My home computer consists of a VMWare host running Linux Mint, and a number of VMWare clients.
I run backups every night that compress my VHDs to a removable hard drive.
I'd like to encrypt the compressed images. And I'd like to do so without including a password in my backup scripts.
I have several removable disks that I rotate through, and I take one to work, everyday, so I have an offsite copy. And I include a copy of my backup scripts on each backup disk, to make it easier for me to figure out what I need to do to do a restore.
My thought is that if I used public-key encryption, I could encrypt with the public key, and require the private key to decrypt, and then the backup scripts could run without needing a password.
(I'd keep either the private key, or the passphrase to the private key file, in my KeePass database, which I also write to my backup media.)
But the thing is - I'd want to run this self-contained, so I could decrypt the backups using nothing other than what was written to the backup disks. That is, if I use gpg, I would want a copy of gpg on the backup disks, that I could run by itself, without having to install or configure anything. (That is, no dependencies on ~/.gpgconf, etc.)
And I've not been able to figure out how to do this, using gpg. The manuals seem to assume that you're going to install and configure it for your current user, and I need to be able to run it when nothing of the sort has happened.
Any ideas on how to:
- Run gpg in an uninstalled mode, or
- how to do this using some other tool? (openssl?)
Why can I not just install gpg?
The problem is doing a restore.
Suppose I have a complete system failure, perhaps my house burned down and everything was destroyed.
So I'm starting a restore with a new computer, bare drives, and my most recent off-site backups.
What do I do?
I boot some version of Linux that can mount ext4 partitions off of a thumb drive, and start putting things back together.
I can't depend upon anything other than the basic system utilities and what I've put on the backup disks.