Live data from Hacker News

Encrypted, deduplicated remote backups

stavros.io

1–10 of 50 posts

Re: Encrypted, deduplicated remote backups

#4

EncFS in reverse mode with rdiff-backup would pretty much be ideal, but EncFS currently has two bugs that prevent this from working. Does anyone know what this refers to? It sounds like a winning combination to me.

Two things, one doesn't store the encfs.xml file in the reversed directory, so it doesn't get backed up automatically, and the other, more important (for my use case) is that there's no way to make multiple directories appear under one (symlinks are exposed as encrypted/broken symlinks). This means that you can only back up one dir per repo, which I found too constraining.

Re: Encrypted, deduplicated remote backups

#6
Meeting most of the requirements on that list, I have found Arq[1] to be a great backup solution on OS X. It stores encrypted, incremental backups on S3 and although the client itself isn't open source, the data format is[2]. The company also maintains an open source recovery tool[3]. The only requirement that isn't met is cost, because S3 costs about $60/yr for 50GB.

[1] http://www.haystacksoftware.com/arq/index.php

[2] http://www.haystacksoftware.com/arq/s3_data_format.txt

[3] http://sreitshamer.github.io/arq_restore/

Re: Encrypted, deduplicated remote backups

#7
What's wrong with tarsnap? http://www.tarsnap.com/

Added in edit: I see that people are saying it's expensive, and I appreciate that. When I bundle it into my considerations of how much I spend on other things, what I get, and my level of confidence in the service, it seems a good deal to me. In the interests of full disclosure, I don't actually use anything like this, as I have a storage solution provided for me. But when I did the sums a while ago, I decided that tarsnap would be my choice if I needed to make one. For people to say it's expensive is a useful additional data point for me. Thank you.

Re: Encrypted, deduplicated remote backups

#8
Can encbup be used for automated backups? Seems like it's using symmetric encryption, so that the passphrase would need to be entered or passed as an argument on each run.

Not sure if it meets all your requirements, but duplicity [1] has support for asymmetric encryption via gpg pub/priv key pairs.

[1] http://duplicity.nongnu.org/

EDIT: just noticed the article mentioned duplicity as insufficient.

Re: Encrypted, deduplicated remote backups

#9

What's wrong with tarsnap? http://www.tarsnap.com/ Added in edit: I see that people are saying it's expensive, and I appreciate that. When I bundle it into my considerations of how much I spend on other things, what I get, and my level of confidence in the service, it seems a good deal to me. In the interests of full disclosure, I don't actually use anything like this, as I have a storage solution provided for me. Bu…

It's very expensive. The current monthly storage price is about 3 times that of S3 and 30 times of Glacier.

Re: Encrypted, deduplicated remote backups

#10

What's wrong with tarsnap? http://www.tarsnap.com/ Added in edit: I see that people are saying it's expensive, and I appreciate that. When I bundle it into my considerations of how much I spend on other things, what I get, and my level of confidence in the service, it seems a good deal to me. In the interests of full disclosure, I don't actually use anything like this, as I have a storage solution provided for me. Bu…

Expense.
Post reply on HN