gpg-backup
This commit is contained in:
io
parent
78a9acad47
commit
b041b71935
5 changed files with 288 additions and 0 deletions
6
backe123/backe.sh
Executable file
6
backe123/backe.sh
Executable file
|
|
@ -0,0 +1,6 @@
|
|||
#!/bin/sh
|
||||
cd /home/backe123
|
||||
rm *.cpt *.gpg
|
||||
./backup.pl 2>&1 >> logback
|
||||
|
||||
|
||||
115
backe123/backup.pl
Executable file
115
backe123/backup.pl
Executable file
|
|
@ -0,0 +1,115 @@
|
|||
#!/usr/bin/perl -w
|
||||
|
||||
#---Configuration------
|
||||
####@backe = ("/etc", "/home", "/lib", "/boot", "/var");
|
||||
|
||||
# wo sollen die archive hin?
|
||||
$backupdir = "/home/backe123/ablage/";
|
||||
# wo stehen die zu sichernden verzeichnisse (dateien, mit excludes)
|
||||
$excludes = "/home/backe123/quellsaft/";
|
||||
|
||||
# mit welchem key soll das archiv verschluesselt werden?
|
||||
$gpgkey_id = "A8969D03" ;
|
||||
|
||||
# an wen geht die mail?
|
||||
$mailuser = "age";
|
||||
|
||||
|
||||
#---Runtime------------
|
||||
# welche verzeichnisse sollen gesichert werden ...
|
||||
# dazu werden die dateien von excludes heran gezogen
|
||||
opendir DIR, $excludes or die "Can't open dir to search for backup paths. $excludes\n";
|
||||
# hier steht jetzt drin was gesichert werden soll
|
||||
@backe = grep { $_ ne '.' && $_ ne '..' } readdir DIR;
|
||||
closedir DIR;
|
||||
|
||||
# datum als eindeutigen namen fuer keyfile nutzen
|
||||
$date = "0".join("-",getDate());
|
||||
$keyfilename = "key".$date;
|
||||
|
||||
chdir($backupdir) || die ("Can't change to $backupdir! \n");
|
||||
|
||||
#---Mainloop-----------
|
||||
foreach $dir (@backe){
|
||||
# vorarbeit
|
||||
print("\n----> generating random keys ..");
|
||||
&generateRandomBits;
|
||||
&generateSessionKey;
|
||||
|
||||
# die dateinamen koennten noch beser benannt werden
|
||||
$filename = $dir."_backup";
|
||||
|
||||
&tar_it;
|
||||
&crypt_it;
|
||||
&mail_it;
|
||||
|
||||
print("well done!\n\n");
|
||||
}
|
||||
|
||||
|
||||
#---Subraum-------------
|
||||
sub greeting{
|
||||
print("[$date] Now I will make a backup of:\n");
|
||||
foreach $dir(@backe){
|
||||
print("\t".$dir."\n");
|
||||
$excludes_file = $backupdir.$dir;
|
||||
print("\t\t". $excludes_file."\n");
|
||||
#TODO test ob dirs existieren
|
||||
}
|
||||
}
|
||||
|
||||
sub tar_it{
|
||||
# archive erstellen
|
||||
print("\n----> tar zcf: /$dir .. ");
|
||||
$excludes_file = $excludes.$dir;
|
||||
print("tar zcf $filename.tgz -C / --exclude-from $excludes_file $dir");
|
||||
system("tar zcf $filename.tgz -C / --exclude-from $excludes_file $dir");
|
||||
print(" tar done!\n");
|
||||
}
|
||||
|
||||
sub crypt_it{
|
||||
# endlich crypten
|
||||
print("\n----> ccrypt $filename.tgz .. ");
|
||||
# TODO: force ueberschreibt gnadenlos - vorher abchecken
|
||||
system("ccrypt -k $keyfilename $filename.tgz --force");
|
||||
system("rm $keyfilename");
|
||||
system("mv $keyfilename.gpg $keyfilename$filename.gpg");
|
||||
print(" ccrypt done!\n");
|
||||
}
|
||||
|
||||
sub mail_it{
|
||||
print("\n----> mail goes out .. ");
|
||||
# mit mutt verschicken
|
||||
# (-n -F /dev/null) umgehen die configs
|
||||
# (-a filename) haengt datei ran; (-s subject) und body bleibt leer
|
||||
system("mutt -n -F /dev/null -a $keyfilename$filename.gpg -i reminder.txt -s \"key-$dir\" $mailuser\@systemausfall.org < /dev/null");
|
||||
print(" mail done!\n");
|
||||
}
|
||||
|
||||
sub generateSessionKey{
|
||||
# den key verschluesseln
|
||||
print("\n----> delete existing key of today: ");
|
||||
system("gpg --batch -q -r $gpgkey_id -e $keyfilename");
|
||||
}
|
||||
|
||||
sub generateRandomBits{
|
||||
# 4069 alphanumerische zeichen als key generieren
|
||||
@chars = ("A" .. "Z", "a" .. "z", 0 .. 9);
|
||||
$haltdenrand = join("", @chars[ map{rand @chars} (1 .. 4096) ]);
|
||||
# datei zum schreiben oeffnen und als ausgabe auswaehlen
|
||||
open(DERKEY, "> $keyfilename")
|
||||
or die "$keyfilename could not be opened";
|
||||
#alten ausgabekanal merken
|
||||
$oldoutput = select(DERKEY);
|
||||
print $haltdenrand;
|
||||
select ($oldoutput);
|
||||
close(DERKEY);
|
||||
system("chmod 600 $keyfilename");
|
||||
}
|
||||
|
||||
sub getDate{
|
||||
use Time::localtime;
|
||||
$tm = localtime;
|
||||
return ($tm->year+1900, $tm->mon+1, $tm->mday);
|
||||
}
|
||||
|
||||
156
backe123/logback
Normal file
156
backe123/logback
Normal file
|
|
@ -0,0 +1,156 @@
|
|||
[02004-10-27] Now I will make a backup of:
|
||||
/etc
|
||||
/home
|
||||
/lib
|
||||
/boot
|
||||
/var
|
||||
----> delete existing key of today: gpg: WARNING: unsafe ownership on configuration file "/home/age/.gnupg/gpg.conf"
|
||||
|
||||
----> tar zcf: /etc .. tar: Removing leading `/' from member names
|
||||
done!
|
||||
----> ccrypt etc-backup.tgz .. done!
|
||||
|
||||
----> delete existing key of today: gpg: WARNING: unsafe ownership on configuration file "/home/age/.gnupg/gpg.conf"
|
||||
|
||||
----> tar zcf: /home .. tar: Removing leading `/' from member names
|
||||
done!
|
||||
----> ccrypt hom-backup.tgz .. done!
|
||||
|
||||
----> delete existing key of today: gpg: WARNING: unsafe ownership on configuration file "/home/age/.gnupg/gpg.conf"
|
||||
|
||||
----> tar zcf: /lib .. tar: Removing leading `/' from member names
|
||||
done!
|
||||
----> ccrypt lib-backup.tgz .. done!
|
||||
|
||||
----> delete existing key of today: gpg: WARNING: unsafe ownership on configuration file "/home/age/.gnupg/gpg.conf"
|
||||
|
||||
----> tar zcf: /boot .. tar: Removing leading `/' from member names
|
||||
done!
|
||||
----> ccrypt boo-backup.tgz .. done!
|
||||
|
||||
----> delete existing key of today: gpg: WARNING: unsafe ownership on configuration file "/home/age/.gnupg/gpg.conf"
|
||||
|
||||
----> tar zcf: /var .. tar: Removing leading `/' from member names
|
||||
tar: /var/run/mysqld/mysqld.sock: socket ignored
|
||||
tar: /var/run/gcache_port: socket ignored
|
||||
done!
|
||||
----> ccrypt var-backup.tgz .. done!
|
||||
|
||||
[02004-11-3] Now I will make a backup of:
|
||||
/etc
|
||||
/home
|
||||
/lib
|
||||
/boot
|
||||
/var
|
||||
----> delete existing key of today:
|
||||
----> tar zcf: /etc .. done!
|
||||
----> ccrypt etc-backup.tgz .. [02004-11-3] Now I will make a backup of:
|
||||
/etc
|
||||
/home
|
||||
/lib
|
||||
/boot
|
||||
/var
|
||||
----> delete existing key of today:
|
||||
----> tar zcf: /etc .. done!
|
||||
----> ccrypt etc-backup.tgz .. done!
|
||||
|
||||
----> delete existing key of today:
|
||||
----> tar zcf: /home .. done!
|
||||
----> ccrypt hom-backup.tgz .. done!
|
||||
|
||||
----> delete existing key of today:
|
||||
----> tar zcf: /lib .. done!
|
||||
----> ccrypt lib-backup.tgz .. done!
|
||||
|
||||
----> delete existing key of today:
|
||||
----> tar zcf: /boot .. done!
|
||||
----> ccrypt boo-backup.tgz .. done!
|
||||
|
||||
----> delete existing key of today:
|
||||
----> tar zcf: /var .. done!
|
||||
----> ccrypt var-backup.tgz .. done!
|
||||
|
||||
[02004-11-17] Now I will make a backup of:
|
||||
/etc
|
||||
----> delete existing key of today:
|
||||
----> tar zcf: /etc .. done!
|
||||
----> ccrypt etc-backup.tgz .. done!
|
||||
|
||||
[02004-11-17] Now I will make a backup of:
|
||||
/etc
|
||||
/home
|
||||
/lib
|
||||
/boot
|
||||
/var
|
||||
----> delete existing key of today:
|
||||
----> tar zcf: /etc .. done!
|
||||
----> ccrypt etc-backup.tgz .. done!
|
||||
|
||||
----> delete existing key of today:
|
||||
----> tar zcf: /home .. done!
|
||||
----> ccrypt hom-backup.tgz .. done!
|
||||
|
||||
----> delete existing key of today:
|
||||
----> tar zcf: /lib .. done!
|
||||
----> ccrypt lib-backup.tgz .. done!
|
||||
|
||||
----> delete existing key of today:
|
||||
----> tar zcf: /boot .. done!
|
||||
----> ccrypt boo-backup.tgz .. done!
|
||||
|
||||
----> delete existing key of today:
|
||||
----> tar zcf: /var .. done!
|
||||
----> ccrypt var-backup.tgz .. done!
|
||||
|
||||
[02004-11-23] Now I will make a backup of:
|
||||
/etc
|
||||
/home
|
||||
/lib
|
||||
/boot
|
||||
/var
|
||||
----> delete existing key of today:
|
||||
----> tar zcf: /etc .. done!
|
||||
----> ccrypt etc-backup.tgz .. done!
|
||||
|
||||
----> delete existing key of today:
|
||||
----> tar zcf: /home .. done!
|
||||
----> ccrypt hom-backup.tgz .. done!
|
||||
|
||||
----> delete existing key of today:
|
||||
----> tar zcf: /lib .. done!
|
||||
----> ccrypt lib-backup.tgz .. done!
|
||||
|
||||
----> delete existing key of today:
|
||||
----> tar zcf: /boot .. done!
|
||||
----> ccrypt boo-backup.tgz .. done!
|
||||
|
||||
----> delete existing key of today:
|
||||
----> tar zcf: /var .. done!
|
||||
----> ccrypt var-backup.tgz .. done!
|
||||
|
||||
[02004-11-30] Now I will make a backup of:
|
||||
/etc
|
||||
/home
|
||||
/lib
|
||||
/boot
|
||||
/var
|
||||
----> delete existing key of today:
|
||||
----> tar zcf: /etc .. done!
|
||||
----> ccrypt etc-backup.tgz .. done!
|
||||
|
||||
----> delete existing key of today:
|
||||
----> tar zcf: /home .. done!
|
||||
----> ccrypt hom-backup.tgz .. done!
|
||||
|
||||
----> delete existing key of today:
|
||||
----> tar zcf: /lib .. done!
|
||||
----> ccrypt lib-backup.tgz .. done!
|
||||
|
||||
----> delete existing key of today:
|
||||
----> tar zcf: /boot .. done!
|
||||
----> ccrypt boo-backup.tgz .. done!
|
||||
|
||||
----> delete existing key of today:
|
||||
----> tar zcf: /var .. done!
|
||||
----> ccrypt var-backup.tgz .. done!
|
||||
|
||||
2
backe123/quellsaft/boot
Normal file
2
backe123/quellsaft/boot
Normal file
|
|
@ -0,0 +1,2 @@
|
|||
test
|
||||
test3
|
||||
9
backe123/reminder.txt
Normal file
9
backe123/reminder.txt
Normal file
|
|
@ -0,0 +1,9 @@
|
|||
Hi AGE!
|
||||
|
||||
Faxe hat ein neues Backup generiert.
|
||||
Sicher es doch bitte an einem anderen Ort in dem du z.B. folgendes tust:
|
||||
|
||||
scp -r systemausfall.org:/home/backe123 .
|
||||
|
||||
recht herzlichen Dank!
|
||||
|
||||
Loading…
Reference in a new issue