Re: [gentoo-security] ssh-agent and cryptsetup

[Randall Nortman]

On Wed, Jul 12, 2006 at 09:22:13AM -0400, Jason wrote:
> The subject kinda says it all.  I've been hunting around for an
> automated solution to backing up my encrypted home directory to a remote
> server through ssh.  Obviously, the backup is also an encrypted volume.
[...]

Have you considered backing up the block device that underlies your
encrypted volume instead of trying to back up the files on the
filesystem?  You don't need to decrypt and re-encrypt it in that case;
you just back up the raw (encrypted) block device using rsync (over
ssh, just to provide secure authentication).  If the block device
happens to be managed by LVM, you can use LVM's snapshot feature to
get a consistent image of the device.  Otherwise, you'd have to make
sure the filesystem is unmounted or mounted read-only during the
backup.

-- 
Randall
-- 
gentoo-security@g.o mailing list