Automation

Ransomware has shifted from a “big enterprise” worry to a routine risk for freelancers, homelab users, and small teams. In 2026, attacks are faster and quieter. They often start with plain credentials stolen from a browser, a password vault export, or an exposed SSH key. If you run Linux storage and your only safeguard is “we have backups somewhere,” your recovery window is too wide.

ZFS snapshots give you a way to shrink that window. A snapshot is a read-only marker of a dataset at a fixed point in time. ZFS is copy-on-write (CoW). Snapshots are cheap to make, fast to list, and safe to recover from. You just need to set up retention and permissions with care. This guide covers the full plan: setup, install paths, locked-down snapshot controls, jobs with sanoid and syncoid , recovery steps during a live hit, performance cost, and compliance notes.