This sounds like a problem for 'tarsnap'. It's from the same author as
portsnap.
http://www.daemonology.net/blog/2006-09-13-encrypted-backup.html
http://www.daemonology.net/blog/2007-08-29-tarsnap-update.html
http://www.tarsnap.com/
I never used it so I don't know more about it than you can find in these
url's.
Ronald.
On Tue, 15 Jan 2008 10:52:56 +0100, Johan Ström <[EMAIL PROTECTED]> wrote:
Hello
I'm looking to invest in some new hardware for backup. probably some
kind of NAS (a 4-disk 1U NAS or something in that size). The thing is
that I won't be the only one with access to this box, thus I would like
to secure my data.
What I would like is encryption both for the transfer to the box, and
encrypted on disk. The data on disk should not be readable by anyone but
me (ie the other user(s) of the box should not be able to read it, at
least not without a big effort).
So, I'm wondering what the best solution might be.. Tar'balling all my
stuff and encrypt it with GPG or something and just dump it there with
NFS would be the easiest solution, but maybe not the best. I've been
thinking about running a GELI image on my box, and store that on the NAS
over NFS.. would that be doable/secure/stable?
Another idea would be to go with some regular 1U box running some FBSD,
doing scp to the box and geli local on the box but that would require me
to have the encryption keys on that box (which would be shared so thus
no good idea).
Any other ideas? Being able to rsync to the backup storage instead of
just sending big encrypted tarballs would be very nice (and I guess that
would be possible with geli version)
Maybe not the perfect list for this, but it is somewhat freebsd specific
and I'm sure some other ppl on the list have had simliar situations :)
--
Johan Ström
Stromnet
[EMAIL PROTECTED]
http://www.stromnet.se/
_______________________________________________
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to "[EMAIL PROTECTED]"
--
Ronald Klop
Amsterdam, The Netherlands
_______________________________________________
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to "[EMAIL PROTECTED]"
