3 ms·

That is not the lesson here. It is that a backup should not backup the encrypted data, but the unencrypted data, and have its own encryption. A simple rsync bas

by onli 10y ago

That is not the lesson here. It is that a backup should not backup the encrypted data, but the unencrypted data, and have its own encryption. A simple rsync based bashscript can be fine for that, though I'd use borg.

jjnoakes 10y ago
How do you decrypt the data if it was encrypted client-side by multiple keys?
- onli 10y ago
  Every client would need to make its own backups, automatically. In such a situation it would be probably best to have two backups, those plus a backup of the encrypted data for the clients that fail to do the backups on their own. But you raise a good point: That's difficult to do.
baldfat 10y ago
Having 2 local copies with local monthly backup for a year and an off site backup (CrashPlan) is the secret. CrashPlan can go back in time for issues like this. As a Systems Librarian I did the daily (31 days worth), weekly (52 weeks worth), monthly (48 months worth) back ups with 131 tapes was a pain but it always paid off. I just had three machines and needed to go to my tapes once a day.
- onli 10y ago
  That sounds like a lot. Simple because it sounds also interesting: Why did you have to use your tapes each day? Unreliable filesystem?
  - the-dude 10y ago
    To move them offsite presumably.
  - baldfat 10y ago
    It was a library with 500,000 items being used all the time. I had Librarians who were adding and purging our collection everyday full time and students and faculty checking in and out books etc. all the times. Insider information all the Library Management Systems are totally broken and garbage (Open Source Evergreen is doing things better). I was required to reboot my Windows Server (Purchased before I was hired) everyday. I was told this was totally acceptable. The Oracle DB was solid but the rest of the stack was total and complete garbage that cost over $125,000 and service contracts of $30,000. Edit: Off Site aka IT Office Fireproof Case was my monthly and previous weeks. Once a week I walked them over. In the library in a fire case were the daily, and the last week. Tape was it was 2007.

by onli 10y ago

jjnoakes 10y ago

How do you decrypt the data if it was encrypted client-side by multiple keys?

onli 10y ago
Every client would need to make its own backups, automatically. In such a situation it would be probably best to have two backups, those plus a backup of the encrypted data for the clients that fail to do the backups on their own. But you raise a good point: That's difficult to do.

baldfat 10y ago

Having 2 local copies with local monthly backup for a year and an off site backup (CrashPlan) is the secret. CrashPlan can go back in time for issues like this. As a Systems Librarian I did the daily (31 days worth), weekly (52 weeks worth), monthly (48 months worth) back ups with 131 tapes was a pain but it always paid off. I just had three machines and needed to go to my tapes once a day.

onli 10y ago
That sounds like a lot. Simple because it sounds also interesting: Why did you have to use your tapes each day? Unreliable filesystem?
- the-dude 10y ago
  To move them offsite presumably.
- baldfat 10y ago
  It was a library with 500,000 items being used all the time. I had Librarians who were adding and purging our collection everyday full time and students and faculty checking in and out books etc. all the times. Insider information all the Library Management Systems are totally broken and garbage (Open Source Evergreen is doing things better). I was required to reboot my Windows Server (Purchased before I was hired) everyday. I was told this was totally acceptable. The Oracle DB was solid but the rest of the stack was total and complete garbage that cost over $125,000 and service contracts of $30,000. Edit: Off Site aka IT Office Fireproof Case was my monthly and previous weeks. Once a week I walked them over. In the library in a fire case were the daily, and the last week. Tape was it was 2007.