3 ms·
Thinking out loud: At each host, backup to an encrypted local store (only you have to access the crypyto-key(s)). Then have the centralized backup service copy
by hackuser 12y ago
Thinking out loud: At each host, backup to an encrypted local store (only you have to access the crypyto-key(s)). Then have the centralized backup service copy those encrypted stores.
You need more storage and it's more labor to setup, both of which could be impractical depending on the systems you manage, but the central service would have no access to anything confidential. Also, integration between the central backup and the variety of local hosts would be greatly simplified, with no file locks, database backups, consistency issues, backup window coordination, etc.
EDIT: Also, the granularity of available recovery points might be limited, at least from the central service. Block-level backups (and the associate recovery points), for example, could be implemented locally but might be hard to implement on the central service.
- jonweber 12y agoThis is a great idea - unfortunately, some of the servers I need to back up are feature-poor shared hosting accounts where it would be difficult or impossible to run a script that serves this purpose locally.
- cweagans 12y agoDo yourself a favor and stop using shared hosting services. A few years ago, you could justify it because of the cost. VPSes are so cheap these days, though, that it's silly to hamstring yourself with shared hosting. Digital Ocean is a good place to start, and they'll even pre-install LAMP for you if you want. $5/mo for your own box.