{ "api_version": "1", "kind": "dse_post", "self": "https://update.dsesecurity.com/api/v1/posts/account-for-openzfs-checkpoint-restrictions-before-a-pool-change/", "item": { "id": "https://update.dsesecurity.com/updates/account-for-openzfs-checkpoint-restrictions-before-a-pool-change/", "slug": "account-for-openzfs-checkpoint-restrictions-before-a-pool-change", "url": "https://update.dsesecurity.com/updates/account-for-openzfs-checkpoint-restrictions-before-a-pool-change/", "alternate_urls": { "markdown": "https://update.dsesecurity.com/updates/account-for-openzfs-checkpoint-restrictions-before-a-pool-change.md", "json": "https://update.dsesecurity.com/api/v1/posts/account-for-openzfs-checkpoint-restrictions-before-a-pool-change/" }, "title": "Account for OpenZFS checkpoint restrictions before a pool change", "summary": "Check topology restrictions and retained space before relying on an OpenZFS pool checkpoint.", "format": { "slug": "guide", "name": "Guide" }, "priority": { "slug": "info", "name": "Information" }, "featured": false, "image": { "theme": "continuity-recovery", "label": "Continuity & recovery", "alt": "Paired infrastructure paths converging on a stable recovered service.", "card_url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-card.webp?v=1.8.20", "hero_url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-hero.webp?v=1.8.20", "social_url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-social-v2.jpg?v=1.8.20", "width": 2400, "height": 1350 }, "topics": [ { "slug": "business-continuity", "name": "Business Continuity", "url": "https://update.dsesecurity.com/topic/business-continuity/" }, { "slug": "it", "name": "IT", "url": "https://update.dsesecurity.com/topic/it/" } ], "author": { "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team", "type": "Organization" }, "publisher": { "name": "Detection Systems & Engineering", "url": "https://dsesecurity.com/" }, "published_at": "2026-10-15T13:32:46+00:00", "modified_at": "2026-10-15T13:36:15+00:00", "reviewed_on": "2026-10-15", "reading_minutes": 2, "word_count": 249, "potentially_affected": "This applies to OpenZFS 2.3 pool checkpoints. It addresses their operational restrictions and capacity effect, rather than ordinary dataset snapshots or an independent off-pool backup.", "dse_recommendation": "DSE recommends reviewing the next planned storage operation before creating a checkpoint.", "primary_source": { "name": "OpenZFS 2.3 — zpool checkpoint", "url": "https://openzfs.github.io/openzfs-docs/man/v2.3/8/zpool-checkpoint.8.html", "published_on": null, "authority": "openzfs.github.io" }, "publishing_principles": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usage_info": "https://update.dsesecurity.com/usage/", "copyright_notice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "content_html": "

Check topology restrictions and retained space before relying on an OpenZFS pool checkpoint.

\n

Source facts

\n

OpenZFS 2.3 pool checkpoints preserve a pool state that can later be selected through checkpoint rewind at import. While a checkpoint exists, several topology-changing commands are prohibited, including remove, attach, detach, split, and reguid. A checkpoint can also consume space in ways that break reservation boundaries when the pool lacks free capacity. Pool status shows checkpoint existence or discard progress, and pool listing reports its space usage. Discarding a checkpoint is a separate operation.

\n

Source: OpenZFS 2.3 — zpool checkpoint.

\n

Applicability

\n

This applies to OpenZFS 2.3 pool checkpoints. It addresses their operational restrictions and capacity effect, rather than ordinary dataset snapshots or an independent off-pool backup.

\n

DSE recommendation

\n

DSE recommends reviewing the next planned storage operation before creating a checkpoint. Record why the checkpoint is needed, who owns the decision to retain or discard it, and how its space usage will be monitored. Include prohibited topology changes in the change worksheet so an emergency expansion or replacement plan is not based on an unavailable command. Keep recovery copies independent of this convenience mechanism, and do not retain a checkpoint indefinitely without a capacity review.

\n

Verification

\n

In a disposable pool, create a checkpoint, inspect status and space reporting, and confirm the relevant command restrictions. Rehearse discarding it and observing completion. Document the separate review required before any rewind that would abandon later changes; do not experiment with that action on production data.

\n

Official reference

\n

OpenZFS 2.3 — zpool checkpoint. Reviewed October 15, 2026.

", "content_text": "Check topology restrictions and retained space before relying on an OpenZFS pool checkpoint.\nSource facts\nOpenZFS 2.3 pool checkpoints preserve a pool state that can later be selected through checkpoint rewind at import. While a checkpoint exists, several topology-changing commands are prohibited, including remove, attach, detach, split, and reguid. A checkpoint can also consume space in ways that break reservation boundaries when the pool lacks free capacity. Pool status shows checkpoint existence or discard progress, and pool listing reports its space usage. Discarding a checkpoint is a separate operation.\nSource: OpenZFS 2.3 — zpool checkpoint.\nApplicability\nThis applies to OpenZFS 2.3 pool checkpoints. It addresses their operational restrictions and capacity effect, rather than ordinary dataset snapshots or an independent off-pool backup.\nDSE recommendation\nDSE recommends reviewing the next planned storage operation before creating a checkpoint. Record why the checkpoint is needed, who owns the decision to retain or discard it, and how its space usage will be monitored. Include prohibited topology changes in the change worksheet so an emergency expansion or replacement plan is not based on an unavailable command. Keep recovery copies independent of this convenience mechanism, and do not retain a checkpoint indefinitely without a capacity review.\nVerification\nIn a disposable pool, create a checkpoint, inspect status and space reporting, and confirm the relevant command restrictions. Rehearse discarding it and observing completion. Document the separate review required before any rewind that would abandon later changes; do not experiment with that action on production data.\nOfficial reference\nOpenZFS 2.3 — zpool checkpoint. Reviewed October 15, 2026.", "content_markdown": "Check topology restrictions and retained space before relying on an OpenZFS pool checkpoint.\n\n## Source facts\n\nOpenZFS 2.3 pool checkpoints preserve a pool state that can later be selected through checkpoint rewind at import. While a checkpoint exists, several topology-changing commands are prohibited, including remove, attach, detach, split, and reguid. A checkpoint can also consume space in ways that break reservation boundaries when the pool lacks free capacity. Pool status shows checkpoint existence or discard progress, and pool listing reports its space usage. Discarding a checkpoint is a separate operation.\n\nSource: [OpenZFS 2.3 — zpool checkpoint](https://openzfs.github.io/openzfs-docs/man/v2.3/8/zpool-checkpoint.8.html).\n\n## Applicability\n\nThis applies to OpenZFS 2.3 pool checkpoints. It addresses their operational restrictions and capacity effect, rather than ordinary dataset snapshots or an independent off-pool backup.\n\n## DSE recommendation\n\nDSE recommends reviewing the next planned storage operation before creating a checkpoint. Record why the checkpoint is needed, who owns the decision to retain or discard it, and how its space usage will be monitored. Include prohibited topology changes in the change worksheet so an emergency expansion or replacement plan is not based on an unavailable command. Keep recovery copies independent of this convenience mechanism, and do not retain a checkpoint indefinitely without a capacity review.\n\n## Verification\n\nIn a disposable pool, create a checkpoint, inspect status and space reporting, and confirm the relevant command restrictions. Rehearse discarding it and observing completion. Document the separate review required before any rewind that would abandon later changes; do not experiment with that action on production data.\n\n## Official reference\n\n[OpenZFS 2.3 — zpool checkpoint](https://openzfs.github.io/openzfs-docs/man/v2.3/8/zpool-checkpoint.8.html). Reviewed October 15, 2026." }, "json_ld": { "@context": "https://schema.org", "@graph": [ { "@type": "Organization", "@id": "https://dsesecurity.com/#organization", "name": "Detection Systems & Engineering", "alternateName": "DSE Security", "url": "https://dsesecurity.com/", "logo": { "@type": "ImageObject", "url": "https://update.dsesecurity.com/assets/dse-logo-20260812.png?v=1.8.20" } }, { "@type": "Organization", "@id": "https://update.dsesecurity.com/#editorial-team", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/", "parentOrganization": { "@id": "https://dsesecurity.com/#organization" } }, { "@type": "WebSite", "@id": "https://update.dsesecurity.com/#website", "name": "DSE Updates", "alternateName": "DSE Security Knowledge Hub", "url": "https://update.dsesecurity.com/", "inLanguage": "en-US", "publisher": { "@id": "https://dsesecurity.com/#organization" }, "potentialAction": { "@type": "SearchAction", "target": { "@type": "EntryPoint", "urlTemplate": "https://update.dsesecurity.com/?q={search_term_string}" }, "query-input": "required name=search_term_string" } }, { "@type": "WebPage", "@id": "https://update.dsesecurity.com/updates/account-for-openzfs-checkpoint-restrictions-before-a-pool-change/", "url": "https://update.dsesecurity.com/updates/account-for-openzfs-checkpoint-restrictions-before-a-pool-change/", "isPartOf": { "@id": "https://update.dsesecurity.com/#website" }, "lastReviewed": "2026-10-15" }, { "@type": "BreadcrumbList", "@id": "https://update.dsesecurity.com/updates/account-for-openzfs-checkpoint-restrictions-before-a-pool-change/#breadcrumbs", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "DSE Updates", "item": "https://update.dsesecurity.com/" }, { "@type": "ListItem", "position": 2, "name": "Account for OpenZFS checkpoint restrictions before a pool change", "item": "https://update.dsesecurity.com/updates/account-for-openzfs-checkpoint-restrictions-before-a-pool-change/" } ] }, { "@type": [ "Article", "TechArticle" ], "@id": "https://update.dsesecurity.com/updates/account-for-openzfs-checkpoint-restrictions-before-a-pool-change/#article", "identifier": "https://update.dsesecurity.com/updates/account-for-openzfs-checkpoint-restrictions-before-a-pool-change/", "url": "https://update.dsesecurity.com/updates/account-for-openzfs-checkpoint-restrictions-before-a-pool-change/", "headline": "Account for OpenZFS checkpoint restrictions before a pool change", "description": "Check topology restrictions and retained space before relying on an OpenZFS pool checkpoint.", "abstract": "Check topology restrictions and retained space before relying on an OpenZFS pool checkpoint.", "articleBody": "Check topology restrictions and retained space before relying on an OpenZFS pool checkpoint.\nSource facts\nOpenZFS 2.3 pool checkpoints preserve a pool state that can later be selected through checkpoint rewind at import. While a checkpoint exists, several topology-changing commands are prohibited, including remove, attach, detach, split, and reguid. A checkpoint can also consume space in ways that break reservation boundaries when the pool lacks free capacity. Pool status shows checkpoint existence or discard progress, and pool listing reports its space usage. Discarding a checkpoint is a separate operation.\nSource: OpenZFS 2.3 — zpool checkpoint.\nApplicability\nThis applies to OpenZFS 2.3 pool checkpoints. It addresses their operational restrictions and capacity effect, rather than ordinary dataset snapshots or an independent off-pool backup.\nDSE recommendation\nDSE recommends reviewing the next planned storage operation before creating a checkpoint. Record why the checkpoint is needed, who owns the decision to retain or discard it, and how its space usage will be monitored. Include prohibited topology changes in the change worksheet so an emergency expansion or replacement plan is not based on an unavailable command. Keep recovery copies independent of this convenience mechanism, and do not retain a checkpoint indefinitely without a capacity review.\nVerification\nIn a disposable pool, create a checkpoint, inspect status and space reporting, and confirm the relevant command restrictions. Rehearse discarding it and observing completion. Document the separate review required before any rewind that would abandon later changes; do not experiment with that action on production data.\nOfficial reference\nOpenZFS 2.3 — zpool checkpoint. Reviewed October 15, 2026.", "datePublished": "2026-10-15T13:32:46+00:00", "dateModified": "2026-10-15T13:36:15+00:00", "mainEntityOfPage": { "@id": "https://update.dsesecurity.com/updates/account-for-openzfs-checkpoint-restrictions-before-a-pool-change/" }, "inLanguage": "en-US", "isAccessibleForFree": true, "author": { "@type": "Organization", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team" }, "publisher": { "@id": "https://dsesecurity.com/#organization" }, "image": { "@type": "ImageObject", "@id": "https://update.dsesecurity.com/updates/account-for-openzfs-checkpoint-restrictions-before-a-pool-change/#primaryimage", "url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-social-v2.jpg?v=1.8.20", "contentUrl": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-social-v2.jpg?v=1.8.20", "width": 1200, "height": 630, "caption": "Account for OpenZFS checkpoint restrictions before a pool change" }, "articleSection": [ "Business Continuity", "IT" ], "keywords": [ "Business Continuity", "IT", "Guide", "Information priority" ], "genre": "Guide", "about": [ { "@type": "Thing", "name": "Business Continuity", "url": "https://update.dsesecurity.com/topic/business-continuity/" }, { "@type": "Thing", "name": "IT", "url": "https://update.dsesecurity.com/topic/it/" } ], "wordCount": 249, "timeRequired": "PT2M", "publishingPrinciples": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usageInfo": "https://update.dsesecurity.com/usage/", "copyrightHolder": { "@id": "https://dsesecurity.com/#organization" }, "copyrightNotice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "citation": { "@type": "CreativeWork", "name": "OpenZFS 2.3 — zpool checkpoint", "url": "https://openzfs.github.io/openzfs-docs/man/v2.3/8/zpool-checkpoint.8.html" } } ] } }