Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 15 Jan 2008 15:03:44 +0100
From:      "Ronald Klop" <ronald-freebsd8@klop.yi.org>
To:        freebsd-stable@freebsd.org
Subject:   Re: Backup solution suggestions
Message-ID:  <op.t4y5cikk8527sy@guido.klop.ws>
In-Reply-To: <E6BCC509-6CC8-44F1-98C2-416920A52218@stromnet.se>
References:  <E6BCC509-6CC8-44F1-98C2-416920A52218@stromnet.se>

next in thread | previous in thread | raw e-mail | index | archive | help
This sounds like a problem for 'tarsnap'. It's from the same author as  
portsnap.

http://www.daemonology.net/blog/2006-09-13-encrypted-backup.html
http://www.daemonology.net/blog/2007-08-29-tarsnap-update.html
http://www.tarsnap.com/

I never used it so I don't know more about it than you can find in these  
url's.

Ronald.

On Tue, 15 Jan 2008 10:52:56 +0100, Johan Ström <johan@stromnet.se> wrote:

> Hello
>
> I'm looking to invest in some new hardware for backup. probably some  
> kind of NAS (a 4-disk 1U NAS or something in that size). The thing is  
> that I won't be the only one with access to this box, thus I would like  
> to secure my data.
> What I would like is encryption both for the transfer to the box, and  
> encrypted on disk. The data on disk should not be readable by anyone but  
> me (ie the other user(s) of the box should not be able to read it, at  
> least not without a big effort).
>
> So, I'm wondering what the best solution might be.. Tar'balling all my  
> stuff and encrypt it with GPG or something and just dump it there with  
> NFS would be the easiest solution, but maybe not the best. I've been  
> thinking about running a GELI image on my box, and store that on the NAS  
> over NFS.. would that be doable/secure/stable?
> Another idea would be to go with some regular 1U box running some FBSD,  
> doing scp to the box and geli local on the box but that would require me  
> to have the encryption keys on that box (which would be shared so thus  
> no good idea).
>
> Any other ideas? Being able to rsync to the backup storage instead of  
> just sending big encrypted tarballs would be very nice (and I guess that  
> would be possible with geli version)
>
> Maybe not the perfect list for this, but it is somewhat freebsd specific  
> and I'm sure some other ppl on the list have had simliar situations :)
>
> --
> Johan Ström
> Stromnet
> johan@stromnet.se
> http://www.stromnet.se/
>
>
> _______________________________________________
> freebsd-stable@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-stable
> To unsubscribe, send any mail to "freebsd-stable-unsubscribe@freebsd.org"



-- 
  Ronald Klop
  Amsterdam, The Netherlands



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?op.t4y5cikk8527sy>