Re: [gentoo-security] ssh-agent and cryptsetup

[Ronny Peine]

Hi,

it would also be possible to write a script which mounts the crypted devices 
before rsync starts and unmounts it after it. The whole backup logic could be 
put in there too. This would lead to an automatism which minimizes your work.

cu,
Ronny

Am Mittwoch, 12. Juli 2006 15:22 schrieb Jason:
> The subject kinda says it all.  I've been hunting around for an
> automated solution to backing up my encrypted home directory to a remote
> server through ssh.  Obviously, the backup is also an encrypted volume.
>
> Is there an existing solution to getting cryptsetup to use ssh-agent
> for the volume key?
>
> The end result would put my ssh private key on a thumbdrive (password
> protected).  Logging in would decrypt local homedir, and rsync with
> remote encrypted homedir.  Logging out would rsync push changes up to
> remote encrypted home dir and tear down all encrypted volumes and
> ssh-agent.
>
> So far, I've found the articles on encrypted home dirs with dm-crypt,
> using a thumbdrive to hold the key (various solutions), pam-ssh to
> automatically fire up ssh-agent using the private key password to log in
> (limited success with that).  But nothing regarding using ssh-agent to
> decrypt a volume.
>
> Any ideas?
>
> Jason.