{"id":1876,"date":"2026-10-01T14:48:22","date_gmt":"2026-10-01T19:48:22","guid":{"rendered":"https:\/\/zewwy.ca\/?p=1876"},"modified":"2026-10-01T15:01:08","modified_gmt":"2026-10-01T20:01:08","slug":"least-privilege-zfs-over-iscsi-for-proxmox-ve-via-truenas","status":"publish","type":"post","link":"https:\/\/zewwy.ca\/index.php\/2026\/10\/01\/least-privilege-zfs-over-iscsi-for-proxmox-ve-via-truenas\/","title":{"rendered":"Least-Privilege ZFS over iSCSI for Proxmox VE via TrueNAS"},"content":{"rendered":"

<\/span>How I Configured Least-Privilege ZFS over iSCSI for Proxmox VE via TrueNAS<\/span><\/span><\/h1>\n
The built-in Proxmox VE “ZFS over iSCSI” storage provider relies on direct root SSH access to TrueNAS to dynamically spin up block devices. However, this legacy method is broken on modern TrueNAS SCALE versions (like Dragonfish and Electric Eel) because TrueNAS no longer uses the target engines (like Comstar\/LIO) expected by PVE.<\/div>\n
<\/div>\n
To solve this securely without enabling risky root SSH access, I installed the “official TrueNAS Proxmox VE Storage Plugin” aka plugin managed by “TheGreatWazoo”<\/strong>, worked around network anomalies, and configured a custom Role-Based Access Control (RBAC) policy for a true least-privilege service account.<\/div>\n
<\/div>\n
\n

<\/span>Step 1: Setup TrueNAS<\/a><\/span><\/h2>\n
Virtualizing TrueNAS: CPU NUMA and Memory Logistics<\/div>\n
<\/div>\n