g. fsync, O_DSYNC .
2001 .Sy standard
2002 is the
2003 .Tn POSIX
2004 specified behavior of ensuring all synchronous requests are written to stable
2005 storage and all devices are flushed to ensure data is not cached by device
2006 controllers
2007 .Pq this is the default .
2008 .Sy always
2009 causes every file system transaction to be written and flushed before its
2010 system call returns.
2011 This has a large performance penalty.
2012 .Sy disabled
2013 disables synchronous requests.
2014 File system transactions are only committed to stable storage periodically.
2015 This option will give the highest performance.
2016 However, it is very dangerous as ZFS would be ignoring the synchronous
2017 transaction demands of applications such as databases or NFS.
2018 Administrators should only use this option when the risks are understood.
2019 .It Sy version Ns = Ns Em N Ns | Ns Sy current
2020 The on-disk version of this file system, which is independent of the pool
2021 version.
2022 This property can only be set to later supported versions.
2023 See the
2024 .Nm zfs Cm upgrade
2025 command.
2026 .It Sy volsize Ns = Ns Em size
2027 For volumes, specifies the logical size of the volume.
2028 By default, creating a volume establishes a reservation of equal size.
2029 For storage pools with a version number of 9 or higher, a
2030 .Sy refreservation
2031 is set instead.
2032 Any changes to
2033 .Sy volsize
2034 are reflected in an equivalent change to the reservation
2035 .Po or
2036 .Sy refreservation
2037 .Pc .
2038 The
2039 .Sy volsize
2040 can only be set to a multiple of
2041 .Sy volblocksize ,
2042 and cannot be zero.
2043 .Pp
2044 The reservation is kept equal to the volume's logical size to prevent unexpected
2045 behavior for consumers.
2046 Without the reservation, the volume could run out of space, resulting in
2047 undefined behavior or data corruption, depending on how the volume is used.
2048 These effects can also occur when the volume size is changed while it is in use
2049 .Pq particularly when shrinking the size .
2050 Extreme care should be used when adjusting the volume size.
2051 .Pp
2052 Though not recommended, a
2053 .Qq sparse volume
2054 .Po also known as
2055 .Qq thin provisioned
2056 .Pc
2057 can be created by specifying the
2058 .Fl s
2059 option to the
2060 .Nm zfs Cm create Fl V
2061 command, or by changing the value of the
2062 .Sy refreservation
2063 property
2064 .Po or
2065 .Sy reservation
2066 property on pool version 8 or earlier
2067 .Pc
2068 after the volume has been created.
2069 A
2070 .Qq sparse volume
2071 is a volume where the value of
2072 .Sy refreservation
2073 is less than the size of the volume plus the space required to store its
2074 metadata.
2075 Consequently, writes to a sparse volume can fail with
2076 .Er ENOSPC
2077 when the pool is low on space.
2078 For a sparse volume, changes to
2079 .Sy volsize
2080 are not reflected in the
2081 .Sy refreservation.
2082 A volume that is not sparse is said to be
2083 .Qq thick provisioned .
2084 A sparse volume can become thick provisioned by setting
2085 .Sy refreservation
2086 to
2087 .Sy auto .
2088 .It Sy volmode Ns = Ns Cm default | full | geom | dev | none
2089 This property specifies how volumes should be exposed to the OS.
2090 Setting it to
2091 .Sy full
2092 exposes volumes as fully fledged block devices, providing maximal
2093 functionality. The value
2094 .Sy geom
2095 is just an alias for
2096 .Sy full
2097 and is kept for compatibility.
2098 Setting it to
2099 .Sy dev
2100 hides its partitions.
2101 Volumes with property set to
2102 .Sy none
2103 are not exposed outside ZFS, but can be snapshoted, cloned, replicated, etc,
2104 that can be suitable for backup purposes.
2105 Value
2106 .Sy default
2107 means that volumes exposition is controlled by system-wide tunable
2108 .Va zvol_volmode ,
2109 where
2110 .Sy full ,
2111 .Sy dev
2112 and
2113 .Sy none
2114 are encoded as 1, 2 and 3 respectively.
2115 The default values is
2116 .Sy full .
2117 .It Sy vscan Ns = Ns Sy on Ns | Ns Sy off
2118 Controls whether regular files should be scanned for viruses when a file is
2119 opened and closed.
2120 In addition to enabling this property, the virus scan service must also be
2121 enabled for virus scanning to occur.
2122 The default value is
2123 .Sy off .
2124 This property is not used on Linux.
2125 .It Sy xattr Ns = Ns Sy on Ns | Ns Sy off Ns | Ns Sy sa
2126 Controls whether extended attributes are enabled for this file system. Two
2127 styles of extended attributes are supported either directory based or system
2128 attribute based.
2129 .Pp
2130 The default value of
2131 .Sy on
2132 enables directory based extended attributes. This style of extended attribute
2133 imposes no practical limit on either the size or number of attributes which
2134 can be set on a file. Although under Linux the
2135 .Xr getxattr 2
2136 and
2137 .Xr setxattr 2
2138 system calls limit the maximum size to 64K. This is the most compatible
2139 style of extended attribute and is supported by all OpenZFS implementations.
2140 .Pp
2141 System attribute based xattrs can be enabled by setting the value to
2142 .Sy sa .
2143 The key advantage of this type of xattr is improved performance. Storing
2144 extended attributes as system attributes significantly decreases the amount of
2145 disk IO required. Up to 64K of data may be stored per-file in the space
2146 reserved for system attributes. If there is not enough space available for
2147 an extended attribute then it will be automatically written as a directory
2148 based xattr. System attribute based extended attributes are not accessible
2149 on platforms which do not support the
2150 .Sy xattr=sa
2151 feature.
2152 .Pp
2153 The use of system attribute based xattrs is strongly encouraged for users of
2154 SELinux or posix ACLs. Both of these features heavily rely of extended
2155 attributes and benefit significantly from the reduced access time.
2156 .Pp
2157 The values
2158 .Sy on
2159 and
2160 .Sy off
2161 are equivalent to the
2162 .Sy xattr
2163 and
2164 .Sy noxattr
2165 mount options.
2166 .It Sy zoned Ns = Ns Sy on Ns | Ns Sy off
2167 Controls whether the dataset is managed from a non-global zone. Zones are a
2168 Solaris feature and are not relevant on Linux. The default value is
2169 .Sy off .
2170 .El
2171 .Pp
2172 The following three properties cannot be changed after the file system is
2173 created, and therefore, should be set when the file system is created.
2174 If the properties are not set with the
2175 .Nm zfs Cm create
2176 or
2177 .Nm zpool Cm create
2178 commands, these properties are inherited from the parent dataset.
2179 If the parent dataset lacks these properties due to having been created prior to
2180 these features being supported, the new file system will have the default values
2181 for these properties.
2182 .Bl -tag -width ""
2183 .It Xo
2184 .Sy casesensitivity Ns = Ns Sy sensitive Ns | Ns
2185 .Sy insensitive Ns | Ns Sy mixed
2186 .Xc
2187 Indicates whether the file name matching algorithm used by the file system
2188 should be case-sensitive, case-insensitive, or allow a combination of both
2189 styles of matching.
2190 The default value for the
2191 .Sy casesensitivity
2192 property is
2193 .Sy sensitive .
2194 Traditionally,
2195 .Ux
2196 and
2197 .Tn POSIX
2198 file systems have case-sensitive file names.
2199 .Pp
2200 The
2201 .Sy mixed
2202 value for the
2203 .Sy casesensitivity
2204 property indicates that the file system can support requests for both
2205 case-sensitive and case-insensitive matching behavior.
2206 Currently, case-insensitive matching behavior on a file system that supports
2207 mixed behavior is limited to the SMB server product.
2208 For more information about the
2209 .Sy mixed
2210 value behavior, see the "ZFS Administration Guide".
2211 .It Xo
2212 .Sy normalization Ns = Ns Sy none Ns | Ns Sy formC Ns | Ns
2213 .Sy formD Ns | Ns Sy formKC Ns | Ns Sy formKD
2214 .Xc
2215 Indicates whether the file system should perform a
2216 .Sy unicode
2217 normalization of file names whenever two file names are compared, and which
2218 normalization algorithm should be used.
2219 File names are always stored unmodified, names are normalized as part of any
2220 comparison process.
2221 If this property is set to a legal value other than
2222 .Sy none ,
2223 and the
2224 .Sy utf8only
2225 property was left unspecified, the
2226 .Sy utf8only
2227 property is automatically set to
2228 .Sy on .
2229 The default value of the
2230 .Sy normalization
2231 property is
2232 .Sy none .
2233 This property cannot be changed after the file system is created.
2234 .It Sy utf8only Ns = Ns Sy on Ns | Ns Sy off
2235 Indicates whether the file system should reject file names that include
2236 characters that are not present in the
2237 .Sy UTF-8
2238 character code set.
2239 If this property is explicitly set to
2240 .Sy off ,
2241 the normalization property must either not be explicitly set or be set to
2242 .Sy none .
2243 The default value for the
2244 .Sy utf8only
2245 property is
2246 .Sy off .
2247 This property cannot be changed after the file system is created.
2248 .El
2249 .Pp
2250 The
2251 .Sy casesensitivity ,
2252 .Sy normalization ,
2253 and
2254 .Sy utf8only
2255 properties are also new permissions that can be assigned to non-privileged users
2256 by using the ZFS delegated administration feature.
2257 .Ss "Temporary Mount Point Properties"
2258 When a file system is mounted, either through
2259 .Xr mount 8
2260 for legacy mounts or the
2261 .Nm zfs Cm mount
2262 command for normal file systems, its mount options are set according to its
2263 properties.
2264 The correlation between properties and mount options is as follows:
2265 .Bd -literal
2266 PROPERTY MOUNT OPTION
2267 atime atime/noatime
2268 canmount auto/noauto
2269 devices dev/nodev
2270 exec exec/noexec
2271 readonly ro/rw
2272 relatime relatime/norelatime
2273 setuid suid/nosuid
2274 xattr xattr/noxattr
2275 .Ed
2276 .Pp
2277 In addition, these options can be set on a per-mount basis using the
2278 .Fl o
2279 option, without affecting the property that is stored on disk.
2280 The values specified on the command line override the values stored in the
2281 dataset.
2282 The
2283 .Sy nosuid
2284 option is an alias for
2285 .Sy nodevices Ns \&, Ns Sy nosetuid .
2286 These properties are reported as
2287 .Qq temporary
2288 by the
2289 .Nm zfs Cm get
2290 command.
2291 If the properties are changed while the dataset is mounted, the new setting
2292 overrides any temporary settings.
2293 .Ss "User Properties"
2294 In addition to the standard native properties, ZFS supports arbitrary user
2295 properties.
2296 User properties have no effect on ZFS behavior, but applications or
2297 administrators can use them to annotate datasets
2298 .Pq file systems, volumes, and snapshots .
2299 .Pp
2300 User property names must contain a colon
2301 .Pq Qq Sy \&:
2302 character to distinguish them from native properties.
2303 They may contain lowercase letters, numbers, and the following punctuation
2304 characters: colon
2305 .Pq Qq Sy \&: ,
2306 dash
2307 .Pq Qq Sy - ,
2308 period
2309 .Pq Qq Sy \&. ,
2310 and underscore
2311 .Pq Qq Sy _ .
2312 The expected convention is that the property name is divided into two portions
2313 such as
2314 .Em module Ns \&: Ns Em property ,
2315 but this namespace is not enforced by ZFS.
2316 User property names can be at most 256 characters, and cannot begin with a dash
2317 .Pq Qq Sy - .
2318 .Pp
2319 When making programmatic use of user properties, it is strongly suggested to use
2320 a reversed
2321 .Sy DNS
2322 domain name for the
2323 .Em module
2324 component of property names to reduce the chance that two
2325 independently-developed packages use the same property name for different
2326 purposes.
2327 .Pp
2328 The values of user properties are arbitrary strings, are always inherited, and
2329 are never validated.
2330 All of the commands that operate on properties
2331 .Po Nm zfs Cm list ,
2332 .Nm zfs Cm get ,
2333 .Nm zfs Cm set ,
2334 and so forth
2335 .Pc
2336 can be used to manipulate both native properties and user properties.
2337 Use the
2338 .Nm zfs Cm inherit
2339 command to clear a user property.
2340 If the property is not defined in any parent dataset, it is removed entirely.
2341 Property values are limited to 8192 bytes.
2342 .Ss ZFS Volumes as Swap
2343 ZFS volumes may be used as swap devices. After creating the volume with the
2344 .Nm zfs Cm create Fl V
2345 command set up and enable the swap area using the
2346 .Xr mkswap 8
2347 and
2348 .Xr swapon 8
2349 commands. Do not swap to a file on a ZFS file system. A ZFS swap file
2350 configuration is not supported.
2351 .Ss Encryption
2352 Enabling the
2353 .Sy encryption
2354 feature allows for the creation of encrypted filesystems and volumes.
2355 .Nm
2356 will encrypt all user data including file and zvol data, file attributes,
2357 ACLs, permission bits, directory listings, FUID mappings, and userused /
2358 groupused data.
2359 .Nm
2360 will not encrypt metadata related to the pool structure, including dataset
2361 names, dataset hierarchy, file size, file holes, and dedup tables. Key rotation
2362 is managed internally by the kernel module and changing the user's key does not
2363 require re-encrypting the entire dataset. Datasets can be scrubbed, resilvered,
2364 renamed, and deleted without the encryption keys being loaded (see the
2365 .Nm zfs Cm load-key
2366 subcommand for more info on key loading).
2367 .Pp
2368 Creating an encrypted dataset requires specifying the
2369 .Sy encryption
2370 and
2371 .Sy keyformat
2372 properties at creation time, along with an optional
2373 .Sy keylocation
2374 and
2375 .Sy pbkdf2iters .
2376 After entering an encryption key, the
2377 created dataset will become an encryption root. Any descendant datasets will
2378 inherit their encryption key from the encryption root by default, meaning that
2379 loading, unloading, or changing the key for the encryption root will implicitly
2380 do the same for all inheriting datasets. If this inheritance is not desired,
2381 simply supply a
2382 .Sy keyformat
2383 when creating the child dataset or use
2384 .Nm zfs Cm change-key
2385 to break an existing relationship, creating a new encryption root on the child.
2386 Note that the child's
2387 .Sy keyformat
2388 may match that of the parent while still creating a new encryption root, and
2389 that changing the
2390 .Sy encryption
2391 property alone does not create a new encryption root; this would simply use a
2392 different cipher suite with the same key as its encryption root. The one
2393 exception is that clones will always use their origin's encryption key.
2394 As a result of this exception, some encryption-related properties (namely
2395 .Sy keystatus ,
2396 .Sy keyformat ,
2397 .Sy keylocation ,
2398 and
2399 .Sy pbkdf2iters )
2400 do not inherit like other ZFS properties and instead use the value determined
2401 by their encryption root. Encryption root inheritance can be tracked via the
2402 read-only
2403 .Sy encryptionroot
2404 property.
2405 .Pp
2406 Encryption changes the behavior of a few
2407 .Nm
2408 operations. Encryption is applied after compression so compression ratios are
2409 preserved. Normally checksums in ZFS are 256 bits long, but for encrypted data
2410 the checksum is 128 bits of the user-chosen checksum and 128 bits of MAC from
2411 the encryption suite, which provides additional protection against maliciously
2412 altered data. Deduplication is still possible with encryption enabled but for
2413 security, datasets will only dedup against themselves, their snapshots, and
2414 their clones.
2415 .Pp
2416 There are a few limitations on encrypted datasets. Encrypted data cannot be
2417 embedded via the
2418 .Sy embedded_data
2419 feature. Encrypted datasets may not have
2420 .Sy copies Ns = Ns Em 3
2421 since the implementation stores some encryption metadata where the third copy
2422 would normally be. Since compression is applied before encryption datasets may
2423 be vulnerable to a CRIME-like attack if applications accessing the data allow
2424 for it. Deduplication with encryption will leak information about which blocks
2425 are equivalent in a dataset and will incur an extra CPU cost per block written.
2426 .Sh SUBCOMMANDS
2427 All subcommands that modify state are logged persistently to the pool in their
2428 original form.
2429 .Bl -tag -width ""
2430 .It Nm Fl ?
2431 Displays a help message.
2432 .It Xo
2433 .Nm
2434 .Cm create
2435 .Op Fl p
2436 .Oo Fl o Ar property Ns = Ns Ar value Oc Ns ...
2437 .Ar filesystem
2438 .Xc
2439 Creates a new ZFS file system.
2440 The file system is automatically mounted according to the
2441 .Sy mountpoint
2442 property inherited from the parent.
2443 .Bl -tag -width "-o"
2444 .It Fl o Ar property Ns = Ns Ar value
2445 Sets the specified property as if the command
2446 .Nm zfs Cm set Ar property Ns = Ns Ar value
2447 was invoked at the same time the dataset was created.
2448 Any editable ZFS property can also be set at creation time.
2449 Multiple
2450 .Fl o
2451 options can be specified.
2452 An error results if the same property is specified in multiple
2453 .Fl o
2454 options.
2455 .It Fl p
2456 Creates all the non-existing parent datasets.
2457 Datasets created in this manner are automatically mounted according to the
2458 .Sy mountpoint
2459 property inherited from their parent.
2460 Any property specified on the command line using the
2461 .Fl o
2462 option is ignored.
2463 If the target filesystem already exists, the operation completes successfully.
2464 .El
2465 .It Xo
2466 .Nm
2467 .Cm create
2468 .Op Fl ps
2469 .Op Fl b Ar blocksize
2470 .Oo Fl o Ar property Ns = Ns Ar value Oc Ns ...
2471 .Fl V Ar size Ar volume
2472 .Xc
2473 Creates a volume of the given size.
2474 The volume is exported as a block device in
2475 .Pa /dev/zvol/path ,
2476 where
2477 .Em path
2478 is the name of the volume in the ZFS namespace.
2479 The size represents the logical size as exported by the device.
2480 By default, a reservation of equal size is created.
2481 .Pp
2482 .Ar size
2483 is automatically rounded up to the nearest 128 Kbytes to ensure that the volume
2484 has an integral number of blocks regardless of
2485 .Sy blocksize .
2486 .Bl -tag -width "-b"
2487 .It Fl b Ar blocksize
2488 Equivalent to
2489 .Fl o Sy volblocksize Ns = Ns Ar blocksize .
2490 If this option is specified in conjunction with
2491 .Fl o Sy volblocksize ,
2492 the resulting behavior is undefined.
2493 .It Fl o Ar property Ns = Ns Ar value
2494 Sets the specified property as if the
2495 .Nm zfs Cm set Ar property Ns = Ns Ar value
2496 command was invoked at the same time the dataset was created.
2497 Any editable ZFS property can also be set at creation time.
2498 Multiple
2499 .Fl o
2500 options can be specified.
2501 An error results if the same property is specified in multiple
2502 .Fl o
2503 options.
2504 .It Fl p
2505 Creates all the non-existing parent datasets.
2506 Datasets created in this manner are automatically mounted according to the
2507 .Sy mountpoint
2508 property inherited from their parent.
2509 Any property specified on the command line using the
2510 .Fl o
2511 option is ignored.
2512 If the target filesystem already exists, the operation completes successfully.
2513 .It Fl s
2514 Creates a sparse volume with no reservation.
2515 See
2516 .Sy volsize
2517 in the
2518 .Sx Native Properties
2519 section for more information about sparse volumes.
2520 .El
2521 .It Xo
2522 .Nm
2523 .Cm destroy
2524 .Op Fl Rfnprv
2525 .Ar filesystem Ns | Ns Ar volume
2526 .Xc
2527 Destroys the given dataset.
2528 By default, the command unshares any file systems that are currently shared,
2529 unmounts any file systems that are currently mounted, and refuses to destroy a
2530 dataset that has active dependents
2531 .Pq children or clones .
2532 .Bl -tag -width "-R"
2533 .It Fl R
2534 Recursively destroy all dependents, including cloned file systems outside the
2535 target hierarchy.
2536 .It Fl f
2537 Force an unmount of any file systems using the
2538 .Nm unmount Fl f
2539 command.
2540 This option has no effect on non-file systems or unmounted file systems.
2541 .It Fl n
2542 Do a dry-run
2543 .Pq Qq No-op
2544 deletion.
2545 No data will be deleted.
2546 This is useful in conjunction with the
2547 .Fl v
2548 or
2549 .Fl p
2550 flags to determine what data would be deleted.
2551 .It Fl p
2552 Print machine-parsable verbose information about the deleted data.
2553 .It Fl r
2554 Recursively destroy all children.
2555 .It Fl v
2556 Print verbose information about the deleted data.
2557 .El
2558 .Pp
2559 Extreme care should be taken when applying either the
2560 .Fl r
2561 or the
2562 .Fl R
2563 options, as they can destroy large portions of a pool and cause unexpected
2564 behavior for mounted file systems in use.
2565 .It Xo
2566 .Nm
2567 .Cm destroy
2568 .Op Fl Rdnprv
2569 .Ar filesystem Ns | Ns Ar volume Ns @ Ns Ar snap Ns
2570 .Oo % Ns Ar snap Ns Oo , Ns Ar snap Ns Oo % Ns Ar snap Oc Oc Oc Ns ...
2571 .Xc
2572 The given snapshots are destroyed immediately if and only if the
2573 .Nm zfs Cm destroy
2574 command without the
2575 .Fl d
2576 option would have destroyed it.
2577 Such immediate destruction would occur, for example, if the snapshot had no
2578 clones and the user-initiated reference count were zero.
2579 .Pp
2580 If a snapshot does not qualify for immediate destruction, it is marked for
2581 deferred deletion.
2582 In this state, it exists as a usable, visible snapshot until both of the
2583 preconditions listed above are met, at which point it is destroyed.
2584 .Pp
2585 An inclusive range of snapshots may be specified by separating the first and
2586 last snapshots with a percent sign.
2587 The first and/or last snapshots may be left blank, in which case the
2588 filesystem's oldest or newest snapshot will be implied.
2589 .Pp
2590 Multiple snapshots
2591 .Pq or ranges of snapshots
2592 of the same filesystem or volume may be specified in a comma-separated list of
2593 snapshots.
2594 Only the snapshot's short name
2595 .Po the part after the
2596 .Sy @
2597 .Pc
2598 should be specified when using a range or comma-separated list to identify
2599 multiple snapshots.
2600 .Bl -tag -width "-R"
2601 .It Fl R
2602 Recursively destroy all clones of these snapshots, including the clones,
2603 snapshots, and children.
2604 If this flag is specified, the
2605 .Fl d
2606 flag will have no effect.
2607 .It Fl d
2608 Destroy immediately. If a snapshot cannot be destroyed now, mark it for
2609 deferred destruction.
2610 .It Fl n
2611 Do a dry-run
2612 .Pq Qq No-op
2613 deletion.
2614 No data will be deleted.
2615 This is useful in conjunction with the
2616 .Fl p
2617 or
2618 .Fl v
2619 flags to determine what data would be deleted.
2620 .It Fl p
2621 Print machine-parsable verbose information about the deleted data.
2622 .It Fl r
2623 Destroy
2624 .Pq or mark for deferred deletion
2625 all snapshots with this name in descendent file systems.
2626 .It Fl v
2627 Print verbose information about the deleted data.
2628 .Pp
2629 Extreme care should be taken when applying either the
2630 .Fl r
2631 or the
2632 .Fl R
2633 options, as they can destroy large portions of a pool and cause unexpected
2634 behavior for mounted file systems in use.
2635 .El
2636 .It Xo
2637 .Nm
2638 .Cm destroy
2639 .Ar filesystem Ns | Ns Ar volume Ns # Ns Ar bookmark
2640 .Xc
2641 The given bookmark is destroyed.
2642 .It Xo
2643 .Nm
2644 .Cm snapshot
2645 .Op Fl r
2646 .Oo Fl o Ar property Ns = Ns Ar value Oc Ns ...
2647 .Ar filesystem Ns @ Ns Ar snapname Ns | Ns Ar volume Ns @ Ns Ar snapname Ns ...
2648 .Xc
2649 Creates snapshots with the given names.
2650 All previous modifications by successful system calls to the file system are
2651 part of the snapshots.
2652 Snapshots are taken atomically, so that all snapshots correspond to the same
2653 moment in time.
2654 .Nm zfs Cm snap
2655 can be used as an alias for
2656 .Nm zfs Cm snapshot.
2657 See the
2658 .Sx Snapshots
2659 section for details.
2660 .Bl -tag -width "-o"
2661 .It Fl o Ar property Ns = Ns Ar value
2662 Sets the specified property; see
2663 .Nm zfs Cm create
2664 for details.
2665 .It Fl r
2666 Recursively create snapshots of all descendent datasets
2667 .El
2668 .It Xo
2669 .Nm
2670 .Cm rollback
2671 .Op Fl Rfr
2672 .Ar snapshot
2673 .Xc
2674 Roll back the given dataset to a previous snapshot.
2675 When a dataset is rolled back, all data that has changed since the snapshot is
2676 discarded, and the dataset reverts to the state at the time of the snapshot.
2677 By default, the command refuses to roll back to a snapshot other than the most
2678 recent one.
2679 In order to do so, all intermediate snapshots and bookmarks must be destroyed by
2680 specifying the
2681 .Fl r
2682 option.
2683 .Pp
2684 The
2685 .Fl rR
2686 options do not recursively destroy the child snapshots of a recursive snapshot.
2687 Only direct snapshots of the specified filesystem are destroyed by either of
2688 these options.
2689 To completely roll back a recursive snapshot, you must rollback the individual
2690 child snapshots.
2691 .Bl -tag -width "-R"
2692 .It Fl R
2693 Destroy any more recent snapshots and bookmarks, as well as any clones of those
2694 snapshots.
2695 .It Fl f
2696 Used with the
2697 .Fl R
2698 option to force an unmount of any clone file systems that are to be destroyed.
2699 .It Fl r
2700 Destroy any snapshots and bookmarks more recent than the one specified.
2701 .El
2702 .It Xo
2703 .Nm
2704 .Cm clone
2705 .Op Fl p
2706 .Oo Fl o Ar property Ns = Ns Ar value Oc Ns ...
2707 .Ar snapshot Ar filesystem Ns | Ns Ar volume
2708 .Xc
2709 Creates a clone of the given snapshot.
2710 See the
2711 .Sx Clones
2712 section for details.
2713 The target dataset can be located anywhere in the ZFS hierarchy, and is created
2714 as the same type as the original.
2715 .Bl -tag -width "-o"
2716 .It Fl o Ar property Ns = Ns Ar value
2717 Sets the specified property; see
2718 .Nm zfs Cm create
2719 for details.
2720 .It Fl p
2721 Creates all the non-existing parent datasets.
2722 Datasets created in this manner are automatically mounted according to the
2723 .Sy mountpoint
2724 property inherited from their parent.
2725 If the target filesystem or volume already exists, the operation completes
2726 successfully.
2727 .El
2728 .It Xo
2729 .Nm
2730 .Cm promote
2731 .Ar clone-filesystem
2732 .Xc
2733 Promotes a clone file system to no longer be dependent on its
2734 .Qq origin
2735 snapshot.
2736 This makes it possible to destroy the file system that the clone was created
2737 from.
2738 The clone parent-child dependency relationship is reversed, so that the origin
2739 file system becomes a clone of the specified file system.
2740 .Pp
2741 The snapshot that was cloned, and any snapshots previous to this snapshot, are
2742 now owned by the promoted clone.
2743 The space they use moves from the origin file system to the promoted clone, so
2744 enough space must be available to accommodate these snapshots.
2745 No new space is consumed by this operation, but the space accounting is
2746 adjusted.
2747 The promoted clone must not have any conflicting snapshot names of its own.
2748 The
2749 .Cm rename
2750 subcommand can be used to rename any conflicting snapshots.
2751 .It Xo
2752 .Nm
2753 .Cm rename
2754 .Op Fl f
2755 .Ar filesystem Ns | Ns Ar volume Ns | Ns Ar snapshot
2756 .Ar filesystem Ns | Ns Ar volume Ns | Ns Ar snapshot
2757 .Xc
2758 .It Xo
2759 .Nm
2760 .Cm rename
2761 .Op Fl fp
2762 .Ar filesystem Ns | Ns Ar volume
2763 .Ar filesystem Ns | Ns Ar volume
2764 .Xc
2765 Renames the given dataset.
2766 The new target can be located anywhere in the ZFS hierarchy, with the exception
2767 of snapshots.
2768 Snapshots can only be renamed within the parent file system or volume.
2769 When renaming a snapshot, the parent file system of the snapshot does not need
2770 to be specified as part of the second argument.
2771 Renamed file systems can inherit new mount points, in which case they are
2772 unmounted and remounted at the new mount point.
2773 .Bl -tag -width "-a"
2774 .It Fl f
2775 Force unmount any filesystems that need to be unmounted in the process.
2776 .It Fl p
2777 Creates all the nonexistent parent datasets.
2778 Datasets created in this manner are automatically mounted according to the
2779 .Sy mountpoint
2780 property inherited from their parent.
2781 .El
2782 .It Xo
2783 .Nm
2784 .Cm rename
2785 .Fl r
2786 .Ar snapshot Ar snapshot
2787 .Xc
2788 Recursively rename the snapshots of all descendent datasets.
2789 Snapshots are the only dataset that can be renamed recursively.
2790 .It Xo
2791 .Nm
2792 .Cm list
2793 .Op Fl r Ns | Ns Fl d Ar depth
2794 .Op Fl Hp
2795 .Oo Fl o Ar property Ns Oo , Ns Ar property Oc Ns ... Oc
2796 .Oo Fl s Ar property Oc Ns ...
2797 .Oo Fl S Ar property Oc Ns ...
2798 .Oo Fl t Ar type Ns Oo , Ns Ar type Oc Ns ... Oc
2799 .Oo Ar filesystem Ns | Ns Ar volume Ns | Ns Ar snapshot Oc Ns ...
2800 .Xc
2801 Lists the property information for the given datasets in tabular form.
2802 If specified, you can list property information by the absolute pathname or the
2803 relative pathname.
2804 By default, all file systems and volumes are displayed.
2805 Snapshots are displayed if the
2806 .Sy listsnaps
2807 property is
2808 .Sy on
2809 .Po the default is
2810 .Sy off
2811 .Pc .
2812 The following fields are displayed:
2813 .Sy name Ns \&, Sy used Ns \&, Sy available Ns \&, Sy referenced Ns \&, Sy mountpoint Ns .
2814 .Bl -tag -width "-H"
2815 .It Fl H
2816 Used for scripting mode.
2817 Do not print headers and separate fields by a single tab instead of arbitrary
2818 white space.
2819 .It Fl S Ar property
2820 Same as the
2821 .Fl s
2822 option, but sorts by property in descending order.
2823 .It Fl d Ar depth
2824 Recursively display any children of the dataset, limiting the recursion to
2825 .Ar depth .
2826 A
2827 .Ar depth
2828 of
2829 .Sy 1
2830 will display only the dataset and its direct children.
2831 .It Fl o Ar property
2832 A comma-separated list of properties to display.
2833 The property must be:
2834 .Bl -bullet
2835 .It
2836 One of the properties described in the
2837 .Sx Native Properties
2838 section
2839 .It
2840 A user property
2841 .It
2842 The value
2843 .Sy name
2844 to display the dataset name
2845 .It
2846 The value
2847 .Sy space
2848 to display space usage properties on file systems and volumes.
2849 This is a shortcut for specifying
2850 .Fl o Sy name Ns \&, Ns Sy avail Ns \&, Ns Sy used Ns \&, Ns Sy usedsnap Ns \&, Ns
2851 .Sy usedds Ns \&, Ns Sy usedrefreserv Ns \&, Ns Sy usedchild Fl t
2852 .Sy filesystem Ns \&, Ns Sy volume
2853 syntax.
2854 .El
2855 .It Fl p
2856 Display numbers in parsable
2857 .Pq exact
2858 values.
2859 .It Fl r
2860 Recursively display any children of the dataset on the command line.
2861 .It Fl s Ar property
2862 A property for sorting the output by column in ascending order based on the
2863 value of the property.
2864 The property must be one of the properties described in the
2865 .Sx Properties
2866 section, or the special value
2867 .Sy name
2868 to sort by the dataset name.
2869 Multiple properties can be specified at one time using multiple
2870 .Fl s
2871 property options.
2872 Multiple
2873 .Fl s
2874 options are evaluated from left to right in decreasing order of importance.
2875 The following is a list of sorting criteria:
2876 .Bl -bullet
2877 .It
2878 Numeric types sort in numeric order.
2879 .It
2880 String types sort in alphabetical order.
2881 .It
2882 Types inappropriate for a row sort that row to the literal bottom, regardless of
2883 the specified ordering.
2884 .El
2885 .Pp
2886 If no sorting options are specified the existing behavior of
2887 .Nm zfs Cm list
2888 is preserved.
2889 .It Fl t Ar type
2890 A comma-separated list of types to display, where
2891 .Ar type
2892 is one of
2893 .Sy filesystem ,
2894 .Sy snapshot ,
2895 .Sy volume ,
2896 .Sy bookmark ,
2897 or
2898 .Sy all .
2899 For example, specifying
2900 .Fl t Sy snapshot
2901 displays only snapshots.
2902 .El
2903 .It Xo
2904 .Nm
2905 .Cm set
2906 .Ar property Ns = Ns Ar value Oo Ar property Ns = Ns Ar value Oc Ns ...
2907 .Ar filesystem Ns | Ns Ar volume Ns | Ns Ar snapshot Ns ...
2908 .Xc
2909 Sets the property or list of properties to the given value(s) for each dataset.
2910 Only some properties can be edited.
2911 See the
2912 .Sx Properties
2913 section for more information on what properties can be set and acceptable
2914 values.
2915 Numeric values can be specified as exact values, or in a human-readable form
2916 with a suffix of
2917 .Sy B , K , M , G , T , P , E , Z
2918 .Po for bytes, kilobytes, megabytes, gigabytes, terabytes, petabytes, exabytes,
2919 or zettabytes, respectively
2920 .Pc .
2921 User properties can be set on snapshots.
2922 For more information, see the
2923 .Sx User Properties
2924 section.
2925 .It Xo
2926 .Nm
2927 .Cm get
2928 .Op Fl r Ns | Ns Fl d Ar depth
2929 .Op Fl Hp
2930 .Oo Fl o Ar field Ns Oo , Ns Ar field Oc Ns ... Oc
2931 .Oo Fl s Ar source Ns Oo , Ns Ar source Oc Ns ... Oc
2932 .Oo Fl t Ar type Ns Oo , Ns Ar type Oc Ns ... Oc
2933 .Cm all | Ar property Ns Oo , Ns Ar property Oc Ns ...
2934 .Ar filesystem Ns | Ns Ar volume Ns | Ns Ar snapshot Ns | Ns Ar bookmark Ns ...
2935 .Xc
2936 Displays properties for the given datasets.
2937 If no datasets are specified, then the command displays properties for all
2938 datasets on the system.
2939 For each property, the following columns are displayed:
2940 .Bd -literal
2941 name Dataset name
2942 property Property name
2943 value Property value
2944 source Property source. Can either be local, default,
2945 temporary, inherited, or none (-).
2946 .Ed
2947 .Pp
2948 All columns are displayed by default, though this can be controlled by using the
2949 .Fl o
2950 option.
2951 This command takes a comma-separated list of properties as described in the
2952 .Sx Native Properties
2953 and
2954 .Sx User Properties
2955 sections.
2956 .Pp
2957 The special value
2958 .Sy all
2959 can be used to display all properties that apply to the given dataset's type
2960 .Pq filesystem, volume, snapshot, or bookmark .
2961 .Bl -tag -width "-H"
2962 .It Fl H
2963 Display output in a form more easily parsed by scripts.
2964 Any headers are omitted, and fields are explicitly separated by a single tab
2965 instead of an arbitrary amount of space.
2966 .It Fl d Ar depth
2967 Recursively display any children of the dataset, limiting the recursion to
2968 .Ar depth .
2969 A depth of
2970 .Sy 1
2971 will display only the dataset and its direct children.
2972 .It Fl o Ar field
2973 A comma-separated list of columns to display.
2974 .Sy name Ns \&, Ns Sy property Ns \&, Ns Sy value Ns \&, Ns Sy source
2975 is the default value.
2976 .It Fl p
2977 Display numbers in parsable
2978 .Pq exact
2979 values.
2980 .It Fl r
2981 Recursively display properties for any children.
2982 .It Fl s Ar source
2983 A comma-separated list of sources to display.
2984 Those properties coming from a source other than those in this list are ignored.
2985 Each source must be one of the following:
2986 .Sy local ,
2987 .Sy default ,
2988 .Sy inherited ,
2989 .Sy temporary ,
2990 and
2991 .Sy none .
2992 The default value is all sources.
2993 .It Fl t Ar type
2994 A comma-separated list of types to display, where
2995 .Ar type
2996 is one of
2997 .Sy filesystem ,
2998 .Sy snapshot ,
2999 .Sy volume ,
3000 .Sy bookmark ,
3001 or
3002 .Sy all .
3003 .El
3004 .It Xo
3005 .Nm
3006 .Cm inherit
3007 .Op Fl rS
3008 .Ar property Ar filesystem Ns | Ns Ar volume Ns | Ns Ar snapshot Ns ...
3009 .Xc
3010 Clears the specified property, causing it to be inherited from an ancestor,
3011 restored to default if no ancestor has the property set, or with the
3012 .Fl S
3013 option reverted to the received value if one exists.
3014 See the
3015 .Sx Properties
3016 section for a listing of default values, and details on which properties can be
3017 inherited.
3018 .Bl -tag -width "-r"
3019 .It Fl r
3020 Recursively inherit the given property for all children.
3021 .It Fl S
3022 Revert the property to the received value if one exists; otherwise operate as
3023 if the
3024 .Fl S
3025 option was not specified.
3026 .El
3027 .It Xo
3028 .Nm
3029 .Cm remap
3030 .Ar filesystem Ns | Ns Ar volume
3031 .Xc
3032 Remap the indirect blocks in the given fileystem or volume so that they no
3033 longer reference blocks on previously removed vdevs and we can eventually
3034 shrink the size of the indirect mapping objects for the previously removed
3035 vdevs. Note that remapping all blocks might not be possible and that
3036 references from snapshots will still exist and cannot be remapped.
3037 .It Xo
3038 .Nm
3039 .Cm upgrade
3040 .Xc
3041 Displays a list of file systems that are not the most recent version.
3042 .It Xo
3043 .Nm
3044 .Cm upgrade
3045 .Fl v
3046 .Xc
3047 Displays a list of currently supported file system versions.
3048 .It Xo
3049 .Nm
3050 .Cm upgrade
3051 .Op Fl r
3052 .Op Fl V Ar version
3053 .Fl a | Ar filesystem
3054 .Xc
3055 Upgrades file systems to a new on-disk version.
3056 Once this is done, the file systems will no longer be accessible on systems
3057 running older versions of the software.
3058 .Nm zfs Cm send
3059 streams generated from new snapshots of these file systems cannot be accessed on
3060 systems running older versions of the software.
3061 .Pp
3062 In general, the file system version is independent of the pool version.
3063 See
3064 .Xr zpool 8
3065 for information on the
3066 .Nm zpool Cm upgrade
3067 command.
3068 .Pp
3069 In some cases, the file system version and the pool version are interrelated and
3070 the pool version must be upgraded before the file system version can be
3071 upgraded.
3072 .Bl -tag -width "-V"
3073 .It Fl V Ar version
3074 Upgrade to the specified
3075 .Ar version .
3076 If the
3077 .Fl V
3078 flag is not specified, this command upgrades to the most recent version.
3079 This
3080 option can only be used to increase the version number, and only up to the most
3081 recent version supported by this software.
3082 .It Fl a
3083 Upgrade all file systems on all imported pools.
3084 .It Ar filesystem
3085 Upgrade the specified file system.
3086 .It Fl r
3087 Upgrade the specified file system and all descendent file systems.
3088 .El
3089 .It Xo
3090 .Nm
3091 .Cm userspace
3092 .Op Fl Hinp
3093 .Oo Fl o Ar field Ns Oo , Ns Ar field Oc Ns ... Oc
3094 .Oo Fl s Ar field Oc Ns ...
3095 .Oo Fl S Ar field Oc Ns ...
3096 .Oo Fl t Ar type Ns Oo , Ns Ar type Oc Ns ... Oc
3097 .Ar filesystem Ns | Ns Ar snapshot
3098 .Xc
3099 Displays space consumed by, and quotas on, each user in the specified filesystem
3100 or snapshot.
3101 This corresponds to the
3102 .Sy userused@ Ns Em user ,
3103 .Sy userobjused@ Ns Em user ,
3104 .Sy userquota@ Ns Em user,
3105 and
3106 .Sy userobjquota@ Ns Em user
3107 properties.
3108 .Bl -tag -width "-H"
3109 .It Fl H
3110 Do not print headers, use tab-delimited output.
3111 .It Fl S Ar field
3112 Sort by this field in reverse order.
3113 See
3114 .Fl s .
3115 .It Fl i
3116 Translate SID to POSIX ID.
3117 The POSIX ID may be ephemeral if no mapping exists.
3118 Normal POSIX interfaces
3119 .Po for example,
3120 .Xr stat 2 ,
3121 .Nm ls Fl l
3122 .Pc
3123 perform this translation, so the
3124 .Fl i
3125 option allows the output from
3126 .Nm zfs Cm userspace
3127 to be compared directly with those utilities.
3128 However,
3129 .Fl i
3130 may lead to confusion if some files were created by an SMB user before a
3131 SMB-to-POSIX name mapping was established.
3132 In such a case, some files will be owned by the SMB entity and some by the POSIX
3133 entity.
3134 However, the
3135 .Fl i
3136 option will report that the POSIX entity has the total usage and quota for both.
3137 .It Fl n
3138 Print numeric ID instead of user/group name.
3139 .It Fl o Ar field Ns Oo , Ns Ar field Oc Ns ...
3140 Display only the specified fields from the following set:
3141 .Sy type ,
3142 .Sy name ,
3143 .Sy used ,
3144 .Sy quota .
3145 The default is to display all fields.
3146 .It Fl p
3147 Use exact
3148 .Pq parsable
3149 numeric output.
3150 .It Fl s Ar field
3151 Sort output by this field.
3152 The
3153 .Fl s
3154 and
3155 .Fl S
3156 flags may be specified multiple times to sort first by one field, then by
3157 another.
3158 The default is
3159 .Fl s Sy type Fl s Sy name .
3160 .It Fl t Ar type Ns Oo , Ns Ar type Oc Ns ...
3161 Print only the specified types from the following set:
3162 .Sy all ,
3163 .Sy posixuser ,
3164 .Sy smbuser ,
3165 .Sy posixgroup ,
3166 .Sy smbgroup .
3167 The default is
3168 .Fl t Sy posixuser Ns \&, Ns Sy smbuser .
3169 The default can be changed to include group types.
3170 .El
3171 .It Xo
3172 .Nm
3173 .Cm groupspace
3174 .Op Fl Hinp
3175 .Oo Fl o Ar field Ns Oo , Ns Ar field Oc Ns ... Oc
3176 .Oo Fl s Ar field Oc Ns ...
3177 .Oo Fl S Ar field Oc Ns ...
3178 .Oo Fl t Ar type Ns Oo , Ns Ar type Oc Ns ... Oc
3179 .Ar filesystem Ns | Ns Ar snapshot
3180 .Xc
3181 Displays space consumed by, and quotas on, each group in the specified
3182 filesystem or snapshot.
3183 This subcommand is identical to
3184 .Nm zfs Cm userspace ,
3185 except that the default types to display are
3186 .Fl t Sy posixgroup Ns \&, Ns Sy smbgroup .
3187 .It Xo
3188 .Nm
3189 .Cm projectspace
3190 .Op Fl Hp
3191 .Oo Fl o Ar field Ns Oo , Ns Ar field Oc Ns ... Oc
3192 .Oo Fl s Ar field Oc Ns ...
3193 .Oo Fl S Ar field Oc Ns ...
3194 .Ar filesystem Ns | Ns Ar snapshot
3195 .Xc
3196 Displays space consumed by, and quotas on, each project in the specified
3197 filesystem or snapshot. This subcommand is identical to
3198 .Nm zfs Cm userspace ,
3199 except that the project identifier is numeral, not name. So need neither
3200 the option
3201 .Sy -i
3202 for SID to POSIX ID nor
3203 .Sy -n
3204 for numeric ID, nor
3205 .Sy -t
3206 for types.
3207 .It Xo
3208 .Nm
3209 .Cm project
3210 .Oo Fl d Ns | Ns Fl r Ns Oc
3211 .Ar file Ns | Ns Ar directory Ns ...
3212 .Xc
3213 List project identifier (ID) and inherit flag of file(s) or directories.
3214 .Bl -tag -width "-d"
3215 .It Fl d
3216 Show the directory project ID and inherit flag, not its childrens. It will
3217 overwrite the former specified
3218 .Fl r
3219 option.
3220 .It Fl r
3221 Show on subdirectories recursively. It will overwrite the former specified
3222 .Fl d
3223 option.
3224 .El
3225 .It Xo
3226 .Nm
3227 .Cm project
3228 .Fl C
3229 .Oo Fl kr Ns Oc
3230 .Ar file Ns | Ns Ar directory Ns ...
3231 .Xc
3232 Clear project inherit flag and/or ID on the file(s) or directories.
3233 .Bl -tag -width "-k"
3234 .It Fl k
3235 Keep the project ID unchanged. If not specified, the project ID will be reset
3236 as zero.
3237 .It Fl r
3238 Clear on subdirectories recursively.
3239 .El
3240 .It Xo
3241 .Nm
3242 .Cm project
3243 .Fl c
3244 .Oo Fl 0 Ns Oc
3245 .Oo Fl d Ns | Ns Fl r Ns Oc
3246 .Op Fl p Ar id
3247 .Ar file Ns | Ns Ar directory Ns ...
3248 .Xc
3249 Check project ID and inherit flag on the file(s) or directories, report the
3250 entries without project inherit flag or with different project IDs from the
3251 specified (via
3252 .Fl p
3253 option) value or the target directory's project ID.
3254 .Bl -tag -width "-0"
3255 .It Fl 0
3256 Print file name with a trailing NUL instead of newline (by default), like
3257 "find -print0".
3258 .It Fl d
3259 Check the directory project ID and inherit flag, not its childrens. It will
3260 overwrite the former specified
3261 .Fl r
3262 option.
3263 .It Fl p
3264 Specify the referenced ID for comparing with the target file(s) or directories'
3265 project IDs. If not specified, the target (top) directory's project ID will be
3266 used as the referenced one.
3267 .It Fl r
3268 Check on subdirectories recursively. It will overwrite the former specified
3269 .Fl d
3270 option.
3271 .El
3272 .It Xo
3273 .Nm
3274 .Cm project
3275 .Op Fl p Ar id
3276 .Oo Fl rs Ns Oc
3277 .Ar file Ns | Ns Ar directory Ns ...
3278 .Xc
3279 .Bl -tag -width "-p"
3280 Set project ID and/or inherit flag on the file(s) or directories.
3281 .It Fl p
3282 Set the file(s)' or directories' project ID with the given value.
3283 .It Fl r
3284 Set on subdirectories recursively.
3285 .It Fl s
3286 Set project inherit flag on the given file(s) or directories. It is usually used
3287 for setup tree quota on the directory target with
3288 .Fl r
3289 option specified together. When setup tree quota, by default the directory's
3290 project ID will be set to all its descendants unless you specify the project
3291 ID via
3292 .Fl p
3293 option explicitly.
3294 .El
3295 .It Xo
3296 .Nm
3297 .Cm mount
3298 .Xc
3299 Displays all ZFS file systems currently mounted.
3300 .It Xo
3301 .Nm
3302 .Cm mount
3303 .Op Fl Olv
3304 .Op Fl o Ar options
3305 .Fl a | Ar filesystem
3306 .Xc
3307 Mounts ZFS file systems.
3308 .Bl -tag -width "-O"
3309 .It Fl O
3310 Perform an overlay mount.
3311 See
3312 .Xr mount 8
3313 for more information.
3314 .It Fl a
3315 Mount all available ZFS file systems.
3316 Invoked automatically as part of the boot process.
3317 .It Ar filesystem
3318 Mount the specified filesystem.
3319 .It Fl o Ar options
3320 An optional, comma-separated list of mount options to use temporarily for the
3321 duration of the mount.
3322 See the
3323 .Sx Temporary Mount Point Properties
3324 section for details.
3325 .It Fl l
3326 Load keys for encrypted filesystems as they are being mounted. This is
3327 equivalent to executing
3328 .Nm zfs Cm load-key
3329 on each encryption root before mounting it. Note that if a filesystem has a
3330 .Sy keylocation
3331 of
3332 .Sy prompt
3333 this will cause the terminal to interactively block after asking for the key.
3334 .It Fl v
3335 Report mount progress.
3336 .El
3337 .It Xo
3338 .Nm
3339 .Cm unmount
3340 .Op Fl f
3341 .Fl a | Ar filesystem Ns | Ns Ar mountpoint
3342 .Xc
3343 Unmounts currently mounted ZFS file systems.
3344 .Bl -tag -width "-a"
3345 .It Fl a
3346 Unmount all available ZFS file systems.
3347 Invoked automatically as part of the shutdown process.
3348 .It Ar filesystem Ns | Ns Ar mountpoint
3349 Unmount the specified filesystem.
3350 The command can also be given a path to a ZFS file system mount point on the
3351 system.
3352 .It Fl f
3353 Forcefully unmount the file system, even if it is currently in use.
3354 .El
3355 .It Xo
3356 .Nm
3357 .Cm share
3358 .Fl a | Ar filesystem
3359 .Xc
3360 Shares available ZFS file systems.
3361 .Bl -tag -width "-a"
3362 .It Fl a
3363 Share all available ZFS file systems.
3364 Invoked automatically as part of the boot process.
3365 .It Ar filesystem
3366 Share the specified filesystem according to the
3367 .Sy sharenfs
3368 and
3369 .Sy sharesmb
3370 properties.
3371 File systems are shared when the
3372 .Sy sharenfs
3373 or
3374 .Sy sharesmb
3375 property is set.
3376 .El
3377 .It Xo
3378 .Nm
3379 .Cm unshare
3380 .Fl a | Ar filesystem Ns | Ns Ar mountpoint
3381 .Xc
3382 Unshares currently shared ZFS file systems.
3383 .Bl -tag -width "-a"
3384 .It Fl a
3385 Unshare all available ZFS file systems.
3386 Invoked automatically as part of the shutdown process.
3387 .It Ar filesystem Ns | Ns Ar mountpoint
3388 Unshare the specified filesystem.
3389 The command can also be given a path to a ZFS file system shared on the system.
3390 .El
3391 .It Xo
3392 .Nm
3393 .Cm bookmark
3394 .Ar snapshot bookmark
3395 .Xc
3396 Creates a bookmark of the given snapshot.
3397 Bookmarks mark the point in time when the snapshot was created, and can be used
3398 as the incremental source for a
3399 .Nm zfs Cm send
3400 command.
3401 .Pp
3402 This feature must be enabled to be used.
3403 See
3404 .Xr zpool-features 5
3405 for details on ZFS feature flags and the
3406 .Sy bookmarks
3407 feature.
3408 .It Xo
3409 .Nm
3410 .Cm send
3411 .Op Fl DLPRbcenpvw
3412 .Op Oo Fl I Ns | Ns Fl i Oc Ar snapshot
3413 .Ar snapshot
3414 .Xc
3415 Creates a stream representation of the second
3416 .Ar snapshot ,
3417 which is written to standard output.
3418 The output can be redirected to a file or to a different system
3419 .Po for example, using
3420 .Xr ssh 1
3421 .Pc .
3422 By default, a full stream is generated.
3423 .Bl -tag -width "-D"
3424 .It Fl D, -dedup
3425 Generate a deduplicated stream.
3426 Blocks which would have been sent multiple times in the send stream will only be
3427 sent once.
3428 The receiving system must also support this feature to receive a deduplicated
3429 stream.
3430 This flag can be used regardless of the dataset's
3431 .Sy dedup
3432 property, but performance will be much better if the filesystem uses a
3433 dedup-capable checksum
3434 .Po for example,
3435 .Sy sha256
3436 .Pc .
3437 .It Fl I Ar snapshot
3438 Generate a stream package that sends all intermediary snapshots from the first
3439 snapshot to the second snapshot.
3440 For example,
3441 .Fl I Em @a Em fs@d
3442 is similar to
3443 .Fl i Em @a Em fs@b Ns \&; Fl i Em @b Em fs@c Ns \&; Fl i Em @c Em fs@d .
3444 The incremental source may be specified as with the
3445 .Fl i
3446 option.
3447 .It Fl L, -large-block
3448 Generate a stream which may contain blocks larger than 128KB.
3449 This flag has no effect if the
3450 .Sy large_blocks
3451 pool feature is disabled, or if the
3452 .Sy recordsize
3453 property of this filesystem has never been set above 128KB.
3454 The receiving system must have the
3455 .Sy large_blocks
3456 pool feature enabled as well.
3457 See
3458 .Xr zpool-features 5
3459 for details on ZFS feature flags and the
3460 .Sy large_blocks
3461 feature.
3462 .It Fl P, -parsable
3463 Print machine-parsable verbose information about the stream package generated.
3464 .It Fl R, -replicate
3465 Generate a replication stream package, which will replicate the specified
3466 file system, and all descendent file systems, up to the named snapshot.
3467 When received, all properties, snapshots, descendent file systems, and clones
3468 are preserved.
3469 .Pp
3470 If the
3471 .Fl i
3472 or
3473 .Fl I
3474 flags are used in conjunction with the
3475 .Fl R
3476 flag, an incremental replication stream is generated.
3477 The current values of properties, and current snapshot and file system names are
3478 set when the stream is received.
3479 If the
3480 .Fl F
3481 flag is specified when this stream is received, snapshots and file systems that
3482 do not exist on the sending side are destroyed.
3483 .It Fl e, -embed
3484 Generate a more compact stream by using
3485 .Sy WRITE_EMBEDDED
3486 records for blocks which are stored more compactly on disk by the
3487 .Sy embedded_data
3488 pool feature.
3489 This flag has no effect if the
3490 .Sy embedded_data
3491 feature is disabled.
3492 The receiving system must have the
3493 .Sy embedded_data
3494 feature enabled.
3495 If the
3496 .Sy lz4_compress
3497 feature is active on the sending system, then the receiving system must have
3498 that feature enabled as well. Datasets that are sent with this flag may not be
3499 received as an encrypted dataset, since encrypted datasets cannot use the
3500 .Sy embedded_data
3501 feature.
3502 See
3503 .Xr zpool-features 5
3504 for details on ZFS feature flags and the
3505 .Sy embedded_data
3506 feature.
3507 .It Fl b, -backup
3508 Sends only received property values whether or not they are overridden by local
3509 settings, but only if the dataset has ever been received. Use this option when
3510 you want
3511 .Nm zfs Cm receive
3512 to restore received properties backed up on the sent dataset and to avoid
3513 sending local settings that may have nothing to do with the source dataset,
3514 but only with how the data is backed up.
3515 .It Fl c, -compressed
3516 Generate a more compact stream by using compressed WRITE records for blocks
3517 which are compressed on disk and in memory
3518 .Po see the
3519 .Sy compression
3520 property for details
3521 .Pc .
3522 If the
3523 .Sy lz4_compress
3524 feature is active on the sending system, then the receiving system must have
3525 that feature enabled as well.
3526 If the
3527 .Sy large_blocks
3528 feature is enabled on the sending system but the
3529 .Fl L
3530 option is not supplied in conjunction with
3531 .Fl c ,
3532 then the data will be decompressed before sending so it can be split into
3533 smaller block sizes.
3534 .It Fl w, -raw
3535 For encrypted datasets, send data exactly as it exists on disk. This allows
3536 backups to be taken even if encryption keys are not currently loaded. The
3537 backup may then be received on an untrusted machine since that machine will
3538 not have the encryption keys to read the protected data or alter it without
3539 being detected. Upon being received, the dataset will have the same encryption
3540 keys as it did on the send side, although the
3541 .Sy keylocation
3542 property will be defaulted to
3543 .Sy prompt
3544 if not otherwise provided. For unencrypted datasets, this flag will be
3545 equivalent to
3546 .Fl Lec .
3547 Note that if you do not use this flag for sending encrypted datasets, data will
3548 be sent unencrypted and may be re-encrypted with a different encryption key on
3549 the receiving system, which will disable the ability to do a raw send to that
3550 system for incrementals.
3551 .It Fl i Ar snapshot
3552 Generate an incremental stream from the first
3553 .Ar snapshot
3554 .Pq the incremental source
3555 to the second
3556 .Ar snapshot
3557 .Pq the incremental target .
3558 The incremental source can be specified as the last component of the snapshot
3559 name
3560 .Po the
3561 .Sy @
3562 character and following
3563 .Pc
3564 and it is assumed to be from the same file system as the incremental target.
3565 .Pp
3566 If the destination is a clone, the source may be the origin snapshot, which must
3567 be fully specified
3568 .Po for example,
3569 .Em pool/fs@origin ,
3570 not just
3571 .Em @origin
3572 .Pc .
3573 .It Fl n, -dryrun
3574 Do a dry-run
3575 .Pq Qq No-op
3576 send.
3577 Do not generate any actual send data.
3578 This is useful in conjunction with the
3579 .Fl v
3580 or
3581 .Fl P
3582 flags to determine what data will be sent.
3583 In this case, the verbose output will be written to standard output
3584 .Po contrast with a non-dry-run, where the stream is written to standard output
3585 and the verbose output goes to standard error
3586 .Pc .
3587 .It Fl p, -props
3588 Include the dataset's properties in the stream.
3589 This flag is implicit when
3590 .Fl R
3591 is specified.
3592 The receiving system must also support this feature. Sends of encrypted datasets
3593 must use
3594 .Fl w
3595 when using this flag.
3596 .It Fl v, -verbose
3597 Print verbose information about the stream package generated.
3598 This information includes a per-second report of how much data has been sent.
3599 .Pp
3600 The format of the stream is committed.
3601 You will be able to receive your streams on future versions of ZFS.
3602 .El
3603 .It Xo
3604 .Nm
3605 .Cm send
3606 .Op Fl LPcenvw
3607 .Op Fl i Ar snapshot Ns | Ns Ar bookmark
3608 .Ar filesystem Ns | Ns Ar volume Ns | Ns Ar snapshot
3609 .Xc
3610 Generate a send stream, which may be of a filesystem, and may be incremental
3611 from a bookmark.
3612 If the destination is a filesystem or volume, the pool must be read-only, or the
3613 filesystem must not be mounted.
3614 When the stream generated from a filesystem or volume is received, the default
3615 snapshot name will be
3616 .Qq --head-- .
3617 .Bl -tag -width "-L"
3618 .It Fl L, -large-block
3619 Generate a stream which may contain blocks larger than 128KB.
3620 This flag has no effect if the
3621 .Sy large_blocks
3622 pool feature is disabled, or if the
3623 .Sy recordsize
3624 property of this filesystem has never been set above 128KB.
3625 The receiving system must have the
3626 .Sy large_blocks
3627 pool feature enabled as well.
3628 See
3629 .Xr zpool-features 5
3630 for details on ZFS feature flags and the
3631 .Sy large_blocks
3632 feature.
3633 .It Fl P, -parsable
3634 Print machine-parsable verbose information about the stream package generated.
3635 .It Fl c, -compressed
3636 Generate a more compact stream by using compressed WRITE records for blocks
3637 which are compressed on disk and in memory
3638 .Po see the
3639 .Sy compression
3640 property for details
3641 .Pc .
3642 If the
3643 .Sy lz4_compress
3644 feature is active on the sending system, then the receiving system must have
3645 that feature enabled as well.
3646 If the
3647 .Sy large_blocks
3648 feature is enabled on the sending system but the
3649 .Fl L
3650 option is not supplied in conjunction with
3651 .Fl c ,
3652 then the data will be decompressed before sending so it can be split into
3653 smaller block sizes.
3654 .It Fl w, -raw
3655 For encrypted datasets, send data exactly as it exists on disk. This allows
3656 backups to be taken even if encryption keys are not currently loaded. The
3657 backup may then be received on an untrusted machine since that machine will
3658 not have the encryption keys to read the protected data or alter it without
3659 being detected. Upon being received, the dataset will have the same encryption
3660 keys as it did on the send side, although the
3661 .Sy keylocation
3662 property will be defaulted to
3663 .Sy prompt
3664 if not otherwise provided. For unencrypted datasets, this flag will be
3665 equivalent to
3666 .Fl Lec .
3667 Note that if you do not use this flag for sending encrypted datasets, data will
3668 be sent unencrypted and may be re-encrypted with a different encryption key on
3669 the receiving system, which will disable the ability to do a raw send to that
3670 system for incrementals.
3671 .It Fl e, -embed
3672 Generate a more compact stream by using
3673 .Sy WRITE_EMBEDDED
3674 records for blocks which are stored more compactly on disk by the
3675 .Sy embedded_data
3676 pool feature.
3677 This flag has no effect if the
3678 .Sy embedded_data
3679 feature is disabled.
3680 The receiving system must have the
3681 .Sy embedded_data
3682 feature enabled.
3683 If the
3684 .Sy lz4_compress
3685 feature is active on the sending system, then the receiving system must have
3686 that feature enabled as well. Datasets that are sent with this flag may not be
3687 received as an encrypted dataset, since encrypted datasets cannot use the
3688 .Sy embedded_data
3689 feature.
3690 See
3691 .Xr zpool-features 5
3692 for details on ZFS feature flags and the
3693 .Sy embedded_data
3694 feature.
3695 .It Fl i Ar snapshot Ns | Ns Ar bookmark
3696 Generate an incremental send stream.
3697 The incremental source must be an earlier snapshot in the destination's history.
3698 It will commonly be an earlier snapshot in the destination's file system, in
3699 which case it can be specified as the last component of the name
3700 .Po the
3701 .Sy #
3702 or
3703 .Sy @
3704 character and following
3705 .Pc .
3706 .Pp
3707 If the incremental target is a clone, the incremental source can be the origin
3708 snapshot, or an earlier snapshot in the origin's filesystem, or the origin's
3709 origin, etc.
3710 .It Fl n, -dryrun
3711 Do a dry-run
3712 .Pq Qq No-op
3713 send.
3714 Do not generate any actual send data.
3715 This is useful in conjunction with the
3716 .Fl v
3717 or
3718 .Fl P
3719 flags to determine what data will be sent.
3720 In this case, the verbose output will be written to standard output
3721 .Po contrast with a non-dry-run, where the stream is written to standard output
3722 and the verbose output goes to standard error
3723 .Pc .
3724 .It Fl v, -verbose
3725 Print verbose information about the stream package generated.
3726 This information includes a per-second report of how much data has been sent.
3727 .El
3728 .It Xo
3729 .Nm
3730 .Cm send
3731 .Op Fl Penv
3732 .Fl t
3733 .Ar receive_resume_token
3734 .Xc
3735 Creates a send stream which resumes an interrupted receive.
3736 The
3737 .Ar receive_resume_token
3738 is the value of this property on the filesystem or volume that was being
3739 received into.
3740 See the documentation for
3741 .Sy zfs receive -s
3742 for more details.
3743 .It Xo
3744 .Nm
3745 .Cm receive
3746 .Op Fl Fnsuv
3747 .Op Fl o Sy origin Ns = Ns Ar snapshot
3748 .Op Fl o Ar property Ns = Ns Ar value
3749 .Op Fl x Ar property
3750 .Ar filesystem Ns | Ns Ar volume Ns | Ns Ar snapshot
3751 .Xc
3752 .It Xo
3753 .Nm
3754 .Cm receive
3755 .Op Fl Fnsuv
3756 .Op Fl d Ns | Ns Fl e
3757 .Op Fl o Sy origin Ns = Ns Ar snapshot
3758 .Op Fl o Ar property Ns = Ns Ar value
3759 .Op Fl x Ar property
3760 .Ar filesystem
3761 .Xc
3762 Creates a snapshot whose contents are as specified in the stream provided on
3763 standard input.
3764 If a full stream is received, then a new file system is created as well.
3765 Streams are created using the
3766 .Nm zfs Cm send
3767 subcommand, which by default creates a full stream.
3768 .Nm zfs Cm recv
3769 can be used as an alias for
3770 .Nm zfs Cm receive.
3771 .Pp
3772 If an incremental stream is received, then the destination file system must
3773 already exist, and its most recent snapshot must match the incremental stream's
3774 source.
3775 For
3776 .Sy zvols ,
3777 the destination device link is destroyed and recreated, which means the
3778 .Sy zvol
3779 cannot be accessed during the
3780 .Cm receive
3781 operation.
3782 .Pp
3783 When a snapshot replication package stream that is generated by using the
3784 .Nm zfs Cm send Fl R
3785 command is received, any snapshots that do not exist on the sending location are
3786 destroyed by using the
3787 .Nm zfs Cm destroy Fl d
3788 command.
3789 .Pp
3790 If
3791 .Fl o Em property Ns = Ns Ar value
3792 or
3793 .Fl x Em property
3794 is specified, it applies to the effective value of the property throughout
3795 the entire subtree of replicated datasets. Effective property values will be
3796 set (
3797 .Fl o
3798 ) or inherited (
3799 .Fl x
3800 ) on the topmost in the replicated subtree. In descendant datasets, if the
3801 property is set by the send stream, it will be overridden by forcing the
3802 property to be inherited from the top‐most file system. Received properties
3803 are retained in spite of being overridden and may be restored with
3804 .Nm zfs Cm inherit Fl S .
3805 Specifying
3806 .Fl o Sy origin Ns = Ns Em snapshot
3807 is a special case because, even if
3808 .Sy origin
3809 is a read-only property and cannot be set, it's allowed to receive the send
3810 stream as a clone of the given snapshot.
3811 .Pp
3812 Raw encrypted send streams (created with
3813 .Nm zfs Cm send Fl w
3814 ) may only be received as is, and cannot be re-encrypted, decrypted, or
3815 recompressed by the receive process. Unencrypted streams can be received as
3816 encrypted datasets, either through inheritance or by specifying encryption
3817 parameters with the
3818 .Fl o
3819 options.
3820 .Pp
3821 The name of the snapshot
3822 .Pq and file system, if a full stream is received
3823 that this subcommand creates depends on the argument type and the use of the
3824 .Fl d
3825 or
3826 .Fl e
3827 options.
3828 .Pp
3829 If the argument is a snapshot name, the specified
3830 .Ar snapshot
3831 is created.
3832 If the argument is a file system or volume name, a snapshot with the same name
3833 as the sent snapshot is created within the specified
3834 .Ar filesystem
3835 or
3836 .Ar volume .
3837 If neither of the
3838 .Fl d
3839 or
3840 .Fl e
3841 options are specified, the provided target snapshot name is used exactly as
3842 provided.
3843 .Pp
3844 The
3845 .Fl d
3846 and
3847 .Fl e
3848 options cause the file system name of the target snapshot to be determined by
3849 appending a portion of the sent snapshot's name to the specified target
3850 .Ar filesystem .
3851 If the
3852 .Fl d
3853 option is specified, all but the first element of the sent snapshot's file
3854 system path
3855 .Pq usually the pool name
3856 is used and any required intermediate file systems within the specified one are
3857 created.
3858 If the
3859 .Fl e
3860 option is specified, then only the last element of the sent snapshot's file
3861 system name
3862 .Pq i.e. the name of the source file system itself
3863 is used as the target file system name.
3864 .Bl -tag -width "-F"
3865 .It Fl F
3866 Force a rollback of the file system to the most recent snapshot before
3867 performing the receive operation.
3868 If receiving an incremental replication stream
3869 .Po for example, one generated by
3870 .Nm zfs Cm send Fl R Op Fl i Ns | Ns Fl I
3871 .Pc ,
3872 destroy snapshots and file systems that do not exist on the sending side.
3873 .It Fl d
3874 Discard the first element of the sent snapshot's file system name, using the
3875 remaining elements to determine the name of the target file system for the new
3876 snapshot as described in the paragraph above.
3877 .It Fl e
3878 Discard all but the last element of the sent snapshot's file system name, using
3879 that element to determine the name of the target file system for the new
3880 snapshot as described in the paragraph above.
3881 .It Fl n
3882 Do not actually receive the stream.
3883 This can be useful in conjunction with the
3884 .Fl v
3885 option to verify the name the receive operation would use.
3886 .It Fl o Sy origin Ns = Ns Ar snapshot
3887 Forces the stream to be received as a clone of the given snapshot.
3888 If the stream is a full send stream, this will create the filesystem
3889 described by the stream as a clone of the specified snapshot.
3890 Which snapshot was specified will not affect the success or failure of the
3891 receive, as long as the snapshot does exist.
3892 If the stream is an incremental send stream, all the normal verification will be
3893 performed.
3894 .It Fl o Em property Ns = Ns Ar value
3895 Sets the specified property as if the command
3896 .Nm zfs Cm set Em property Ns = Ns Ar value
3897 was invoked immediately before the receive. When receiving a stream from
3898 .Nm zfs Cm send Fl R ,
3899 causes the property to be inherited by all descendant datasets, as through
3900 .Nm zfs Cm inherit Em property
3901 was run on any descendant datasets that have this property set on the
3902 sending system.
3903 .Pp
3904 Any editable property can be set at receive time. Set-once properties bound
3905 to the received data, such as
3906 .Sy normalization
3907 and
3908 .Sy casesensitivity ,
3909 cannot be set at receive time even when the datasets are newly created by
3910 .Nm zfs Cm receive .
3911 Additionally both settable properties
3912 .Sy version
3913 and
3914 .Sy volsize
3915 cannot be set at receive time.
3916 .Pp
3917 The
3918 .Fl o
3919 option may be specified multiple times, for different properties. An error
3920 results if the same property is specified in multiple
3921 .Fl o
3922 or
3923 .Fl x
3924 options.
3925 .Pp
3926 The
3927 .Fl o
3928 option may also be used to override encryption properties upon initial
3929 receive. This allows unencrypted streams to be received as encrypted datasets.
3930 To cause the received dataset (or root dataset of a recursive stream) to be
3931 received as an encryption root, specify encryption properties in the same
3932 manner as is required for
3933 .Nm
3934 .Cm create .
3935 For instance:
3936 .Bd -literal
3937 # zfs send tank/test@snap1 | zfs recv -o encryption=on -o keyformat=passphrase -o keylocation=file:///path/to/keyfile
3938 .Ed
3939 .Pp
3940 Note that
3941 .Op Fl o Ar keylocation Ns = Ns Ar prompt
3942 may not be specified here, since stdin is already being utilized for the send
3943 stream. Once the receive has completed, you can use
3944 .Nm
3945 .Cm set
3946 to change this setting after the fact. Similarly, you can receive a dataset as
3947 an encrypted child by specifying
3948 .Op Fl x Ar encryption
3949 to force the property to be inherited. Overriding encryption properties (except
3950 for
3951 .Sy keylocation Ns )
3952 is not possible with raw send streams.
3953 .It Fl s
3954 If the receive is interrupted, save the partially received state, rather
3955 than deleting it.
3956 Interruption may be due to premature termination of the stream
3957 .Po e.g. due to network failure or failure of the remote system
3958 if the stream is being read over a network connection
3959 .Pc ,
3960 a checksum error in the stream, termination of the
3961 .Nm zfs Cm receive
3962 process, or unclean shutdown of the system.
3963 .Pp
3964 The receive can be resumed with a stream generated by
3965 .Nm zfs Cm send Fl t Ar token ,
3966 where the
3967 .Ar token
3968 is the value of the
3969 .Sy receive_resume_token
3970 property of the filesystem or volume which is received into.
3971 .Pp
3972 To use this flag, the storage pool must have the
3973 .Sy extensible_dataset
3974 feature enabled.
3975 See
3976 .Xr zpool-features 5
3977 for details on ZFS feature flags.
3978 .It Fl u
3979 File system that is associated with the received stream is not mounted.
3980 .It Fl v
3981 Print verbose information about the stream and the time required to perform the
3982 receive operation.
3983 .It Fl x Em property
3984 Ensures that the effective value of the specified property after the
3985 receive is unaffected by the value of that property in the send stream (if any),
3986 as if the property had been excluded from the send stream.
3987 .Pp
3988 If the specified property is not present in the send stream, this option does
3989 nothing.
3990 .Pp
3991 If a received property needs to be overridden, the effective value will be
3992 set or inherited, depending on whether the property is inheritable or not.
3993 .Pp
3994 In the case of an incremental update,
3995 .Fl x
3996 leaves any existing local setting or explicit inheritance unchanged.
3997 .Pp
3998 All
3999 .Fl o
4000 restrictions on set-once and special properties apply equally to
4001 .Fl x .
4002 .El
4003 .It Xo
4004 .Nm
4005 .Cm receive
4006 .Fl A
4007 .Ar filesystem Ns | Ns Ar volume
4008 .Xc
4009 Abort an interrupted
4010 .Nm zfs Cm receive Fl s ,
4011 deleting its saved partially received state.
4012 .It Xo
4013 .Nm
4014 .Cm allow
4015 .Ar filesystem Ns | Ns Ar volume
4016 .Xc
4017 Displays permissions that have been delegated on the specified filesystem or
4018 volume.
4019 See the other forms of
4020 .Nm zfs Cm allow
4021 for more information.
4022 .Pp
4023 Delegations are supported under Linux with the exception of
4024 .Sy mount ,
4025 .Sy unmount ,
4026 .Sy mountpoint ,
4027 .Sy canmount ,
4028 .Sy rename ,
4029 and
4030 .Sy share .
4031 These permissions cannot be delegated because the Linux
4032 .Xr mount 8
4033 command restricts modifications of the global namespace to the root user.
4034 .It Xo
4035 .Nm
4036 .Cm allow
4037 .Op Fl dglu
4038 .Ar user Ns | Ns Ar group Ns Oo , Ns Ar user Ns | Ns Ar group Oc Ns ...
4039 .Ar perm Ns | Ns @ Ns Ar setname Ns Oo , Ns Ar perm Ns | Ns @ Ns
4040 .Ar setname Oc Ns ...
4041 .Ar filesystem Ns | Ns Ar volume
4042 .br
4043 .Nm
4044 .Cm allow
4045 .Op Fl dl
4046 .Fl e Ns | Ns Sy everyone
4047 .Ar perm Ns | Ns @ Ns Ar setname Ns Oo , Ns Ar perm Ns | Ns @ Ns
4048 .Ar setname Oc Ns ...
4049 .Ar filesystem Ns | Ns Ar volume
4050 .Xc
4051 Delegates ZFS administration permission for the file systems to non-privileged
4052 users.
4053 .Bl -tag -width "-d"
4054 .It Fl d
4055 Allow only for the descendent file systems.
4056 .It Fl e Ns | Ns Sy everyone
4057 Specifies that the permissions be delegated to everyone.
4058 .It Fl g Ar group Ns Oo , Ns Ar group Oc Ns ...
4059 Explicitly specify that permissions are delegated to the group.
4060 .It Fl l
4061 Allow
4062 .Qq locally
4063 only for the specified file system.
4064 .It Fl u Ar user Ns Oo , Ns Ar user Oc Ns ...
4065 Explicitly specify that permissions are delegated to the user.
4066 .It Ar user Ns | Ns Ar group Ns Oo , Ns Ar user Ns | Ns Ar group Oc Ns ...
4067 Specifies to whom the permissions are delegated.
4068 Multiple entities can be specified as a comma-separated list.
4069 If neither of the
4070 .Fl gu
4071 options are specified, then the argument is interpreted preferentially as the
4072 keyword
4073 .Sy everyone ,
4074 then as a user name, and lastly as a group name.
4075 To specify a user or group named
4076 .Qq everyone ,
4077 use the
4078 .Fl g
4079 or
4080 .Fl u
4081 options.
4082 To specify a group with the same name as a user, use the
4083 .Fl g
4084 options.
4085 .It Xo
4086 .Ar perm Ns | Ns @ Ns Ar setname Ns Oo , Ns Ar perm Ns | Ns @ Ns
4087 .Ar setname Oc Ns ...
4088 .Xc
4089 The permissions to delegate.
4090 Multiple permissions may be specified as a comma-separated list.
4091 Permission names are the same as ZFS subcommand and property names.
4092 See the property list below.
4093 Property set names, which begin with
4094 .Sy @ ,
4095 may be specified.
4096 See the
4097 .Fl s
4098 form below for details.
4099 .El
4100 .Pp
4101 If neither of the
4102 .Fl dl
4103 options are specified, or both are, then the permissions are allowed for the
4104 file system or volume, and all of its descendents.
4105 .Pp
4106 Permissions are generally the ability to use a ZFS subcommand or change a ZFS
4107 property.
4108 The following permissions are available:
4109 .Bd -literal
4110 NAME TYPE NOTES
4111 allow subcommand Must also have the permission that is
4112 being allowed
4113 clone subcommand Must also have the 'create' ability and
4114 'mount' ability in the origin file system
4115 create subcommand Must also have the 'mount' ability
4116 destroy subcommand Must also have the 'mount' ability
4117 diff subcommand Allows lookup of paths within a dataset
4118 given an object number, and the ability
4119 to create snapshots necessary to
4120 'zfs diff'.
4121 load-key subcommand Allows loading and unloading of encryption key
4122 (see 'zfs load-key' and 'zfs unload-key').
4123 change-key subcommand Allows changing an encryption key via
4124 'zfs change-key'.
4125 mount subcommand Allows mount/umount of ZFS datasets
4126 promote subcommand Must also have the 'mount' and 'promote'
4127 ability in the origin file system
4128 receive subcommand Must also have the 'mount' and 'create'
4129 ability
4130 rename subcommand Must also have the 'mount' and 'create'
4131 ability in the new parent
4132 rollback subcommand Must also have the 'mount' ability
4133 send subcommand
4134 share subcommand Allows sharing file systems over NFS
4135 or SMB protocols
4136 snapshot subcommand Must also have the 'mount' ability
4137
4138 groupquota other Allows accessing any groupquota@...
4139 property
4140 groupused other Allows reading any groupused@... property
4141 userprop other Allows changing any user property
4142 userquota other Allows accessing any userquota@...
4143 property
4144 userused other Allows reading any userused@... property
4145 projectobjquota other Allows accessing any projectobjquota@...
4146 property
4147 projectquota other Allows accessing any projectquota@... property
4148 projectobjused other Allows reading any projectobjused@... property
4149 projectused other Allows reading any projectused@... property
4150
4151 aclinherit property
4152 acltype property
4153 atime property
4154 canmount property
4155 casesensitivity property
4156 checksum property
4157 compression property
4158 copies property
4159 devices property
4160 exec property
4161 filesystem_limit property
4162 mountpoint property
4163 nbmand property
4164 normalization property
4165 primarycache property
4166 quota property
4167 readonly property
4168 recordsize property
4169 refquota property
4170 refreservation property
4171 reservation property
4172 secondarycache property
4173 setuid property
4174 sharenfs property
4175 sharesmb property
4176 snapdir property
4177 snapshot_limit property
4178 utf8only property
4179 version property
4180 volblocksize property
4181 volsize property
4182 vscan property
4183 xattr property
4184 zoned property
4185 .Ed
4186 .It Xo
4187 .Nm
4188 .Cm allow
4189 .Fl c
4190 .Ar perm Ns | Ns @ Ns Ar setname Ns Oo , Ns Ar perm Ns | Ns @ Ns
4191 .Ar setname Oc Ns ...
4192 .Ar filesystem Ns | Ns Ar volume
4193 .Xc
4194 Sets
4195 .Qq create time
4196 permissions.
4197 These permissions are granted
4198 .Pq locally
4199 to the creator of any newly-created descendent file system.
4200 .It Xo
4201 .Nm
4202 .Cm allow
4203 .Fl s No @ Ns Ar setname
4204 .Ar perm Ns | Ns @ Ns Ar setname Ns Oo , Ns Ar perm Ns | Ns @ Ns
4205 .Ar setname Oc Ns ...
4206 .Ar filesystem Ns | Ns Ar volume
4207 .Xc
4208 Defines or adds permissions to a permission set.
4209 The set can be used by other
4210 .Nm zfs Cm allow
4211 commands for the specified file system and its descendents.
4212 Sets are evaluated dynamically, so changes to a set are immediately reflected.
4213 Permission sets follow the same naming restrictions as ZFS file systems, but the
4214 name must begin with
4215 .Sy @ ,
4216 and can be no more than 64 characters long.
4217 .It Xo
4218 .Nm
4219 .Cm unallow
4220 .Op Fl dglru
4221 .Ar user Ns | Ns Ar group Ns Oo , Ns Ar user Ns | Ns Ar group Oc Ns ...
4222 .Oo Ar perm Ns | Ns @ Ns Ar setname Ns Oo , Ns Ar perm Ns | Ns @ Ns
4223 .Ar setname Oc Ns ... Oc
4224 .Ar filesystem Ns | Ns Ar volume
4225 .br
4226 .Nm
4227 .Cm unallow
4228 .Op Fl dlr
4229 .Fl e Ns | Ns Sy everyone
4230 .Oo Ar perm Ns | Ns @ Ns Ar setname Ns Oo , Ns Ar perm Ns | Ns @ Ns
4231 .Ar setname Oc Ns ... Oc
4232 .Ar filesystem Ns | Ns Ar volume
4233 .br
4234 .Nm
4235 .Cm unallow
4236 .Op Fl r
4237 .Fl c
4238 .Oo Ar perm Ns | Ns @ Ns Ar setname Ns Oo , Ns Ar perm Ns | Ns @ Ns
4239 .Ar setname Oc Ns ... Oc
4240 .Ar filesystem Ns | Ns Ar volume
4241 .Xc
4242 Removes permissions that were granted with the
4243 .Nm zfs Cm allow
4244 command.
4245 No permissions are explicitly denied, so other permissions granted are still in
4246 effect.
4247 For example, if the permission is granted by an ancestor.
4248 If no permissions are specified, then all permissions for the specified
4249 .Ar user ,
4250 .Ar group ,
4251 or
4252 .Sy everyone
4253 are removed.
4254 Specifying
4255 .Sy everyone
4256 .Po or using the
4257 .Fl e
4258 option
4259 .Pc
4260 only removes the permissions that were granted to everyone, not all permissions
4261 for every user and group.
4262 See the
4263 .Nm zfs Cm allow
4264 command for a description of the
4265 .Fl ldugec
4266 options.
4267 .Bl -tag -width "-r"
4268 .It Fl r
4269 Recursively remove the permissions from this file system and all descendents.
4270 .El
4271 .It Xo
4272 .Nm
4273 .Cm unallow
4274 .Op Fl r
4275 .Fl s No @ Ns Ar setname
4276 .Oo Ar perm Ns | Ns @ Ns Ar setname Ns Oo , Ns Ar perm Ns | Ns @ Ns
4277 .Ar setname Oc Ns ... Oc
4278 .Ar filesystem Ns | Ns Ar volume
4279 .Xc
4280 Removes permissions from a permission set.
4281 If no permissions are specified, then all permissions are removed, thus removing
4282 the set entirely.
4283 .It Xo
4284 .Nm
4285 .Cm hold
4286 .Op Fl r
4287 .Ar tag Ar snapshot Ns ...
4288 .Xc
4289 Adds a single reference, named with the
4290 .Ar tag
4291 argument, to the specified snapshot or snapshots.
4292 Each snapshot has its own tag namespace, and tags must be unique within that
4293 space.
4294 .Pp
4295 If a hold exists on a snapshot, attempts to destroy that snapshot by using the
4296 .Nm zfs Cm destroy
4297 command return
4298 .Er EBUSY .
4299 .Bl -tag -width "-r"
4300 .It Fl r
4301 Specifies that a hold with the given tag is applied recursively to the snapshots
4302 of all descendent file systems.
4303 .El
4304 .It Xo
4305 .Nm
4306 .Cm holds
4307 .Op Fl rH
4308 .Ar snapshot Ns ...
4309 .Xc
4310 Lists all existing user references for the given snapshot or snapshots.
4311 .Bl -tag -width "-r"
4312 .It Fl r
4313 Lists the holds that are set on the named descendent snapshots, in addition to
4314 listing the holds on the named snapshot.
4315 .It Fl H
4316 Do not print headers, use tab-delimited output.
4317 .El
4318 .It Xo
4319 .Nm
4320 .Cm release
4321 .Op Fl r
4322 .Ar tag Ar snapshot Ns ...
4323 .Xc
4324 Removes a single reference, named with the
4325 .Ar tag
4326 argument, from the specified snapshot or snapshots.
4327 The tag must already exist for each snapshot.
4328 If a hold exists on a snapshot, attempts to destroy that snapshot by using the
4329 .Nm zfs Cm destroy
4330 command return
4331 .Er EBUSY .
4332 .Bl -tag -width "-r"
4333 .It Fl r
4334 Recursively releases a hold with the given tag on the snapshots of all
4335 descendent file systems.
4336 .El
4337 .It Xo
4338 .Nm
4339 .Cm diff
4340 .Op Fl FHt
4341 .Ar snapshot Ar snapshot Ns | Ns Ar filesystem
4342 .Xc
4343 Display the difference between a snapshot of a given filesystem and another
4344 snapshot of that filesystem from a later time or the current contents of the
4345 filesystem.
4346 The first column is a character indicating the type of change, the other columns
4347 indicate pathname, new pathname
4348 .Pq in case of rename ,
4349 change in link count, and optionally file type and/or change time.
4350 The types of change are:
4351 .Bd -literal
4352 - The path has been removed
4353 + The path has been created
4354 M The path has been modified
4355 R The path has been renamed
4356 .Ed
4357 .Bl -tag -width "-F"
4358 .It Fl F
4359 Display an indication of the type of file, in a manner similar to the
4360 .Fl
4361 option of
4362 .Xr ls 1 .
4363 .Bd -literal
4364 B Block device
4365 C Character device
4366 / Directory
4367 > Door
4368 | Named pipe
4369 @ Symbolic link
4370 P Event port
4371 = Socket
4372 F Regular file
4373 .Ed
4374 .It Fl H
4375 Give more parsable tab-separated output, without header lines and without
4376 arrows.
4377 .It Fl t
4378 Display the path's inode change time as the first column of output.
4379 .El
4380 .It Xo
4381 .Nm
4382 .Cm program
4383 .Op Fl jn
4384 .Op Fl t Ar timeout
4385 .Op Fl m Ar memory_limit
4386 .Ar pool script
4387 .Op Ar arg1 No ...
4388 .Xc
4389 Executes
4390 .Ar script
4391 as a ZFS channel program on
4392 .Ar pool .
4393 The ZFS channel
4394 program interface allows ZFS administrative operations to be run
4395 programmatically via a Lua script.
4396 The entire script is executed atomically, with no other administrative
4397 operations taking effect concurrently.
4398 A library of ZFS calls is made available to channel program scripts.
4399 Channel programs may only be run with root privileges.
4400 .sp
4401 For full documentation of the ZFS channel program interface, see the manual
4402 page for
4403 .Xr zfs-program 8 .
4404 .Bl -tag -width ""
4405 .It Fl j
4406 Display channel program output in JSON format. When this flag is specified and
4407 standard output is empty - channel program encountered an error. The details of
4408 such an error will be printed to standard error in plain text.
4409 .It Fl n
4410 Executes a read-only channel program, which runs faster.
4411 The program cannot change on-disk state by calling functions from
4412 the zfs.sync submodule.
4413 The program can be used to gather information such as properties and
4414 determining if changes would succeed (zfs.check.*).
4415 Without this flag, all pending changes must be synced to disk before
4416 a channel program can complete.
4417 .It Fl t Ar timeout
4418 Execution time limit, in milliseconds.
4419 If a channel program executes for longer than the provided timeout, it will
4420 be stopped and an error will be returned.
4421 The default timeout is 1000 ms, and can be set to a maximum of 10000 ms.
4422 .It Fl m Ar memory-limit
4423 Memory limit, in bytes.
4424 If a channel program attempts to allocate more memory than the given limit,
4425 it will be stopped and an error returned.
4426 The default memory limit is 10 MB, and can be set to a maximum of 100 MB.
4427 .sp
4428 All remaining argument strings are passed directly to the channel program as
4429 arguments.
4430 See
4431 .Xr zfs-program 8
4432 for more information.
4433 .El
4434 .It Xo
4435 .Nm
4436 .Cm load-key
4437 .Op Fl nr
4438 .Op Fl L Ar keylocation
4439 .Fl a | Ar filesystem
4440 .Xc
4441 Load the key for
4442 .Ar filesystem ,
4443 allowing it and all children that inherit the
4444 .Sy keylocation
4445 property to be accessed. The key will be expected in the format specified by the
4446 .Sy keyformat
4447 and location specified by the
4448 .Sy keylocation
4449 property. Note that if the
4450 .Sy keylocation
4451 is set to
4452 .Sy prompt
4453 the terminal will interactively wait for the key to be entered. Loading a key
4454 will not automatically mount the dataset. If that functionality is desired,
4455 .Nm zfs Cm mount Sy -l
4456 will ask for the key and mount the dataset. Once the key is loaded the
4457 .Sy keystatus
4458 property will become
4459 .Sy available .
4460 .Bl -tag -width "-r"
4461 .It Fl r
4462 Recursively loads the keys for the specified filesystem and all descendent
4463 encryption roots.
4464 .It Fl a
4465 Loads the keys for all encryption roots in all imported pools.
4466 .It Fl n
4467 Do a dry-run
4468 .Pq Qq No-op
4469 load-key. This will cause zfs to simply check that the
4470 provided key is correct. This command may be run even if the key is already
4471 loaded.
4472 .It Fl L Ar keylocation
4473 Use
4474 .Ar keylocation
4475 instead of the
4476 .Sy keylocation
4477 property. This will not change the value of the property on the dataset. Note
4478 that if used with either
4479 .Fl r
4480 or
4481 .Fl a ,
4482 .Ar keylocation
4483 may only be given as
4484 .Sy prompt .
4485 .El
4486 .It Xo
4487 .Nm
4488 .Cm unload-key
4489 .Op Fl r
4490 .Fl a | Ar filesystem
4491 .Xc
4492 Unloads a key from ZFS, removing the ability to access the dataset and all of
4493 its children that inherit the
4494 .Sy keylocation
4495 property. This requires that the dataset is not currently open or mounted. Once
4496 the key is unloaded the
4497 .Sy keystatus
4498 property will become
4499 .Sy unavailable .
4500 .Bl -tag -width "-r"
4501 .It Fl r
4502 Recursively unloads the keys for the specified filesystem and all descendent
4503 encryption roots.
4504 .It Fl a
4505 Unloads the keys for all encryption roots in all imported pools.
4506 .El
4507 .It Xo
4508 .Nm
4509 .Cm change-key
4510 .Op Fl l
4511 .Op Fl o Ar keylocation Ns = Ns Ar value
4512 .Op Fl o Ar keyformat Ns = Ns Ar value
4513 .Op Fl o Ar pbkdf2iters Ns = Ns Ar value
4514 .Ar filesystem
4515 .Xc
4516 .It Xo
4517 .Nm
4518 .Cm change-key
4519 .Fl i
4520 .Op Fl l
4521 .Ar filesystem
4522 .Xc
4523 Allows a user to change the encryption key used to access a dataset. This
4524 command requires that the existing key for the dataset is already loaded into
4525 ZFS. This command may also be used to change the
4526 .Sy keylocation ,
4527 .Sy keyformat ,
4528 and
4529 .Sy pbkdf2iters
4530 properties as needed. If the dataset was not previously an encryption root it
4531 will become one. Alternatively, the
4532 .Fl i
4533 flag may be provided to cause an encryption root to inherit the parent's key
4534 instead.
4535 .Bl -tag -width "-r"
4536 .It Fl l
4537 Ensures the key is loaded before attempting to change the key. This is
4538 effectively equivalent to
4539 .Qq Nm zfs Cm load-key Ar filesystem ; Nm zfs Cm change-key Ar filesystem
4540 .It Fl o Ar property Ns = Ns Ar value
4541 Allows the user to set encryption key properties (
4542 .Sy keyformat ,
4543 .Sy keylocation ,
4544 and
4545 .Sy pbkdf2iters
4546 ) while changing the key. This is the only way to alter
4547 .Sy keyformat
4548 and
4549 .Sy pbkdf2iters
4550 after the dataset has been created.
4551 .It Fl i
4552 Indicates that zfs should make
4553 .Ar filesystem
4554 inherit the key of its parent. Note that this command can only be run on an
4555 encryption root that has an encrypted parent.
4556 .El
4557 .El
4558 .Sh EXIT STATUS
4559 The
4560 .Nm
4561 utility exits 0 on success, 1 if an error occurs, and 2 if invalid command line
4562 options were specified.
4563 .Sh EXAMPLES
4564 .Bl -tag -width ""
4565 .It Sy Example 1 No Creating a ZFS File System Hierarchy
4566 The following commands create a file system named
4567 .Em pool/home
4568 and a file system named
4569 .Em pool/home/bob .
4570 The mount point
4571 .Pa /export/home
4572 is set for the parent file system, and is automatically inherited by the child
4573 file system.
4574 .Bd -literal
4575 # zfs create pool/home
4576 # zfs set mountpoint=/export/home pool/home
4577 # zfs create pool/home/bob
4578 .Ed
4579 .It Sy Example 2 No Creating a ZFS Snapshot
4580 The following command creates a snapshot named
4581 .Sy yesterday .
4582 This snapshot is mounted on demand in the
4583 .Pa .zfs/snapshot
4584 directory at the root of the
4585 .Em pool/home/bob
4586 file system.
4587 .Bd -literal
4588 # zfs snapshot pool/home/bob@yesterday
4589 .Ed
4590 .It Sy Example 3 No Creating and Destroying Multiple Snapshots
4591 The following command creates snapshots named
4592 .Sy yesterday
4593 of
4594 .Em pool/home
4595 and all of its descendent file systems.
4596 Each snapshot is mounted on demand in the
4597 .Pa .zfs/snapshot
4598 directory at the root of its file system.
4599 The second command destroys the newly created snapshots.
4600 .Bd -literal
4601 # zfs snapshot -r pool/home@yesterday
4602 # zfs destroy -r pool/home@yesterday
4603 .Ed
4604 .It Sy Example 4 No Disabling and Enabling File System Compression
4605 The following command disables the
4606 .Sy compression
4607 property for all file systems under
4608 .Em pool/home .
4609 The next command explicitly enables
4610 .Sy compression
4611 for
4612 .Em pool/home/anne .
4613 .Bd -literal
4614 # zfs set compression=off pool/home
4615 # zfs set compression=on pool/home/anne
4616 .Ed
4617 .It Sy Example 5 No Listing ZFS Datasets
4618 The following command lists all active file systems and volumes in the system.
4619 Snapshots are displayed if the
4620 .Sy listsnaps
4621 property is
4622 .Sy on .
4623 The default is
4624 .Sy off .
4625 See
4626 .Xr zpool 8
4627 for more information on pool properties.
4628 .Bd -literal
4629 # zfs list
4630 NAME USED AVAIL REFER MOUNTPOINT
4631 pool 450K 457G 18K /pool
4632 pool/home 315K 457G 21K /export/home
4633 pool/home/anne 18K 457G 18K /export/home/anne
4634 pool/home/bob 276K 457G 276K /export/home/bob
4635 .Ed
4636 .It Sy Example 6 No Setting a Quota on a ZFS File System
4637 The following command sets a quota of 50 Gbytes for
4638 .Em pool/home/bob .
4639 .Bd -literal
4640 # zfs set quota=50G pool/home/bob
4641 .Ed
4642 .It Sy Example 7 No Listing ZFS Properties
4643 The following command lists all properties for
4644 .Em pool/home/bob .
4645 .Bd -literal
4646 # zfs get all pool/home/bob
4647 NAME PROPERTY VALUE SOURCE
4648 pool/home/bob type filesystem -
4649 pool/home/bob creation Tue Jul 21 15:53 2009 -
4650 pool/home/bob used 21K -
4651 pool/home/bob available 20.0G -
4652 pool/home/bob referenced 21K -
4653 pool/home/bob compressratio 1.00x -
4654 pool/home/bob mounted yes -
4655 pool/home/bob quota 20G local
4656 pool/home/bob reservation none default
4657 pool/home/bob recordsize 128K default
4658 pool/home/bob mountpoint /pool/home/bob default
4659 pool/home/bob sharenfs off default
4660 pool/home/bob checksum on default
4661 pool/home/bob compression on local
4662 pool/home/bob atime on default
4663 pool/home/bob devices on default
4664 pool/home/bob exec on default
4665 pool/home/bob setuid on default
4666 pool/home/bob readonly off default
4667 pool/home/bob zoned off default
4668 pool/home/bob snapdir hidden default
4669 pool/home/bob acltype off default
4670 pool/home/bob aclinherit restricted default
4671 pool/home/bob canmount on default
4672 pool/home/bob xattr on default
4673 pool/home/bob copies 1 default
4674 pool/home/bob version 4 -
4675 pool/home/bob utf8only off -
4676 pool/home/bob normalization none -
4677 pool/home/bob casesensitivity sensitive -
4678 pool/home/bob vscan off default
4679 pool/home/bob nbmand off default
4680 pool/home/bob sharesmb off default
4681 pool/home/bob refquota none default
4682 pool/home/bob refreservation none default
4683 pool/home/bob primarycache all default
4684 pool/home/bob secondarycache all default
4685 pool/home/bob usedbysnapshots 0 -
4686 pool/home/bob usedbydataset 21K -
4687 pool/home/bob usedbychildren 0 -
4688 pool/home/bob usedbyrefreservation 0 -
4689 .Ed
4690 .Pp
4691 The following command gets a single property value.
4692 .Bd -literal
4693 # zfs get -H -o value compression pool/home/bob
4694 on
4695 .Ed
4696 The following command lists all properties with local settings for
4697 .Em pool/home/bob .
4698 .Bd -literal
4699 # zfs get -r -s local -o name,property,value all pool/home/bob
4700 NAME PROPERTY VALUE
4701 pool/home/bob quota 20G
4702 pool/home/bob compression on
4703 .Ed
4704 .It Sy Example 8 No Rolling Back a ZFS File System
4705 The following command reverts the contents of
4706 .Em pool/home/anne
4707 to the snapshot named
4708 .Sy yesterday ,
4709 deleting all intermediate snapshots.
4710 .Bd -literal
4711 # zfs rollback -r pool/home/anne@yesterday
4712 .Ed
4713 .It Sy Example 9 No Creating a ZFS Clone
4714 The following command creates a writable file system whose initial contents are
4715 the same as
4716 .Em pool/home/bob@yesterday .
4717 .Bd -literal
4718 # zfs clone pool/home/bob@yesterday pool/clone
4719 .Ed
4720 .It Sy Example 10 No Promoting a ZFS Clone
4721 The following commands illustrate how to test out changes to a file system, and
4722 then replace the original file system with the changed one, using clones, clone
4723 promotion, and renaming:
4724 .Bd -literal
4725 # zfs create pool/project/production
4726 populate /pool/project/production with data
4727 # zfs snapshot pool/project/production@today
4728 # zfs clone pool/project/production@today pool/project/beta
4729 make changes to /pool/project/beta and test them
4730 # zfs promote pool/project/beta
4731 # zfs rename pool/project/production pool/project/legacy
4732 # zfs rename pool/project/beta pool/project/production
4733 once the legacy version is no longer needed, it can be destroyed
4734 # zfs destroy pool/project/legacy
4735 .Ed
4736 .It Sy Example 11 No Inheriting ZFS Properties
4737 The following command causes
4738 .Em pool/home/bob
4739 and
4740 .Em pool/home/anne
4741 to inherit the
4742 .Sy checksum
4743 property from their parent.
4744 .Bd -literal
4745 # zfs inherit checksum pool/home/bob pool/home/anne
4746 .Ed
4747 .It Sy Example 12 No Remotely Replicating ZFS Data
4748 The following commands send a full stream and then an incremental stream to a
4749 remote machine, restoring them into
4750 .Em poolB/received/fs@a
4751 and
4752 .Em poolB/received/fs@b ,
4753 respectively.
4754 .Em poolB
4755 must contain the file system
4756 .Em poolB/received ,
4757 and must not initially contain
4758 .Em poolB/received/fs .
4759 .Bd -literal
4760 # zfs send pool/fs@a | \e
4761 ssh host zfs receive poolB/received/fs@a
4762 # zfs send -i a pool/fs@b | \e
4763 ssh host zfs receive poolB/received/fs
4764 .Ed
4765 .It Sy Example 13 No Using the zfs receive -d Option
4766 The following command sends a full stream of
4767 .Em poolA/fsA/fsB@snap
4768 to a remote machine, receiving it into
4769 .Em poolB/received/fsA/fsB@snap .
4770 The
4771 .Em fsA/fsB@snap
4772 portion of the received snapshot's name is determined from the name of the sent
4773 snapshot.
4774 .Em poolB
4775 must contain the file system
4776 .Em poolB/received .
4777 If
4778 .Em poolB/received/fsA
4779 does not exist, it is created as an empty file system.
4780 .Bd -literal
4781 # zfs send poolA/fsA/fsB@snap | \e
4782 ssh host zfs receive -d poolB/received
4783 .Ed
4784 .It Sy Example 14 No Setting User Properties
4785 The following example sets the user-defined
4786 .Sy com.example:department
4787 property for a dataset.
4788 .Bd -literal
4789 # zfs set com.example:department=12345 tank/accounting
4790 .Ed
4791 .It Sy Example 15 No Performing a Rolling Snapshot
4792 The following example shows how to maintain a history of snapshots with a
4793 consistent naming scheme.
4794 To keep a week's worth of snapshots, the user destroys the oldest snapshot,
4795 renames the remaining snapshots, and then creates a new snapshot, as follows:
4796 .Bd -literal
4797 # zfs destroy -r pool/users@7daysago
4798 # zfs rename -r pool/users@6daysago @7daysago
4799 # zfs rename -r pool/users@5daysago @6daysago
4800 # zfs rename -r pool/users@yesterday @5daysago
4801 # zfs rename -r pool/users@yesterday @4daysago
4802 # zfs rename -r pool/users@yesterday @3daysago
4803 # zfs rename -r pool/users@yesterday @2daysago
4804 # zfs rename -r pool/users@today @yesterday
4805 # zfs snapshot -r pool/users@today
4806 .Ed
4807 .It Sy Example 16 No Setting sharenfs Property Options on a ZFS File System
4808 The following commands show how to set
4809 .Sy sharenfs
4810 property options to enable
4811 .Sy rw
4812 access for a set of
4813 .Sy IP
4814 addresses and to enable root access for system
4815 .Sy neo
4816 on the
4817 .Em tank/home
4818 file system.
4819 .Bd -literal
4820 # zfs set sharenfs='rw=@123.123.0.0/16,root=neo' tank/home
4821 .Ed
4822 .Pp
4823 If you are using
4824 .Sy DNS
4825 for host name resolution, specify the fully qualified hostname.
4826 .It Sy Example 17 No Delegating ZFS Administration Permissions on a ZFS Dataset
4827 The following example shows how to set permissions so that user
4828 .Sy cindys
4829 can create, destroy, mount, and take snapshots on
4830 .Em tank/cindys .
4831 The permissions on
4832 .Em tank/cindys
4833 are also displayed.
4834 .Bd -literal
4835 # zfs allow cindys create,destroy,mount,snapshot tank/cindys
4836 # zfs allow tank/cindys
4837 ---- Permissions on tank/cindys --------------------------------------
4838 Local+Descendent permissions:
4839 user cindys create,destroy,mount,snapshot
4840 .Ed
4841 .Pp
4842 Because the
4843 .Em tank/cindys
4844 mount point permission is set to 755 by default, user
4845 .Sy cindys
4846 will be unable to mount file systems under
4847 .Em tank/cindys .
4848 Add an ACE similar to the following syntax to provide mount point access:
4849 .Bd -literal
4850 # chmod A+user:cindys:add_subdirectory:allow /tank/cindys
4851 .Ed
4852 .It Sy Example 18 No Delegating Create Time Permissions on a ZFS Dataset
4853 The following example shows how to grant anyone in the group
4854 .Sy staff
4855 to create file systems in
4856 .Em tank/users .
4857 This syntax also allows staff members to destroy their own file systems, but not
4858 destroy anyone else's file system.
4859 The permissions on
4860 .Em tank/users
4861 are also displayed.
4862 .Bd -literal
4863 # zfs allow staff create,mount tank/users
4864 # zfs allow -c destroy tank/users
4865 # zfs allow tank/users
4866 ---- Permissions on tank/users ---------------------------------------
4867 Permission sets:
4868 destroy
4869 Local+Descendent permissions:
4870 group staff create,mount
4871 .Ed
4872 .It Sy Example 19 No Defining and Granting a Permission Set on a ZFS Dataset
4873 The following example shows how to define and grant a permission set on the
4874 .Em tank/users
4875 file system.
4876 The permissions on
4877 .Em tank/users
4878 are also displayed.
4879 .Bd -literal
4880 # zfs allow -s @pset create,destroy,snapshot,mount tank/users
4881 # zfs allow staff @pset tank/users
4882 # zfs allow tank/users
4883 ---- Permissions on tank/users ---------------------------------------
4884 Permission sets:
4885 @pset create,destroy,mount,snapshot
4886 Local+Descendent permissions:
4887 group staff @pset
4888 .Ed
4889 .It Sy Example 20 No Delegating Property Permissions on a ZFS Dataset
4890 The following example shows to grant the ability to set quotas and reservations
4891 on the
4892 .Em users/home
4893 file system.
4894 The permissions on
4895 .Em users/home
4896 are also displayed.
4897 .Bd -literal
4898 # zfs allow cindys quota,reservation users/home
4899 # zfs allow users/home
4900 ---- Permissions on users/home ---------------------------------------
4901 Local+Descendent permissions:
4902 user cindys quota,reservation
4903 cindys% zfs set quota=10G users/home/marks
4904 cindys% zfs get quota users/home/marks
4905 NAME PROPERTY VALUE SOURCE
4906 users/home/marks quota 10G local
4907 .Ed
4908 .It Sy Example 21 No Removing ZFS Delegated Permissions on a ZFS Dataset
4909 The following example shows how to remove the snapshot permission from the
4910 .Sy staff
4911 group on the
4912 .Em tank/users
4913 file system.
4914 The permissions on
4915 .Em tank/users
4916 are also displayed.
4917 .Bd -literal
4918 # zfs unallow staff snapshot tank/users
4919 # zfs allow tank/users
4920 ---- Permissions on tank/users ---------------------------------------
4921 Permission sets:
4922 @pset create,destroy,mount,snapshot
4923 Local+Descendent permissions:
4924 group staff @pset
4925 .Ed
4926 .It Sy Example 22 No Showing the differences between a snapshot and a ZFS Dataset
4927 The following example shows how to see what has changed between a prior
4928 snapshot of a ZFS dataset and its current state.
4929 The
4930 .Fl F
4931 option is used to indicate type information for the files affected.
4932 .Bd -literal
4933 # zfs diff -F tank/test@before tank/test
4934 M / /tank/test/
4935 M F /tank/test/linked (+1)
4936 R F /tank/test/oldname -> /tank/test/newname
4937 - F /tank/test/deleted
4938 + F /tank/test/created
4939 M F /tank/test/modified
4940 .Ed
4941 .It Sy Example 23 No Creating a bookmark
4942 The following example create a bookmark to a snapshot. This bookmark
4943 can then be used instead of snapshot in send streams.
4944 .Bd -literal
4945 # zfs bookmark rpool@snapshot rpool#bookmark
4946 .Ed
4947 .It Sy Example 24 No Setting sharesmb Property Options on a ZFS File System
4948 The following example show how to share SMB filesystem through ZFS. Note that
4949 that a user and his/her password must be given.
4950 .Bd -literal
4951 # smbmount //127.0.0.1/share_tmp /mnt/tmp \\
4952 -o user=workgroup/turbo,password=obrut,uid=1000
4953 .Ed
4954 .Pp
4955 Minimal
4956 .Em /etc/samba/smb.conf
4957 configuration required:
4958 .Pp
4959 Samba will need to listen to 'localhost' (127.0.0.1) for the ZFS utilities to
4960 communicate with Samba. This is the default behavior for most Linux
4961 distributions.
4962 .Pp
4963 Samba must be able to authenticate a user. This can be done in a number of
4964 ways, depending on if using the system password file, LDAP or the Samba
4965 specific smbpasswd file. How to do this is outside the scope of this manual.
4966 Please refer to the
4967 .Xr smb.conf 5
4968 man page for more information.
4969 .Pp
4970 See the
4971 .Sy USERSHARE section
4972 of the
4973 .Xr smb.conf 5
4974 man page for all configuration options in case you need to modify any options
4975 to the share afterwards. Do note that any changes done with the
4976 .Xr net 8
4977 command will be undone if the share is ever unshared (such as at a reboot etc).
4978 .El
4979 .Sh INTERFACE STABILITY
4980 .Sy Committed .
4981 .Sh SEE ALSO
4982 .Xr attr 1 ,
4983 .Xr gzip 1 ,
4984 .Xr ssh 1 ,
4985 .Xr chmod 2 ,
4986 .Xr fsync 2 ,
4987 .Xr stat 2 ,
4988 .Xr write 2 ,
4989 .Xr acl 5 ,
4990 .Xr attributes 5 ,
4991 .Xr exports 5 ,
4992 .Xr exportfs 8 ,
4993 .Xr mount 8 ,
4994 .Xr net 8 ,
4995 .Xr selinux 8 ,
4996 .Xr zpool 8