method for back up data with encrypted drive

  • Hi,


    I’m in the process setting up OMV5 with SnapRaid and Union FS.
    I read somewhere users use BorgBackup with LuksEncryption for back up data.
    But BorgBackup plugin isn’t available yet.


    what are the suggestions ?


    thanks

  • I read somewhere users use BorgBackup with LuksEncryption for back up data.

    Borgbackup has an encryption option but it doesn't use Luks.


    But BorgBackup plugin isn’t available yet.


    what are the suggestions ?

    Wait for the plugin is my first suggestion. It isn't far off. Just haven't had much time lately.

    omv 5.3.9 usul | 64 bit | 5.3 proxmox kernel | omvextrasorg 5.2.6
    omv-extras.org plugins source code and issue tracker - github


    Please read this before posting a question.
    Please don't PM for support... Too many PMs!

  • So if the data drive is encrypted with Luks, can I still use BorgBackup to back up data ?

    As long as the drive is unlocked and the filesystem is mounted. Borg works with files not the filesystem or device it is on.

    omv 5.3.9 usul | 64 bit | 5.3 proxmox kernel | omvextrasorg 5.2.6
    omv-extras.org plugins source code and issue tracker - github


    Please read this before posting a question.
    Please don't PM for support... Too many PMs!

  • How do I encrypt the device if I can't select any data drive from the drop-down menu ?
    Do I need to un mount my hard drives and format them ?
    I only want to encrypt some specific folders on the drive, not entire drive.

  • How do I encrypt the device if I can't select any data drive from the drop-down menu ?

    LUKS needs a block device not a file system. The plugin only allows you to select a disk without filesystems.

    Do I need to un mount my hard drives and format them ?

    No. You need to unmount and wipe them. Then add them to LUKS and then put a filesystem on top of the LUKS device.


    I only want to encrypt some specific folders on the drive, not entire drive.

    LUKS is not what you want then. There is no plugin to do that. You could do that from the client side though.

    omv 5.3.9 usul | 64 bit | 5.3 proxmox kernel | omvextrasorg 5.2.6
    omv-extras.org plugins source code and issue tracker - github


    Please read this before posting a question.
    Please don't PM for support... Too many PMs!

  • Sorry that I ask many questions about this.
    I looked at the performance reviews of fscrypt and Luks, and Luks had better speed and performance.


    I notice some users wrote a script to auto unlock Luks encrypted hdd upon startup.
    Is this recommended instead unlock it manually ?

  • I notice some users wrote a script to auto unlock Luks encrypted hdd upon startup.

    That means you need to store the key somewhere.



    Is this recommended instead unlock it manually ?

    Depends on your use case. When you can accept the above it should be fine.
    I do it for an external backup drive which I store in a place outside of my home. I have the key on my server. When I plugin the USB drive the drive gets decrypted using the key which is stored on the server. In this case I don't mind as the data are stored unencrypted on the server anyway.

  • Hi,


    I just done the encryption process, but upon startup, the drives aren't unable to auto mount.
    https://forum.openmediavault.o…%2Bdev-disk-by#post143926



    I've tried timeout =1 and timeout =2, but no luck.
    By the way, I can't log into OMV web gui at all.

    Code
    dev/disk/by-label/data1 /srv/dev-disk-by-label-data1 ext4 defaults,nofail,x-systemd.device-timeout=1,user_xattr,noexec,usrjquota=aquota.user,grpjquota=aquota.group,jqfmt=vfsv0,acl 0 2
  • My current set up is : added passphrases then added Keyfile to the encryption drives.
    Not sure if there still a bug for this method after I read another thread.


    Even though I can’t unlock the drives upon startup, why I can’t access OMV web gui ?


    Edit: after researchings, I found the solution to fix it.
    I've to modified the /etc/crypttab and /etc/fstab accordingly.


    Current /etc/fstab config:



    Upon startup, I received errors:



Participate now!

Don’t have an account yet? Register yourself now and be a part of our community!