The remote VM isn't a VM that the owner of the data is running both locally and at, the remote VM is a VM at that the owner of the data is being given access to. None of what you said is applicable in this scenario. This is not what is being done either with rsync or ZFS replication (at least as I understand it).Īs long as the remote virtual machine is booted up, the owner of the hardware the virtual machine is running on is, at least technically, accessible to the owner. The only way to have a remote backup with no chance of your data being accessible to the owner of the remote machine is to encrypt locally and send the encrypted file across the network. If your remote virtual machine is set up so that you have to manually log in to it and enter the decryption key to mount your encrypted storage, you do this before each backup and, after each backup, you unmount the storage (and possibly shut the machine down) then your data will only be accessible for the time during which your backup is occurring. That is because, for the remote machine to run, both the encryption and decryption keys need to reside on it. If I replicate my encrypted ZFS volume, is the remote copy accessible to the remote machine in plain text?Īs long as the remote virtual machine is booted up, the owner of the hardware the virtual machine is running on is, at least technically, accessible to the owner. I've been looking for an off-site backup solution that will preserve that security. One of the features I like about my FreeNAS setup is the way ZFS encrypts the data.
0 kommentar(er)
