Hi Bareos list, I am trying to wrap my head around how I can create a good disaster recovery procedure. The documentation has some ideas, but specifically what I'd like to do is extract the BackupCatalog job's SQL database dump and configuration files with the bare minimal configuration and steps.
I am using both drive encryption (AME) and Bareos data encryption for my normal backups, and currently that's also true for my BackupCatalog jobs. Now, for doing this disaster recovery I would of course need copies of the applicable decryption keys. For BackupCatalog, which contains the AME volumes keys, it seems reasonable to skip using AME encryption for these jobs to avoid a circular dependency. I plan on creating a tape pool that is not AME encrypted and use it solely for BackupCatalog jobs. So far so good. What I now need is to simply call `bextract` on my BackupCatalog volumes and decrypt it with my master key, right? Well, that's the problem - the documentation says that bextract does not support restore of encrypted files! That's a bummer. What would be the best way to tackle this? I am considering implementing my own encryption (like, taring it up and GPG encrypting it) so that from Bareos's PoV it is simply plain data. Then I could use bextract to get the `catalog.tar.gz.gpg`, decrypt it, and restore my Bareos system from that. Thoughts? Regards, -- You received this message because you are subscribed to the Google Groups "bareos-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/bareos-users/CADiuDARXQhHnTZ80Oj5gqhKfxAcv3%3DEhODKGo6VXEz7%3D9%2BcUsg%40mail.gmail.com.
