bk99.de entertain the web since 1997

restic: encrypted and deduplicated backups

Summary

Alexander Neumann presents restic as a fast, verifiable backup tool with client-side encryption for local and remote storage targets. A convenient backup tool only increases security together with regularly tested recovery. Deduplication makes frequent snapshots affordable and shortens the window of possible data loss.

Ideas

  • Content addressing detects identical data regardless of file names and location.
  • Client-side encryption protects backups on targets that are not fully trustworthy.
  • Snapshots keep several states without complete copies of all files.
  • Integrity checks detect damaged or missing backup data.

Recommendations

  • Keep at least one backup outside the primary location.
  • Automate restic check and sample restores.

References

Watch the talk

Search the Web Archive