]> git.proxmox.com Git - pve-docs.git/blame - local-zfs.adoc
bump version to 8.1.4
[pve-docs.git] / local-zfs.adoc
CommitLineData
0235c741 1[[chapter_zfs]]
9ee94323
DM
2ZFS on Linux
3------------
5f09af76
DM
4ifdef::wiki[]
5:pve-toplevel:
6endif::wiki[]
7
9ee94323
DM
8ZFS is a combined file system and logical volume manager designed by
9Sun Microsystems. Starting with {pve} 3.4, the native Linux
10kernel port of the ZFS file system is introduced as optional
5eba0743
FG
11file system and also as an additional selection for the root
12file system. There is no need for manually compile ZFS modules - all
9ee94323
DM
13packages are included.
14
5eba0743 15By using ZFS, its possible to achieve maximum enterprise features with
9ee94323
DM
16low budget hardware, but also high performance systems by leveraging
17SSD caching or even SSD only setups. ZFS can replace cost intense
18hardware raid cards by moderate CPU and memory load combined with easy
19management.
20
21.General ZFS advantages
22
23* Easy configuration and management with {pve} GUI and CLI.
24
25* Reliable
26
27* Protection against data corruption
28
5eba0743 29* Data compression on file system level
9ee94323
DM
30
31* Snapshots
32
33* Copy-on-write clone
34
447596fd
SH
35* Various raid levels: RAID0, RAID1, RAID10, RAIDZ-1, RAIDZ-2, RAIDZ-3,
36dRAID, dRAID2, dRAID3
9ee94323
DM
37
38* Can use SSD for cache
39
40* Self healing
41
42* Continuous integrity checking
43
44* Designed for high storage capacities
45
9ee94323
DM
46* Asynchronous replication over network
47
48* Open Source
49
50* Encryption
51
52* ...
53
54
55Hardware
56~~~~~~~~
57
58ZFS depends heavily on memory, so you need at least 8GB to start. In
60ed554f 59practice, use as much as you can get for your hardware/budget. To prevent
9ee94323
DM
60data corruption, we recommend the use of high quality ECC RAM.
61
d48bdcf2 62If you use a dedicated cache and/or log disk, you should use an
0d4a93dc 63enterprise class SSD. This can
9ee94323
DM
64increase the overall performance significantly.
65
60ed554f
DW
66IMPORTANT: Do not use ZFS on top of a hardware RAID controller which has its
67own cache management. ZFS needs to communicate directly with the disks. An
68HBA adapter or something like an LSI controller flashed in ``IT'' mode is more
69appropriate.
9ee94323
DM
70
71If you are experimenting with an installation of {pve} inside a VM
8c1189b6 72(Nested Virtualization), don't use `virtio` for disks of that VM,
60ed554f
DW
73as they are not supported by ZFS. Use IDE or SCSI instead (also works
74with the `virtio` SCSI controller type).
9ee94323
DM
75
76
5eba0743 77Installation as Root File System
9ee94323
DM
78~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
79
80When you install using the {pve} installer, you can choose ZFS for the
81root file system. You need to select the RAID type at installation
82time:
83
84[horizontal]
8c1189b6
FG
85RAID0:: Also called ``striping''. The capacity of such volume is the sum
86of the capacities of all disks. But RAID0 does not add any redundancy,
9ee94323
DM
87so the failure of a single drive makes the volume unusable.
88
8c1189b6 89RAID1:: Also called ``mirroring''. Data is written identically to all
9ee94323
DM
90disks. This mode requires at least 2 disks with the same size. The
91resulting capacity is that of a single disk.
92
93RAID10:: A combination of RAID0 and RAID1. Requires at least 4 disks.
94
95RAIDZ-1:: A variation on RAID-5, single parity. Requires at least 3 disks.
96
97RAIDZ-2:: A variation on RAID-5, double parity. Requires at least 4 disks.
98
99RAIDZ-3:: A variation on RAID-5, triple parity. Requires at least 5 disks.
100
101The installer automatically partitions the disks, creates a ZFS pool
8c1189b6
FG
102called `rpool`, and installs the root file system on the ZFS subvolume
103`rpool/ROOT/pve-1`.
9ee94323 104
8c1189b6 105Another subvolume called `rpool/data` is created to store VM
9ee94323 106images. In order to use that with the {pve} tools, the installer
8c1189b6 107creates the following configuration entry in `/etc/pve/storage.cfg`:
9ee94323
DM
108
109----
110zfspool: local-zfs
111 pool rpool/data
112 sparse
113 content images,rootdir
114----
115
116After installation, you can view your ZFS pool status using the
8c1189b6 117`zpool` command:
9ee94323
DM
118
119----
120# zpool status
121 pool: rpool
122 state: ONLINE
123 scan: none requested
124config:
125
126 NAME STATE READ WRITE CKSUM
127 rpool ONLINE 0 0 0
128 mirror-0 ONLINE 0 0 0
129 sda2 ONLINE 0 0 0
130 sdb2 ONLINE 0 0 0
131 mirror-1 ONLINE 0 0 0
132 sdc ONLINE 0 0 0
133 sdd ONLINE 0 0 0
134
135errors: No known data errors
136----
137
8c1189b6 138The `zfs` command is used configure and manage your ZFS file
9ee94323
DM
139systems. The following command lists all file systems after
140installation:
141
142----
143# zfs list
144NAME USED AVAIL REFER MOUNTPOINT
145rpool 4.94G 7.68T 96K /rpool
146rpool/ROOT 702M 7.68T 96K /rpool/ROOT
147rpool/ROOT/pve-1 702M 7.68T 702M /
148rpool/data 96K 7.68T 96K /rpool/data
149rpool/swap 4.25G 7.69T 64K -
150----
151
152
e4262cac
AL
153[[sysadmin_zfs_raid_considerations]]
154ZFS RAID Level Considerations
155~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
156
157There are a few factors to take into consideration when choosing the layout of
158a ZFS pool. The basic building block of a ZFS pool is the virtual device, or
159`vdev`. All vdevs in a pool are used equally and the data is striped among them
8182a38e 160(RAID0). Check the `zpoolconcepts(7)` manpage for more details on vdevs.
e4262cac
AL
161
162[[sysadmin_zfs_raid_performance]]
163Performance
164^^^^^^^^^^^
165
166Each `vdev` type has different performance behaviors. The two
167parameters of interest are the IOPS (Input/Output Operations per Second) and
168the bandwidth with which data can be written or read.
169
f1b7d1a3
MH
170A 'mirror' vdev (RAID1) will approximately behave like a single disk in regard
171to both parameters when writing data. When reading data the performance will
172scale linearly with the number of disks in the mirror.
e4262cac
AL
173
174A common situation is to have 4 disks. When setting it up as 2 mirror vdevs
175(RAID10) the pool will have the write characteristics as two single disks in
f1b7d1a3 176regard to IOPS and bandwidth. For read operations it will resemble 4 single
e4262cac
AL
177disks.
178
179A 'RAIDZ' of any redundancy level will approximately behave like a single disk
f1b7d1a3 180in regard to IOPS with a lot of bandwidth. How much bandwidth depends on the
e4262cac
AL
181size of the RAIDZ vdev and the redundancy level.
182
183For running VMs, IOPS is the more important metric in most situations.
184
185
186[[sysadmin_zfs_raid_size_space_usage_redundancy]]
187Size, Space usage and Redundancy
188^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
189
190While a pool made of 'mirror' vdevs will have the best performance
191characteristics, the usable space will be 50% of the disks available. Less if a
192mirror vdev consists of more than 2 disks, for example in a 3-way mirror. At
193least one healthy disk per mirror is needed for the pool to stay functional.
194
195The usable space of a 'RAIDZ' type vdev of N disks is roughly N-P, with P being
196the RAIDZ-level. The RAIDZ-level indicates how many arbitrary disks can fail
197without losing data. A special case is a 4 disk pool with RAIDZ2. In this
198situation it is usually better to use 2 mirror vdevs for the better performance
199as the usable space will be the same.
200
201Another important factor when using any RAIDZ level is how ZVOL datasets, which
202are used for VM disks, behave. For each data block the pool needs parity data
203which is at least the size of the minimum block size defined by the `ashift`
204value of the pool. With an ashift of 12 the block size of the pool is 4k. The
205default block size for a ZVOL is 8k. Therefore, in a RAIDZ2 each 8k block
206written will cause two additional 4k parity blocks to be written,
2078k + 4k + 4k = 16k. This is of course a simplified approach and the real
208situation will be slightly different with metadata, compression and such not
209being accounted for in this example.
210
211This behavior can be observed when checking the following properties of the
212ZVOL:
213
214 * `volsize`
215 * `refreservation` (if the pool is not thin provisioned)
216 * `used` (if the pool is thin provisioned and without snapshots present)
217
218----
219# zfs get volsize,refreservation,used <pool>/vm-<vmid>-disk-X
220----
221
222`volsize` is the size of the disk as it is presented to the VM, while
223`refreservation` shows the reserved space on the pool which includes the
224expected space needed for the parity data. If the pool is thin provisioned, the
225`refreservation` will be set to 0. Another way to observe the behavior is to
226compare the used disk space within the VM and the `used` property. Be aware
227that snapshots will skew the value.
228
229There are a few options to counter the increased use of space:
230
231* Increase the `volblocksize` to improve the data to parity ratio
232* Use 'mirror' vdevs instead of 'RAIDZ'
233* Use `ashift=9` (block size of 512 bytes)
234
235The `volblocksize` property can only be set when creating a ZVOL. The default
236value can be changed in the storage configuration. When doing this, the guest
237needs to be tuned accordingly and depending on the use case, the problem of
b2444770 238write amplification is just moved from the ZFS layer up to the guest.
e4262cac
AL
239
240Using `ashift=9` when creating the pool can lead to bad
241performance, depending on the disks underneath, and cannot be changed later on.
242
243Mirror vdevs (RAID1, RAID10) have favorable behavior for VM workloads. Use
f4abc68a 244them, unless your environment has specific needs and characteristics where
e4262cac
AL
245RAIDZ performance characteristics are acceptable.
246
247
447596fd
SH
248ZFS dRAID
249~~~~~~~~~
250
251In a ZFS dRAID (declustered RAID) the hot spare drive(s) participate in the RAID.
252Their spare capacity is reserved and used for rebuilding when one drive fails.
253This provides, depending on the configuration, faster rebuilding compared to a
254RAIDZ in case of drive failure. More information can be found in the official
255OpenZFS documentation. footnote:[OpenZFS dRAID
256https://openzfs.github.io/openzfs-docs/Basic%20Concepts/dRAID%20Howto.html]
257
258NOTE: dRAID is intended for more than 10-15 disks in a dRAID. A RAIDZ
259setup should be better for a lower amount of disks in most use cases.
260
261NOTE: The GUI requires one more disk than the minimum (i.e. dRAID1 needs 3). It
262expects that a spare disk is added as well.
263
264 * `dRAID1` or `dRAID`: requires at least 2 disks, one can fail before data is
265lost
266 * `dRAID2`: requires at least 3 disks, two can fail before data is lost
267 * `dRAID3`: requires at least 4 disks, three can fail before data is lost
268
269
270Additional information can be found on the manual page:
271
272----
273# man zpoolconcepts
274----
275
276Spares and Data
277^^^^^^^^^^^^^^^
278The number of `spares` tells the system how many disks it should keep ready in
279case of a disk failure. The default value is 0 `spares`. Without spares,
280rebuilding won't get any speed benefits.
281
282`data` defines the number of devices in a redundancy group. The default value is
2838. Except when `disks - parity - spares` equal something less than 8, the lower
284number is used. In general, a smaller number of `data` devices leads to higher
285IOPS, better compression ratios and faster resilvering, but defining fewer data
286devices reduces the available storage capacity of the pool.
287
288
9ee94323
DM
289Bootloader
290~~~~~~~~~~
291
cb04e768
SI
292{pve} uses xref:sysboot_proxmox_boot_tool[`proxmox-boot-tool`] to manage the
293bootloader configuration.
3a433e9b 294See the chapter on xref:sysboot[{pve} host bootloaders] for details.
9ee94323
DM
295
296
297ZFS Administration
298~~~~~~~~~~~~~~~~~~
299
300This section gives you some usage examples for common tasks. ZFS
301itself is really powerful and provides many options. The main commands
8c1189b6
FG
302to manage ZFS are `zfs` and `zpool`. Both commands come with great
303manual pages, which can be read with:
9ee94323
DM
304
305----
306# man zpool
307# man zfs
308-----
309
42449bdf
TL
310[[sysadmin_zfs_create_new_zpool]]
311Create a new zpool
312^^^^^^^^^^^^^^^^^^
9ee94323 313
25b89d16
TL
314To create a new pool, at least one disk is needed. The `ashift` should have the
315same sector-size (2 power of `ashift`) or larger as the underlying disk.
9ee94323 316
eaefe614
FE
317----
318# zpool create -f -o ashift=12 <pool> <device>
319----
9ee94323 320
25b89d16
TL
321[TIP]
322====
323Pool names must adhere to the following rules:
324
325* begin with a letter (a-z or A-Z)
326* contain only alphanumeric, `-`, `_`, `.`, `:` or ` ` (space) characters
327* must *not begin* with one of `mirror`, `raidz`, `draid` or `spare`
328* must not be `log`
329====
330
e06707f2 331To activate compression (see section <<zfs_compression,Compression in ZFS>>):
9ee94323 332
eaefe614
FE
333----
334# zfs set compression=lz4 <pool>
335----
9ee94323 336
42449bdf
TL
337[[sysadmin_zfs_create_new_zpool_raid0]]
338Create a new pool with RAID-0
339^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
9ee94323 340
dc2d00a0 341Minimum 1 disk
9ee94323 342
eaefe614
FE
343----
344# zpool create -f -o ashift=12 <pool> <device1> <device2>
345----
9ee94323 346
42449bdf
TL
347[[sysadmin_zfs_create_new_zpool_raid1]]
348Create a new pool with RAID-1
349^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
9ee94323 350
dc2d00a0 351Minimum 2 disks
9ee94323 352
eaefe614
FE
353----
354# zpool create -f -o ashift=12 <pool> mirror <device1> <device2>
355----
9ee94323 356
42449bdf
TL
357[[sysadmin_zfs_create_new_zpool_raid10]]
358Create a new pool with RAID-10
359^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
9ee94323 360
dc2d00a0 361Minimum 4 disks
9ee94323 362
eaefe614
FE
363----
364# zpool create -f -o ashift=12 <pool> mirror <device1> <device2> mirror <device3> <device4>
365----
9ee94323 366
42449bdf
TL
367[[sysadmin_zfs_create_new_zpool_raidz1]]
368Create a new pool with RAIDZ-1
369^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
9ee94323 370
dc2d00a0 371Minimum 3 disks
9ee94323 372
eaefe614
FE
373----
374# zpool create -f -o ashift=12 <pool> raidz1 <device1> <device2> <device3>
375----
9ee94323 376
42449bdf
TL
377Create a new pool with RAIDZ-2
378^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
9ee94323 379
dc2d00a0 380Minimum 4 disks
9ee94323 381
eaefe614
FE
382----
383# zpool create -f -o ashift=12 <pool> raidz2 <device1> <device2> <device3> <device4>
384----
9ee94323 385
8a1de6bf
TL
386Please read the section for
387xref:sysadmin_zfs_raid_considerations[ZFS RAID Level Considerations]
388to get a rough estimate on how IOPS and bandwidth expectations before setting up
389a pool, especially when wanting to use a RAID-Z mode.
390
42449bdf
TL
391[[sysadmin_zfs_create_new_zpool_with_cache]]
392Create a new pool with cache (L2ARC)
393^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
9ee94323 394
5f440d2c
TL
395It is possible to use a dedicated device, or partition, as second-level cache to
396increase the performance. Such a cache device will especially help with
397random-read workloads of data that is mostly static. As it acts as additional
398caching layer between the actual storage, and the in-memory ARC, it can also
399help if the ARC must be reduced due to memory constraints.
9ee94323 400
5f440d2c 401.Create ZFS pool with a on-disk cache
eaefe614 402----
5f440d2c 403# zpool create -f -o ashift=12 <pool> <device> cache <cache-device>
eaefe614 404----
9ee94323 405
5f440d2c
TL
406Here only a single `<device>` and a single `<cache-device>` was used, but it is
407possible to use more devices, like it's shown in
408xref:sysadmin_zfs_create_new_zpool_raid0[Create a new pool with RAID].
409
410Note that for cache devices no mirror or raid modi exist, they are all simply
411accumulated.
412
413If any cache device produces errors on read, ZFS will transparently divert that
414request to the underlying storage layer.
415
416
42449bdf
TL
417[[sysadmin_zfs_create_new_zpool_with_log]]
418Create a new pool with log (ZIL)
419^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
9ee94323 420
5f440d2c
TL
421It is possible to use a dedicated drive, or partition, for the ZFS Intent Log
422(ZIL), it is mainly used to provide safe synchronous transactions, so often in
423performance critical paths like databases, or other programs that issue `fsync`
424operations more frequently.
9ee94323 425
5f440d2c
TL
426The pool is used as default ZIL location, diverting the ZIL IO load to a
427separate device can, help to reduce transaction latencies while relieving the
428main pool at the same time, increasing overall performance.
9ee94323 429
5f440d2c
TL
430For disks to be used as log devices, directly or through a partition, it's
431recommend to:
432
433- use fast SSDs with power-loss protection, as those have much smaller commit
434 latencies.
435
436- Use at least a few GB for the partition (or whole device), but using more than
437 half of your installed memory won't provide you with any real advantage.
438
439.Create ZFS pool with separate log device
eaefe614 440----
5f440d2c 441# zpool create -f -o ashift=12 <pool> <device> log <log-device>
eaefe614 442----
9ee94323 443
5f440d2c
TL
444In above example a single `<device>` and a single `<log-device>` is used, but you
445can also combine this with other RAID variants, as described in the
446xref:sysadmin_zfs_create_new_zpool_raid0[Create a new pool with RAID] section.
447
448You can also mirror the log device to multiple devices, this is mainly useful to
449ensure that performance doesn't immediately degrades if a single log device
450fails.
451
452If all log devices fail the ZFS main pool itself will be used again, until the
453log device(s) get replaced.
454
42449bdf
TL
455[[sysadmin_zfs_add_cache_and_log_dev]]
456Add cache and log to an existing pool
457^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
9ee94323 458
5f440d2c
TL
459If you have a pool without cache and log you can still add both, or just one of
460them, at any time.
461
462For example, let's assume you got a good enterprise SSD with power-loss
463protection that you want to use for improving the overall performance of your
464pool.
465
466As the maximum size of a log device should be about half the size of the
467installed physical memory, it means that the ZIL will mostly likely only take up
468a relatively small part of the SSD, the remaining space can be used as cache.
9ee94323 469
5f440d2c 470First you have to create two GPT partitions on the SSD with `parted` or `gdisk`.
9ee94323 471
5f440d2c 472Then you're ready to add them to an pool:
9ee94323 473
5f440d2c 474.Add both, a separate log device and a second-level cache, to an existing pool
eaefe614 475----
237007eb 476# zpool add -f <pool> log <device-part1> cache <device-part2>
eaefe614 477----
9ee94323 478
5f440d2c
TL
479Just replay `<pool>`, `<device-part1>` and `<device-part2>` with the pool name
480and the two `/dev/disk/by-id/` paths to the partitions.
481
482You can also add ZIL and cache separately.
483
484.Add a log device to an existing ZFS pool
485----
486# zpool add <pool> log <log-device>
487----
488
489
42449bdf
TL
490[[sysadmin_zfs_change_failed_dev]]
491Changing a failed device
492^^^^^^^^^^^^^^^^^^^^^^^^
9ee94323 493
eaefe614 494----
5f440d2c 495# zpool replace -f <pool> <old-device> <new-device>
eaefe614 496----
1748211a 497
11a6e022
AL
498.Changing a failed bootable device
499
7c73a209
CH
500Depending on how {pve} was installed it is either using `systemd-boot` or GRUB
501through `proxmox-boot-tool` footnote:[Systems installed with {pve} 6.4 or later,
502EFI systems installed with {pve} 5.4 or later] or plain GRUB as bootloader (see
cb04e768
SI
503xref:sysboot[Host Bootloader]). You can check by running:
504
505----
506# proxmox-boot-tool status
507----
11a6e022
AL
508
509The first steps of copying the partition table, reissuing GUIDs and replacing
510the ZFS partition are the same. To make the system bootable from the new disk,
511different steps are needed which depend on the bootloader in use.
1748211a 512
eaefe614
FE
513----
514# sgdisk <healthy bootable device> -R <new device>
515# sgdisk -G <new device>
516# zpool replace -f <pool> <old zfs partition> <new zfs partition>
11a6e022
AL
517----
518
44aee838 519NOTE: Use the `zpool status -v` command to monitor how far the resilvering
11a6e022
AL
520process of the new disk has progressed.
521
cb04e768 522.With `proxmox-boot-tool`:
11a6e022
AL
523
524----
cb04e768 525# proxmox-boot-tool format <new disk's ESP>
952ee606 526# proxmox-boot-tool init <new disk's ESP> [grub]
eaefe614 527----
0daaddbd
FG
528
529NOTE: `ESP` stands for EFI System Partition, which is setup as partition #2 on
530bootable disks setup by the {pve} installer since version 5.4. For details, see
cb04e768 531xref:sysboot_proxmox_boot_setup[Setting up a new partition for use as synced ESP].
9ee94323 532
7c73a209
CH
533NOTE: Make sure to pass 'grub' as mode to `proxmox-boot-tool init` if
534`proxmox-boot-tool status` indicates your current disks are using GRUB,
952ee606
FG
535especially if Secure Boot is enabled!
536
7c73a209 537.With plain GRUB:
11a6e022
AL
538
539----
540# grub-install <new disk>
541----
7c73a209 542NOTE: Plain GRUB is only used on systems installed with {pve} 6.3 or earlier,
69c2b2e5
SI
543which have not been manually migrated to using `proxmox-boot-tool` yet.
544
9ee94323 545
aa425868
FE
546Configure E-Mail Notification
547~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
9ee94323 548
aa425868
FE
549ZFS comes with an event daemon `ZED`, which monitors events generated by the ZFS
550kernel module. The daemon can also send emails on ZFS events like pool errors.
551Newer ZFS packages ship the daemon in a separate `zfs-zed` package, which should
552already be installed by default in {pve}.
e280a948 553
aa425868
FE
554You can configure the daemon via the file `/etc/zfs/zed.d/zed.rc` with your
555favorite editor. The required setting for email notification is
556`ZED_EMAIL_ADDR`, which is set to `root` by default.
9ee94323 557
083adc34 558--------
9ee94323 559ZED_EMAIL_ADDR="root"
083adc34 560--------
9ee94323 561
8c1189b6 562Please note {pve} forwards mails to `root` to the email address
9ee94323
DM
563configured for the root user.
564
9ee94323 565
42449bdf 566[[sysadmin_zfs_limit_memory_usage]]
5eba0743 567Limit ZFS Memory Usage
9ee94323
DM
568~~~~~~~~~~~~~~~~~~~~~~
569
9060abb9
TL
570ZFS uses '50 %' of the host memory for the **A**daptive **R**eplacement
571**C**ache (ARC) by default. Allocating enough memory for the ARC is crucial for
572IO performance, so reduce it with caution. As a general rule of thumb, allocate
573at least +2 GiB Base + 1 GiB/TiB-Storage+. For example, if you have a pool with
574+8 TiB+ of available storage space then you should use +10 GiB+ of memory for
575the ARC.
576
577You can change the ARC usage limit for the current boot (a reboot resets this
578change again) by writing to the +zfs_arc_max+ module parameter directly:
579
580----
581 echo "$[10 * 1024*1024*1024]" >/sys/module/zfs/parameters/zfs_arc_max
582----
583
584To *permanently change* the ARC limits, add the following line to
585`/etc/modprobe.d/zfs.conf`:
9ee94323 586
5eba0743
FG
587--------
588options zfs zfs_arc_max=8589934592
589--------
9ee94323 590
9060abb9 591This example setting limits the usage to 8 GiB ('8 * 2^30^').
9ee94323 592
beed14f8
FG
593IMPORTANT: In case your desired +zfs_arc_max+ value is lower than or equal to
594+zfs_arc_min+ (which defaults to 1/32 of the system memory), +zfs_arc_max+ will
595be ignored unless you also set +zfs_arc_min+ to at most +zfs_arc_max - 1+.
596
597----
598echo "$[8 * 1024*1024*1024 - 1]" >/sys/module/zfs/parameters/zfs_arc_min
599echo "$[8 * 1024*1024*1024]" >/sys/module/zfs/parameters/zfs_arc_max
600----
601
602This example setting (temporarily) limits the usage to 8 GiB ('8 * 2^30^') on
603systems with more than 256 GiB of total memory, where simply setting
604+zfs_arc_max+ alone would not work.
605
9ee94323
DM
606[IMPORTANT]
607====
9060abb9 608If your root file system is ZFS, you must update your initramfs every
5eba0743 609time this value changes:
9ee94323 610
eaefe614 611----
abdfbbbb 612# update-initramfs -u -k all
eaefe614 613----
9060abb9
TL
614
615You *must reboot* to activate these changes.
9ee94323
DM
616====
617
618
dc74fc63 619[[zfs_swap]]
4128e7ff
TL
620SWAP on ZFS
621~~~~~~~~~~~
9ee94323 622
dc74fc63 623Swap-space created on a zvol may generate some troubles, like blocking the
9ee94323
DM
624server or generating a high IO load, often seen when starting a Backup
625to an external Storage.
626
627We strongly recommend to use enough memory, so that you normally do not
dc74fc63 628run into low memory situations. Should you need or want to add swap, it is
3a433e9b 629preferred to create a partition on a physical disk and use it as a swap device.
dc74fc63
SI
630You can leave some space free for this purpose in the advanced options of the
631installer. Additionally, you can lower the
8c1189b6 632``swappiness'' value. A good value for servers is 10:
9ee94323 633
eaefe614
FE
634----
635# sysctl -w vm.swappiness=10
636----
9ee94323 637
8c1189b6 638To make the swappiness persistent, open `/etc/sysctl.conf` with
9ee94323
DM
639an editor of your choice and add the following line:
640
083adc34
FG
641--------
642vm.swappiness = 10
643--------
9ee94323 644
8c1189b6 645.Linux kernel `swappiness` parameter values
9ee94323
DM
646[width="100%",cols="<m,2d",options="header"]
647|===========================================================
648| Value | Strategy
649| vm.swappiness = 0 | The kernel will swap only to avoid
650an 'out of memory' condition
651| vm.swappiness = 1 | Minimum amount of swapping without
652disabling it entirely.
653| vm.swappiness = 10 | This value is sometimes recommended to
654improve performance when sufficient memory exists in a system.
655| vm.swappiness = 60 | The default value.
656| vm.swappiness = 100 | The kernel will swap aggressively.
657|===========================================================
cca0540e
FG
658
659[[zfs_encryption]]
4128e7ff
TL
660Encrypted ZFS Datasets
661~~~~~~~~~~~~~~~~~~~~~~
cca0540e 662
500e5ab3
ML
663WARNING: Native ZFS encryption in {pve} is experimental. Known limitations and
664issues include Replication with encrypted datasets
665footnote:[https://bugzilla.proxmox.com/show_bug.cgi?id=2350],
666as well as checksum errors when using Snapshots or ZVOLs.
667footnote:[https://github.com/openzfs/zfs/issues/11688]
668
cca0540e
FG
669ZFS on Linux version 0.8.0 introduced support for native encryption of
670datasets. After an upgrade from previous ZFS on Linux versions, the encryption
229426eb 671feature can be enabled per pool:
cca0540e
FG
672
673----
674# zpool get feature@encryption tank
675NAME PROPERTY VALUE SOURCE
676tank feature@encryption disabled local
677
678# zpool set feature@encryption=enabled
679
680# zpool get feature@encryption tank
681NAME PROPERTY VALUE SOURCE
682tank feature@encryption enabled local
683----
684
685WARNING: There is currently no support for booting from pools with encrypted
7c73a209 686datasets using GRUB, and only limited support for automatically unlocking
cca0540e
FG
687encrypted datasets on boot. Older versions of ZFS without encryption support
688will not be able to decrypt stored data.
689
690NOTE: It is recommended to either unlock storage datasets manually after
691booting, or to write a custom unit to pass the key material needed for
692unlocking on boot to `zfs load-key`.
693
694WARNING: Establish and test a backup procedure before enabling encryption of
5dfeeece 695production data. If the associated key material/passphrase/keyfile has been
cca0540e
FG
696lost, accessing the encrypted data is no longer possible.
697
698Encryption needs to be setup when creating datasets/zvols, and is inherited by
699default to child datasets. For example, to create an encrypted dataset
700`tank/encrypted_data` and configure it as storage in {pve}, run the following
701commands:
702
703----
704# zfs create -o encryption=on -o keyformat=passphrase tank/encrypted_data
705Enter passphrase:
706Re-enter passphrase:
707
708# pvesm add zfspool encrypted_zfs -pool tank/encrypted_data
709----
710
711All guest volumes/disks create on this storage will be encrypted with the
712shared key material of the parent dataset.
713
714To actually use the storage, the associated key material needs to be loaded
7353437b 715and the dataset needs to be mounted. This can be done in one step with:
cca0540e
FG
716
717----
7353437b 718# zfs mount -l tank/encrypted_data
cca0540e
FG
719Enter passphrase for 'tank/encrypted_data':
720----
721
722It is also possible to use a (random) keyfile instead of prompting for a
723passphrase by setting the `keylocation` and `keyformat` properties, either at
229426eb 724creation time or with `zfs change-key` on existing datasets:
cca0540e
FG
725
726----
727# dd if=/dev/urandom of=/path/to/keyfile bs=32 count=1
728
729# zfs change-key -o keyformat=raw -o keylocation=file:///path/to/keyfile tank/encrypted_data
730----
731
732WARNING: When using a keyfile, special care needs to be taken to secure the
733keyfile against unauthorized access or accidental loss. Without the keyfile, it
734is not possible to access the plaintext data!
735
736A guest volume created underneath an encrypted dataset will have its
737`encryptionroot` property set accordingly. The key material only needs to be
738loaded once per encryptionroot to be available to all encrypted datasets
739underneath it.
740
741See the `encryptionroot`, `encryption`, `keylocation`, `keyformat` and
742`keystatus` properties, the `zfs load-key`, `zfs unload-key` and `zfs
743change-key` commands and the `Encryption` section from `man zfs` for more
744details and advanced usage.
68029ec8
FE
745
746
e06707f2
FE
747[[zfs_compression]]
748Compression in ZFS
749~~~~~~~~~~~~~~~~~~
750
751When compression is enabled on a dataset, ZFS tries to compress all *new*
752blocks before writing them and decompresses them on reading. Already
753existing data will not be compressed retroactively.
754
755You can enable compression with:
756
757----
758# zfs set compression=<algorithm> <dataset>
759----
760
761We recommend using the `lz4` algorithm, because it adds very little CPU
762overhead. Other algorithms like `lzjb` and `gzip-N`, where `N` is an
763integer from `1` (fastest) to `9` (best compression ratio), are also
764available. Depending on the algorithm and how compressible the data is,
765having compression enabled can even increase I/O performance.
766
767You can disable compression at any time with:
768
769----
770# zfs set compression=off <dataset>
771----
772
773Again, only new blocks will be affected by this change.
774
775
42449bdf 776[[sysadmin_zfs_special_device]]
68029ec8
FE
777ZFS Special Device
778~~~~~~~~~~~~~~~~~~
779
780Since version 0.8.0 ZFS supports `special` devices. A `special` device in a
781pool is used to store metadata, deduplication tables, and optionally small
782file blocks.
783
784A `special` device can improve the speed of a pool consisting of slow spinning
51e544b6
TL
785hard disks with a lot of metadata changes. For example workloads that involve
786creating, updating or deleting a large number of files will benefit from the
787presence of a `special` device. ZFS datasets can also be configured to store
788whole small files on the `special` device which can further improve the
789performance. Use fast SSDs for the `special` device.
68029ec8
FE
790
791IMPORTANT: The redundancy of the `special` device should match the one of the
792pool, since the `special` device is a point of failure for the whole pool.
793
794WARNING: Adding a `special` device to a pool cannot be undone!
795
796.Create a pool with `special` device and RAID-1:
797
eaefe614
FE
798----
799# zpool create -f -o ashift=12 <pool> mirror <device1> <device2> special mirror <device3> <device4>
800----
68029ec8
FE
801
802.Add a `special` device to an existing pool with RAID-1:
803
eaefe614
FE
804----
805# zpool add <pool> special mirror <device1> <device2>
806----
68029ec8
FE
807
808ZFS datasets expose the `special_small_blocks=<size>` property. `size` can be
809`0` to disable storing small file blocks on the `special` device or a power of
9deec2e2 810two in the range between `512B` to `1M`. After setting the property new file
68029ec8
FE
811blocks smaller than `size` will be allocated on the `special` device.
812
813IMPORTANT: If the value for `special_small_blocks` is greater than or equal to
51e544b6
TL
814the `recordsize` (default `128K`) of the dataset, *all* data will be written to
815the `special` device, so be careful!
68029ec8
FE
816
817Setting the `special_small_blocks` property on a pool will change the default
818value of that property for all child ZFS datasets (for example all containers
819in the pool will opt in for small file blocks).
820
51e544b6 821.Opt in for all file smaller than 4K-blocks pool-wide:
68029ec8 822
eaefe614
FE
823----
824# zfs set special_small_blocks=4K <pool>
825----
68029ec8
FE
826
827.Opt in for small file blocks for a single dataset:
828
eaefe614
FE
829----
830# zfs set special_small_blocks=4K <pool>/<filesystem>
831----
68029ec8
FE
832
833.Opt out from small file blocks for a single dataset:
834
eaefe614
FE
835----
836# zfs set special_small_blocks=0 <pool>/<filesystem>
837----
18d0d68e
SI
838
839[[sysadmin_zfs_features]]
840ZFS Pool Features
841~~~~~~~~~~~~~~~~~
842
843Changes to the on-disk format in ZFS are only made between major version changes
844and are specified through *features*. All features, as well as the general
845mechanism are well documented in the `zpool-features(5)` manpage.
846
847Since enabling new features can render a pool not importable by an older version
848of ZFS, this needs to be done actively by the administrator, by running
849`zpool upgrade` on the pool (see the `zpool-upgrade(8)` manpage).
850
851Unless you need to use one of the new features, there is no upside to enabling
852them.
853
854In fact, there are some downsides to enabling new features:
855
7c73a209 856* A system with root on ZFS, that still boots using GRUB will become
18d0d68e 857 unbootable if a new feature is active on the rpool, due to the incompatible
7c73a209 858 implementation of ZFS in GRUB.
18d0d68e
SI
859* The system will not be able to import any upgraded pool when booted with an
860 older kernel, which still ships with the old ZFS modules.
861* Booting an older {pve} ISO to repair a non-booting system will likewise not
862 work.
863
27adc096 864IMPORTANT: Do *not* upgrade your rpool if your system is still booted with
7c73a209 865GRUB, as this will render your system unbootable. This includes systems
27adc096 866installed before {pve} 5.4, and systems booting with legacy BIOS boot (see
18d0d68e
SI
867xref:sysboot_determine_bootloader_used[how to determine the bootloader]).
868
27adc096 869.Enable new features for a ZFS pool:
18d0d68e
SI
870----
871# zpool upgrade <pool>
872----