7 votes

Backup AWS EFS to S3

Actually, I think S3 Sync is what you want. Maybe setup Cron on the EC2 instances and invoke S3 Sync that way? Are you using ECS as well? I have a Cron container that does the job pretty well. For ...
mistersleep's user avatar
4 votes

Heavy NFS metadata traffic flooding NFSv4.1 Server (AWS EFS)

Looks like this is caused by a kernel bug in linux-aws-5.4.0-1097 I rolled back to linux-aws-5.4.0-1096 and the issue disappeared then rolled forward to linux-aws-5.4.0-1097 again and once an asset ...
Az Ilari's user avatar
3 votes

Is possible execute crypttab config without rebooting making the encrypted device mapped and available?

As you can see here: Taking as example the following crypttab entry: myDesiredMappedDeviceName /home/myuser/myfolder/myfile.img /home/myuser/myfolder/mykeyfile swap,offset=1024,cipher=aes-xts-...
Mark's user avatar
  • 101
2 votes

Backup AWS EFS to S3

Back up EFS using a tool such as Attic to create a compressed, incremental, de-duplicated backup on one EC2 instance. Use S3FS or the S3 API to upload those files to S3. Personally I use a dropbox ...
Tim's user avatar
  • 32.7k
2 votes

Securely encrypt backup for postgres DB

If you use an encrypted file system, one needs a password to unlock the contents of the hard drive when mounting the file system. Without the password, the files cannot be accessed. However, if the ...
Tero Kilkanen's user avatar
2 votes
Accepted

Linux refusing mapped image file created with dd as swap device

Swap files cannot be sparse files. They must be fully allocated. If the system tries to write to a part of a swap file that wasn't allocated, the write error occurs. Copying the swap file fixes the ...
Michael Hampton's user avatar
2 votes
Accepted

Encrypt at rest existing AWS EFS instances - is it possible?

You are correct, EFS encryption of data at rest can only be enabled when creating the EFS instance. Below is the quote (and image) from the setup workflow for EFS. Encryption of data at rest can ...
kenlukas's user avatar
  • 3,206
1 vote
Accepted

It it possible to implement per-user quotas on Amazon EFS?

In general, NFSv4.x protocol supports quotas. However, according to EFS documentation, quotas are not supported in Amazon's implementation. If you need to run it in amazon cloud, then one option will ...
kofemann's user avatar
  • 4,866
1 vote

directory protection in Ubuntu 14.04 Server

Do not build your system on end of life distributions. If you must, buy Ubuntu Extended Security Maintenance or similar support levels to get critical patches. Disk encryption means casual theft of ...
John Mahowald's user avatar
1 vote

Some files created years into the future in NFS mount to AWS EFS volume

I suspect that whatever created the files had a wrong system time. Or they were unpacked from some archive and had a wrong timestamp in there. I doubt it's EFS's fault - EFS only stores what you tell ...
MLu's user avatar
  • 25.4k
1 vote

Is it possible to secure a VPS from its seller/provider?

Techically no, it's not possible to prevent service provider to access all data of a VPS. They have physical access to the server. Even if you encrypt all data on the drive, the service provider has ...
Esa Jokinen's user avatar
  • 49.7k
1 vote

Is it possible to secure a VPS from its seller/provider?

No, physical access trumps whatever security you can apply. I would also expect that the company In the US would comply with Iranian laws, which would most likely demand access.
Jim B's user avatar
  • 24.1k
1 vote
Accepted

Can an EFS encrypted folder be backed up in an Azure Recovery Services Vault?

All credit to Edwin Cruz of Tek Experts who was assigned this question as a ticket after I signed up for tech support on Azure, but for anyone else who runs into this problem: In what seems obvious ...
saminpa's user avatar
  • 141
1 vote

Preeseding a debian stable install with a complex partitioning scheme - missing physical volume

For d-i partman-auto/method string crypto, you need to put a space character between in_vg and { (braces) like so: in_vg{ vg_crypto_tmp } -> in_vg { vg_crypto_tmp }
dirgnirg's user avatar

Only top scored, non community-wiki answers of a minimum length are eligible