Backup software for encrypted backups (e.g. Duplicity)

[Martu]

It would be nice to have backup software that handles incrementals and encrypted backups in remote or local systems.

I think Duplicity would be good for that.

Duplicity backs directories by producing encrypted tar-format volumes and uploading them to a remote or local file server. Because duplicity uses librsync, the incremental archives are space efficient and only record the parts of files that have changed since the last backup. Because duplicity uses GnuPG to encrypt and/or sign these archives, they will be safe from spying and/or modification by the server.

[TPRa]

This is something I would also need. Local encrypted backups to USB drive. Hope this will see daylight soon

[Kapitein Haak]

Whats new in ADM 2.6 beta:
- Supports AES-256-bit encryption for MyArchive disks (in EXT4 format only)

Not the same as an USB drive, but when you purchase a (few) bracket(s), it comes close.

Best regards,
Kapitein Haak.

[TPRa]

MyArchive is not an option for me, all bays are in use.

It should not be too difficult to implement even inside ADM though. I already have cronjob, but this is not failproof, once a while it does not complete, and then I have dozens of processes after a few days running but not able to write to the file (which is locked by the first process that hung). Also I would like to hide the password from the command.

My cronjob:

30 1 * * * tar -c /volume1/TPRa | openssl enc -e -aes256 -k myverysecrepassword > /volume1/USB1/TPRa.tar.enc

[MikeG.6.5]

If you don't want the password int he cron why don't you use a shell script. Something like this: (Call this CkTar.sh)

Code: Select all

#!/bin/sh
SERVICE='tar'
 
if ps ax | grep -v grep | grep $SERVICE > /dev/null
then
    echo "$SERVICE service running, everything is fine"
else
    echo "$SERVICE is not running"
    tar -c /volume1/TPRa | openssl enc -e -aes256 -k myverysecrepassword > /volume1/USB1/TPRa.tar.enc
fi

exit 0

This script checks to see if the process tar is running, if so, it exits. If not it then runs. Then you don't get 2, 3 or 15 instances of the app running... Now I haven't tested this, so it might need some tweaks to make it work right, but that's the best part. Those tweaks are a 1 time thing, and then it executes on the cron job's timing automatically, on time, every time with only one instance of it every running at a time. With some further tweaks you might even be able to kill a hung instance. I'll leave that to you to work out how you want it to happen, but I'm sure it's possible.

[elfidge]

+1 for USB encrypted backups. Whilst I can backup encrypted in-transit, I'd also like my local backup at-rest to be secure.

[pafer]

Hi Asustor team,

Is there any update on this?

[Vincent.T@AST]

Hi all,

Thanks for your suggestions. Duplicity backup the directory into compressed and encrypted volumes, which means the backups cannot be directly accessed and it must be restored from a Linux box. We think Duplicity is not a practical backup option considering these limitations.

Now we are studying the encryption on NTFS and HFS+ file systems. Our goal will be supporting AES-256 bit encryption on NTFS and HFS+ for external drive and MyArchive disk. Once you unmount these disks from NAS and insert them to Windows or Mac PC, you can still use a proper utility to unlock and read the contents.

[elfidge]

Thanks Vincent. That sounds perfect.
Have you any idea on timelines please?
Thanks

[Martu]

That solution is only for local disks?
How about cloud services like dropbox, google drive, onedrive?
I like to upload encrypted backups to cloud services and copy same volumes to remote disks.

Duplicity is all-in-one solutions and its works for experts users.