Encrypted backups and sync

Oops. sorry I accidentally sent the email. So, I have several laptops and a desktop that I would like to back up and keep in sync. * Every client (laptop) is encrypted with cryptsetup and LUKS * There are different configuration and big image files that I would like to back up from each device but not synchronize * I can host my own server * I would prefer to store encrypted backup on a cryptsetup and LUKS partition * I would like to periodically sync encrypted backup partition to s3/google drive with minimal overhead * I only want to mount encrypted backup partition when sync/backup is in progress and I'm fine with mounting that backup partition with the keys stored on the client machines in clear text * I don't have to have web interface or * I need to automatically do file sync backup for the clients, preferably based on network location (i.e. when I'm close to backup server, or connected with a fast link). I'm thinking of clobbering something together with a bunch of scripts, but my guess is this problem has been either completely solve, or I can just use a few big pieces to solve it. Could you recommend any tools for that? Thanks, Alex.

| From: Alex Volkov <avolkov@gmail.com> | So, I have several laptops and a desktop that I would like to back up and | keep in sync. Sorry that I don't have time right now to carefully read your list of requirements. But let me throw a thought. If you go to the trouble of encrypting the filesystem on your notebooks, it would be great to back it up as-encrypted. That way there is only one route to the break the encryption. (There might otherwise be two or three.) Backing up a whole filesystem seems expensive: there are a lot of empty blocks. The first time, it is expensive. You've got to copy all those blocks. If you use rsync for subsequent backups, I think that it will only transmit the changed blocks. That should be affordable. For safety, it may be important that the filesystem be read-only while the rsync is running (that might be awkward). The only way of recovering is to recreate the raw filesystem and then use LUKS to get at it. Is this good enough? Note: I've never tried this. It might be a dumb idea.
participants (2)
-
Alex Volkov
-
D. Hugh Redelmeier