No description
Find a file
2021-11-26 11:45:16 +00:00
.editorconfig Initial commit 2021-11-26 11:37:06 +00:00
.gitignore Initial commit 2021-11-26 11:37:06 +00:00
backup.sh Use set -e in case fetching the passphrase fails 2021-11-26 11:45:16 +00:00
create-passphrase-file.sh Initial commit 2021-11-26 11:37:06 +00:00
README.md Initial commit 2021-11-26 11:37:06 +00:00

btrfs Backup Solution

Encrypted incremental backups utilizing btrfs send and age.

Setup

At /media/storage/backup, we have:

backup/
  data/ [a btrfs **subvolume** containing the data]
    ...
  snapshots/ [btrfs snapshots of the 'data' subvolume]
  repo/ [where encrypted backup files will go]

  [an age-encryption v1 key for the at-rest passphrase]
  static-passphrase-key
  static-passphrase-key.pub

  [the contents of this repo:]
  backup.sh
  create-passphrase-file.sh

You can generate the static-passphrase-key and static-passphrase-key.pub with rage-keygen -o static-passphrase-key and by manually populating the pubkey file.

Requirements

Note: Make sure that data is actually a btrfs subvolume!!