zfs-raw-send · shipping · also OpenZFS raw send

ZFS raw send

ZFS raw send transfers an encrypted dataset in its stored encrypted representation, preserving the encryption metadata needed for compatible incremental receives.

For encrypted datasets, zfs send -w works without loaded keys. On unencrypted datasets it is equivalent to -Lec and does not add encryption. [1]

Raw incrementals require compatible base-snapshot IV sets; a non-raw receive can break that chain. [2]

Relations

related

snapshot, incremental-backup, authenticated-encryption, cryptographic-nonce

Limitations

• Native encryption leaves dataset names visible and does not prevent deletion without loaded keys. [3]

Citations

1. OpenZFS v2.3: zfs-send(8), raw and resumed streams (accessed 2026-10-18)
2. OpenZFS v2.3: zfs-receive(8), incremental and raw receives (accessed 2026-10-18)
3. OpenZFS v2.3: zfs-load-key(8), encryption scope (accessed 2026-10-18)

Further reading

4. Hesela: Snapshots and backups: which failures can you recover from? (accessed 2026-10-18)

JSON: /data/terms/zfs-raw-send.json