Proxmox VE backup Encryption

Yes there is, but the target has to be a proxmox backup server. Encryption on other storages are currently not supported.
If you have a pbs set up and added as storage, you can go to <pve instance> > Datacenter > Storage > <pbs storage> > Edit and there you have an encryption tab.
Be aware that any previous backups will still be unencrypted and that you can't do an incremental backup from the plaintext one
 
Folke Gleumes said:
Yes there is, but the target has to be a proxmox backup server. Encryption on other storages are currently not supported.
If you have a pbs set up and added as storage, you can go to <pve instance> > Datacenter > Storage > <pbs storage> > Edit and there you have an encryption tab.
Be aware that any previous backups will still be unencrypted and that you can't do an incremental backup from the plaintext one
Click to expand...
Without having a PBS, Do we have any method to do the encryption on Proxmox VE VMs?
 
chamath.jayaminda said:
Without having a PBS, Do we have any method to do the encryption on Proxmox VE VMs?
Click to expand...
VMs it's easy ... use ZFS with encryption, the backups are encrypted if you choose a disk layout with a LUKS layer in between. Then everything will be LUKS encrypted. You can also use encfs as an overlay. So please google about LUKS and encfs. Both are standard Linux technologies.
 
>VMs it's easy ... use ZFS with encryption,

please don't use zfs native encryption. it's not production ready. https://docs.google.com/spreadsheets/d/1OfRSXibZ2nIE9DGK6swwBZXgXwdCPKgp4SbPZwTexCg/htmlview

furthermore, the backups on encrypted zfs are only encrypted on disk platters - but not in live filesystem. so any intruder which breaks into your backup server may steal your data!

encryption for vm backups is pretty standard. i hope proxmox puts some little effort into this soon, as it should be really easy to add that feature,as this RFE may demonstrate:

RolandK

Thread 'vzdump/fullbackup client side online encryption'

hello,

i wondered if we could have client-side online encryption to have vzdump backup stored encrypted on the target datastore.

i guess this is something many people can need and which currently is only available with proxmox backup server.

i have taken a look into that , and it should probably be not too hard to be implemented.

all you need to do is passsing the backup stream via pipe trough an encryption tool.

i assume this can perhaps be done via a vzdump hook script, but i need to get into the details how to use stdin/stdout with that. not sure if it's doable and maybe somebody...
  • Like

https://bugzilla.proxmox.com/show_bug.cgi?id=4602#c7
 
You must log in or register to reply here.
Top Bottom