Hacker News Reader

Comment by annoyingnoob | Hacker News Reader

https://en.wikipedia.org/wiki/Third-party_doctrine

Use borg or other encrypted backup tool (Restic is also recommended by others in this thread). rsync.net is my offsite backup. Doesn't matter what anyone demands of them, all they ever see is an encrypted blob.

I have been using Duplicati, but

>Backup archives are mountable as userspace filesystems for easy interactive backup examination and restores (e.g. by using a regular file manager).

looks like a really nice feature of borg. Thanks.

sidenote: restic can do that too

You do then need to find somewhere to store an offsite backup of your encryption keys. That said, since those change far less often than your backups, options like a safety deposit box are a more realistic place to store keys than the backups themselves.

Yes, borg also has the option of storing them in the repo itself, protected by a passphrase (think encrypted ssh key files).

Anyway, my "home burned down rescue bundle" consists of a flash drive with a keepass export of my password vault and encrypted borg repo key / rsync.net ssh keys at the office.

Slightly less accessible in this pandemic world, but no safety deposit boxes needed.

Important to reiterate this, since it's an interesting feature - borg does, indeed, allow you to store the encryption key for your repository inside the repo itself and you just need to remember/safeguard the passphrase.

I can't say whether this is a good choice for any particular use-case but I appreciate that it is an option ...

For those that are curious, yes, you can later export the key from your repo so that you have a copy elsewhere ...

Reply on news.ycombinator.com