Re: [BackupPC-users] destination directory and encrytion

On 02/09/15 14:35, Jan Novak wrote:
> Hi there,
> 
> two questions:
> Is it possible to switch the destination directory of the backup for 
> each host
> and how can be a backup encoded (because of unsecure cloud server or 
> similar)?

I've read over the thread and BackupPC is in this case not the right answer.

The issues that you are trying to solve, ie separation of clients via
different encryption keys and not trusting the server are fundamentally
opposed to BackupPC's design.

There are backup systems that make use of client side encryption, that
prevent the server ever seeing the plain text file contents. The one of
these that I know best is duplicity there is also one called tarsnap
that I know less well.

BackupPC is designed as a trusted server side pull backup system, ie the
server sees the plain text of files. BackupPC makes use of file level
dedup, ie the same file from multiple clients have the same content on
the server. This is exactly what properly implemented encryption is
designed to avoid.

Encrypted file systems on cloud servers are hard to get correct, the
master key for the file systems such as truecrypt or LUKS are always in
the machine's memory. Unless you have physical hardware the hypervisor
can always read the memory of a machine thus extract the master key
without alerting the owner of the VM. Even with physical servers given
access to the server and a willingness to reboot the system keys can be
recovered.

signature.asc
Description: OpenPGP digital signature

------------------------------------------------------------------------------
Monitor Your Dynamic Infrastructure at Any Scale With Datadog!
Get real-time metrics from all of your servers, apps and tools
in one place.
SourceForge users - Click here to start your Free Trial of Datadog now!
http://pubads.g.doubleclick.net/gampad/clk?id=241902991&iu=/4140

_______________________________________________
BackupPC-users mailing list
BackupPC-users AT lists.sourceforge DOT net
List:    https://lists.sourceforge.net/lists/listinfo/backuppc-users
Wiki:    http://backuppc.wiki.sourceforge.net
Project: http://backuppc.sourceforge.net/