Problem/Justification Based off what I have read ix-apps stores docker containers (apps) on it. Right now this dataset is not allowed to be encrypted. This is an issue as this would reveal a lot of data, including what docker containers are installed but more then that it would reveal all internal …

I’m not sure if this actually works as a workaround, because doesn’t the system docker install only store metadata to the unencrypted dataset even if you use the command line manually? It looks to me like the command isn’t even available until the apps pool is online.

For now I’ve just turned on encryption of the ix-apps dataset manually, which was the setup I had back on (Bluefin?) as well. It’s not a production system, so if it breaks stuff that’s fine, but working without issues so far!

I’m not using the TrueNAS docker install, I am using custom YAML and as such I can define the volumes wherever I want, namely in the encrypted dataset of mine. Then it’s just a matter of copying the YAML in there as well. I’m not saying it’s a good workaround, but it works until (and if) they ever …

Might this thread be changed to also include Incus VMs and containers? It is a major issue for me that I can’t encrypt those, but it’d be a tad redundant to make a separate thread just for Incus VMs and containers when the basic issue is the same. Not being able to encrypt VMs and containers (in my…

Wow really, I thought you would be able to create a password encrypted zvol. Also, I don’t think I can update the title or the OP any more. Its unfortunate that truenas keeps going backwards with security. I also learned that when changing from a key to a password based encryption the actual key u…

I finally got around to trying to create VM from existing KVM ZVOLs and it did not go well. Apparently, in TrueNAS parlance, cloning a ZVOL doesn’t actually mean a real clone: if your original ZOL is encrypted and you decide to clone it into Incus’s stupid volumes thing, TrueNAS will change the encr…

Help me understand something. This also affects LXC containers? I thought using “Linux jails” in SCALE would allow them to reside in encrypted datasets, in the same way that was allowed with iocage on Core?

[image] winnielinnie: This also affects LXC containers? Yes. [image] winnielinnie: I thought using “Linux jails” in SCALE would allow them to reside in encrypted datasets Nope and I have no idea if TrueNAS devs have any plans to allow them to be encrypted or not.

This might be the deal-breaker for me on switching from Core to SCALE. I have until March 2026 to see if it’s worth holding out on zVault or if iXsystems reverses some of these decisions. It’s getting to be a bit much, to be honest. :confused: Too many options and features are being removed, incl…

[image] winnielinnie: EDIT: I thought “instances”, VMs and LXC containers, would live under the ix-virt dataset, which plays by different rules, more similar to iocage? I can’t comment on iocage as I have never used that. I have only used TrueNAS Scale, not Core, so I simply don’t know what t…

Allow Encryption of ix-apps

Feature Requests

hacman113 March 16, 2026, 6:12pm 30

Throwing my vote in on this one, as I came to rebuild my main NAS today and was very surprised to find the state of this!

Moving apps/containers to encrypted datasets?

Topic		Replies	Views
Apps migration from Dragonfish to Electric Eel fails when ix-applications is on native encryption pool Apps and Virtualization	15	1132	January 11, 2025
Moving apps/containers to encrypted datasets? Apps and Virtualization SCALE , Apps , VM , Security , Encryption	10	251	June 6, 2026
Encryption Explanation - Hardening TrueNAS General SCALE , Encryption	24	2311	September 26, 2024
Accidental "Reset configuration to defaults" has locked the zpool TrueNAS General SCALE , Question , ZFS	38	934	April 25, 2024
Unable to unlock pool - GUI error "directory is not empty (please provide "force" flag" TrueNAS General SCALE , 24_04-Dragonfish	22	571	May 20, 2024

Allow Encryption of ix-apps

Related topics