
Storage, ZFS & Backup Strategies
OpenZFS CVE-2026-79619: Lock Down /dev/zfs on Proxmox
/dev/zfs ships world-writable, and until ZFS 2.4.4 a fake root inside unshare -Ur was enough to run zpool destroy.
8 min read
Tag
3 articles tagged openzfs.

/dev/zfs ships world-writable, and until ZFS 2.4.4 a fake root inside unshare -Ur was enough to run zpool destroy.

An OpenZFS 2.4 pool-version bump can leave your Proxmox node unable to import a TrueNAS pool. Here is how to avoid it.

A single irreversible feature flag can strand your whole cluster. Here's my pre-upgrade workflow before touching ZFS.