HN Explorer

Show HN: Snebu Backup now supports client side public key encryption

3 points by derekp7 ↗ HN
The documentation at https://www.snebu.com needs a bit more of an overhaul, however updated it to reflect how to use the encryption features. Take a look at https://www.snebu.com/tarcrypt.html for a description of how the tar based encryption filter is implemented. Current release of Snebu is 1.1pre1, since this has also had a major refactoring (clean up) of the code. Therefore will need to perform additional volume testing before marking the release as final.

1 comment

[ 3.3 ms ] story [ 11.8 ms ] thread
derekp7
Just a quick bit of info -- Snebu is an open source backup tool I put together a number of years ago, and have been using it in a lab backing up about 50 hosts. It is snapshot based, and maintains a database backed backup catalog (using SQLite), and is quick to set up / low maintenance.

Since it uses "tar" as a serialization format (it ingests tar files, storing the metadata from the tar headers in the DB), I was able to add encryption by creating "tarcrypt" as a filter for tar files. This extends that tar file format a bit (documented in the above page), and uses public key encryption with HMAC verification. The tarcrypt program can stand on its own.