Skip to content
Snippets Groups Projects
Commit 893a8658 authored by Bob Mottram's avatar Bob Mottram
Browse files

Document new backups system

parent 39330802
No related branches found
No related tags found
No related merge requests found
......@@ -13,27 +13,18 @@
#+BEGIN_CENTER
#+ATTR_HTML: :border -1
| [[Backup keys]] |
| [[Backup to USB]] |
| [[Restore from USB]] |
| [[Automatic backups]] |
| [[Backup to USB drive]] |
| [[Restore from USB drive]] |
#+END_CENTER
* Backup keys
As part of the Freedombone installation the GPG key used to encrypt backups will have been added to the /.gnupg/ keyring in your home directory. Ensure that you have a copy of all your keys by plugging in a LUKS encrypted USB drive and then running the commands:
* Automatic backups
* Insert a USB drive
* That's it
#+BEGIN_SRC bash
ssh username@domainname -p 2222
#+END_SRC
Select /Administrator controls/ then /Backup and Restore/ then /Backup GPG key to USB drive (master keydrive)/.
Keep this USB drive in some safe place, since it will enable you to restore from previous backups.
A pro-tip for the best possible security is to create multiple USB drives containing key fragments (fragment keydrive), and then to distribute them amongst your friends. In the worst case just ask for the drives back and you'll be able to reconstruct the backup key. You can do this by selecting /fragment keydrive/ and then repeating the process with a number of different USB drives (typically 4 or more).
* Backup to USB
First and foremost - *encrypt your USB drives*! Even if you think you have "/nothing to hide/" if you accidentally lose a USB thumb drive (it's easy to lose small objects) and it's not encrypted then potentially someone might be able to obtain enough information about you to commit identity fraud, take out loans, open bank accounts, etc. Use LUKS encryption. In Ubuntu you can do this using the /Disk Utility/ application. Some instructions [[https://help.ubuntu.com/community/EncryptedFilesystemsOnRemovableStorage][can be found here]].
Insert a USB thumb drive into the front socket of the Beaglebone Black.
Backups will happen automatically once per day. If you have the XMPP app installed then you will get a message saying whether the backup succeeded or not.
* Backup to USB drive
Insert a USB thumb drive into the front socket of the Beaglebone Black, or equivalent USB socket.
Log into the system and become the root user, then run the /backup/ command.
......@@ -43,10 +34,10 @@ ssh username@domainname -p 2222
Select /Administrator controls/ then /Backup and Restore/ and then /Backup data to USB drive/.
Type in the LUKS password for the USB drive, then the backup will begin.
Type in a password which will be used to encrypt the backup, then the backup will begin.
When the backup ends remove the USB drive and keep it somewhere safe. Even if it gets lost or falls into the wrong hands the content is encrypted and so is unlikely to become a source of leaks.
* Restore from USB
* Restore from USB drive
Log into the system and become the root user:
#+BEGIN_SRC bash
......
......@@ -4,7 +4,7 @@
<html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en">
<head>
<title>Freedombone</title>
<!-- 2018-08-30 Thu 11:58 -->
<!-- 2018-08-30 Thu 13:05 -->
<meta http-equiv="Content-Type" content="text/html;charset=utf-8" />
<meta name="generator" content="Org-mode" />
<meta name="author" content="Bob Mottram" />
......@@ -163,15 +163,15 @@ for the JavaScript code in this tag.
</colgroup>
<tbody>
<tr>
<td class="left"><a href="#sec-2">Backup keys</a></td>
<td class="left"><a href="#sec-2">Automatic backups</a></td>
</tr>
<tr>
<td class="left"><a href="#sec-3">Backup to USB</a></td>
<td class="left"><a href="#sec-3">Backup to USB drive</a></td>
</tr>
<tr>
<td class="left"><a href="#sec-4">Restore from USB</a></td>
<td class="left"><a href="#sec-4">Restore from USB drive</a></td>
</tr>
</tbody>
</table>
......@@ -180,40 +180,25 @@ for the JavaScript code in this tag.
</div>
<div id="outline-container-sec-2" class="outline-2">
<h2 id="sec-2">Backup keys</h2>
<h2 id="sec-2">Automatic backups</h2>
<div class="outline-text-2" id="text-2">
<p>
As part of the Freedombone installation the GPG key used to encrypt backups will have been added to the <i>.gnupg</i> keyring in your home directory. Ensure that you have a copy of all your keys by plugging in a LUKS encrypted USB drive and then running the commands:
</p>
<div class="org-src-container">
<pre class="src src-bash">ssh username@domainname -p 2222
</pre>
</div>
<ul class="org-ul">
<li>Insert a USB drive
</li>
<li>That's it
</li>
</ul>
<p>
Select <i>Administrator controls</i> then <i>Backup and Restore</i> then <i>Backup GPG key to USB drive (master keydrive)</i>.
</p>
<p>
Keep this USB drive in some safe place, since it will enable you to restore from previous backups.
</p>
<p>
A pro-tip for the best possible security is to create multiple USB drives containing key fragments (fragment keydrive), and then to distribute them amongst your friends. In the worst case just ask for the drives back and you'll be able to reconstruct the backup key. You can do this by selecting <i>fragment keydrive</i> and then repeating the process with a number of different USB drives (typically 4 or more).
Backups will happen automatically once per day. If you have the XMPP app installed then you will get a message saying whether the backup succeeded or not.
</p>
</div>
</div>
<div id="outline-container-sec-3" class="outline-2">
<h2 id="sec-3">Backup to USB</h2>
<h2 id="sec-3">Backup to USB drive</h2>
<div class="outline-text-2" id="text-3">
<p>
First and foremost - <b>encrypt your USB drives</b>! Even if you think you have "<i>nothing to hide</i>" if you accidentally lose a USB thumb drive (it's easy to lose small objects) and it's not encrypted then potentially someone might be able to obtain enough information about you to commit identity fraud, take out loans, open bank accounts, etc. Use LUKS encryption. In Ubuntu you can do this using the <i>Disk Utility</i> application. Some instructions <a href="https://help.ubuntu.com/community/EncryptedFilesystemsOnRemovableStorage">can be found here</a>.
</p>
<p>
Insert a USB thumb drive into the front socket of the Beaglebone Black.
Insert a USB thumb drive into the front socket of the Beaglebone Black, or equivalent USB socket.
</p>
<p>
......@@ -231,7 +216,7 @@ Select <i>Administrator controls</i> then <i>Backup and Restore</i> and then <i>
</p>
<p>
Type in the LUKS password for the USB drive, then the backup will begin.
Type in a password which will be used to encrypt the backup, then the backup will begin.
</p>
<p>
......@@ -240,7 +225,7 @@ When the backup ends remove the USB drive and keep it somewhere safe. Even if it
</div>
</div>
<div id="outline-container-sec-4" class="outline-2">
<h2 id="sec-4">Restore from USB</h2>
<h2 id="sec-4">Restore from USB drive</h2>
<div class="outline-text-2" id="text-4">
<p>
Log into the system and become the root user:
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment