[Novalug] secure storage
Mark Smith
mark@winksmith.com
Wed Jun 11 23:59:11 EDT 2014
hmm... that's a good idea, but i don't like it that i have to manually
do something, like periodically pull a disk and i really want offsite
storage (in case my machine breaks or is stolen).
i'd be tempted to create a volume with snapshot capability and nightly,
snap and rsync a copy to spideroak. meanwhile, just export on my local
lan. that solves some problems, but if a crook steals my machine they
still get my unencrypted information.
I wonder if there's some integrated openmediavault plugin for that.
I guess there's always the "meat" problem... someone has to put in a
password during a NAS boot. that coupled with a snapshot rsync to
spideroak cloud storage might solve everything.
On Wed, Jun 11, 2014 at 11:09:46PM -0400, William Sutton wrote:
> run dm-crypt on top of RAID1 on hot-swap drives and periodically
> pull the spare? :-)
>
> William Sutton
>
> On Thu, 12 Jun 2014, Mark Smith wrote:
>
> >that's an obvious answer. i never wanted to do that since i have really
> >been used to incrementals that rsync give me. the disk is sort of big
> >so doing that for a big disk is a bit of a pain in time and usage. being
> >able to do that on the fly with rsync for backup, restore, and inspection
> >is really useful. i'd hate to move away from that.
> >
> >On Wed, Jun 11, 2014 at 07:45:08PM -0400, William Sutton wrote:
> >>I don't suppose you could gpg-encrypt your data as you spin it off
> >>to tape? At the very least, you could periodically tar the files
> >>you want, gpg-sign the tarball, and copy that straight to tape.
> >>
> >>William Sutton
> >>
> >>On Thu, 12 Jun 2014, Mark Smith wrote:
> >>
> >>>i'm thinking again about secure storage (banking records, receipts,
> >>>that sort of stuff). i was curious about what you folks do. i used to
> >>>have an encrypted image that i stored on my disk server and then exported
> >>>via NFS. locally it was protected via normal unix DAC, but remotely it
> >>>was strongly encrypted.
> >>>
> >>>well, i have a new NAS now... i'm quite happy with OpenMediaVault so
> >>>far, but i don't know what to do with my securte stuff.
> >>>
> >>>i'm trying out spideroak right now and just using the cloud. that seems
> >>>to be working, but i'm afraid that one cross command by myself or my wife
> >>>will delete all copies of an important file and poof, it's gone. i could
> >>>do some backups of it, but that sort of defeats the purpose.
> >>>
> >>>i could expose a disk image via NFS, but i have found that to be
> >>>problematic because multiple people can mount it at the same time.
> >>>alternatively, i can mount the disk and then export NFS and then i'm
> >>>in the same boat as i was in. plus, my new NAS doesn't like doing that
> >>>sort of thing (no facilities for encryption).
> >>>
> >>>anyone out there doing the same sort of thing? got any ideas?
> >>>
> >>>--
> >>>Hei konā mai
> >>>Mark Smith
> >>>mark@winksmith.com
> >>>_______________________________________________
> >>>Novalug mailing list
> >>>Novalug@calypso.tux.org
> >>>http://calypso.tux.org/mailman/listinfo/novalug
> >
> >
> >--
> >Hei konā mai
> >Mark Smith
> >mark@winksmith.com
> >
--
Hei konā mai
Mark Smith
mark@winksmith.com
More information about the Novalug
mailing list