8
3
I have a Linux and a FreeBSD computer, both encrypted (LUKS and geli respectively). I am wondering how to make backups that would also be encrypted and would be readable to both (so that if one of the computers fails I could quickly recover the data using the other one).
Unfortunately it seems that bot LUKS and geli are kernel modules for theiy respective systems that have never been ported to the respective other one. Judging from the several threats on BSD/Linux compatible filesystems it seems that it is difficult enough to make unencrypted backups that would be readable to both (ext2 apparently being the only option for a filesystem that would allow this).
So my thoughts were to setup a virtual FreeBSD in the Linux' KVM which would be able to read and write a geli encrypted external disk and transfer the data to an unencrypted virtual ext2 volume inside the Linux' LUKS-encrypted filesystem (and the other way around). This, however, seems terribly complicated and does not really feel like the right way to do it.
Are there any better / easier / more preferrable ways? Or is the way explained above currently the best possible option?
Thanks; I appreciate any thoughts on the matter.
2
The only think I see on this list http://en.wikipedia.org/wiki/Comparison_of_disk_encryption_software#Operating_systems that is supported on both is eCryptFS http://en.wikipedia.org/wiki/ECryptfs it isn't block level encryption though. It is a filesystem layer.
– Zoredache – 2012-11-01T18:51:39.1731I would sooner set up another box with my favorite OS to serve and store the backups. – Ярослав Рахматуллин – 2012-11-01T22:31:28.680
Thanks very much to both of you for your thoughts. I hope some time in the future someone will port LUKS to FreeBSD or geli to Linux (I unfortunately lack both the necessary programming skills / experience and the time to acquire them.) – 0range – 2012-11-06T14:53:56.860