7
votes
Backup AWS EFS to S3
Actually, I think S3 Sync is what you want. Maybe setup Cron on the EC2 instances and invoke S3 Sync that way? Are you using ECS as well? I have a Cron container that does the job pretty well. For ...
4
votes
Heavy NFS metadata traffic flooding NFSv4.1 Server (AWS EFS)
Looks like this is caused by a kernel bug in linux-aws-5.4.0-1097 I rolled back to linux-aws-5.4.0-1096 and the issue disappeared then rolled forward to linux-aws-5.4.0-1097 again and once an asset ...
3
votes
Is possible execute crypttab config without rebooting making the encrypted device mapped and available?
As you can see here:
Taking as example the following crypttab entry:
myDesiredMappedDeviceName /home/myuser/myfolder/myfile.img /home/myuser/myfolder/mykeyfile swap,offset=1024,cipher=aes-xts-...
2
votes
Backup AWS EFS to S3
Back up EFS using a tool such as Attic to create a compressed,
incremental, de-duplicated backup on one EC2 instance.
Use S3FS or the S3 API to upload those files to S3. Personally I use a dropbox ...
2
votes
Securely encrypt backup for postgres DB
If you use an encrypted file system, one needs a password to unlock the contents of the hard drive when mounting the file system. Without the password, the files cannot be accessed.
However, if the ...
2
votes
Accepted
Linux refusing mapped image file created with dd as swap device
Swap files cannot be sparse files. They must be fully allocated. If the system tries to write to a part of a swap file that wasn't allocated, the write error occurs.
Copying the swap file fixes the ...
2
votes
Accepted
Encrypt at rest existing AWS EFS instances - is it possible?
You are correct, EFS encryption of data at rest can only be enabled when creating the EFS instance. Below is the quote (and image) from the setup workflow for EFS.
Encryption of data at rest can ...
1
vote
Accepted
It it possible to implement per-user quotas on Amazon EFS?
In general, NFSv4.x protocol supports quotas. However, according to EFS documentation, quotas are not supported in Amazon's implementation. If you need to run it in amazon cloud, then one option will ...
1
vote
directory protection in Ubuntu 14.04 Server
Do not build your system on end of life distributions. If you must, buy Ubuntu Extended Security Maintenance or similar support levels to get critical patches.
Disk encryption means casual theft of ...
1
vote
Some files created years into the future in NFS mount to AWS EFS volume
I suspect that whatever created the files had a wrong system time. Or they were unpacked from some archive and had a wrong timestamp in there. I doubt it's EFS's fault - EFS only stores what you tell ...
1
vote
Is it possible to secure a VPS from its seller/provider?
Techically no, it's not possible to prevent service provider to access all data of a VPS. They have physical access to the server. Even if you encrypt all data on the drive, the service provider has ...
1
vote
Is it possible to secure a VPS from its seller/provider?
No, physical access trumps whatever security you can apply. I would also expect that the company In the US would comply with Iranian laws, which would most likely demand access.
1
vote
Accepted
Can an EFS encrypted folder be backed up in an Azure Recovery Services Vault?
All credit to Edwin Cruz of Tek Experts who was assigned this question as a ticket after I signed up for tech support on Azure, but for anyone else who runs into this problem:
In what seems obvious ...
1
vote
Preeseding a debian stable install with a complex partitioning scheme - missing physical volume
For d-i partman-auto/method string crypto, you need to put a space character between in_vg and { (braces) like so:
in_vg{ vg_crypto_tmp } -> in_vg { vg_crypto_tmp }
Only top scored, non community-wiki answers of a minimum length are eligible
Related Tags
encrypting-file-system × 71encryption × 16
windows × 15
linux × 10
disk-encryption × 9
windows-server-2008-r2 × 8
amazon-web-services × 6
security × 6
windows-server-2008 × 4
filesystems × 4
ubuntu × 3
nfs × 3
apache-2.2 × 2
active-directory × 2
debian × 2
windows-server-2012 × 2
windows-xp × 2
network-share × 2
certificate × 2
ntfs × 2
swap × 2
windows-8.1 × 2
loop-device × 2
ssh × 1
mysql × 1