[ale] Personal Backup Strategies?

[Michael H. Warfield]

On Thu, 2010-02-04 at 10:40 -0500, David Tomaschik wrote:

> On Thu, Feb 4, 2010 at 10:22 AM, JK <jknapka at kneuro.net> wrote:
>         <snip> 
>         None of that would be pertinent to the
>         question of why one would want an encrypted view of a clear
>         local filesystem.
>         If the objective is to secure the data stream in transit, then
>         the
>         straightforward answer would be to, well, encrypt the data
>         stream in
>         transit.
>         
>         Maybe I'm missing something, though.
>         
>         -- JK 


> My understand is he wants something to transparently encrypt the files
> as he reads them from disk so they end up encrypted on the disk of the
> remote host.  Duplicity uses gpg as it goes, so it should meet that
> goal.  My only concern with duplicity is that it apparently creates
> tarballs in /tmp before encrypting, which is a no-no to me since
> my /tmp is not encrypted, though I'm considering doing a
> cryptoswap-style /tmp (random key generated on boot). 

According to the man page, duplicity will honor the TMPDIR, TEMP, TMP
environment variables, so you can stick them where you want.

> -- 
> David Tomaschik, RHCE
> System Administrator/Developer
> http://tuxteam.com
> GPG: 0x6D428695

Mike
-- 
Michael H. Warfield (AI4NB) | (770) 985-6132 |  mhw at WittsEnd.com
   /\/\|=mhw=|\/\/          | (678) 463-0932 |  http://www.wittsend.com/mhw/
   NIC whois: MHW9          | An optimist believes we live in the best of all
 PGP Key: 0x674627FF        | possible worlds.  A pessimist is sure of it!
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 482 bytes
Desc: This is a digitally signed message part
Url : http://mail.ale.org/pipermail/ale/attachments/20100204/ca3e6fac/attachment.bin