From owner-freebsd-stable@FreeBSD.ORG Wed Jan 16 22:27:35 2008 Return-Path: Delivered-To: freebsd-stable@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id DF03716A41A for ; Wed, 16 Jan 2008 22:27:35 +0000 (UTC) (envelope-from uspoerlein@gmail.com) Received: from acme.spoerlein.net (acme.spoerlein.net [217.172.44.86]) by mx1.freebsd.org (Postfix) with ESMTP id 729BF13C4D9 for ; Wed, 16 Jan 2008 22:27:35 +0000 (UTC) (envelope-from uspoerlein@gmail.com) Received: from roadrunner.spoerlein.net (e180153150.adsl.alicedsl.de [85.180.153.150]) by acme.spoerlein.net (8.14.1/8.14.1) with ESMTP id m0GMRXOe018561 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Wed, 16 Jan 2008 23:27:33 +0100 (CET) (envelope-from uspoerlein@gmail.com) Received: from roadrunner.spoerlein.net (localhost [127.0.0.1]) by roadrunner.spoerlein.net (8.14.2/8.14.2) with ESMTP id m0GMRUWP007324 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Wed, 16 Jan 2008 23:27:31 +0100 (CET) (envelope-from uspoerlein@gmail.com) Received: (from q@localhost) by roadrunner.spoerlein.net (8.14.2/8.14.2/Submit) id m0GMRUmA007323; Wed, 16 Jan 2008 23:27:30 +0100 (CET) (envelope-from uspoerlein@gmail.com) Date: Wed, 16 Jan 2008 23:27:29 +0100 From: Ulrich Spoerlein To: Johan =?utf-8?B?U3Ryw7Zt?= Message-ID: <20080116222729.GB1529@roadrunner.spoerlein.net> Mail-Followup-To: Johan =?utf-8?B?U3Ryw7Zt?= , freebsd-stable@freebsd.org References: <39FB5CF3-F2F4-401B-9D6D-7796608152E5@ish.com.au> <4FF9842D-ADC9-4A99-9DC4-E0FE1CC9CDCF@stromnet.se> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: <4FF9842D-ADC9-4A99-9DC4-E0FE1CC9CDCF@stromnet.se> User-Agent: Mutt/1.5.17 (2007-11-01) Cc: freebsd-stable@freebsd.org Subject: Re: Backup solution suggestions X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 16 Jan 2008 22:27:36 -0000 On Wed, 16.01.2008 at 00:26:34 +0100, Johan Ström wrote: > I create regular tarball (gziped maybee) with some files i want to backup, > Then i encrypt this file with ie gpg. Then i send of this file using some > unspecified network protocol to the storage server. > Encrypted all the way, from my end to the remote disk.. > The downside is that it is a static file.. not a "dynamic filesystem", > nothing I can mount and have easy access to individual files from. *Thats* > what I'm looking for. Export the disk on the backup server with ggated. Bind it on the client with ggatec. Slap a GELI or GBDE encryption on top of it and then put a ZFS on top of it. You can mount/import this "remote" ZFS at will and do your zfs send/receive on your local box. Nothing ever leaves your box unencrypted. Cheers, Ulrich Spoerlein -- It is better to remain silent and be thought a fool, than to speak, and remove all doubt.