Re: [Duplicity-talk] Duplicity for this?

[Grant]

>> I have three systems in three locations. Two of the systems contain
>> important data that needs to be backed up.  I was thinking the two
>> important systems could push to the unimportant system and then pull
>> each other's data from there. That way the only accessible system is
>> the unimportant system.
>
> duplicity makes secure backups to potentially insecure (remote) file 
> storages. so generally speaking, yes.
> using the accessible machine as peering location is kind of dangerous as you 
> might mirror tampered (corrupted) backups to your other machines in case 
> someone broke in there.

How about an automated restore command to test the validity of the backups?

> you might also want to consider
>  http://liw.fi/obnam/

That looks like a good one.

>> Previously I was planning on rsyncing but I would like the data to be
>> encrypted at rest.  I was planning to rsync to an accessible location
>> on the destination system and then run rdiff-backup from that location
>> to an inaccessible location on the same system so old versions of the
>> data would be clean if the private SSH key were compromised.  Can I
>> accomplish something similar when using duplicity instead of rsync?
>
> dunno what you mean here.
> there is no "inaccessible location on a same machine". you'll have to assume 
> your intruder has a privilege escalation exploit and go everywhere.

I was just talking about running rdiff-backup to a location that isn't
accessible via authorized_keys.

- Grant