4 ms·
Zrepl is a big part of why I feel secure doing the digital nomad thing. A script, run nightlyish, opens a separate-headered LUKS-protected ZFS pool and then cop
by predictabl3 3y ago
Zrepl is a big part of why I feel secure doing the digital nomad thing. A script, run nightlyish, opens a separate-headered LUKS-protected ZFS pool and then copies all snapshots over. That NVME enclosure lives in my "purse" that never leaves me sight/body.
Between this and NixOS, I can provision a new identical laptop in about 10 minutes.
I recently added off-site replication as well, so even if I get completely devastatingly mugged, there's still about zero chance of serious data loss.
Zrepl is absolutely brilliant software. Easy to run with, but incredibly sophisticated and powerful if you need all the knobs. I can't praise it enough.
- tmountain 3y agoYou should do a write up about how this works. It sounds very interesting.
- predictabl3 3y agoIt's on my list, but... to be honest if you Google "separate header Luks", you'll find it's trivial to create a LUKS device with a detached header. Then the default ZRepl quick start will get you going with the basic pool-to-pool local replication. That will get you almost all the way there. :) I used their docs/guide to do the remote replication too, though it would make a good write-up as I could throw in how I use sops-nix for securing the Zrepl TLS bits for the remote scenario too...
- LWIRVoltage 3y agoThis does sound really cool- and like a way to ultimately set up a secure, not that complex backup method...
- xpe 3y agoKudos. You're probably safer than most people who are only one theft, fire, flood, or other disast
- xpe 3y ago... er away from major data loss.
- istjohn 3y agoDo you have any experience with sanoid/syncoid? What does Zrepl give you over them?