Amanda-Users

Re: Simple backup tape encryption

2005-06-27 08:08:26
Subject: Re: Simple backup tape encryption
From: "Stefan G. Weichinger" <sgw AT amanda DOT org>
To: amanda-users <amanda-users AT amanda DOT org>
Date: Mon, 27 Jun 2005 13:47:34 +0200
Stefan G. Weichinger wrote:

I am currently playing around with a wrapper-setup using aespipe (http://loop-aes.sourceforge.net/).

Well, good news ... I hadn't expected that I would be able to get there
so fast, but I have something working:

I wrote a wrapper (modified and extended one, to be honest ;) for
GNU-tar, which basically adds an option to the tar-call.

This option tells tar to pipe through bz2aespipe, which is another
wrapper, this time for the aespipe-binary. I had to patch bz2aespipe
also to be able to store the Passphrase inside a file, so dumps can be
done without manual intervention.

Right now I have a vtape-setup, which does AES-encryption with amdump,
and AES-decryption with amrestore. This works fine already.

What is still missing, is the support of amrecover, seems like there's
something wrong with the index-generation, the files are there, but no
proper content ...

And it has still to be tested with separated client/server-setups, yes.

I think it should be possible to patch all this into AMANDA as well, I
will see what I can do. But this is gonna be a topic for amanda-hackers
then ;)

I will try to write a small HOWTO about my steps soon.

Stefan.

--
Stefan G. Weichinger
AMANDA core team member
mailto://sgw AT amanda DOT org
--
oops! linux consulting & implementation
http://www.oops.co.at
--

<Prev in Thread] Current Thread [Next in Thread>