[nzlug] Backups for dummies

[Peter Harrison]

Michal Ludvig wrote:
> Hi all,
> 
> I have a customer with many offices around the country, each equipped 
> with a small Linux server. These servers need to be backed up, say once 
> a week or two do a full backup, and every day either data only or some 
> increments. The backups must go to DVD-R (most servers won't need more 
> than one or two disks) and the day to day operation will be handled by 
> untrained office staff (put a new DVD media in and eventually push a 
> button on the screen).

This is a terrible way to back up, as the first thing that goes out the 
door is this kind of task where there is no confirmation that its done 
right.

> I generally prefer online backups (rsync & rdiff & friends) but that's 
> not an option here. 

Why? Is it that he doesn't want critical data being in the clear at 
another location?

There is a solution called Box Backup which provides encryption so that 
only the client has the symetric key required to decrypt the data. It 
works on a directory based diff - so that if a file changes the entire 
file is backed up. The guy who wrote it was also working on diff inside 
files, but thats quite difficult I think.

The point is that remote backup of this kind will give the same kind of 
security as tape (especially if its distributed), and Box backup gives 
you history as well.

I also have some code which allows you to browse your backup repository 
and recover a file from any backup point. All this while ensuring that 
the remote data itself is very secure - ie not even the service provider 
can access it.

> I have no experience with the regular 
> backup-to-some-media things and don't know which one to chose and which 
> one is easy to operate by ... ehm ... monkies.

Honestly, there is no insulation from monkeys except not to involve them 
in the backup process. I have been responsible for corporate backup for 
over three years, and on a few occasions have needed those backups. I 
can't imagine depending on employees to keep regular backups for this 
purpose.

> What do you recommend?

I recommend box backup to do remote backup with security. If the volume 
is too high I suggest doing box backup to a on site machine. Using media 
invites mistakes because unless you actually use the media you only find 
out there is a problem after you need it - and then its too late.

Contact me by private mail if you want to discuss this further.

Regards,

Peter