How to make encrypted backups using duplicity/GPG - Powered by Kayako eSupport Help Desk Software

07 Sep 2010

Support Center » Knowledgebase » How to make encrypted backups using duplicity/GPG

	How to make encrypted backups using duplicity/GPG

Article RsyncPalace.com supports encrypting remote backups, using 'duplicity'. 'Duplicity' makes use of librsync, GPG, and python.

Requirements:
Python v2.2+
librsync
GPG
Linux 2.6+

Download the RPM designed for RedHat Enterprise 5 i386 based systems. (ex. CentOS 5, Fedora 6, etc.)

http://download.savannah.gnu.org/releases-noredirect/duplicity/duplicity-0.5.12-0.fdr.6.i386.rpm

OR

Download the tarball:
http://savannah.nongnu.org/download/duplicity/duplicity-0.5.12.tar.gz

Install the RPM you downloaded.
# rpm –ivh duplicity-0.5.12-0.fdr.6.i386.rpm

OR

Extract and install the tarball you downloaded.
# tar –zxvf duplicity-0.5.12.tar.gz
# cd duplicity-0.5.12
# python setup.py install

Try to see if you have installed correctly by running:
# duplicity –v

‘duplicity` only supports password-less commands. You will need to setup SSH keys. Follow this guide to set it up, if you have not done so already.

http://support.rsyncpalace.com/index.php?_m=knowledgebase&_a=viewarticle&kbarticleid=4&nav=0

duplicity uses GPG as its encryption method. You need to make a GPG key by running:
# gpg –gen-key
The defaults should be chosen during this process.

Please select what kind of key you want:
(1) DSA and Elgamal (default)
(2) DSA (sign only)
(5) RSA (sign only)
Your selection? 1
DSA keypair will have 1024 bits.
ELG-E keys may be between 1024 and 4096 bits long.
What keysize do you want? (2048)
Requested keysize is 2048 bits

Verify the key after using:
# gpg --list-keys

The output should look like:

/root/.gnupg/pubring.gpg
------------------------
pub 1024D/CDCD2CD3 2009-03-26
uid Test
sub 2048g/12345678 2009-03-26

Two keys are listed; the "pub"lic key and the private key (sub). Make a note of
id of the public key - in this example it is "CDCD2CD3".

You are now ready to run your duplicity command to start your backups:

# duplicity --encrypt-key="CDCD2CD3" /home scp://username@server.rsyncbackup.info/backups

Article Details

Article ID:

Created On:

05 Apr 2009 7:17 AM