method for back up data with encrypted drive

  • Hi,


    I’m in the process setting up OMV5 with SnapRaid and Union FS.
    I read somewhere users use BorgBackup with LuksEncryption for back up data.
    But BorgBackup plugin isn’t available yet.


    what are the suggestions ?


    thanks

    OMV v5.0
    Asus Z97-A/3.1; i3-4370
    32GB RAM Corsair Vengeance Pro

    • Offizieller Beitrag

    I read somewhere users use BorgBackup with LuksEncryption for back up data.

    Borgbackup has an encryption option but it doesn't use Luks.


    But BorgBackup plugin isn’t available yet.


    what are the suggestions ?

    Wait for the plugin is my first suggestion. It isn't far off. Just haven't had much time lately.

    omv 7.0.4-2 sandworm | 64 bit | 6.5 proxmox kernel

    plugins :: omvextrasorg 7.0 | kvm 7.0.10 | compose 7.1.2 | k8s 7.0-6 | cputemp 7.0 | mergerfs 7.0.3


    omv-extras.org plugins source code and issue tracker - github


    Please try ctrl-shift-R and read this before posting a question.

    Please put your OMV system details in your signature.
    Please don't PM for support... Too many PMs!

  • by the way, I plan only to encrypt a few folders on the drive.


    So if the data is encrypted with Luks, can I still use BorgBackup to back up data ?

    OMV v5.0
    Asus Z97-A/3.1; i3-4370
    32GB RAM Corsair Vengeance Pro

    Einmal editiert, zuletzt von tinh_x7 ()

    • Offizieller Beitrag

    So if the data drive is encrypted with Luks, can I still use BorgBackup to back up data ?

    As long as the drive is unlocked and the filesystem is mounted. Borg works with files not the filesystem or device it is on.

    omv 7.0.4-2 sandworm | 64 bit | 6.5 proxmox kernel

    plugins :: omvextrasorg 7.0 | kvm 7.0.10 | compose 7.1.2 | k8s 7.0-6 | cputemp 7.0 | mergerfs 7.0.3


    omv-extras.org plugins source code and issue tracker - github


    Please try ctrl-shift-R and read this before posting a question.

    Please put your OMV system details in your signature.
    Please don't PM for support... Too many PMs!

    • Offizieller Beitrag

    The borg plugin is in the repo now.

    omv 7.0.4-2 sandworm | 64 bit | 6.5 proxmox kernel

    plugins :: omvextrasorg 7.0 | kvm 7.0.10 | compose 7.1.2 | k8s 7.0-6 | cputemp 7.0 | mergerfs 7.0.3


    omv-extras.org plugins source code and issue tracker - github


    Please try ctrl-shift-R and read this before posting a question.

    Please put your OMV system details in your signature.
    Please don't PM for support... Too many PMs!

    • Offizieller Beitrag

    The device needs to be blank.

    omv 7.0.4-2 sandworm | 64 bit | 6.5 proxmox kernel

    plugins :: omvextrasorg 7.0 | kvm 7.0.10 | compose 7.1.2 | k8s 7.0-6 | cputemp 7.0 | mergerfs 7.0.3


    omv-extras.org plugins source code and issue tracker - github


    Please try ctrl-shift-R and read this before posting a question.

    Please put your OMV system details in your signature.
    Please don't PM for support... Too many PMs!

  • How do I encrypt the device if I can't select any data drive from the drop-down menu ?
    Do I need to un mount my hard drives and format them ?
    I only want to encrypt some specific folders on the drive, not entire drive.

    OMV v5.0
    Asus Z97-A/3.1; i3-4370
    32GB RAM Corsair Vengeance Pro

    Einmal editiert, zuletzt von tinh_x7 ()

    • Offizieller Beitrag

    How do I encrypt the device if I can't select any data drive from the drop-down menu ?

    LUKS needs a block device not a file system. The plugin only allows you to select a disk without filesystems.

    Do I need to un mount my hard drives and format them ?

    No. You need to unmount and wipe them. Then add them to LUKS and then put a filesystem on top of the LUKS device.


    I only want to encrypt some specific folders on the drive, not entire drive.

    LUKS is not what you want then. There is no plugin to do that. You could do that from the client side though.

    omv 7.0.4-2 sandworm | 64 bit | 6.5 proxmox kernel

    plugins :: omvextrasorg 7.0 | kvm 7.0.10 | compose 7.1.2 | k8s 7.0-6 | cputemp 7.0 | mergerfs 7.0.3


    omv-extras.org plugins source code and issue tracker - github


    Please try ctrl-shift-R and read this before posting a question.

    Please put your OMV system details in your signature.
    Please don't PM for support... Too many PMs!

  • Sorry that I ask many questions about this.
    I looked at the performance reviews of fscrypt and Luks, and Luks had better speed and performance.


    I notice some users wrote a script to auto unlock Luks encrypted hdd upon startup.
    Is this recommended instead unlock it manually ?

    OMV v5.0
    Asus Z97-A/3.1; i3-4370
    32GB RAM Corsair Vengeance Pro

    • Offizieller Beitrag

    I notice some users wrote a script to auto unlock Luks encrypted hdd upon startup.

    That means you need to store the key somewhere.



    Is this recommended instead unlock it manually ?

    Depends on your use case. When you can accept the above it should be fine.
    I do it for an external backup drive which I store in a place outside of my home. I have the key on my server. When I plugin the USB drive the drive gets decrypted using the key which is stored on the server. In this case I don't mind as the data are stored unencrypted on the server anyway.

  • Hi,


    I just done the encryption process, but upon startup, the drives aren't unable to auto mount.
    https://forum.openmediavault.o…%2Bdev-disk-by#post143926



    I've tried timeout =1 and timeout =2, but no luck.
    By the way, I can't log into OMV web gui at all.

    Code
    dev/disk/by-label/data1 /srv/dev-disk-by-label-data1 ext4 defaults,nofail,x-systemd.device-timeout=1,user_xattr,noexec,usrjquota=aquota.user,grpjquota=aquota.group,jqfmt=vfsv0,acl 0 2
  • My current set up is : added passphrases then added Keyfile to the encryption drives.
    Not sure if there still a bug for this method after I read another thread.


    Even though I can’t unlock the drives upon startup, why I can’t access OMV web gui ?


    Edit: after researchings, I found the solution to fix it.
    I've to modified the /etc/crypttab and /etc/fstab accordingly.


    Current /etc/fstab config:



    Upon startup, I received errors:



    OMV v5.0
    Asus Z97-A/3.1; i3-4370
    32GB RAM Corsair Vengeance Pro

    Einmal editiert, zuletzt von tinh_x7 ()

Jetzt mitmachen!

Sie haben noch kein Benutzerkonto auf unserer Seite? Registrieren Sie sich kostenlos und nehmen Sie an unserer Community teil!