zfs-mount-generator 'ignore' option only covers mount unit, not key-loading unit

[brevilo]

System information

Type	Version/Name
Distribution Name	Debian
Distribution Version	Bookworm
Kernel Version	6.12.22+bpo-amd64
Architecture	amd64
OpenZFS Version	zfs-2.3.1-1~bpo12+1

Describe the problem you're observing

While the documentation for canmount clearly says:

Encryption roots always generate [email protected], even if off.

it doesn't do so for org.openzfs.systemd:ignore where it just says:

Skip if on

So, the doc doesn't distinguish between units and I argue that this would be the correct behavior. My expectation is that if I set org.openzfs.systemd:ignore=on for a dataset, it is in fact ignored/skipped by the generator entirely.

Yet it isn't. The key-loading unit is created regardless.

Use case

My use case is that I don't want to automatically load a key (by entering a passphrase) of a dataset which I've already set to canmount=[noauto|off] anyway. Setting org.openzfs.systemd:ignore=on would be the only (and intuitive) way for me to achieve that.

Describe how to reproduce the problem

• Set org.openzfs.systemd:ignore=on for a DATASET
• Run zfs-mount-generator
• [email protected] is still being created

Thanks