4 ms·

What’s best way to do this on Mac?

deleted 5y ago
[deleted]
eric__cartman 5y ago
Personally I split everything into equally sized tar.gz files, encrypt everything with gpg and upload it using rclone. It should be easily doable and scriptable in any Unix-like machine. It's not the fastest way of doing this, and very inconvenient if you need to access the data often. I only use this for off-site archiving that I will never use unless something catastrophic happens.
- danuker 5y ago
  > I will never use unless something catastrophic happens Have you ever tried to restore from one such archive?
  - eric__cartman 5y ago
    Yes, it's quite easy. Once all the gpg files are decrypted, the tar archives can be uncompressed with any piece of software that supports tar archives.
- spinax 5y ago
  You've basically just described duplicity with rclone as the backend (their term). I personally add duply in front for usability (it handles your includes, excludes, "profile", etc.). Restoring is easy with these 3 working in tandem, and you can manually extract the data as needed for SHTF - just gpg encrypted tarballs. duply runs duplicity who runs rclone in a soundbite.
- aborsy 5y ago
  I am curious, why don’t you use rclone crypt? (And as someone said, duplicity).
- 1630269196 5y ago
  I used to do something similar, but these days I either just use rclone's crypt backend (folder hierarchy is kept intact, files encrypted and filenames obfuscated), or a Restic repository hosted on an rclone backend.
cpach 5y ago
Restic is one option https://restic.net/ https://restic.net/
xmodem 5y ago
There are tools that will provide a virtual drive backed by files that are encrypted on disk. I use Cryptomator [1], which is cross-platform and is designed with cloud syncing in mind, but on mac you can just use Disk Utility to create an encrypted DMG. [1]: https://cryptomator.org/ https://cryptomator.org/
kayodelycaon 5y ago
Personally, I use encrypted sparse disk images. (You can make them with Disk Utility.) It makes a disk image using many small files in a folder. Might leak some information related about size or number of the contents, but the contents and metadata of the filesystem are encrypted. This method can result in corruption of the disk image if you’re not careful. Edit: This is probably the most seamless way to handle encryption. It’s built in to the OS and you can save the password in Keychain if you like. Used it with Dropbox for years. Just make sure to unmount and let it sync before opening the disk on another system.
- jsjohnst 5y ago
  I use this same route pretty heavily across several cloud backup providers and never had corruption issues, but yes, it’s technically possible corruption could occur.
  - kayodelycaon 5y ago
    Cloud backup is unlikely to corrupt a disk image. Syncing one through Dropbox and having it open on two computers at the same time is living dangerously. :)
    - jsjohnst 5y ago
      Having two independent writers to a file is generally living dangerously, even without the extra complexity of unpredictable async file syncing.
Rd6n6 5y ago
I’ve been trying duplicati recently and it seems fairly simple and is cross platform with a GUI
olalonde 5y ago
I use rclone crypt for that (https://rclone.org/crypt/ https://rclone.org/crypt/).

deleted 5y ago

[deleted]

Personally I split everything into equally sized tar.gz files, encrypt everything with gpg and upload it using rclone. It should be easily doable and scriptable in any Unix-like machine. It's not the fastest way of doing this, and very inconvenient if you need to access the data often. I only use this for off-site archiving that I will never use unless something catastrophic happens.

danuker 5y ago
> I will never use unless something catastrophic happens Have you ever tried to restore from one such archive?
- eric__cartman 5y ago
  Yes, it's quite easy. Once all the gpg files are decrypted, the tar archives can be uncompressed with any piece of software that supports tar archives.
spinax 5y ago
You've basically just described duplicity with rclone as the backend (their term). I personally add duply in front for usability (it handles your includes, excludes, "profile", etc.). Restoring is easy with these 3 working in tandem, and you can manually extract the data as needed for SHTF - just gpg encrypted tarballs. duply runs duplicity who runs rclone in a soundbite.
aborsy 5y ago
I am curious, why don’t you use rclone crypt? (And as someone said, duplicity).
1630269196 5y ago
I used to do something similar, but these days I either just use rclone's crypt backend (folder hierarchy is kept intact, files encrypted and filenames obfuscated), or a Restic repository hosted on an rclone backend.

cpach 5y ago

Restic is one option https://restic.net/ https://restic.net/

xmodem 5y ago

There are tools that will provide a virtual drive backed by files that are encrypted on disk. I use Cryptomator [1], which is cross-platform and is designed with cloud syncing in mind, but on mac you can just use Disk Utility to create an encrypted DMG. [1]: https://cryptomator.org/ https://cryptomator.org/

kayodelycaon 5y ago

Personally, I use encrypted sparse disk images. (You can make them with Disk Utility.) It makes a disk image using many small files in a folder. Might leak some information related about size or number of the contents, but the contents and metadata of the filesystem are encrypted. This method can result in corruption of the disk image if you’re not careful. Edit: This is probably the most seamless way to handle encryption. It’s built in to the OS and you can save the password in Keychain if you like. Used it with Dropbox for years. Just make sure to unmount and let it sync before opening the disk on another system.

jsjohnst 5y ago
I use this same route pretty heavily across several cloud backup providers and never had corruption issues, but yes, it’s technically possible corruption could occur.
- kayodelycaon 5y ago
  Cloud backup is unlikely to corrupt a disk image. Syncing one through Dropbox and having it open on two computers at the same time is living dangerously. :)
  - jsjohnst 5y ago
    Having two independent writers to a file is generally living dangerously, even without the extra complexity of unpredictable async file syncing.

Rd6n6 5y ago

I’ve been trying duplicati recently and it seems fairly simple and is cross platform with a GUI

olalonde 5y ago

I use rclone crypt for that (https://rclone.org/crypt/ https://rclone.org/crypt/).