Re: [BackupPC-users] Move current data dir to another location and start from scratch.
On 8/13/2021 9:18 AM, G.W. Haywood via BackupPC-users wrote: I'm a big fan of having more than one backup Keep one copy off-site, in case of natural disaster, such as fire, earthquake, flood, power company zaps your facility. I'm not happy with my data in less than three places. ___ BackupPC-users mailing list BackupPC-users@lists.sourceforge.net List:https://lists.sourceforge.net/lists/listinfo/backuppc-users Wiki:https://github.com/backuppc/backuppc/wiki Project: https://backuppc.github.io/backuppc/
Re: [BackupPC-users] Move current data dir to another location and start from scratch.
Hi there, On Fri, 13 Aug 2021, Rob Morin wrote: WHat I was thinking was simply moving/renaming the current backup set and making the dir immutable to prevent ransomware from getting to it. I suspect that your idea won't work. How do you propose to make the directory immutable? If it's by means of some utility like 'chattr' then what's to stop the ransomware from using the same techniques to remove the immutable flag? The best way to avoid malicious access to the backup is to have it on a separate machine which can't be accessed from the network. It can use firewall techniques to drop all attempts to connect *from* remote machines, yet still be able to connect *to* the same remote machines to run the backups. Of course this assumes that you trust the network stacks, the implementation of the firewall etc., but those things are usually fairly trustworthy - and of course since you're paranoid they are all kept up to date with security patches. If you're really paranoid (not unreasonable in many situations), then switch the backup machine off while it isn't doing backups. I'm a big fan of having more than one backup; a second backup could be another BackupPC machine, but I'm also a fan of using more than one method of backing up; if it's something you do only every few months, you could use something like tar and a USB stick. -- 73, Ged. ___ BackupPC-users mailing list BackupPC-users@lists.sourceforge.net List:https://lists.sourceforge.net/lists/listinfo/backuppc-users Wiki:https://github.com/backuppc/backuppc/wiki Project: https://backuppc.github.io/backuppc/
Re: [BackupPC-users] Move current data dir to another location and start from scratch.
> > How do you archive your backups? > I use the Archive function from BackupPC: https://backuppc.github.io/backuppc/BackupPC.html#Archive-functions I save the archive to an external drive, which I then move off-site. WHat I was thinking was simply moving/renaming the current backup set and > making the dir immutable to prevent ransomware from getting to it. > Then start from scratch again, but leave that one for 6 months then do the > same thing again but deleting the older immutable copy. > What I don't get is why you want to start from scratch. Even if you don't use the Archive function (there are good reasons no to) and want to get a snapshot of the full Backup installation and data, you can just copy the relevant folders and leave the BackupPC installation untouched. Somebody else also proposed to use a filesystem with snapshot capabilities, although I don't know if that is immune to ransomware. In any case, there is no need for moving files and a clean start. Regards, Guillermo ___ BackupPC-users mailing list BackupPC-users@lists.sourceforge.net List:https://lists.sourceforge.net/lists/listinfo/backuppc-users Wiki:https://github.com/backuppc/backuppc/wiki Project: https://backuppc.github.io/backuppc/
Re: [BackupPC-users] Move current data dir to another location and start from scratch.
On 8/11/2021 2:07 PM, Rob Morin wrote: Hey everyone I have a full week's backup of all my servers, i want to make an immutable copy of them, so I was thinking of just "moving" the current data dir, and whatever else I might need to another partition, and start the backup from scratch again. Mean while i make the dir on that new partition immutable. I want to do that every 6 months... Suggestions? On my BackupPC server, the partition containing the backups is in a 3-way mirror with one of the drives in a hot-swap enclosure. Once a month, I remove the third drive, replace it with a new one, and re-sync the mirrors. This drive then goes to an off-site location for storage. As a bonus, that drive also contains the OS, so if I need to restore from a backup on an old drive, I can stick it in just about any PC, boot it up, and have a running BackupPC instance to restore from. I use a 3-way mirror so that I still have redundancy even after pulling the drive. -- Bowie ___ BackupPC-users mailing list BackupPC-users@lists.sourceforge.net List:https://lists.sourceforge.net/lists/listinfo/backuppc-users Wiki:https://github.com/backuppc/backuppc/wiki Project: https://backuppc.github.io/backuppc/
Re: [BackupPC-users] Move current data dir to another location and start from scratch.
Hey Guillermo, thanks for the reply... How do you archive your backups? WHat I was thinking was simply moving/renaming the current backup set and making the dir immutable to prevent ransomware from getting to it. Then start from scratch again, but leave that one for 6 months then do the same thing again but deleting the older immutable copy. Thanks and of course , have a great day! On Thu, Aug 12, 2021 at 10:10 AM Guillermo Rozas wrote: > Hi, > > I have a full week's backup of all my servers, i want to make an immutable >> copy of them, so I was thinking of just "moving" the current data dir, and >> whatever else I might need to another partition, and start the backup from >> scratch again. >> > > Why "move and start from scratch"? Why don't you just copy the folder and > let the backup keep working? > > I want to do that every 6 months... >> Suggestions? >> > > Do you really need the full BackupPC data structure, including the > different snapshots, or is one copy of the data enough? For the latter case > maybe the "Archive" function is better, as you get the files with the > original files structure and names. However, you also lose the > deduplication. > > I do a full Archive of my backups every 2 months to an external drive, but > I have little overlap of files so losing deduplication is not an issue. > > Regards, > Guillermo > ___ > BackupPC-users mailing list > BackupPC-users@lists.sourceforge.net > List:https://lists.sourceforge.net/lists/listinfo/backuppc-users > Wiki:https://github.com/backuppc/backuppc/wiki > Project: https://backuppc.github.io/backuppc/ > -- -- Rob Morin Systems/Network Administrator Hardent Inc. ___ BackupPC-users mailing list BackupPC-users@lists.sourceforge.net List:https://lists.sourceforge.net/lists/listinfo/backuppc-users Wiki:https://github.com/backuppc/backuppc/wiki Project: https://backuppc.github.io/backuppc/
Re: [BackupPC-users] Move current data dir to another location and start from scratch.
Hi, I have a full week's backup of all my servers, i want to make an immutable > copy of them, so I was thinking of just "moving" the current data dir, and > whatever else I might need to another partition, and start the backup from > scratch again. > Why "move and start from scratch"? Why don't you just copy the folder and let the backup keep working? I want to do that every 6 months... > Suggestions? > Do you really need the full BackupPC data structure, including the different snapshots, or is one copy of the data enough? For the latter case maybe the "Archive" function is better, as you get the files with the original files structure and names. However, you also lose the deduplication. I do a full Archive of my backups every 2 months to an external drive, but I have little overlap of files so losing deduplication is not an issue. Regards, Guillermo ___ BackupPC-users mailing list BackupPC-users@lists.sourceforge.net List:https://lists.sourceforge.net/lists/listinfo/backuppc-users Wiki:https://github.com/backuppc/backuppc/wiki Project: https://backuppc.github.io/backuppc/
Re: [BackupPC-users] Move current data dir to another location and start from scratch.
Hi there, On Thu, 12 Aug 2021, Rob Morin wrote: I have a full week's backup of all my servers, i want to make an immutable copy of them, so I was thinking of just "moving" the current data dir, and whatever else I might need to another partition, and start the backup from scratch again. Mean while i make the dir on that new partition immutable. I want to do that every 6 months... Suggestions? To some extent you'd be trying to defeat what BackupPC is trying to do for you. I suggest that you don't want to do that at all. What about things like filesystem-implemented snapshots? -- 73, Ged. ___ BackupPC-users mailing list BackupPC-users@lists.sourceforge.net List:https://lists.sourceforge.net/lists/listinfo/backuppc-users Wiki:https://github.com/backuppc/backuppc/wiki Project: https://backuppc.github.io/backuppc/
[BackupPC-users] Move current data dir to another location and start from scratch.
Hey everyone I have a full week's backup of all my servers, i want to make an immutable copy of them, so I was thinking of just "moving" the current data dir, and whatever else I might need to another partition, and start the backup from scratch again. Mean while i make the dir on that new partition immutable. I want to do that every 6 months... Suggestions? Thanks & have a great day! -- -- Rob Morin Systems/Network Administrator Hardent Inc. ___ BackupPC-users mailing list BackupPC-users@lists.sourceforge.net List:https://lists.sourceforge.net/lists/listinfo/backuppc-users Wiki:https://github.com/backuppc/backuppc/wiki Project: https://backuppc.github.io/backuppc/
