251–260 of 262 posts
Earlier quoted context omitted.
I'm not sure that's a fair summary. It's very clearly stated that there is authentication performed after encryption. The MAC should prevent the remote server changing the counter or any encrypted bits.
> When the above attack model is extended to include multiple clients independently updating the same repository, then Borg fails to provide confidentiality
Earlier quoted context omitted.
You've probably heard this before but there are a lot of people who'd be interested in a cross-platform (NAS/Linux/BSD/Raspberry Pi) version with a command-line or web interface. As is it's really best for workstations rather than the NAS/servers a lot of people who care about their data use (not just basement-dwelling data hoarders but also professionals like photographers and videographers).
I currently use Borg on my servers, and Arq on my client machines. I'm quite sure if Arq was available in a command-line version for Linux/FreeBSD, i would use that instead. It has been nothing but rock solid on my client machines. Restore through the UI is a bit wonky, but once it's started it works well.
Earlier quoted context omitted.
I currently use Borg on my servers, and Arq on my client machines. I'm quite sure if Arq was available in a command-line version for Linux/FreeBSD, i would use that instead. It has been nothing but rock solid on my client machines. Restore through the UI is a bit wonky, but once it's started it works well.
What about Arq would make you switch from Borg? (And if you could email me at stefan @ arqbackup.com I'd love to follow up and learn more)
I don't think Arq brings something to the table that Borg/Restic/Duplicity doesn't already provide, besides a piece of software i'm familiar with, and trust. (and trust doesn't come easy when it comes to backup software!)
As i wrote, i already use Arq on my client machines instead of the mess that is "TimeMachine over wifi", but when it came to backing up my NAS and server/VPS, i had to look for something else, as Arq is not available on those platforms.
My use case would be backing up with Arq from a FreeBSD/Linux NAS/Server to a remote (networked at least) target, and in case of a full restore, i would use the command line as well.
I would then use Arq for Mac/Windows for "plucking" single file restores.
Earlier quoted context omitted.
Does the RaspberryPi have enough CPU for disk encryption?
I am trying to find cheaper device between NUC and Pi. Lot fewer choices are available. NUC is expensive. I wonder when will 8core ARM based NUC will arrive in the market. No idea is NUC can be powered by Xiomi Mi 2i powerbank but a Raspberry Pi can be Priorities: 1. Gigabyte ethernet 2. Small form factor NUC or smaller. 3. 8+ cores 4. Very low power consumption
It's an 8 core ARM SBC, with 2GB Ram, Gigabit ethernet on one USB3 bus, and a SATA connector on another USB3 bus. It can fully saturate spinning rush, though it might have problems with SSD drives. In any case, it will fully saturate your GigE link with even a slow harddrive.
It runs a standard Linux kernel, with the "driver" for the hardware added, which is why it requires a special build. Latest kernel version is 4.18. There is also an OMV build for it.
Mine uses around 4-8W, depending on how much the harddrive is being used. I've got a couple of them running as backup targets (Arq, Borg, etc) with a 4TB WD Red and Btrfs, and they've been rock solid.
If you need hardware AES, you should probably be looking elsewhere.
I recently was also thinking about how to organize my data & backups. I still have not really decided. Esp about the software. I collected lots of options here: https://github.com/albertz/wiki/blob/master/backup-software.... At the moment, I really like Perkeep ( https://perkeep.org/ ). But I'm not sure whether this is a solution for everything. On the hardware side, I also have not really decided. I want to build up…
I settled with a SuperMicro's passive Atom solution and a Fractal Design mini case, able to hold six disks. It is very quiet when you tune down the fans and keeps the disks just below 40°C which is optimal for me. We have the NAS in the same room we sleep and it doesn't bother us.
Earlier quoted context omitted.
Distrust in cloud storage in which way? What are yafraid will happen. Which data are you afraid is going to end up in whose hands? The data I really care about is encrypted right on my laptop,and I backup that encrypted data.
It no so much that, but more of a control aspect. Once my backups are on someone-elses-computer I've lost control of them, and knowing my luck the day I need them will be the day the cloud provider has an outage, or even worse, goes offline.
Use a solution that you can easily switch from one provider to another one, switch when there is any warning that the one you use might be in trouble. In the same line, make sure people in your family (or technically savvy friends) understand your system, are able to switch and know to pay the could provider bills if you're not around - unless it is ok for your entire storage to disappear when you die of course.
Here is what I do to hedge the risk of electrical failure (raid+usb on the same circuit), fire (both copies in same structure), malicious compromise of my machine and theft: - My workstation has linux software raid-1 of 2x 6TiB drives (this provides robustness and uptime in case of single drive failures and ease of recovery). - Another machine in my garage doing incremental daily backup pulls over the network. It is…
The NAS holds all our media/documents/music/whatever, and where possible, this gets auto uploaded from workstations to the NAS, mostly through Resilio Sync, but also ChronoSync. A local Raspberry Pi (different building) acts as a node in the Resilio Sync setup, adding more redundancy.
The NAS backs up to a local USB drive nightly, as well as a remote (4km distance) Odroid HC2 with a WD Red drive. This device also runs Resilio Sync as a redundant node. All machines run Btrfs where possible, with smart monitoring, daily short smart tests, weekly long smart tests, monthly scrubs, and log monitoring emailed to my inbox every morning.
Finally i make yearly archive discs (100GB M-Disc) with the data from the past 12 months. I burn these in 2 copies, one is stored locally, the other is stored remotely. Along with these drives, i also maintain a couple of 4TB USB3 drives, which i freshen (nondestructive badblocks) yearly, and update. Again, one is stored locally, the other remotely with the M-discs.
Even with the above setup, there is a theoretical possibility of losing data, but as most data lives on both the NAS and the client machines, as well as a remote target, i would need to lose all 3 at the same time. The only irreplaceable data would be our family photos, and those are also stored on optical and magnetic media (spending 360/365 days powered off), adding at least a couple more layers of redundancy to the equation.
Hard to believe we are 129 comments into this and there are zero mentions of 'borg' in the comment threads ... For those that don't know, borg is a backup utility[1] that has been called the "holy grail of backups"[2]. It takes your plaintext files and directories, chops them into gpg-encrypted chunks with encrypted, random filenames, and will upload (and maintain) them, with an efficient, changes-only update, to any…
restic was mentioned a few times and is a very similar project with very similar goals. They both have encryption as a first-class concept and are snapshot based with content-defined chunking. I'd hope most people would be using these newer generations of backup tools.
* Fully open-source, command line implementation. Script as needed. * Supports ton of backends, including directories, SFTP, and many cloud services. * Supports multiple backup operations in parallel. Create one repo for multiple machines. * A repo is really an encrypted object store with a lists of directory/file/metadata references (snapshots). If the same file exists on multiple directories/drives/machines, it is deduplicated. * Supports tagging, which allow you to identify independent snapshots and manage them. * Supports purging old data with conditions, ie. keep last 7 daily, 3 weekly, and 6 monthly. * Can verify and repair repositories.
I regularly use it to backup my home server to a backup drive and to Backblaze. I've also used to back up my home directory of my development machine to replicate it on another machine.
Earlier quoted context omitted.
I settled with a SuperMicro's passive Atom solution and a Fractal Design mini case, able to hold six disks. It is very quiet when you tune down the fans and keeps the disks just below 40°C which is optimal for me. We have the NAS in the same room we sleep and it doesn't bother us.
Do you spin down disks? In my case WD Reds generates more noise than cpu and case fans when there is no workload on system.
http://www.fractal-design.com/home/product/cases/node-series...
Earlier quoted context omitted.
Do you spin down disks? In my case WD Reds generates more noise than cpu and case fans when there is no workload on system.
No. Keeping them running uses less electricity than spinning them up with our workload. The disks are floating with rubber connectors in the case and the noise is nothing we can hear to the bed. http://www.fractal-design.com/home/product/cases/node-series...