Enabling file encryption in an existing FILER, how to encrypt files that have already been created?

[dmi3x3]

Is there a way to encrypt and decrypt all Filer Server or Volume Server files?
The question arose after starting the filer without the -encryptVolumeData option, writing a file, restarting the filer with the -encryptVolumeData option and writing another file.

Start filer

weed filer -s3 -master="10.10.10.1:9333"

Upload file

curl -F file=@did7903.txt "http://10.10.10.1:8888/freq_words/"

Restart filer

weed filer -s3 -master="10.10.10.1:9333" -encryptVolumeData

Upload anoter file

curl -F file=@did26188.txt "http://10.10.10.1:8888/freq_words/"

I check the meta information of the files:
file written before encryption enabled, compression enabled, no encryption:

curl "http://10.10.10.1:8888/freq_words/did7903.txt?metadata=true&pretty=yes"

{
  "FullPath": "/freq_words/did7903.txt",
  "Mtime": "2024-04-22T18:43:11+03:00",
  "Crtime": "2024-04-22T18:43:11+03:00",
  "Mode": 432,
  "Uid": 1000,
  "Gid": 1007,
  "Mime": "text/plain",
  "TtlSec": 0,
  "UserName": "",
  "GroupNames": null,
  "SymlinkTarget": "",
  "Md5": "cyYE5bmJNoM/2RPQwmw9xg==",
  "FileSize": 5848967,
  "Rdev": 0,
  "Inode": 0,
  "Extended": null,
  "chunks": [
    {
      "file_id": "14,0145636315b2062d0a",
      "size": 4194304,
      "modified_ts_ns": 1713800591899811208,
      "e_tag": "zvhMraCNQQh34IYSMN/sMg==",
      "fid": {
        "volume_id": 14,
        "file_key": 5459108629,
        "cookie": 2986749194
      },
      "is_compressed": true
    },
    {
      "file_id": "14,01456363165f14c3ba",
      "offset": 4194304,
      "size": 1654663,
      "modified_ts_ns": 1713800591831717198,
      "e_tag": "KJsiGKoCIV6cbOFvnCAZlQ==",
      "fid": {
        "volume_id": 14,
        "file_key": 5459108630,
        "cookie": 1595196346
      },
      "is_compressed": true
    }
  ],
  "HardLinkId": null,
  "HardLinkCounter": 0,
  "Content": null,
  "Remote": null,
  "Quota": 0
}

file written after encryption is enabled, encryption is present, no compression:

curl "http://10.10.10.1:8888/freq_words/did26188.txt?metadata=true&pretty=yes"

{
  "FullPath": "/freq_words/did26188.txt",
  "Mtime": "2024-04-22T18:47:26+03:00",
  "Crtime": "2024-04-22T18:47:26+03:00",
  "Mode": 432,
  "Uid": 1000,
  "Gid": 1007,
  "Mime": "text/plain",
  "TtlSec": 0,
  "UserName": "",
  "GroupNames": null,
  "SymlinkTarget": "",
  "Md5": "YE2OUKXlJe+T6k4Qhd+tTQ==",
  "FileSize": 3358127,
  "Rdev": 0,
  "Inode": 0,
  "Extended": null,
  "chunks": [
    {
      "file_id": "14,01456363182aa5b2b5",
      "size": 3358127,
      "modified_ts_ns": 1713800846599771304,
      "e_tag": "jEQOrtSNHVTvmWDUYHb86g==",
      "fid": {
        "volume_id": 14,
        "file_key": 5459108632,
        "cookie": 715502261
      },
      "cipher_key": "WDJU4bzZuxmg3eoehh/1fNcoWg50eBgZQbl2pS8JY4E="
    }
  ],
  "HardLinkId": null,
  "HardLinkCounter": 0,
  "Content": null,
  "Remote": null,
  "Quota": 0
}

[chrislusf]

To encrypt existing files, need to copy the file out and write back again.

[dmi3x3]

Okay, thank you.