A friend and I are going to use our home servers as each others off-site backup locations. What's the simplest solution for an encrypted container we can each use to hold the backups?
I trust this person with my life, but I want he and I to be able to backup anything without worry of the other tripping over very private data.
Edit: essentially something like Truecrypt but currently supported and secure.
Leaning towards Cryptomator..
my weird suggestion: maybe a (large) loopback file formatted with luks+whatever. Separate 'devices' with separate passphrases. Can be done trivially with homectl
¯\_(ツ)_/¯
@angrylinus I like it ;) Though think I’m going to give Borg Backup a spin. Looks pretty much exactly what I’d want from a backup system and does encrypted at rest which is great for my friend and I to backup to each other without noodling about in our respective files. Not that we would but better to be safe.
@wiredfire
if using --storage=luks it unlocks/mounts on login and unmounts/locks on exit.
Ok whatever works I guess.
@angrylinus I’d have a noodle about with file access permissions with luks, where Borg I won’t and it does nice chunk-based backups and deduplication. Which I hadn’t actually thought about but now I do that seems an exceedingly useful approach for a backup process and particularly where it’ll be borrowing space of a friends machine ^_^
@wiredfire not sure what you mean by permissions. it's a container with a file system with the users permissions like any other.
borg is a fine option tbf. just throwing different things into the mix.
@angrylinus permissions as in making sure friends user has relevant file permissions for the luks volume on my machine and visa versa. Which isn’t awful but I’ve got a bad history with mucking up file permissions 😅 but ideas are *always* appreciated! Thank you for sharing :)
@wiredfire you don't have to do anything other than create the user and pass with homectl. unless you know their luks key you can't see anything other than the $user.home file which is encrypted.