Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 15 Jan 2008 12:40:02 +0100
From:      Vladimir Botka <vlado@botka.homeunix.org>
To:        freebsd-stable@freebsd.org
Subject:   Re: Backup solution suggestions
Message-ID:  <20080115124002.06d14cfc@srv>
In-Reply-To: <E6BCC509-6CC8-44F1-98C2-416920A52218@stromnet.se>
References:  <E6BCC509-6CC8-44F1-98C2-416920A52218@stromnet.se>

next in thread | previous in thread | raw e-mail | index | archive | help
Dne Tue, 15 Jan 2008 10:52:56 +0100
Johan Str=C3=B6m <johan@stromnet.se> napsal(a):

> Hello
>=20
> I'm looking to invest in some new hardware for backup. probably some =20
> kind of NAS (a 4-disk 1U NAS or something in that size). The thing
> is that I won't be the only one with access to this box, thus I
> would like to secure my data.
> What I would like is encryption both for the transfer to the box,
> and encrypted on disk. The data on disk should not be readable by
> anyone but me (ie the other user(s) of the box should not be able to
> read it, at least not without a big effort).
>=20
> So, I'm wondering what the best solution might be.. Tar'balling all =20
> my stuff and encrypt it with GPG or something and just dump it there =20
> with NFS would be the easiest solution, but maybe not the best. I've =20
> been thinking about running a GELI image on my box, and store that
> on the NAS over NFS.. would that be doable/secure/stable?
> Another idea would be to go with some regular 1U box running some =20
> FBSD, doing scp to the box and geli local on the box but that would =20
> require me to have the encryption keys on that box (which would be =20
> shared so thus no good idea).
>=20
> Any other ideas? Being able to rsync to the backup storage instead
> of just sending big encrypted tarballs would be very nice (and I
> guess that would be possible with geli version)
>=20
> Maybe not the perfect list for this, but it is somewhat freebsd =20
> specific and I'm sure some other ppl on the list have had simliar =20
> situations :)
>=20
> --
> Johan Str=C3=B6m
> Stromnet
> johan@stromnet.se
> http://www.stromnet.se/
>=20

Hello,

As of the encryption on the transfer I use security/sfs to mount remote
directory for backup and then rsync in the local.

	-vlado
	Vladimir Botka



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20080115124002.06d14cfc>