Might be a nice Stallion feature to be able to encrypt the backups using a GPG key that the user supplies. Of course that means you can't transparently restore. The user instead gets an encrypted tarball that they have to decrypt themselves.
Hardware Porn (aka our new backups node)
- Thread starter Francisco
- Start date
Ruchirablog
New Member
why? It may come handy for KVM but not for OpenVZ. Why encrypt backups when all files are available in clear form in the node
So that when the user deletes files and the corresponding decryption key, the data is gone and inaccessible, except to fancy data recovery techniques that wouldn't be used in normal situations (i.e. routine deletion of no-longer-needed sensitive data, not a case where the user was up to no good or some crazed attacker rooted the server to attempt data recovery on the raw disk volumes). Realistically though, maybe you're right and this scenario isn't that important.
peterw
New Member
Single place to catch all?
Ruchirablog
New Member
NJ storage! when?Finally back home
I'll start configuring the node tomorrow/this weekend and start hammering the last of the code ASAP.
Francisco
I'll have FH ship it probably Monday morning.NJ storage! when?
I didn't have time to ship the server but it's all completed and pending
Francisco