Re: [Duplicity-talk] Automated restore

[edgar . soldin]

On 01.04.2014 01:50, Grant wrote:
>>>>> Can I run an automated restore of my backups to verify that they're in
>>>>> working order and not tampered with?
>>>>>
>>>>
>>>> check the manpage, action command verify
>>>>  http://duplicity.nongnu.org/duplicity.1.html
>>>
>>>
>>> Works great.  I'm planning to put an identical dummy file on both of
>>> my important systems which will be backed up to the backup server.
>>> Each important system will pull the other's backups from the backup
>>> server and run duplicity verify to ensure the dummy file matches.
>>>
>>> Is this a good strategy?  Is there a better method for this?
>>>
>>
>> what is the reasoning behind this? why don't you simply verify your backups 
>> after they are through?
> 
> 
> My concern is that the backups could be tampered with between the time
> system A sends them to the backup server and system B downloads them
> from the backup server.  But now that I think about it, I would need
> to keep a copy of system A's GPG key on system B and I don't want to
> do that.

however you turn it, verification means decryption.
 
> How can I ensure that system A's backups haven't been tampered with
> once they're on system B?
> 

you can encrypt against more than one key.

ede/duply.net