Can you enable SnapLock on the SVM root volume on a CVO?
Applies to
NetApp Cloud Volumes ONTAP
Answer
SnapLock on SVM root volumes is technically supported but not recommended due to ONTAP architectural principles and operational risks:
- SVM root volumes contain only namespace/junction paths and SVM metadata, not business data.
- Locked snapshots on small root volumes can lead to space exhaustion, causing SVM outages and blocking remediation.
- Locked snapshots cannot be deleted or altered until expiry, making SVM or volume deletion/migration impossible until all retention periods are met.
- Anti-Ransomware Protection (ARP) and FPolicy do not protect root volumes.
If SnapLock has been enabled on the SVM root volume in error:
- There is no supported way to disable SnapLock until all locked snapshots expire.
- To avoid operational impact, schedule root volume snapshots as infrequently as possible to minimize retention burden.
- Monitor root volume space closely and use load-sharing mirrors to ensure recoverability in case of issues.
Additional Information
additionalInformation_text
