@@ -118,16 +118,13 @@ pool unbind <(clevis|keyring)> <pool name> [--token-slot <token slot>]::
118118 the "pool encryption" subcommand. The "pool unbind" subcommand that you
119119 are using now is deprecated and will be removed in stratis 3.10.0.
120120pool encryption on --in-place <(--uuid <uuid> |--name <name>)> [--key-desc <key_desc>] [--clevis <(nbde|tang|tpm2)> [--tang-url <tang_url>] [<(--thumbprint <thp> | --trust-url)>]::
121- Turn encryption on for the specified pool. This operation must encrypt
122- every block in the pool and takes time proportional to the size of the
123- pool.
121+ Turn encryption on for the specified pool. This operation takes time
122+ proportional to the size of the pool.
124123pool encryption off --in-place <(--uuid <uuid> |--name <name>)>::
125- Turn encryption off for the specified pool. This operation must write
126- the plain text of every block in the pool and takes time proportional to
127- the size of the pool.
124+ Turn encryption off for the specified pool. This operation takes time
125+ proportional to the size of the pool.
128126pool encryption reencrypt --in-place <(--uuid <uuid> |--name <name>)>::
129- Reencrypt the pool with a new master key. This operation must overwrite
130- every block in the pool with re-encrypted data and takes time
127+ Reencrypt the pool with a new master key. This operation takes time
131128 proportional to the size of the pool.
132129pool encryption bind <(nbde|tang)> <(--uuid <uuid> |--name <name>)> <(--thumbprint <thp> | --trust-url)> <url>::
133130 Bind the devices in the specified pool to a supplementary encryption
@@ -275,9 +272,9 @@ OPTIONS
275272 For V2 pools only. Use the token slot number to select among
276273 different bindings that use the same encryption method.
277274--in-place ::
278- This is a mandatory option that must be set when requesting
279- a long-running in-place encryption operation. These operations are
280- a kind that must read and write every block in the pool . Hence these
275+ This is a mandatory option that must be set when requesting a
276+ long-running in-place encryption operation. These operations are a
277+ kind that change the pool's data as well as its metadata . Hence these
281278 operations take a time that is linear in the size of the pool.
282279 Additionally, these operations are run in place, that is, the
283280 pool's data blocks are directly modified while it is in use. While
0 commit comments