First, a word of caution: I did this when I still used tar for backups. Eventually I had to revert to unencrypted backups because the backup was horrendously slow. Eliminating the GPG encryption sped up a full backup of my server from 3 days to an hour or two. BTW, part of the slowdown is due to compression rather than encryption; gzip also slowed down the tar-based backup, but not near as dramatically.
Of course the impact will depend on your CPU. If you have a quad-core or multiple CPUs, and generally a very fast machine, or if your backup is very small, the impact may well be tolerable. The other important thing to remember if using GPG to encrypt the backup is that you'll need to keep the key somewhere safe. You wouldn't want to be stuck with the only copy of the key being in the encrypted backup! That said: you say that you are backing up to tape. If you were backing up to disk, you might be able to do it by backing up to an unencrypted file, and then launching gpg in a Run After Job file. When restoring, you would have to manually decrypt the file first. That's probably not a problem; in the contrary, that's kind of the idea of protecting the file... Another possibility: if only some of the data on the server is sensitive, exclude that data from the file set. Create a script that encrypts the data before bacula gets a hold of it. This might work well for a database dump, for instance. Prashant Ramhit wrote: > Hi All, > > Has anyone tried GPG encrypted backup on tapes? > If yes, can you please point me to some documentation. > > GPG encryption works fine on my server, just want to embed it in bacula, > and encrypt the files for offisite storage, > > Kind regards, > Prashant > -- Kevin Keane Owner The NetTech Find the Uncommon: Expert Solutions for a Network You Never Have to Think About Office: 866-642-7116 http://www.4nettech.com This e-mail and attachments, if any, may contain confidential and/or proprietary information. Please be advised that the unauthorized use or disclosure of the information is strictly prohibited. The information herein is intended only for use by the intended recipient(s) named above. If you have received this transmission in error, please notify the sender immediately and permanently delete the e-mail and any copies, printouts or attachments thereof. ------------------------------------------------------------------------------ Apps built with the Adobe(R) Flex(R) framework and Flex Builder(TM) are powering Web 2.0 with engaging, cross-platform capabilities. Quickly and easily build your RIAs with Flex Builder, the Eclipse(TM)based development software that enables intelligent coding and step-through debugging. Download the free 60 day trial. http://p.sf.net/sfu/www-adobe-com _______________________________________________ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
