[gentoo-user] Encrypted Backups

[gentoo-user] Encrypted Backups

[Florian Philipp]

Hi list!

I'm in need of a backup tool and an advice would be helpful because I 
need some special functionality.

I want to make backups from my laptop to a cardreader (pcmcia), making 
daily full and hourly incremental backups *if the card is plugged in* 
(which might not be the case for as long as two days).

Additionally I need some kind of encryption. The key could reside on my 
home partition which is encrypted itself and maybe pam-mount + luks is a 
solution but I'd like to hear some opinions on that topic.

If no one comes up with a better solution, I think two cronjobs with 
tar, gpg and find will do it, don't you think? The alternative would be 
rdiff-backup with some kind of encrypted and possibly compressed file 
system.

Thanks in advance!

Florian Philipp
-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] Encrypted Backups

[Ed Santiago]

Hi,

>I want to make backups from my laptop to a cardreader (pcmcia), making 
>daily full and hourly incremental backups *if the card is plugged in* 
>...
>Additionally I need some kind of encryption. 

I highly recommend dar:

    http://dar.linux.free.fr/

It handles incrementals well; has built-in encryption (with
optional unencrypted catalog, which is *very* nice); it groks
hardlinks and device nodes; it can create fixed-size slices,
e.g. for burning CDs/DVDs; and it handles deletes on restore.

The downside is that it can be a little clunky to invoke.
But that's what scripts are for.  I wrote my own front end.

Good luck,
Ed
-- 
Ed Santiago               Toolsmith               ed@edsantiago.com

-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] Encrypted Backups

[Albert Hopkins]

On Tue, 2007-10-30 at 14:03 +0100, Florian Philipp wrote:
> Hi list!
> 
> I'm in need of a backup tool and an advice would be helpful because I 
> need some special functionality.
> 
> I want to make backups from my laptop to a cardreader (pcmcia), making 
> daily full and hourly incremental backups *if the card is plugged in* 
> (which might not be the case for as long as two days).
> 
> Additionally I need some kind of encryption. The key could reside on my 
> home partition which is encrypted itself and maybe pam-mount + luks is a 
> solution but I'd like to hear some opinions on that topic.
> 
> If no one comes up with a better solution, I think two cronjobs with 
> tar, gpg and find will do it, don't you think? The alternative would be 
> rdiff-backup with some kind of encrypted and possibly compressed file 
> system.

I do pretty much the same on my laptop. I use good ol' tar and pipe it
through GPG.  I don't do incrementals though, so that might be more a
pain, then again maybe not if your index file is left plaintext.

-a

-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] Encrypted Backups

[Neil Bothwick]

[-- Attachment #1: Type: text/plain, Size: 469 bytes --]

On Tue, 30 Oct 2007 14:03:48 +0100, Florian Philipp wrote:

> If no one comes up with a better solution, I think two cronjobs with 
> tar, gpg and find will do it, don't you think? The alternative would be 
> rdiff-backup with some kind of encrypted and possibly compressed file 
> system.

You could try duplicity, for the same author as rdiff-backup, which
offers what you want.


-- 
Neil Bothwick

When childhood dies, its corpses are called adults.

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 189 bytes --]

Re: [gentoo-user] Encrypted Backups

[Florian Philipp]

Albert Hopkins schrieb:
> On Tue, 2007-10-30 at 14:03 +0100, Florian Philipp wrote:
>> Hi list!
>>
>> I'm in need of a backup tool and an advice would be helpful because I 
>> need some special functionality.
>>
>> I want to make backups from my laptop to a cardreader (pcmcia), making 
>> daily full and hourly incremental backups *if the card is plugged in* 
>> (which might not be the case for as long as two days).
>>
>> Additionally I need some kind of encryption. The key could reside on my 
>> home partition which is encrypted itself and maybe pam-mount + luks is a 
>> solution but I'd like to hear some opinions on that topic.
>>
>> If no one comes up with a better solution, I think two cronjobs with 
>> tar, gpg and find will do it, don't you think? The alternative would be 
>> rdiff-backup with some kind of encrypted and possibly compressed file 
>> system.
> 
> I do pretty much the same on my laptop. I use good ol' tar and pipe it
> through GPG.  I don't do incrementals though, so that might be more a
> pain, then again maybe not if your index file is left plaintext.
> 
> -a
> 

Could I see that script? How do you invoke it, anacron/fcron?
-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] Encrypted Backups

[Albert Hopkins]

On Tue, 2007-10-30 at 15:32 +0100, Florian Philipp wrote:
> Could I see that script? How do you invoke it, anacron/fcron?

--
#!/bin/sh

OUTFILE=/root/backup.tar.pgp

tar -c --one-file-system -X /etc/mybackup.exclude -C / . ./boot | \
    gpg --encrypt -r marduk@python.net --yes > $OUTFILE
---

I do this manually, about once a month.  No cron jobs.. just kick it off
and then write the image to DVD.

You could of course put in in cron, and then just prepend an 'if'
statement that checks to see if the output devices is inserted/mounted.



-- 
gentoo-user@gentoo.org mailing list

[gentoo-user] Re: Encrypted Backups

[James]

Florian Philipp <f.philipp <at> addcom.de> writes:


> I'm in need of a backup tool and an advice would be helpful because I 
> need some special functionality.

> I want to make backups from my laptop to a cardreader (pcmcia), making 
> daily full and hourly incremental backups *if the card is plugged in* 
> (which might not be the case for as long as two days).

> Additionally I need some kind of encryption. 

Hello Florian,

I do not have any suggestions (yet) but as of today, I've been thinking
about writing an application to process financial data, using some type
of robust encryption, where the (encrypted) data files are stored
onto a usb stick. The only time the app can run is when it detected the
encrypted usbstick is ready.... I do not want to even store the data on the
computer's HD.


Not exactly the same thing, but similar.  I'll be curious to see
what ideas or existing solutions get posted to your question....


James



-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] Encrypted Backups

[Florian Philipp]

Florian Philipp schrieb:
> Hi list!
> 
> I'm in need of a backup tool and an advice would be helpful because I 
> need some special functionality.
> 
> I want to make backups from my laptop to a cardreader (pcmcia), making 
> daily full and hourly incremental backups *if the card is plugged in* 
> (which might not be the case for as long as two days).
> 
> Additionally I need some kind of encryption. The key could reside on my 
> home partition which is encrypted itself and maybe pam-mount + luks is a 
> solution but I'd like to hear some opinions on that topic.
> 
> If no one comes up with a better solution, I think two cronjobs with 
> tar, gpg and find will do it, don't you think? The alternative would be 
> rdiff-backup with some kind of encrypted and possibly compressed file 
> system.
> 
> Thanks in advance!
> 
> Florian Philipp

Thanks for the answers, so far. I'll play around with it as soon as the 
hardware arrives.
-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] Re: Encrypted Backups

[Florian Philipp]

James schrieb:
> Florian Philipp <f.philipp <at> addcom.de> writes:
> 
> 
>> I'm in need of a backup tool and an advice would be helpful because I 
>> need some special functionality.
> 
>> I want to make backups from my laptop to a cardreader (pcmcia), making 
>> daily full and hourly incremental backups *if the card is plugged in* 
>> (which might not be the case for as long as two days).
> 
>> Additionally I need some kind of encryption. 
> 
> Hello Florian,
> 
> I do not have any suggestions (yet) but as of today, I've been thinking
> about writing an application to process financial data, using some type
> of robust encryption, where the (encrypted) data files are stored
> onto a usb stick. The only time the app can run is when it detected the
> encrypted usbstick is ready.... I do not want to even store the data on the
> computer's HD.
> 
> 
> Not exactly the same thing, but similar.  I'll be curious to see
> what ideas or existing solutions get posted to your question....
> 
> 
> James
> 
> 
> 

Sounds like a job for good old GPG/PGP. You could encrypt and sign the 
data. Then no one can fake the data files and they are encrypted.
-- 
gentoo-user@gentoo.org mailing list