qvm-backup: save backups in AppVM

[marmarek]

Reported by joanna on 8 Feb 2013 18:42 UTC
Currently making backups requires attaching some block device (usually USB disk) to Dom0. This approach has many disadvantages:

• Direct USB attach to Dom0 is an insecure operation (one can get around this by not having any USB controller assigned to Dom0 and by using qvm-block to attach the block device to Dom0 -- while much more secure, it's still carry some risks -- e.g. malformed partition table on the device might exploit Dom0's kernel)
• Because there is no networking in Dom0 it is not possible to backup to NAS or other network-mounted storage.

In order to solve this problem we shall implement the following (simple) scheme:

1. Dom0 creates backup stream (tar)
2. ... which is piped through gnupg (still in Dom0!)
3. ... and sent over to selected VM, where it could be stored on attached USB storage, or some network storage.

Migrated-From: https://wiki.qubes-os.org/ticket/703

[marmarek]

Comment by joanna on 5 May 2013 08:45 UTC
Some discussions on this topic:

https://groups.google.com/group/qubes-devel/browse_frm/thread/4d0aff41c5c8570c/42d7ec160d36d568?lnk=gst&q=gpg#42d7ec160d36d568

[marmarek]

Comment by joanna on 5 May 2013 08:45 UTC
Some discussions on this topic:

https://groups.google.com/group/qubes-devel/browse_frm/thread/4d0aff41c5c8570c/42d7ec160d36d568?lnk=gst&q=gpg#42d7ec160d36d568

[marmarek]

Comment by joanna on 5 May 2013 08:47 UTC
Andrew Sorensen volunteered to work on this in the coming weeks:

https://groups.google.com/group/qubes-devel/msg/ba93267d4988cf99

[marmarek]

Comment by joanna on 5 May 2013 08:47 UTC
Andrew Sorensen volunteered to work on this in the coming weeks:

https://groups.google.com/group/qubes-devel/msg/ba93267d4988cf99

[marmarek]

Comment by marmarek on 1 Dec 2013 02:20 UTC
With help from Olivier Mdoc finally done :)

http://git.qubes-os.org/?p=marmarek/core-admin.git;a=commit;h=27f6f0e64ef0d42b3b16a221ab888df6bdea9907
http://git.qubes-os.org/?p=marmarek/core-agent-linux.git;a=commit;h=e3e96dba7400bb2b87c4d8b0986fcaf8a9ec44e6
http://git.qubes-os.org/?p=marmarek/core-admin-linux.git;a=commit;h=68186cb9803404556c7455748020adc31157472a
http://git.qubes-os.org/?p=marmarek/qubes-manager.git;a=commit;h=fda7180d16ed53cd670509a699fbb2f57253d59a

[marmarek]

Comment by marmarek on 1 Dec 2013 02:20 UTC
With help from Olivier Mdoc finally done :)

http://git.qubes-os.org/?p=marmarek/core-admin.git;a=commit;h=27f6f0e64ef0d42b3b16a221ab888df6bdea9907
http://git.qubes-os.org/?p=marmarek/core-agent-linux.git;a=commit;h=e3e96dba7400bb2b87c4d8b0986fcaf8a9ec44e6
http://git.qubes-os.org/?p=marmarek/core-admin-linux.git;a=commit;h=68186cb9803404556c7455748020adc31157472a
http://git.qubes-os.org/?p=marmarek/qubes-manager.git;a=commit;h=fda7180d16ed53cd670509a699fbb2f57253d59a