15
how to automate backup and handle the passphrase? (lemmy.ml)
submitted 5 hours ago by to c/linux@lemmy.ml
9 comments fedilink hide all child comments
 

cross-posted from: https://lemmy.ml/post/54692477

i'm setting up plakar as a backup tool and i wanted to use some systemd service and timer files to trigger the backups automatically. the issue is that doing so requires the plakar passhprase. what is the best way to handle this? because the best options seem to require interactivity and i need a non interactive solution. is the standard solution to simply let the passphrase as a plaintext or what?

you are viewing a single comment's thread
view the rest of the comments
[–] [S] 2 points 5 hours ago (3 children)

it's a new tool, it's similar to restic which is a bit older i think. i just think it's a bit odd, keeping a secret in plain text. would using something like tpm to store the credential be a bit overkill? i'm not an expert so i don't fully understand how it works but i think this way i could backup non-interactively and the key would only be in plaintext for some time in tmpfs while plakar does the back up. or is this dumb?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 1 point 4 hours ago (2 children)

    I just pass env files to containers, don't know if I could be doing it anything more robust or safe. I did encrypt the partition though.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] [S] 1 point 4 hours ago

    yeah, i do the same and it's a very similar situation now that you mention it. although you could say that maybe some containers don't hold information that's very critical or something sometimes. also since you could backup the container with plakar it could be considered a higher security concern i guess? i also have my partition encrypted.

  • permalink
  • fedilink
  • source
  • parent