From owner-freebsd-stable@FreeBSD.ORG Tue Jan 15 14:03:49 2008 Return-Path: Delivered-To: freebsd-stable@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 74E2F16A41A for ; Tue, 15 Jan 2008 14:03:49 +0000 (UTC) (envelope-from ronald-freebsd8@klop.yi.org) Received: from smtp-out3.tiscali.nl (smtp-out3.tiscali.nl [195.241.79.178]) by mx1.freebsd.org (Postfix) with ESMTP id 2FAF013C4E5 for ; Tue, 15 Jan 2008 14:03:48 +0000 (UTC) (envelope-from ronald-freebsd8@klop.yi.org) Received: from [212.123.145.58] (helo=guido.klop.ws) by smtp-out3.tiscali.nl with smtp (Tiscali http://www.tiscali.nl) id 1JEmOJ-0007hl-AE for ; Tue, 15 Jan 2008 15:03:47 +0100 Received: (qmail 1725 invoked from network); 15 Jan 2008 14:03:46 -0000 Received: from localhost (HELO guido.klop.ws) (127.0.0.1) by localhost with SMTP; 15 Jan 2008 14:03:46 -0000 Date: Tue, 15 Jan 2008 15:03:44 +0100 To: freebsd-stable@freebsd.org From: "Ronald Klop" Content-Type: text/plain; format=flowed; delsp=yes; charset=utf-8 MIME-Version: 1.0 References: Content-Transfer-Encoding: 8bit Message-ID: In-Reply-To: User-Agent: Opera Mail/9.25 (FreeBSD) Subject: Re: Backup solution suggestions X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 15 Jan 2008 14:03:49 -0000 This sounds like a problem for 'tarsnap'. It's from the same author as portsnap. http://www.daemonology.net/blog/2006-09-13-encrypted-backup.html http://www.daemonology.net/blog/2007-08-29-tarsnap-update.html http://www.tarsnap.com/ I never used it so I don't know more about it than you can find in these url's. Ronald. On Tue, 15 Jan 2008 10:52:56 +0100, Johan Ström wrote: > Hello > > I'm looking to invest in some new hardware for backup. probably some > kind of NAS (a 4-disk 1U NAS or something in that size). The thing is > that I won't be the only one with access to this box, thus I would like > to secure my data. > What I would like is encryption both for the transfer to the box, and > encrypted on disk. The data on disk should not be readable by anyone but > me (ie the other user(s) of the box should not be able to read it, at > least not without a big effort). > > So, I'm wondering what the best solution might be.. Tar'balling all my > stuff and encrypt it with GPG or something and just dump it there with > NFS would be the easiest solution, but maybe not the best. I've been > thinking about running a GELI image on my box, and store that on the NAS > over NFS.. would that be doable/secure/stable? > Another idea would be to go with some regular 1U box running some FBSD, > doing scp to the box and geli local on the box but that would require me > to have the encryption keys on that box (which would be shared so thus > no good idea). > > Any other ideas? Being able to rsync to the backup storage instead of > just sending big encrypted tarballs would be very nice (and I guess that > would be possible with geli version) > > Maybe not the perfect list for this, but it is somewhat freebsd specific > and I'm sure some other ppl on the list have had simliar situations :) > > -- > Johan Ström > Stromnet > johan@stromnet.se > http://www.stromnet.se/ > > > _______________________________________________ > freebsd-stable@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-stable > To unsubscribe, send any mail to "freebsd-stable-unsubscribe@freebsd.org" -- Ronald Klop Amsterdam, The Netherlands