GPG support?

[dpc]

Would it be possible to encrypt backups with gpg public key?

[Vlad1mir-D]

Can you explain use-case for GPG-encrypted repo?

2016-01-31 4:01 GMT+03:00 Dawid Ciężarkiewicz notifications@github.com:

Would it be possible to encrypt backups with gpg public key?

—
Reply to this email directly or view it on GitHub
#109.

Kind regards,
Vladimir.

[dpc]

Asymmetric encryption is awesome. One can create automatic backups about anywhere, sync them using untrusted mediums (Dropbox, Bittorrent etc.), while having a secure private key on an offline smartcard.

On each of my systems I have an automated backup that does rdup | tar | gpg. Backups are synced/replicated with syncthing. If anyone breaks into any of my systems, non of the backups is readable, and only current data on the system is compromised. I don't have to setup unique encryption password or do anything special. Also, there's no encryption password to be leaked and compromised. Until I need to restore any backup, secret key is unnecessary. 

I've discovered zbackup and wanted to use deduplication with rdup | zbackup since a lot of data is in fact shared on all my hosts, but now I would need to setup unique encryption passwords on every machine, record it and backup it up.

It seems to me that zbackup could support arbitrary filters for writing blocks in general. Block input/output would go through a custom commands. This way gpg could be used as well.

[dpc]

As a learning exercise I've written a simple zbackup clone featuring public key cryptography: https://github.com/dpc/rdedup/

[weHyggl]

I appreciate this requirement too. Creating automated backups with asymmetric encryption as well helps avoiding clear text passwords in scripts (and even holding them on the source system).

I would like to take this opportunity to thank you for implementing zbackup. It is a great solution.