5 ms·
Is the data encrypted?
by brunoqc 11y ago
Is the data encrypted?
- LeoPanthera 11y agoIt runs over SSH, so yes.
- brunoqc 11y agoWhat about on the server side? For the storage.
- M4v3R 11y agoIf you want server-side encryption, then Tarsnap is probably better for you.
- brunoqc 11y agoYes I use Tarsnap but an encrypted backup using file system snapshots would be the best thing ever.
- barkingcat 11y agoOne way that you can do this is just to zfs replicate a volume to another system that has an encrypted zfs mount. Probably not what you are looking for, but voila - end to end snapshotted encryption - except it's not a "backup", more like a hot failover volume.
- rlpb 11y agoSo just take a ZFS snapshot and give Tarsnap the snapshot to back it up?
- barkingcat 11y agoI don't think this is what you need. This is a base file diff and transfer system - you have to add encryption on top of it yourself. Or you use a different tool like tarsnap that can be built on top of this.
- rsync 11y agorsync.net gives you an empty unix filesystem to do what you like with. Since it runs over SSH (and since we deprecated webdav years ago) it is certainly encrypted over the wire. If you would like it encrypted at rest, on our side, you should use attic or borg. borg appears to be the most popular: http://www.stavros.io/posts/holy-grail-backups/ http://www.stavros.io/posts/holy-grail-backups/ We just enabled our support for attic and borg and are very excited about it.
- jlgaddis 11y agoIt's not the same, obviously, but one thing you could do is redirect "zfs snapshot" to a file (instead of passing it to "|zfs send"), encrypt that locally (using whatever means you prefer: openssl, gpg, etc.) and then upload that. Of course, tarsnap pretty much does that all by itself and does it quite well.